If you were unfortunate enough to e-file your US #tax using HR Block, Taxact or Taxslayer, your most sensitive financial information was nonconsenually shared with Facebook, where it was added to the involuntary dossier the company maintains billions of people, including people who don't have Facebook accounts.
1/
5 Advisories and 3 Updates Published – 11-22-22 – NCCIC control system security advisories for products from Moxa, GE, Phoenix Contact, Digital Alert Systems, and AVEVA – Updates for Mitsubishi (2) and Hillrom - https://tinyurl.com/3fddf3z6 Subscription required #icsSecurity
DHS Announces HSAC Meeting – 12-6-22 – Will include initial progress reports from new subcommittees - https://tinyurl.com/2s4k5d29 #HSAC
CFSN Detailed Analysis - Substack Daily Update – 11-21-22 – Free Content - https://tinyurl.com/2tpycnkh
Reader Comment – CSB Performance Report – Rosearray points to CSB’s annual performance report with pertinent comments – I take additional look at CSB incident reporting and outreach – https://tinyurl.com/y2svbd5p #CSB #ReaderComment
Reader Comment – CSB Performance Report – Rosearray points to CSB’s annual performance report with pertinent comments – I take additional look at CSB incident reporting and outreach – https://tinyurl.com/y2svbd5p #CSB #ReaderComment
CFSN Detailed Analysis - Substack Daily Update – 11-19-22 – Free Content - https://tinyurl.com/3xr9ktbe
@tchambers a few other thoughts.
Organizations (corporations but also schools, governments, unions, nonprofits, associations) all should consider hosting their own instance initially restricted to staff/employees (but look at opening it to members where that’s appropriate or to alumni for schools for example). Likely along with supporting the core project(s) (if the ActivityPub instances aren’t just mastodon - some orgs might look at hosting other apps as wel)
I spent a lot of time on Twitter in my nearly 16 years there. I really hate what's happening. A huge loss if it truly goes away; I search Twitter daily to find stuff I & others posted. Like a reserve memory bank for someone with a poor memory like me.
(I'm sure I'll like mastodon; it seems neat! But it's a different thing. I may wind up liking it better, but I've a lot of history with the bird app.)
Short Takes – 11-19-22 – New Dem House Leadership – ICR for SLTPS security clearance requests – New measurement prefixes for ultra large and small - https://tinyurl.com/2p822wh3
OMB Approves MARAD Tanker Security Program IFR – Rule for DOT efforts to support a new Tanker Security Fleet - https://tinyurl.com/y6m88xfp #Regulations
GAO Reports – Cybersecurity Oversight - Week of 11-12-22 – Two reports on DOD oversight of contractors and DOI oversight of offshore oil facilities - https://tinyurl.com/3v3fwycp #GAO
CRS Reports – Electric Power Transformers – A look at potential shortages and legislative responses - https://tinyurl.com/bdf8w2wf #CRS
Review – FDA Publishes Medical Device Cybersecurity Response Playbook – Mitre updated the 2018 playbook and provided a quick start guide – Short version – https://tinyurl.com/yaruv46c #MedicalDeviceCybersecurity
This sounds like something I talk about a lot, actually. Scientists, generally speaking, will have a method on how to do things. We're used to SOPs and process is often our thing.
The majority of the world doesn't think like that. If your instant and immediate reaction isn't what they want, then you're automatically against them.
I'm not going to write a novel, but look at how the non-scientists in the world handle information on things like COVID or climate change. If it changes, it's inherently bad in their opinion. Only the first opinion they heard matters, to a large number of people, and they'll go to the grave believing it.
TLDR; scientists and non-scientists often struggle with communication. Thank you for coming to my TED talk :)
FDA Publishes Medical Device Cybersecurity Response Playbook – Mitre updated the 2018 playbook and provided a quick start guide - https://tinyurl.com/4h7t86xy Subscription required #MedicalDeviceSecurity
Review - Public ICS Disclosures – Week of 11-12-22 – A busy week – 2 new OpenSSL 3.0 vendor advisories – 24 other vendor disclosures – 3 vendor updates – 1 exploit – Short version - https://tinyurl.com/nhsnzucs #icsSecurity
Glad to see that @GiantMilitaryCats has made it here to bless our feeds.
Public ICS Disclosures – Week of 11-12-22 – A busy week – 2 new OpenSSL 3.0 vendor advisories – 24 other vendor disclosures – 3 vendor updates – 1 exploit – https://tinyurl.com/2w8bx64k Subscription required #icsSecurity
A gentle reminder to folks who are new to Mastodon. In solidarity with those in the disabled community who rely on screen readers, we ask that you:
* Add alt text/image descriptions when you post media
* Capitalize the first letter of every word in a hashtag #LikeThis