Sam Rosbergen’s Post

They say, be the change you want to see in the world. Well, all of us at Rocket.Chat would like to see friendlier interactions between people online, false information flagged, and cybersecurity at the highest level. That’s why moderation has always been an important part of our product: it helps oversee and manage user content. Reviewing, editing, deleting, and blocking inappropriate, harmful, or spam content builds an environment for engaging and meaningful conversations. Stopping the spread of false information can be critical for organizations in highly regulated industries. Moderation also helps to maintain regulatory compliance and data security. Learn more about how we support a safer digital communications environment with moderation at Rocket.Chat: https://bit.ly/3PFS5ro

You know what is dumb? This: “unhackable.” I thought by now we had eradicated this term, but there are still people saying it (and lots more thinking it, even if they don’t say it). Let’s be super clear: there is no such thing as an “unhackable” system. Nothing will ever be “completely secure.” But we can get better. We can improve. That’s what security is really about: are we doing better today than we did yesterday? Will we be better tomorrow than we are today? Not “unhackable,” but instead “better.”

Are We Creating Our Own Problems? Lately, I've been thinking about the world we live in, especially with all the technology around us. It makes me wonder: Are we, as humans, creating more problems than we solve? Take cybersecurity, for example. The only reason we need it is because some people hack into systems and cause trouble. If no one was trying to steal data or attack systems, we wouldn't need to worry about security so much. Cybersecurity is a reaction to a problem that humans created in the first place. Then there's convenience. We’re always trying to make things easier and faster, so we create all kinds of systems—whether it’s for shopping, working, or communicating. But sometimes, these systems bring new problems. Think about the technical issues, privacy concerns, or how we’ve become so dependent on technology. If we didn’t push so hard for convenience, would we need all these complicated systems? It makes me wonder about human nature. Unlike AI, which is built to help, humans sometimes seem to make things harder for each other. Whether it’s through hacking, unhealthy competition, or overcomplicating simple things, we often create our own challenges. Sometimes I wonder if the solution to most of these problems can be simpler. What if people were just kinder to each other? Anyway, these are just some wild thoughts from a 45-year-old guy going through his middle-age crisis. #humannature #modernproblem #complexityoflife #middleagecrisis #technologyandsociety

Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets Microsoft on Friday revealed that the Kremlin-backed threat actor known as Midnight Blizzard (aka APT29 or Cozy Bear) managed to gain access to some of its source code repositories and internal systems following a hack that came to light in January 2024. "In recent weeks, we have seen evidence that Midnight Blizzard is using information initially exfiltrated from our corporate email systems to gain, or attempt to gain, unauthorized access," the tech giant said. Read More: https://lnkd.in/giuUz8BE #microsoft #russianhackers #kremlin #midnightblizzard #apt29 #cozybear #latesthack #cybersecuritynews #solarwinds #dataprotection #computertech #techcompany #cybersecuritycompany #cybersecurityengineer #datascience #cybersecurityexperts #computerscience #ethicalhack #cybersecurityteam #cybersecurityexpert

🎉 Exciting Achievement Unlocked! 🎉 I'm thrilled to announce that I have successfully completed the "Introduction to Dark Web Operations" course! by Security Blue Team🚀 This intensive program provided a deep dive into the three layers of the internet: the clear web, the deep web, and the dark web. It covered critical aspects of both legal and illegal activities on the dark web and equipped me with practical skills to navigate this hidden part of the internet safely. 🔍 Course Highlights: 1️⃣ Introduction to the Dark Web: Understanding the clear web, deep web, and dark web. 2️⃣ The Good Guys: How law enforcement and cybersecurity professionals can utilize the dark web for good. 3️⃣ The Bad Guys: Insight into how criminals exploit the dark web for malicious purposes. 4️⃣ Accessing the Dark Web: Safe navigation using TOR. 5️⃣ Final Challenge: A hands-on scenario where I played the role of a law enforcement officer tracking a drug trafficking network on the dark web. This practical exercise honed my skills in gathering intelligence, identifying criminal activities, and planning strategic interventions. In the final challenge, I gained access to a dark website, gathered evidence linking individuals to drug trafficking, and uncovered critical information about impending illegal shipments. This experience was incredibly valuable in understanding the real-world applications of dark web operations. This certification is a significant milestone in my cybersecurity journey, and I am eager to apply these skills to contribute to making the digital world a safer place. A heartfelt thank you to everyone who supported me through this journey! #Cybersecurity #DarkWeb #CyberThreats #Infosec #LawEnforcement #DigitalSafety #CareerGrowth #ContinuousLearning #Tech #Security

