Security Engineer
425 subscribers
88 photos
1 video
46 links
A diary of Security Engineerโ€˜s life. The good, the bad, the secure ๐Ÿ˜ฌ

Ping for cooperation @stansecure

My LinkedIn linkedin.com/in/stansecure/
Download Telegram
InfoSec Ukraine 2025 wasn't just another conference for me โ€” it was a reality check. As someone who spends my days defending networks, seeing experts break down the latest threats felt like looking into the future.

๐™ƒ๐™š๐™ง๐™š ๐™–๐™ง๐™š 5 ๐™†๐™š๐™ฎ ๐™„๐™ฃ๐™จ๐™ž๐™œ๐™๐™ฉ๐™จ ๐™ฉ๐™๐™–๐™ฉ ๐™ฉ๐™ง๐™ช๐™ก๐™ฎ ๐™จ๐™ฉ๐™ง๐™ช๐™˜๐™  ๐™ข๐™š.

1. ๐˜ผ๐™„ ๐™Ž๐™š๐™˜๐™ช๐™ง๐™ž๐™ฉ๐™ฎ (Bruce Schneier): The AI revolution is here, and with it comes massive risks.
* Key areas: Protecting AI systems, ensuring output integrity, and upcoming AI regulation.
* ๐Ÿค” My take: I'm particularly fascinated by how we'll balance innovation and strict regulatory compliance. That's the real challenge ahead!

2. ๐˜ผ๐™‹๐™ ๐™‚๐™ง๐™ค๐™ช๐™ฅ๐™จ (Serhii Khariuk): APTs now operate like professional software companies! Complete with developers, QAs, PMs, and even "sales" teams.
* ๐Ÿคฏ My take: Understanding their organizational structure is crucial for anticipating their strategies. We're not just dealing with lone hackers anymore.

3. ๐™๐™๐™š ๐™†๐™ฃ๐™ค๐™ฌ๐™ก๐™š๐™™๐™œ๐™š ๐™‚๐™–๐™ฅ (Nazar Tymoshyk Eduard Chornyi Serhii Khariuk Ilya Aksyonenko): Both offensive and defensive teams struggle to keep pace with the rapid evolution of threats and defenses.
* โšก๏ธ My take: Whoever invests in team training today wins tomorrow.

4. ๐™๐™๐™š ๐™Œ๐™ช๐™–๐™ฃ๐™ฉ๐™ช๐™ข ๐™‡๐™š๐™–๐™ฅ (Jaya Baloo): Her session on quantum computing's impact on cryptography was a wake-up call. Preparing for a post-quantum era should have started yesterday.
* โฑ My take: What we consider "secure" today will be broken tomorrow. And not in 10 years โ€” much sooner.

5. ๐™๐™ ๐™ง๐™–๐™ž๐™ฃ๐™ž๐™–๐™ฃ ๐˜พ๐™ค๐™ข๐™ฅ๐™–๐™ฃ๐™ž๐™š๐™จ' ๐˜พ๐™ฎ๐™—๐™š๐™ง๐™ฌ๐™–๐™ง๐™›๐™–๐™ง๐™š ๐™€๐™ญ๐™ฅ๐™š๐™ง๐™ž๐™š๐™ฃ๐™˜๐™š (Panel): Real-world attack scenarios on major entities like Kyivstar and Ukrzaliznytsia were sobering. Investment in security directly impacts customer trust.
* ๐Ÿ›ก My take: This is the clearest illustration that security isn't an expense, but a vital investment in reputation.

๐Ÿ”ฅ ๐™ˆ๐™ฎ ๐™ˆ๐™–๐™ž๐™ฃ ๐˜พ๐™ค๐™ฃ๐™˜๐™ก๐™ช๐™จ๐™ž๐™ค๐™ฃ: Cybersecurity is a marathon, not a sprint. We need to be in it for the long haul.

๐Ÿค” Which of these trends concerns you most? Is your organization already preparing for the post-quantum era?

Save this post for 2025.โคต๏ธ

๐Ÿ“ฃShare if you found this helpful.

#CyberSecurity #AISecurity #APT

@securediary
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ‘16๐Ÿคฏ1
I am inspired by Ukraineโ€™s cyber resilience. โค๏ธโ€๐Ÿ”ฅ

In todayโ€™s world, cyber threats donโ€™t pause for anyone. They adapt. They evolve. And in times of conflict, they become relentless.

Ukraineโ€™s cyber defense has shown extraordinary strength. Our ability to stand firm against sophisticated adversaries is nothing short of remarkable.

๐™’๐™๐™–๐™ฉ ๐™˜๐™–๐™ฃ ๐™ฌ๐™š ๐™ก๐™š๐™–๐™ง๐™ฃ ๐™›๐™ง๐™ค๐™ข ๐™ž๐™ฉ?

1. Vigilance matters. Threat actors are always looking for vulnerabilities, and being proactive is the only way to stay ahead.

2. Cyber hygiene is non-negotiable. Regular updates, strong passwords, and employee training are not โ€œextrasโ€ โ€“ theyโ€™re essentials.

3. Collaboration is powerful. Sharing intelligence across teams, industries, and borders can make or break your defenses.

Resilience doesnโ€™t happen overnight. It takes continuous effort, adaptability, and a mindset that refuses to settle for โ€œgood enough.โ€

Kudos to all Ukrainians for setting the bar high. ๐Ÿซก

What steps are you taking to strengthen your cyber defense? ๐Ÿ‘‡

#CyberSecurity #InfoSec #UkraineResistance

@securediary
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ‘11
Top 10 things that help me protect sensitive data.

A while back, I thought โ€œdata protectionโ€ meant setting up a few strong passwords and ensuring disk encryption.
I was wrong.

Today, data lives everywhere. And protecting it takes more than tools โ€” it takes strategy.

Hereโ€™s what Iโ€™ve learned (and yes, Iโ€™m still learning ๐Ÿ˜‰):

1๏ธโƒฃ Define your data goals
โ†’ Know whatโ€™s critical.
โ†’ Know where it lives.
โ†’ Talk to the business side โ€” risk and budget matter.

2๏ธโƒฃ Automate data classification
โ†’ No one has time to tag files manually.
โ†’ Let smart tools do the heavy lifting.

3๏ธโƒฃ Implement Zero Trust
โ†’ โ€œNever trust, always verifyโ€ is more than a buzzword.
โ†’ Give people only what they actually need.

4๏ธโƒฃ Centralize your DLP
โ†’ One place. Full visibility.
โ†’ Less chaos, fewer false positives.

5๏ธโƒฃ Secure common exit points
โ†’ Web, email, SaaS, and all the BYOD stuff.
โ†’ Browser isolation helps with sketchy devices.

6๏ธโƒฃ Unify your policies
โ†’ No more โ€œwho owns what.โ€
โ†’ One rulebook, one language.

7๏ธโƒฃ Block bad stuff in real time
โ†’ Alerts after the fact? Too late.
โ†’ Catch it before it walks out the door.

8๏ธโƒฃ Connect your tools
โ†’ No one wants another dashboard.
โ†’ Integrate with what you already use.

9๏ธโƒฃ Make it easy for users
โ†’ If securityโ€™s a pain, people will go around it.
โ†’ Smooth UX = better compliance.

๐Ÿ”Ÿ Plan for AI and BYOD madness
โ†’ AI tools are everywhere.
โ†’ So are unmanaged devices.
โ†’ Set your guardrails now.

These 10 have saved me time, stress, and (probably) a few audits.๐Ÿ™ƒ

Save this post to your bookmarks and comment below! ๐Ÿ‘‡

#CyberSecurity #InfoSec #DataProtection

@securediary
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ‘9
๐Ÿ‘2๐Ÿค”1
I've been writing for 7 years, and this post just reminded me why I still struggle.

(original author post link)

I saw this line and had to pause:
โ€œThe 'write like you talk ' principle completely changed my game. I used to write like I was submitting a college paper โ€“ formal, stiff, trying to sound smart. Now I write like I'm texting my best friend about something I'm genuinely excited about. Game changer.โ€

That hit home for me.

In my early days, I tried to sound 'clean.' Every sentence felt heavy. Every word had to be perfect. I thought smart writing meant big words and long sentences.

But my writing was not fun. Not all people were connected with it.

When I learned to write like I talk, things changed๐Ÿ’ก. My ideas felt more real. People started to reply and share their own stories. I felt like I had found my voice.

But I still have one big struggle: ๐™–๐™™๐™ซ๐™š๐™ง๐™—๐™จ. I want to cut them, but they sneak in when I am not watching.๐Ÿ˜…

From this list of 7 writing rules, thatโ€™s my weak spot. Curious if anyone else feels the same.

