New breach: Substack had 663k records compromised in October and published online this week. Data included email address, phone number and associated public account info. 53% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Subst...
Awesome, than you so much Emily!
Hi, I was wondering if you had any update on the availability of RDAP and using it to replace WHOIS? Also, is it possible to get a list of every currently registered domain that Jisc is the registry for? Something akin to ICANN’s CZDS platform (newgtlds.icann.org/en/program-s...)? Many thanks.
We’re ready for @blackhatevents.bsky.social EU!
Are you? 😎 #BHEU
You can check it out, and start your free trial of our API by clicking the link
cybaa.io/tools/malici...
We've just pushed a major update to
@cybaa.io's free malicious domain checker - it will now check URLs against Google's Web Risk service! Even better - we've updated the API to do the same, so you can integrate it straight in to your own security processes or for research! Go check it out now!
You can find out more information about your Entra tenant at cybaa.io/tools/micros...
As we build our datasets, we plan publish more insights that might be useful. Please reach out if there's any data that you'd find interesting to explore. We're starting off with Entra data, along with Whois, SPF and DMARC but there's plenty of things we haven't considered yet!
Of the approx 100,000 unique hosts we've scanned so far, are almost 40,000 have Entra tenants, here's a quick view of the regions they're hosted in. The vast majority are in the EU and North America, pretty evenly split with Asia coming in a distant third.
This has been quite the journey, I'm really happy to be launching Cybaa commercially! There's a 14 day trial and you can use the code for 50% off your first two months. There are lots of new features and plenty more in the pipeline! Let me know what you think!
That’s great, thanks Emily!
@jisc.bsky.social Back in July 2023, I asked you on X if you were planning to support Registration Data Access Protocol (RDAP) and you said that it would be supported in the near future - do you have a timeline for implementation? As far as I can see, there's still no support. Thanks!
Depending on how you read their latest statement, you could infer partial card data and hashed passwords were taken too. The use and placing of "usable" leaves more open questions.
Thoughts go out to everyone under pressure to bring everything back online safely - always an awful position to be in!
Should banks use push notifications for all transactions? joetiedeman.uk/2025/01/24/s...
I’m almost the same, I still use music for exercising, find it easier to have as a background distraction, but every other opportunity I used to use to listen to music is now a podcast. Hadn’t really thought about it, wow!
