Tor Vigesdal

All Mexico Cellphone Users Must Register by June 30, 2026 From 2026, Mexico's law requires that all Mexican cellphone numbers, whether on contract or prepay phone plans, are associated to a verified and registered user

All Mexican citizens must register their SIM cards and associate it with a government ID by the end of June.

The new requirement applies to subscription, prepay, and eSIMs alike.

www.mexperience.com/all-mexico-c...

My not at all surprised face: "After careful investigation, this case has been assessed as not a vulnerability and does not meet Microsoft's bar for immediate servicing."

Subpoena Per Agentic Mail

Threat actors are abusing the redirection-to-URL feature of legitimate OAuth services to redirect the targets of phishing campaigns to malicious downloads.

Attacks are ongoing and have targeted government and public-sector organizations.

www.microsoft.com/en-us/securi...

They could simply block them for Gemini until this feature has been unlocked with MFA?

Google has a main problem now as once benign API keys to work with Maps and Firebase now also allow Gemini access and can expose a whole lot of user data they didn't previously had access to

Almost 3k of these are exposed online

trufflesecurity.com/blog/google-...

Banana Airlines - Yes we have no bananas YouTube video by Stig1982

www.youtube.com/watch?v=WniT...

🇳🇴

Check out the StormCast (hit subscribe) and I’d love to see opinions and contributions to the CLAIR model. I’m going to write an #introtake for this one

Critical SolarWinds Serv-U flaws offer root access to servers SolarWinds has patched four critical Serv-U remote code execution vulnerabilities that could grant attackers root access to unpatched servers.

Critical SolarWinds Serv-U flaws offer root access to servers #cybersecurity #hacking #news #infosec #security #technology #privacy

a man in sunglasses is holding a piece of meat in a kitchen and says `` bring on the meat '' . Alt: a man in sunglasses is slapping a piece of meat in a kitchen and says «bring on the meat» .

Where is the meat?

‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA Most phishing websites are little more than static copies of login pages for popular online destinations, and they are often quickly taken down by anti-abuse activists and security firms. But a stealt...

krebsonsecurity.com/2026/02/star...

Microsoft says bug causes Copilot to summarize confidential emails Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.

Microsoft says bug causes Copilot to summarize confidential emails #cybersecurity #hacking #news #infosec #security #technology #privacy

I’ve feigned having bought a replacement and gone through the exercise of «putting it in a safe / sensible place». Alas, the missing item might just be there!

BT26-02 | BeyondTrust BeyondTrust’s Privileged Access Management platform protects your organization from unwanted remote access, stolen credentials, and misused privileges

www.beyondtrust.com/trust-center...

Please, act fast and patch! This is super easy to exploit.

Only 160? I’ve listened to more than that?! I will continue to listen for another 17 years..

Microsoft held an AMA session and updated its guide to help sysadmins safely replace Secure Boot certificates that are set to expire this June.

techcommunity.microsoft.com/event/window...

techcommunity.microsoft.com/blog/windows...

Iron Mountain: Data breach mostly limited to marketing materials Iron Mountain, a leading data storage and recovery services company, says that a recent breach claimed by the Everest extortion gang is limited to mostly marketing materials.

Iron Mountain: Data breach mostly limited to marketing materials #cybersecurity #hacking #news #infosec #security #technology #privacy

Denmark's postal service to stop delivering letters The decision will end 400 years of the company's letter service, and postboxes will disappear from June.

Denmark, «hold my [beerlabel]»: www.bbc.com/news/article... (sorry, alcohol ads are illegal here)

Are you not on digital mailboxes by now? 🇳🇴 www.digipost.no/en

Nearly 33% of Meta ad revenue in EU and UK comes from online scams. #FixedHeadline

The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit Rapid7 Labs, together with the Rapid7 MDR team, has uncovered a sophisticated campaign attributed to the Chinese APT group Lotus Blossom.

Some IOCs for the Notepad++ backdoors from Rapid7, they're good. www.rapid7.com/blog/post/tr...

I will drop more later.

Lessons learned the hard way are not easily forgotten.

I’ve been trying to get bord games scored correctly, it gets the game right, knows the scoring system andanswers confidently - but it is not correct.

«One in Five has it installed»?!

The Cybersecurity Risks of Agentic AI: What Security Teams Need to Know Agentic AI Cybersecurity Risks: Guide for Security Teams Autonomous AI agents create unique cybersecurity risks beyond traditional LLMs. Learn about identity blind spots, tool chain vulnerabilities, cascading compromises, and how to secure agent deployments....

"The Cybersecurity Risks of Agentic #AI: What Security Teams Need to Know" by Apurva Davé from Aembit. go.aembit.io/s/the-cybers...

Ouch!

n! Snow should be fun!? Stay safe.

ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation ServiceNow fixed CVE-2025-12420, a critical flaw that let unauthenticated attackers impersonate users on its AI Platform.

ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User
Impersonation
URL: thehackernews.com/2026/01/serv...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.3

HNY ==> Happy New Year
iPhone Text Replacement

E.g. for Incident handling, type notagain and have this prepared text inserted:
We’re sorry that this has happened, and we would like to reassure customers that we take the safety and security of their information very seriously.