c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
Community Rules
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub
Notable mention to !cybersecuritymemes@lemmy.world
Donnie soon; 'computers are for nerds, I don't use em, we where a lot better off without all this cyber nonsense, and their Intel is wrong, Tulsi is wrong here, should have gone with AMD, sound a lot like and, and this and that, brings things together...'
While I don't doubt that Iranian backed groups are more likely to target US based assets, I've been reading these reports for the last couple days and the "guidance" coming out of the US Government (USG) has been incredibly lackluster. CISA is basically saying, "use MFA and don't use default passwords." No shit, should I also plug in the power cord? It'd be great if some sector of the USG would publish something useful. Like a rundown of TTPs or even IoCs. The USG no doubt has a ton of SIGINT on these groups, and I understand that they can't share all of it; but, fuck me could you at least put something more useful out than "use MFA"?
No, they can't. DOGE gutted basically everything that made the government useful to regular people. And it's the Trump regime's fault we're in this mess in the first place.
They're not going to admit fault, even indirectly. We're on our own.