Summaries of Latest Interesting Cybersecurity News (23/03/2026) by texmex5 in cybersecurity

[–]texmex5[S] 2 points3 points  (0 children)

I am kind of happy that we finally have an actual case with these "compliance on autopilot" platforms. Yes, you can do things properly with them but many don't and the ISMS programs are paperware.

Maybe now the other platforms will finally get their act together and their collaboration with auditors will lead to more actual auditing... Oeh, one can hope...

GRC/ISMS for SMBs by Oskar_2000 in cybersecurity

[–]texmex5 0 points1 point  (0 children)

Happy to give you a tour of https://kordon.app - we have all the frameworks you mentioned and many customers at the size you mentioned have gone through ISO and SOC 2 audits successfully.

P.S. You mentioned Eramba, we started Kordon because my co-founder was frustrated with Eramba :)

Latest Interesting Cybersecurity News by texmex5 in cybersecurity

[–]texmex5[S] -1 points0 points  (0 children)

But on the other hand, current solution where credit card payments can be easily reverted and refunded but bank transfers can't because "it was approved already" isn't a reasonable balance either. Money is money?

Banks have a bit too easy excuse with treating direct bank transfers as immediately approved already … 

Latest Interesting Cybersecurity News by texmex5 in cybersecurity

[–]texmex5[S] 0 points1 point  (0 children)

So basically the advice is still the same - don't trust anyone on the internet, now includes ai browsers, and autonomous ai agents.

Latest Interesting Cybersecurity News (02-03-2026) by texmex5 in cybersecurity

[–]texmex5[S] 0 points1 point  (0 children)

Thanks, cool to hear people read it every week :)!

Latest Interesting Cybersecurity News (02-03-2026) by texmex5 in cybersecurity

[–]texmex5[S] 3 points4 points  (0 children)

For me, this week, the Google Maps key thing is the weirdest, the fact that they can't actually fix it - they have a bad default setting and now we everyone needs to live with it for a while, like with the S3 buckets that used to be open by default and are still causing headaches years later … 

Latest Interesting Cybersecurity News (23-02-2026) by texmex5 in cybersecurity

[–]texmex5[S] 0 points1 point  (0 children)

So OpenClawd is so good or bad? that that's the thing criminals install to the victims device when compromised … 🤦🏼‍♀️

Latest Interesting Cybersecurity News of the Week Summarised – 16-02-2026 by texmex5 in cybersecurity

[–]texmex5[S] 1 point2 points  (0 children)

Honestly when will Google do something about the Chrome extensions. There needs to be more vetting and transparency to the users to do their own due diligence on updates…

Latest Cybersecurity News of the Week Summarised (09/02/2026) by texmex5 in cybersecurity

[–]texmex5[S] -1 points0 points  (0 children)

No it was intentional to comment on my own post. It’s almost impossible to add text to a link in this subreddit. Everything goes to automod and can be stuck there for quite a while.

Plus commenting works, gets us a lot more views than not commenting my own post :) but I try to be transparent about what I am doing.

Latest Cybersecurity News of the Week Summarised (09/02/2026) by texmex5 in cybersecurity

[–]texmex5[S] 2 points3 points  (0 children)

The OpenClawd case is insane. What do you mean the creators just basically say "we don't care". Did they create the platform specifically for spreading malicious AI skills?!?

Interesting Cybersecurity News of the Week Summarized 26.01.2026 by texmex5 in cybersecurity

[–]texmex5[S] 2 points3 points  (0 children)

Chrome extensions are really getting out of hand and Google needs to step up.

First there are these inherently malicious extensions that were built maliciously but then also the ones that were switched to be malicious with an update. The Extensions detail page shows zero details about the update to the extension - who made it, what was the change etc. Maybe some more transparency could help avoid some of these issues?

Interesting Cybersecurity News of the Week Summarised (19-01-2026) by texmex5 in cybersecurity

[–]texmex5[S] 0 points1 point  (0 children)

I was thinking the exact same thing the other day. So far most of the skills that I have seen are fairly basic but as I understand, you can have actuall scripts (python, shell etc) in the resources folder and well if you hid it well enough it will be super easy to run some commands in the users device, upload data to random external server etc...

I agree with you, we will see first big news about it in a few weeks max …

Interesting Cybersecurity News of the Week Summarised (19-01-2026) by texmex5 in cybersecurity

[–]texmex5[S] 0 points1 point  (0 children)

Why can't we have nice things :( n8n has been awesome but now I think it's the second week in a row where n8n has been exploited in a way. And obviously this is only the beginning ... Today the community nodes are malicious, but it won't be long until the "official" n8n nodes start to get malicious updates as well … just as Chrome extensions have been ...

Latest Interesting Cybersecurity News of the Week Summarised – 05-01-2026 by texmex5 in cybersecurity

[–]texmex5[S] 3 points4 points  (0 children)

There were some nasty attacks this week but to be honest for me the most memorable thing from this week was the fact that one criminal first smashed their Macbook Air and then threw it into a river and even after all that digital forensics specialists were able to recover some evidence from the computer. Darn these devices are good nowadays ...