Here is one more tip I would add as #8:
โ†’ Read your work out loud before you share it. You catch the parts that sound wrong, the words that do not flow, and you hear where your voice is missing. (Trust me, it works!)

Also, I do not fully agree with the 'never be formal ' rule. Sometimes a little formality helps. It can show respect or match your readerโ€™s style.

After 7 years, I am still learning. Writing is always about finding your real voice, but also being open to new ideas.

If you're curious, hereโ€™s the link to my personal blog I started back in 2018: https://t.iss.one/dreamerdiary ๐ŸŒฑ

Which principle changed your writing most?

Is there a rule you think does not fit your style? ๐Ÿ‘‡

#WritingTips #Copywriting #Storytelling #PersonalBranding

@securediary
๐Ÿ‘7๐Ÿคฏ1
Most companies fear cyberattacks. But misconfigurations are the real silent killer. ๐Ÿซจ

Cloud misconfigurations are everywhere.
They hide in small mistakes, missed settings, or rushed rollouts.

Capital One lost $1.8M because of a single overlooked setting. ๐Ÿ’ฐ
(No, it was not a fancy hack. It was a tiny checkbox left open.)

Hereโ€™s what I learned:

โ†’ 80% of cloud breaches start with simple misconfigurations.
โ†’ Old security tools miss these gaps.
โ†’ The biggest risks are often the ones no one sees.

Want to know where to look first?
Here are the Top 5 cloud misconfigurations I check every time:

1. Publicly open storage buckets (easy target!)
2. Weak access controls (too many people with keys)
3. Missing encryption (data left in plain sight)
4. Default passwords still active (yes, it happens)
5. Unmonitored services (no alerts, no eyes)

How do I prevent these?
I use a simple playbook:
โ†’ Review cloud settings often
โ†’ Set alerts for changes
โ†’ Limit access to what people need
โ†’ Remove unused accounts fast
โ†’ Train teams on what to watch for

Cloud security does not need to be hard.
But it does need care.
One small mistake can cost a lot.

Have you seen a cloud misconfiguration at work?
How did you fix it?
Your story could help save someone elseโ€™s data. ๐Ÿ‘‡

#CloudSecurity #CyberSecurity #ThreatFridays

@securediary
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ‘12
#CyberMonday This Week in Cybersecurity โ€” May 26

Big week for cyber news! Hereโ€™s what caught my eye โ€” and what I think matters most ๐Ÿ‘‡

1๏ธโƒฃ Windows Server 2025 dMSA Vulnerability
โ†’ A new flaw lets attackers gain privilege and compromise any user in Active Directory.
โ†’ If you run AD, review your delegated Managed Service Accounts. Patch as soon as updates drop!

2๏ธโƒฃ TikTok Malware via ClickFix
โ†’ Hackers use TikTok videos to spread Vidar and StealC malware.
โ†’ The โ€œClickFixโ€ trick gets people to download malware fast.
โ†’ Training users to spot these tricks is key. Social media is now a top threat vector.

3๏ธโƒฃ GitLab Duo AI Prompt Injection
โ†’ Attackers can hijack AI responses and steal source code using hidden prompts.
โ†’ AI-powered tools save time, but always check for new risks โ€” especially indirect prompt injection.

4๏ธโƒฃ Europol Strikes Ransomware Networks
โ†’ 300 servers and โ‚ฌ3.5M seized, 650 domains neutralized, 20 arrest warrants issued.
โ†’ Law enforcement is stepping up. Global teamwork works!

5๏ธโƒฃ SafeLine WAF โ€” Open Source Web App Firewall
โ†’ New open-source WAF with zero-day detection and bot protection.
โ†’ If you run web apps, try SafeLine for better defense.

๐Ÿซข Recent Critical & High Severity CVEs
โ†’ CVE-2025-4632 (Samsung MagicINFO 9 Server)
โ†’ CVE-2025-27920 (Output Messenger)
โ†’ CVE-2025-4428/4427 (Ivanti Endpoint Manager)
โ†’ CVE-2023-38950 (ZKTeco BioTime)

See full CVE lists for the last 7 and 30 days if you want more detail โ€” https://www.cvedetails.com/

My take:
Cybersecurity is not slowing down. Every week brings new threats, new tools, and new wins for defenders.
Staying informed is part of defense.
Keeping teams trained and systems patched is how we win.

