The New Oil

The New Oil

@thenewoil.org

Practical #privacy and simple #cybersecurity for everyone. Articles posted =/= endorsement/agreement. This account no longer monitored. Please contact us […] 🌉 bridged from ⁂ https://mastodon.thenewoil.org/@thenewoil, follow @ap.brid.gy to interact

615 followers0 following1.4K posts

The New Oil
@thenewoil.org

German BND to Use #Google Cloud https://tuta.com/blog/german-bnd-to-use-google-cloud #Germany #privacy

tuta.com“For € 500 million, we’d set up an independent Tuta Drive instance on BND infrastructure – with quantum-resistant encryption.” | TutaTo be able to exchange classified information more quickly, Germany’s Federal Intelligence Service (Bundesnachrichtendienst, BND), Federal Office for the Protection of the Constitution (Bundesamt für Verfassungsschutz, BfV) and Military Counterintelligence Service (Militärischer Abschirmdienst, MAD) plan to set up a joint cloud system – together with Google. Where does that leave digital sovereignty?
The New Oil
@thenewoil.org

#Japan's #GMO urges customers to shut down PCs amid #ransomware threat https://www.bleepingcomputer.com/news/security/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/ #cybersecurity

bleepingcomputer.comJapan's GMO urges customers to shut down PCs amid ransomware threat The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today.
The New Oil
@thenewoil.org

Hackers hijack #Convertr #analytics script to steal payment card data https://www.bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data/ #cybersecurity #eCommerce #finance #PersonalFinance

bleepingcomputer.comHackers hijack Convertr analytics script to steal payment card data A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout.
The New Oil
@thenewoil.org

#Microsoft releases #Windows OOB updates to distrust #eMudhra certificates https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-oob-updates-to-distrust-emudhra-certificates/ #cybersecurity

bleepingcomputer.comMicrosoft releases Windows OOB updates to distrust eMudhra certificates Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates.
The New Oil
@thenewoil.org

French Court’s Site-Blocking Orders Drive #Quad9 Out Of #France https://www.eff.org/deeplinks/2026/10/french-courts-site-blocking-orders-drive-quad9-out-france #cybersecurity #DNS #privacy

eff.orgFrench Court’s Site-Blocking Orders Drive Quad9 Out Of FranceA nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights...
The New Oil
@thenewoil.org

#Apple backports #CoreGraphics zero-day patches to older iPhones https://www.bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones/ #cybersecurity #iPhone

bleepingcomputer.comApple backports CoreGraphics zero-day patches to older iPhones (BleepingComputer)​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices.
The New Oil
@thenewoil.org

#Energy giant #ENGIE discloses #DataBreach affecting customers https://www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/ #France #cybersecurity #privacy

bleepingcomputer.comEnergy giant ENGIE discloses data breach affecting customers (BleepingComputer)French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
The New Oil
@thenewoil.org

#CISA confirms #PHP2Shell vulnerabilities now exploited in attacks https://www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/ #cybersecurity #PHP

bleepingcomputer.comCISA confirms PHP2Shell vulnerabilities now exploited in attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
The New Oil
@thenewoil.org

Former pentester used #ARTEX #AI to steal 8.2 million data records https://www.bleepingcomputer.com/news/security/former-pentester-used-artex-ai-to-steal-82-million-data-records/ #cybersecurity #privacy #DataBreach #cybercrime #SouthKorea

bleepingcomputer.comFormer pentester used ARTEX AI to steal 8.2 million data records South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks.
The New Oil
@thenewoil.org

Lessons Learned From ' #AdFection ' and What To Do Next https://www.eff.org/deeplinks/2026/10/lessons-learned-adfection #privacy #cybersecurity #malware #advertising #AdBlocking #AdBlocker

eff.orgLessons Learned From 'AdFection' and What To Do NextLast week, researchers at Citizen Lab revealed a horrifying new malware campaign, dubbed “AdFection.” It used an ad network to distribute spyware to journalist’s devices to infect them without the target ever needing to click anything. This sort of attack on journalists is dangerous and incredibly...
The New Oil
@thenewoil.org

#CA shutdown puts #Java, containers, and security appliances in the certificate crosshairs https://www.infoworld.com/article/4239637/ca-shutdown-puts-java-containers-and-appliances-in-the-certificate-crosshairs.html #cybersecurity #eMudhra #PKI

infoworld.comCA shutdown puts Java, containers, and security appliances in the certificate crosshairsAs eMudhra decides to exit the global SSL/TLS market, browser updates will block affected certificate chains, but developers may still need to patch Java environments and other infrastructure that relies on separate trust stores.
The New Oil
@thenewoil.org

The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans https://www.wired.com/story/the-us-government-is-hiding-a-secret-court-ruling-about-how-it-spies-on-americans/ #FISA #privacy #surveillance #FISC #Section702

wired.comThe US Government Is Hiding a Secret Court Ruling About How It Spies on AmericansTwo US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
The New Oil
@thenewoil.org

#BlackX #UEFI #bootkit exploits #BatonDrop flaw to bypass #SecureBoot https://www.bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/ #cybersecurity

bleepingcomputer.comBlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot (BleepingComputer)A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere …