Mastodon 🐘

WinbuzzerAnthropic Claude Flaw Lets Attackers Steal Data Using AI’s Own API<a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/Anthropic" class="mention hashtag" rel="nofollow noopener" target="_blank">#Anthropic</a> <a href="https://mastodon.social/tags/Claude" class="mention hashtag" rel="nofollow noopener" target="_blank">#Claude</a> <a href="https://mastodon.social/tags/DataBreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataBreach</a> <a href="https://mastodon.social/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://mastodon.social/tags/PromptInjection" class="mention hashtag" rel="nofollow noopener" target="_blank">#PromptInjection</a> <a href="https://mastodon.social/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://mastodon.social/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a> <a href="https://mastodon.social/tags/AIThreats" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIThreats</a> <a href="https://mastodon.social/tags/EnterpriseAI" class="mention hashtag" rel="nofollow noopener" target="_blank">#EnterpriseAI</a> <a href="https://mastodon.social/tags/AISecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#AISecurity</a> <a href="https://mastodon.social/tags/AISafety" class="mention hashtag" rel="nofollow noopener" target="_blank">#AISafety</a><a href="https://winbuzzer.com/2025/11/03/anthropic-claude-flaw-lets-attackers-steal-data-using-ais-own-api-xcxwbn" rel="nofollow noopener" translate="no" target="_blank">https://winbuzzer.com/2025/11/03/anthropic-claude-flaw-lets-attackers-steal-data-using-ais-own-api-xcxwbn</a>

Hacker NewsMicrosoft 365 Copilot – Arbitrary Data Exfiltration via Mermaid Diagrams<a href="https://www.adamlogue.com/microsoft-365-copilot-arbitrary-data-exfiltration-via-mermaid-diagrams-fixed/" rel="nofollow noopener" translate="no" target="_blank">https://www.adamlogue.com/microsoft-365-copilot-arbitrary-data-exfiltration-via-mermaid-diagrams-fixed/</a><a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/Microsoft365Copilot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft365Copilot</a> <a href="https://mastodon.social/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a> <a href="https://mastodon.social/tags/MermaidDiagrams" class="mention hashtag" rel="nofollow noopener" target="_blank">#MermaidDiagrams</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechNews</a>

Manuel BisseyResearchers found a new “Camoleak” AI attack targeting GitHub Copilot — silently exfiltrating secrets from generated code. Convenience can’t come at the cost of control. 🧑‍💻🕵️‍♂️ <a href="https://cyberplace.social/tags/SecureAI" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecureAI</a> <a href="https://cyberplace.social/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a><a href="https://www.darkreading.com/application-security/github-copilot-camoleak-ai-attack-exfils-data" rel="nofollow noopener" translate="no" target="_blank">https://www.darkreading.com/application-security/github-copilot-camoleak-ai-attack-exfils-data</a>

Pyrzout :vm:Maruji & Raines (MRCPAs) Data Breach Exposes Client Documents <a href="https://dailydarkweb.net/maruji-raines-mrcpas-data-breach-exposes-client-documents/" rel="nofollow noopener" translate="no" target="_blank">https://dailydarkweb.net/maruji-raines-mrcpas-data-breach-exposes-client-documents/</a> <a href="https://social.skynetcloud.site/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a> <a href="https://social.skynetcloud.site/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://social.skynetcloud.site/tags/Maruji" class="mention hashtag" rel="nofollow noopener" target="_blank">#Maruji</a>&Raines <a href="https://social.skynetcloud.site/tags/DataBreaches" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataBreaches</a> <a href="https://social.skynetcloud.site/tags/UnitedStates" class="mention hashtag" rel="nofollow noopener" target="_blank">#UnitedStates</a> <a href="https://social.skynetcloud.site/tags/Accounting" class="mention hashtag" rel="nofollow noopener" target="_blank">#Accounting</a> <a href="https://social.skynetcloud.site/tags/databreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#databreach</a> <a href="https://social.skynetcloud.site/tags/MRCPAs" class="mention hashtag" rel="nofollow noopener" target="_blank">#MRCPAs</a> <a href="https://social.skynetcloud.site/tags/CPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#CPA</a>