Here's what Satya said: “If you’re faced with the tradeoff between security and another priority, your answer is clear: Do security,” Nadella wrote in a companywide memo. https://lnkd.in/gnVu4veJ Do security first!! Hasn't this been the mantra and best practice since day one? It's time this model flipped, and "do security first" becomes the coolest thing a human can do. #balnceai #dataeconomy #dataiscurrency

In today's digital age, online safety is more crucial than ever. The recent steps taken by a leading search giant highlight this pressing issue. They are implementing new measures to diminish the visibility of AI-generated and spoofed explicit content, aiming to curb the spread of manipulated digital media. As someone who spends considerable time online, I’ve witnessed firsthand the disturbing rise of such content. It’s reassuring to see major players taking significant steps to make the internet a safer place. Here's where you come in: - Have you encountered AI-generated or spoofed content that seemed real? - What are your thoughts on these new safety measures? - How do you think platforms can further protect users against digital manipulation? Let's discuss how we can collectively enhance online safety and keep our digital spaces secure. #OnlineSafety #DigitalMedia #AI #TechInnovation #CyberSecurity #DigitalManipulation

Wow, the data breaches just keep coming every day, now NullBulge claims to have stolen 1.1TB from Disney off their Slack Channels! Here at Xiid we hope that more and more organizations can realize how we can prevent these from happening and save millions if not hundreds of millions of dollars. Hit us up today for a demo 😏 #TripleEncryptedSecuredTunnels https://lnkd.in/ePvty8EZ

With command and control (C2) frameworks like Cobalt Strike being heavily documented, with robust detections In place, you'd be forgiven for wondering what C2 frameworks threat actors use now. Allow me to introduce Havoc C2. There is loads of content on YouTube covering the offensive side of Havoc, from, for example John Hammond - but I wanted to take a different approach. The report below shows my methodology for defensive operators to reliably detect Havoc C2 traffic and decrypt it. If your interested in how defenders can fight back against C2 use, check out my research below. https://lnkd.in/e2m4ExpH #cybersecurity #threathunting #cyberthreatintelligence #malwareanalysis #c2 #Havoc #cyberdefense

Disney’s internal data stolen Walt Disney has recently experienced a data breach in which hacking group, known as NullBulge claimed that they have accessed 1TB+ of company data. This leaked information from thousands of channels, including project details, computer code and log-in information   Nullbulge has claimed that it has accessed almost 1000 channels to dump every message and file possible. The identity of the group remains anonymous but its mission includes advocating for artist rights.As per the hacking group, it targeted Disney “ due to how it handles artist contracts, its approach to AI and its .. pretty blatant disregard for the consumer.” AI was a major sticking point during in negotiation during Screen Actors Guild and Writers Guild of America strikes. Writers are concerned that ChatGPT can write scripts instead of them , while actors fear that computer-generated imagery or CGI can wholly replace them  The hackers said they leaked the data because making demands of Disney could be futile. The attacker’s blog alleges that the heist was possible due to an insider collaborator. The cybercriminals claimed that they weren’t able to get more data because their insider man got cold feet and kicked them out.  Internal chat leak pose severe risks to exposed companies, as messages provide malicious actors the sensitive information, conduct unauthorized access and potentially exploit confidential company resources. #Walt #Disney #Nullbulge #internal #data #leak https://lnkd.in/gnmnag2g