Want more?
Check the links for CVE details and threat feeds.
Letโ€™s keep our networks safe โ€” together. ๐Ÿ”’

Whatโ€™s the most important cyber risk you saw last week? ๐Ÿ‘‡

#CyberSecurity #InfoSec #CloudSecurity #ThreatIntel

@securediary
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ‘10๐Ÿคฏ2
An insightful question about AI and LLM security ๐Ÿค”

๐—ค: So, how could organizations defend themselves against AI injections? Or is it more about the developers of LLMs, not the users?

๐—”: Great question โ€” and itโ€™s both, really ๐Ÿ™‚

โžก๏ธ LLM providers (Devs) need to harden their models against prompt injection by improving context handling, sandboxing actions, and applying prompt input filters.

โžก๏ธ But orgs using LLMs also have responsibilities:

โ†’ Avoid blindly integrating AI into sensitive workflows (Do the security check first!)
โ†’ Sanitize and validate user inputs before sending them to the model.
โ†’ Log and audit AI activity โ€” treat it like any critical system.

I see both misconfigurations and poor input handling open the door to attackers. Donโ€™t let your guard down.

#CyberSecurity #LLM #AI #DataProtection

@securediary
๐Ÿ‘7
My Path Into Cybersecurity Started With a Choice That Changed Everything.

I was top of my Computer Science class at Military Institute of Telecommunications and Information Technologies (MITIT) with multiple career paths ahead of me.

Then, I heard about a brand-new cybersecurity unit being formed in 2015.

Most classmates chose traditional tech roles. Military Intelligence looked prestigious. Telecommunications seemed stable.

But something about defending critical infrastructure from invisible enemies sparked something in me I didn't know existed.

๐™๐™๐™š ๐™ˆ๐™ค๐™ข๐™š๐™ฃ๐™ฉ ๐™€๐™ซ๐™š๐™ง๐™ฎ๐™ฉ๐™๐™ž๐™ฃ๐™œ ๐˜พ๐™ก๐™ž๐™˜๐™ ๐™š๐™™

Picture this: 2015, Ukraine. Cyber warfare wasn't theoretical โ€” it was happening in real-time.

I walked into that newly formed cybersecurity unit as a fresh graduate with book knowledge.

I walked out every day knowing I was part of something bigger than code and algorithms.

We weren't just IT professionals. We were digital defenders.๐Ÿ›ก

๐—ช๐—ต๐—ฎ๐˜ ๐—ก๐—ผ๐—ฏ๐—ผ๐—ฑ๐˜† ๐—ง๐—ฒ๐—น๐—น๐˜€ ๐—ฌ๐—ผ๐˜‚ ๐—”๐—ฏ๐—ผ๐˜‚๐˜ ๐— ๐—ถ๐—น๐—ถ๐˜๐—ฎ๐—ฟ๐˜† ๐—–๐˜†๐—ฏ๐—ฒ๐—ฟ๐˜€๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜†

Working in AFU's cybersecurity division taught me lessons no classroom ever could:
โ†’ Stakes are real - When defending critical infrastructure, there's no "test environment."
โ†’ Teamwork saves lives - Cyber defense isn't solo when national security is on the line.
โ†’ Adaptability is survival - Threat actors don't follow textbooks.
โ†’ Purpose fuels performance - Protecting your country changes how you approach problems.

๐—ง๐—ต๐—ฒ ๐—ง๐—ฒ๐—ฎ๐—ฐ๐—ต๐—ฒ๐—ฟ๐˜€ ๐—ช๐—ต๐—ผ ๐—–๐—ต๐—ฎ๐—ป๐—ด๐—ฒ๐—ฑ ๐— ๐˜† ๐—ง๐—ฟ๐—ฎ๐—ท๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ๐˜†

My MITIT teacher who saw potential in cybersecurity before it was mainstream.
My AFU manager, who believed in developing talent, not just using it.
These people showed me what it means to serve something bigger than yourself.

๐—™๐—ฟ๐—ผ๐—บ ๐—ฆ๐—ข๐—– ๐—”๐—ป๐—ฎ๐—น๐˜†๐˜€๐˜ ๐˜๐—ผ ๐——๐—ถ๐˜ƒ๐—ถ๐˜€๐—ถ๐—ผ๐—ป ๐—–๐—ต๐—ถ๐—ฒ๐—ณ

Starting in that unit in 2015, I never imagined I'd grow into SOC Division Chief.