eicker.news ᳇ tech newsA vulnerability in <a href="https://eicker.news/tags/Perplexity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Perplexity</a> <a href="https://eicker.news/tags/Comet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Comet</a>, an <a href="https://eicker.news/tags/AIbrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIbrowser</a>, allows attackers to inject malicious instructions into webpage content. These instructions can be executed by the AI assistant, <a href="https://eicker.news/tags/bypassing" class="mention hashtag" rel="nofollow noopener" target="_blank">#bypassing</a> traditional <a href="https://eicker.news/tags/websecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#websecurity</a> mechanisms. The attack demonstrates the need for new security architectures to prevent <a href="https://eicker.news/tags/unauthorisedactions" class="mention hashtag" rel="nofollow noopener" target="_blank">#unauthorisedactions</a> and <a href="https://eicker.news/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a>. <a href="https://brave.com/blog/comet-prompt-injection/?eicker.news" rel="nofollow noopener" translate="no" target="_blank">https://brave.com/blog/comet-prompt-injection/?eicker.news</a> <a href="https://eicker.news/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#tech</a> <a href="https://eicker.news/tags/media" class="mention hashtag" rel="nofollow noopener" target="_blank">#media</a> <a href="https://eicker.news/tags/news" class="mention hashtag" rel="nofollow noopener" target="_blank">#news</a>

Pyrzout :vm:Break The Air Gap With Ultrasound <a href="https://hackaday.com/2025/06/29/break-the-air-gap-with-ultrasound/" rel="nofollow noopener" translate="no" target="_blank">https://hackaday.com/2025/06/29/break-the-air-gap-with-ultrasound/</a> <a href="https://social.skynetcloud.site/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a> <a href="https://social.skynetcloud.site/tags/computerhacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#computerhacks</a> <a href="https://social.skynetcloud.site/tags/SecurityHacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityHacks</a> <a href="https://social.skynetcloud.site/tags/ultrasound" class="mention hashtag" rel="nofollow noopener" target="_blank">#ultrasound</a> <a href="https://social.skynetcloud.site/tags/airgap" class="mention hashtag" rel="nofollow noopener" target="_blank">#airgap</a>

IT NewsBreak The Air Gap With Ultrasound - In the world of information security, much thought goes into ensuring that no info... - <a href="https://hackaday.com/2025/06/29/break-the-air-gap-with-ultrasound/" rel="nofollow noopener" translate="no" target="_blank">https://hackaday.com/2025/06/29/break-the-air-gap-with-ultrasound/</a> <a href="https://schleuss.online/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a> <a href="https://schleuss.online/tags/computerhacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#computerhacks</a> <a href="https://schleuss.online/tags/securityhacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#securityhacks</a> <a href="https://schleuss.online/tags/ultrasound" class="mention hashtag" rel="nofollow noopener" target="_blank">#ultrasound</a> <a href="https://schleuss.online/tags/airgap" class="mention hashtag" rel="nofollow noopener" target="_blank">#airgap</a>

redoracleCritical AI vulnerability EchoLeak exposed in Microsoft 365 Copilot! Learn about the zero-click attack and its implications. <a href="https://mastodon.social/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a> <a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://redoracle.com/News/AI-Data-Leaks-EchoLeak-Vulnerability-Exposed.html" rel="nofollow noopener" translate="no" target="_blank">https://redoracle.com/News/AI-Data-Leaks-EchoLeak-Vulnerability-Exposed.html</a>

Hacker NewsEchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot<a href="https://www.aim.security/lp/aim-labs-echoleak-blogpost" rel="nofollow noopener" translate="no" target="_blank">https://www.aim.security/lp/aim-labs-echoleak-blogpost</a><a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/EchoLeak" class="mention hashtag" rel="nofollow noopener" target="_blank">#EchoLeak</a> <a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://mastodon.social/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://mastodon.social/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a> <a href="https://mastodon.social/tags/365Copilot" class="mention hashtag" rel="nofollow noopener" target="_blank">#365Copilot</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a>

Pyrzout :vm:Coca-Cola Europacific Partners Allegedly Suffers Major Salesforce Data Breach <a href="https://dailydarkweb.net/coca-cola-europacific-partners-allegedly-suffers-major-salesforce-data-breach/" rel="nofollow noopener" translate="no" target="_blank">https://dailydarkweb.net/coca-cola-europacific-partners-allegedly-suffers-major-salesforce-data-breach/</a> <a href="https://social.skynetcloud.site/tags/CocaColaEuropacificPartners" class="mention hashtag" rel="nofollow noopener" target="_blank">#CocaColaEuropacificPartners</a> <a href="https://social.skynetcloud.site/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a> <a href="https://social.skynetcloud.site/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://social.skynetcloud.site/tags/DataBreaches" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataBreaches</a> <a href="https://social.skynetcloud.site/tags/databreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#databreach</a> <a href="https://social.skynetcloud.site/tags/Salesforce" class="mention hashtag" rel="nofollow noopener" target="_blank">#Salesforce</a> <a href="https://social.skynetcloud.site/tags/CocaCola" class="mention hashtag" rel="nofollow noopener" target="_blank">#CocaCola</a>

CyberEthical.Me🔎 MisCloud is just retired! Walkthrough disclosure - right from the clouds 😶‍🌫️🔸 Google Cloud Services logs 🔸 Intense PCAP analysis 🔸 Really nice real-life scenario🔗 <a href="https://blog.cyberethical.me/htb-sherlock-miscloud" rel="nofollow noopener" translate="no" target="_blank">https://blog.cyberethical.me/htb-sherlock-miscloud</a> Want to try investigations yourself?🔗 <a href="https://blog.cyberethical.me/go-htbapp" rel="nofollow noopener" translate="no" target="_blank">https://blog.cyberethical.me/go-htbapp</a><a href="https://infosec.exchange/tags/CyberEthical" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberEthical</a> <a href="https://infosec.exchange/tags/HackTheBox" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackTheBox</a> <a href="https://infosec.exchange/tags/forensics" class="mention hashtag" rel="nofollow noopener" target="_blank">#forensics</a> <a href="https://infosec.exchange/tags/EthicalHacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#EthicalHacking</a> <a href="https://infosec.exchange/tags/blueteaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#blueteaming</a> <a href="https://infosec.exchange/tags/itsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#itsec</a> <a href="https://infosec.exchange/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a> <a href="https://infosec.exchange/tags/googlecloudservices" class="mention hashtag" rel="nofollow noopener" target="_blank">#googlecloudservices</a> <a href="https://infosec.exchange/tags/gcs" class="mention hashtag" rel="nofollow noopener" target="_blank">#gcs</a> <a href="https://infosec.exchange/tags/pcap" class="mention hashtag" rel="nofollow noopener" target="_blank">#pcap</a> <a href="https://infosec.exchange/tags/wireshark" class="mention hashtag" rel="nofollow noopener" target="_blank">#wireshark</a>

Pyrzout :vm:Open-source malware doubles, data exfiltration attacks dominate <a href="https://www.helpnetsecurity.com/2025/04/03/open-source-malware-index-q1-2025/" rel="nofollow noopener" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/04/03/open-source-malware-index-q1-2025/</a> <a href="https://social.skynetcloud.site/tags/Dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#Dataexfiltration</a> <a href="https://social.skynetcloud.site/tags/cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybercrime</a> <a href="https://social.skynetcloud.site/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/Sonatype" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sonatype</a> <a href="https://social.skynetcloud.site/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://social.skynetcloud.site/tags/report" class="mention hashtag" rel="nofollow noopener" target="_blank">#report</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#News</a>

CyberEthical.Me💣 Full write-up for "Tales for the Brave" - this year's Hard forensics challenge from Hack The Box Cyber Apocalypse CTF - Tales From Eldoria.🔸 Code <a href="https://infosec.exchange/tags/deobfuscation" class="mention hashtag" rel="nofollow noopener" target="_blank">#deobfuscation</a> 🔸 hashtag#Telegram data exfiltration 🔸 Malware behavioral analysis🔗 <a href="https://blog.cyberethical.me/htb-ctf-2025-forensics-tales-for-the-brave" rel="nofollow noopener" translate="no" target="_blank">https://blog.cyberethical.me/htb-ctf-2025-forensics-tales-for-the-brave</a> <a href="https://infosec.exchange/tags/CyberEthical" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberEthical</a> <a href="https://infosec.exchange/tags/CyberApocalypse25" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberApocalypse25</a> <a href="https://infosec.exchange/tags/HackTheBox" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackTheBox</a> <a href="https://infosec.exchange/tags/forensics" class="mention hashtag" rel="nofollow noopener" target="_blank">#forensics</a> <a href="https://infosec.exchange/tags/EthicalHacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#EthicalHacking</a> <a href="https://infosec.exchange/tags/blueteaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#blueteaming</a> <a href="https://infosec.exchange/tags/itsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#itsec</a> <a href="https://infosec.exchange/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>

CyberEthical.Me💣 Full write-up for ToolPie this year's forensics challenge from Hack The Box Cyber Apocalypse CTF - Tales From Eldoria.🔸 PCAP (network capture) analysis 🔸 Python bytecode, marshalling, decompiling🔗 <a href="https://blog.cyberethical.me/htb-ctf-2025-forensics-toolpie" rel="nofollow noopener" translate="no" target="_blank">https://blog.cyberethical.me/htb-ctf-2025-forensics-toolpie</a><a href="https://infosec.exchange/tags/CyberEthical" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberEthical</a> <a href="https://infosec.exchange/tags/CyberApocalypse25" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberApocalypse25</a> <a href="https://infosec.exchange/tags/HackTheBox" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackTheBox</a> <a href="https://infosec.exchange/tags/forensics" class="mention hashtag" rel="nofollow noopener" target="_blank">#forensics</a> <a href="https://infosec.exchange/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a> <a href="https://infosec.exchange/tags/pcap" class="mention hashtag" rel="nofollow noopener" target="_blank">#pcap</a> <a href="https://infosec.exchange/tags/wireshark" class="mention hashtag" rel="nofollow noopener" target="_blank">#wireshark</a> <a href="https://infosec.exchange/tags/EthicalHacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#EthicalHacking</a> <a href="https://infosec.exchange/tags/blueteaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#blueteaming</a> <a href="https://infosec.exchange/tags/itsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#itsec</a> <a href="https://infosec.exchange/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataexfiltration</a>

Kevin Karhan :verified:<a href="https://infosec.space/@mwdawson" class="u-url mention" rel="nofollow noopener" target="_blank">@mwdawson</a> Yeah, just like <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudAct</a> demands from anyone residing within the <a href="https://infosec.space/tags/USA" class="mention hashtag" rel="nofollow noopener" target="_blank">#USA</a>, conducting business in the USA or having a parent/subsidiary operating in the <a href="https://infosec.space/tags/US" class="mention hashtag" rel="nofollow noopener" target="_blank">#US</a>.<ul><li>Unlike "<a href="https://infosec.space/tags/OpenAI" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenAI</a>" you can at least run <a href="https://infosec.space/tags/DeepSeek" class="mention hashtag" rel="nofollow noopener" target="_blank">#DeepSeek</a> completely <a href="https://infosec.space/tags/airgapped" class="mention hashtag" rel="nofollow noopener" target="_blank">#airgapped</a> and on-premise and thus prevent any <a href="https://infosec.space/tags/leaks" class="mention hashtag" rel="nofollow noopener" target="_blank">#leaks</a> or <a href="https://infosec.space/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a>.</li></ul>Something <a href="https://infosec.space/tags/GAFAMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#GAFAMs</a> work hard to let people do: KEEP <a href="https://infosec.space/tags/selfCustody" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfCustody</a> of their data!

:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉Cybersecurity researchers have uncovered two malicious packages, zebo and cometlogger, on the Python Package Index (PyPI) that exfiltrate sensitive data from compromised systems! 🚨 With over 280 downloads before removal, these packages employ advanced techniques for surveillance and credential theft. Always verify code before running! 🔍💻 <a href="https://mas.to/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mas.to/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://mas.to/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> <a href="https://mas.to/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a> <a href="https://mas.to/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a> <a href="https://thehackernews.com/2024/12/researchers-uncover-pypi-packages.html" rel="nofollow noopener" translate="no" target="_blank">https://thehackernews.com/2024/12/researchers-uncover-pypi-packages.html</a>

HuntressKeep an eye on unexpected <a href="https://infosec.exchange/tags/WinRAR" class="mention hashtag" rel="nofollow noopener" target="_blank">#WinRAR</a> activity—legitimate software doesn't always mean legitimate use. Identifying unusual command-line options can help uncover potential threats early. <a href="https://huntress.com/blog/its-not-safe-to-pay-safepay" rel="nofollow noopener" translate="no" target="_blank">https://huntress.com/blog/its-not-safe-to-pay-safepay</a> <a href="https://infosec.exchange/tags/ThreatHunting" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatHunting</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a>

Kevin Karhan :verified:<a href="https://mastodon.social/@gurkanctn" class="u-url mention" rel="nofollow noopener" target="_blank">@gurkanctn</a> <a href="https://infosec.exchange/@nazgul" class="u-url mention" rel="nofollow noopener" target="_blank">@nazgul</a> not just invading, but <a href="https://infosec.space/@kkarhan/113413999824933801" rel="nofollow noopener" target="_blank">illegal</a>...<ul><li>Imagine if a Web Mailer (i.e. Protonmail) or eMail client (i.e. Outlook) were to scan your <code>/home/</code> directory and preemptively upload all the PDFs and OOXML files to OneDrive just in case you want to sent them from your laptop...</li></ul>This is called an "info stealer" and it's classified as a malware for very good reasons!<a href="https://infosec.space/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://infosec.space/tags/DataProtection" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataProtection</a> <a href="https://infosec.space/tags/ConsumerRights" class="mention hashtag" rel="nofollow noopener" target="_blank">#ConsumerRights</a> <a href="https://infosec.space/tags/InfoStealer" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoStealer</a> <a href="https://infosec.space/tags/Instagram" class="mention hashtag" rel="nofollow noopener" target="_blank">#Instagram</a> <a href="https://infosec.space/tags/Facebook" class="mention hashtag" rel="nofollow noopener" target="_blank">#Facebook</a> <a href="https://infosec.space/tags/NSAbook" class="mention hashtag" rel="nofollow noopener" target="_blank">#NSAbook</a> <a href="https://infosec.space/tags/StasiBook" class="mention hashtag" rel="nofollow noopener" target="_blank">#StasiBook</a> <a href="https://infosec.space/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a> <a href="https://infosec.space/tags/GDPR" class="mention hashtag" rel="nofollow noopener" target="_blank">#GDPR</a> <a href="https://infosec.space/tags/BDSG" class="mention hashtag" rel="nofollow noopener" target="_blank">#BDSG</a> <a href="https://infosec.space/tags/GAFAMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#GAFAMs</a> <a href="https://infosec.space/tags/PRISM" class="mention hashtag" rel="nofollow noopener" target="_blank">#PRISM</a> <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudAct</a>