Here's what I learned:
1. Technical skills get you in the door
2. Leadership skills keep critical systems protected
3. People skills turn individual defenders into unified teams
4. Strategic thinking transforms reactive responses into proactive defense

๐—ง๐—ต๐—ฒ ๐—ฅ๐—ฒ๐—ฎ๐—น ๐—ฆ๐—ฒ๐—ฐ๐—ฟ๐—ฒ๐˜ ๐˜๐—ผ ๐—–๐˜†๐—ฏ๐—ฒ๐—ฟ๐˜€๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜† ๐—ฆ๐˜‚๐—ฐ๐—ฐ๐—ฒ๐˜€๐˜€

It's not about being the smartest person in the room. It's about caring deeply enough to never stop learning, defending, and improving.

๐—ฌ๐—ผ๐˜‚๐—ฟ ๐—ง๐˜‚๐—ฟ๐—ป

What moment made cybersecurity "click" for you?
Was it:
A personal experience?
A mentor who opened your eyes?
A realization about how much depends on digital security?
A desire to serve and protect?

Share your story below. Every journey is unique, but they all share one thing: the drive to protect what matters.

__

Enjoy this? ๐Ÿ”„ Repost it to your network and follow @securediary for more.

Join me on LinkedIn

#CyberSecurity #InfoSec #CyberWarfare
๐Ÿ‘14๐Ÿคฏ2
#CyberMonday 5 CVEs jumped 50%+ in exploitability in 7 days. Are you chasing the wrong threats?

Another week, another reminder that cybersecurity never sleeps. Hereโ€™s what caught my eye.

๐Ÿ”ฅTop News:

1๏ธโƒฃ Linux flaws in Ubuntu, RHEL, Fedora โ†’ password hash theft via core dumps. Not flashy, but deadly if missed.

2๏ธโƒฃ U.S. DoJ took down 4 โ€œcrypting serviceโ€ domains. Attackers keep innovating, law enforcement is catching up.

3๏ธโƒฃ EDDIESTEALER malware broke Chromeโ€™s latest encryption. Even browser security is a moving target.

4๏ธโƒฃ China-linked APTs went after SQL Server, expanding attack vectors across Asia and Brazil.

5๏ธโƒฃ Microsoft OneDrive File Picker bug โ†’ possible exposure of whole cloud storage, not just the file you pick.

ESSP score check: CVE-2024-9916 went from low risk to 80.49% exploitability โ€” up 79.40 points. Thatโ€™s a warning to look at.
More at cvedetails.com

Hereโ€™s what Iโ€™ve learned:

โ†’ The โ€œboringโ€ stuff โ€” core dump handlers, file pickers, config basics โ€” gets ignored until attackers show us why it matters.

โ†’ 80% of cloud breaches start with simple misconfigurations, not zero-days. Remember Capital Oneโ€™s $1.8M lesson?

โ†’ Attackers target what we trust most: โ€œinvisibleโ€ things that hold our systems together.

My take: Security leaders who audit the basics win the long game. Fancy tools matter, but discipline around the fundamentals saves millions.

Are you focusing on the right risks? Or is your team missing whatโ€™s hiding in plain sight?

Stay secure out there. ๐Ÿ˜‘

__

Enjoy this? ๐Ÿ”„ Repost it to your network and follow @securediary for more.

Join me on LinkedIn

#Cybersecurity #InfoSec #ThreatIntel
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ‘10
After 2 weeks of #CyberMonday threat intel and CVE updates, I want to hear from YOU.

Every Monday, I share the latest threats, key CVEs, and Cybersecurity news to help you stay ahead.

My goal? Make your week safer and save you hours of research. But I know every team has different needs.

Hereโ€™s what I want to know:
โ†’ Are these weekly updates helping you spot risks faster?
โ†’ Do you use them to brief your team, patch systems, or guide your strategy?
โ†’ What would make these updates even more useful for you?

Your feedback shapes what I share next. I want #CyberMonday to be your go-to for:

1๏ธโƒฃ Actionable Threat Intel
2๏ธโƒฃ Fast CVE Highlights
3๏ธโƒฃ Simple, clear takeaways you can use right away

Help me deliver the best #Cybersecurity content for YOU ๐Ÿ™‚
๐Ÿ‘9