Kevin Karhan :verified:<a href="https://mastodon.online/@nickali" class="u-url mention" rel="nofollow noopener" target="_blank">@nickali</a> <a href="https://infosec.exchange/@nazgul" class="u-url mention" rel="nofollow noopener" target="_blank">@nazgul</a> that's because they never faced actual accountability nor consequences.<ul><li>And I don't mean a fine, but actual jailtime! </li></ul><a href="https://infosec.space/@kkarhan/113413999824933801" translate="no" rel="nofollow noopener" target="_blank">https://infosec.space/@kkarhan/113413999824933801</a> <a href="https://infosec.space/@kkarhan/113414012396154242" translate="no" rel="nofollow noopener" target="_blank">https://infosec.space/@kkarhan/113414012396154242</a><a href="https://infosec.space/tags/Accountability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Accountability</a> <a href="https://infosec.space/tags/Consequences" class="mention hashtag" rel="nofollow noopener" target="_blank">#Consequences</a> <a href="https://infosec.space/tags/LackOfAccountability" class="mention hashtag" rel="nofollow noopener" target="_blank">#LackOfAccountability</a> <a href="https://infosec.space/tags/LackOfConsequences" class="mention hashtag" rel="nofollow noopener" target="_blank">#LackOfConsequences</a> <a href="https://infosec.space/tags/NSAbook" class="mention hashtag" rel="nofollow noopener" target="_blank">#NSAbook</a> <a href="https://infosec.space/tags/StadiBook" class="mention hashtag" rel="nofollow noopener" target="_blank">#StadiBook</a> <a href="https://infosec.space/tags/Facebook" class="mention hashtag" rel="nofollow noopener" target="_blank">#Facebook</a> <a href="https://infosec.space/tags/InfoStealer" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoStealer</a> <a href="https://infosec.space/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a>

Kevin Karhan :verified:<a href="https://mstdn.social/@femme_mal" class="u-url mention" rel="nofollow noopener" target="_blank">@femme_mal</a> <a href="https://mastodon.social/@Catawu" class="u-url mention" rel="nofollow noopener" target="_blank">@Catawu</a> <a href="https://mastodon.sdf.org/@DamonWakes" class="u-url mention" rel="nofollow noopener" target="_blank">@DamonWakes</a> <a href="https://merveilles.town/@lrhodes" class="u-url mention" rel="nofollow noopener" target="_blank">@lrhodes</a> <a href="https://infosec.exchange/@nazgul" class="u-url mention" rel="nofollow noopener" target="_blank">@nazgul</a> either way I'm convinced this shit is so flatout illegal in the EU that it's literally a felony in places like Germany, where even having such functionality may fall under "production, possession, distribution and use of tools to facilitate data manipulation and/or extraction against the owners' consent" (<a href="http://gesetze-im-internet.de/stgb/__202c.html" rel="nofollow noopener" target="_blank">§202c penal code</a>)...But that's <a href="https://infosec.space/@kkarhan/113413999824933801" rel="nofollow noopener" target="_blank">just</a> <a href="https://infosec.space/@kkarhan/113413981213042913" rel="nofollow noopener" target="_blank">my opinion</a>, and <a href="https://infosec.space/tags/NotLegalAdvice" class="mention hashtag" rel="nofollow noopener" target="_blank">#NotLegalAdvice</a>! <a href="https://infosec.space/tags/EU" class="mention hashtag" rel="nofollow noopener" target="_blank">#EU</a> <a href="https://infosec.space/tags/Germany" class="mention hashtag" rel="nofollow noopener" target="_blank">#Germany</a> <a href="https://infosec.space/tags/Facebook" class="mention hashtag" rel="nofollow noopener" target="_blank">#Facebook</a> <a href="https://infosec.space/tags/NSAbook" class="mention hashtag" rel="nofollow noopener" target="_blank">#NSAbook</a> <a href="https://infosec.space/tags/InfoSealer" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSealer</a> <a href="https://infosec.space/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataExfiltration</a> <a href="https://infosec.space/tags/DataProtection" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataProtection</a> <a href="https://infosec.space/tags/ConsumerRights" class="mention hashtag" rel="nofollow noopener" target="_blank">#ConsumerRights</a>

Recent searches

Search options

Administered by:

Server stats:

#dataexfiltration