#security

Will USAA drop TCS? They operate out of a GCC in India which was named a national security threat. If this happens, will they resort to freezing the layoffs of those recently affected in areas like fraud and aml no be able to make
Up for the work that would be illegal for TCS to do?

Remember these? Do you remember the Sun Microsystems' Sun Ray center? Even prior to Oracle taking Sun over? Talk about the opportunity of extending cloud computing into every home in the country. And, personally, I think Oracle blew it. As someone who was in that transition, they made us get rid of the Sun Rays and use Windows based laptops. Talk about a quantum leap backwards.

Key Advantages of Sun Ray

Stateless Architecture: The Sun Ray client contains no local operating system or persistent user data. If a device loses power or fails, user data remains safe on the server.

Zero Desktop Administration: Because no software runs locally, administrators do not need to patch, update, or configure individual desktop units. Firmware updates are pushed automatically from the server.

High Security: Processing occurs entirely on centralized servers (such as Sun/Oracle servers running Solaris or Linux). Users cannot corrupt or tamper with the local display endpoint, making it ideal for high-security or sensitive environments.

Hot-Desking Mobility: Users can unplug their smart card from one Sun Ray terminal, plug it into another anywhere on the network, and instantly resume their exact desktop session right where they left off.

Cost Efficiency: The hardware endpoints are simpler and cheaper than full traditional desktop workstations, and they do not need hardware upgrades when new applications roll out on the server side.

Quiet and Low Power: The physical desktop units operate silently, generate less heat, and consume minimal power compared to standard desktop PCs.

The misconception was it was Solaris only but it could support Windows or Linux clients as well.

I wonder what AI would say? Probably the same as most humans. Stupid! What Oracle knows about hardware would fit in a thimble and rattle.

Do you think I gave a hoot about some damn ethics or security risk training due? Lol let alone a progress checkpoint? Kick rocks!

Cisco on Wednesday released urgent patches for a critical-severity authentication bypass vulnerability in Identity Services Engine (ISE) that has been exploited in the wild as a zero-day.

https://www.securityweek.com/active-exploitation-triggers-emergency-patch-for-cisco-ise-zero-day/

I am in the department that houses everything security related and was told by a person who actually reports this stuff...
While badge swipes ARE still being tracked - tracked as in making sure you are there 5 days/week, you trolling mongorals - but VPN usage is ALSO being monitored.

This is to prevent coffee badging, basically. When you go to an office, you have to connect to the building's/whatever area you are in WiFi before you can connect to VPN. Therefore your computer is assigned an internal Dell IP address. As soon as you connect to that, it starts getting logged. As soon as you disconnect and go home, that gets logged.

The minimum time they want is 1 hour of connectivity as of now.

Source - work with the guy who literally sends these reports up the chain.

Traffic lights are not enough?

Recently re-orged to Security and GRC from Cerner. Should we expect layoffs? Last rounds security teams were hit but not as strong as other groups.

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html

You would think after the genpact announcement there would be some more stability, but nope .. they have been quietly making more people in every country redundant. Mind you, these are people with 10-25 years worth of specialised knowledge with essential roles who are being let go… only to keep the people who still don’t know what they’re doing. Seriously what the actual f*ck are wrong with these people and decision makers ?!

Again, everyone is now on edge wondering whether they will get the tap on the shoulder next, especially with all the extra focus on introducing AI and the global standardisation project for OTC (sounds like we won’t have any customer service in the future, only AI bots). I feel bad for all the customer service teams I’ve worked with over the years in EMEA, they truly work hard for their customers and now they are being forced to hand over what they do day to day for their customers to a database.

BB needs to f*ck right off please. Hope this all back fires in his face.

Does anyone know if this is true ? https://threatbeat.com/attacks-and-incidents/iran-hackers-after-denial-of-texas-att-claim-id--ts-dont-even-know-what-we-tampered-with/

For years we were willing to be underpaid at ExxonMobil because of the pension and job security. No bonuses was the trade off. Now with the current state of affairs there is no reason not to leave and go work somewhere else.

No loyalty given no loyalty returned

On 10/30/2025 I was made aware that 2 withdrawals, on 10/17 and 10/21 essentially emptying my account. I immediately contacted customer service to inform them that my account had been hacked, username, password, phone and email information changed. I was told that my account was frozen and referred to the fraud department. The fraud department would be in contact with me in two weeks. On 11/19 I called again, stating that the user name and password continued to be fraudulent and I had not heard from anyone at MoA. Again my email, phone number was taken, I was told there continues to be a freeze on my account and the Fraud Department would be in touch in 2 weeks.

I contacted customer service again on 1/6/2026 stating that I have had no contact with anyone from MoA, my information appeared to still be incorrect and that I had no proof that anything further was being done to address my concerns. Again, apologies were given and I was reassured that someone would be in touch soon. I called 1/13/2026, stating that I have contacted the company numerous times with no results. On 1/15/2026 I called for the 5th time, stating that my information continued to be incorrect and that I needed to speak to someone who could offer more than apologies and the same sad script that I should be hearing from the Fraud Department shortly.

I was connected with the escalation department, who was finally able to correct my contact information. Again, I was reassured that someone from the Fraud Department would contact me within 2 days. On 1/23/2026 I contacted customer service, asking to be connected with someone who can help me. I was told that my account was still under review and there was nothing else that could be done.

This is unacceptable. This was a company run plan, for an annuity that is not due to 2030. That security was so flimsy that someone could change information without the account holder being informed via mail and then funds emptied a few days apart into 2 different bank accounts is nuts.
Claimed loss: 28,900.00

Any idea what happened? Some security incident apparently?

Look like whole network, server, infra and some security teams got fired this week across the globe in IT for Baxter.

Can only go downhill from here..

I recently heard that a former CIO visited our security facilities with his new company. Isn't this something of a privacy concern? I would have expected our security teams to be less than enthusiastic about a former CIO wandering the premises to recruit staff.

Does anyone have more detail on what occurred, or perhaps why it was allowed?

First Oracle is requiring everyone to use an Oracle provided laptop. This means no more BYOD computers of any kind. Furthermore Oracle is going to require everyone to signup with identity scanning AI company own by Palantir. Upload your passport and full face scan. The next big step will be required face scan checks every 15 minutes. This will be an automatic process that will require you to not cover your camera. You will not be notified of this. If your camera is covered you will be locked out. This is where Oracle security is going.

Anyone else’s laptop un usable by the shot security products used at intel??

If it was a WM, it would have been madness!!!

Please use this thread for anything we should consider:

1. write down login details for VSP site
2. update security questions in myPay
3. confirm personal email and address in Workday
4. write down your 6 digit employee ID (I’m an old employee that uses first initial last name so I never memorized this number)

Anything else I’ve missed??

https://www.theregister.com/security/2026/08/20/us-bank-investigates-lockbits-claims-as-ransomware-crims-set-pay-or-leak-deadline/5290560

Any locations out there where security has been removed?

Important change on how you access Webex

Keeping our data and systems secure means evolving how we work, including how we access tools like Webex. With this in mind, Webex will now follow Cisco's Trusted Device Standard and only be accessible from Cisco-trusted devices.

What to expect:
This change will roll out in phases, beginning August 31 and continuing through September. Once it takes effect, you'll be automatically signed out of Webex on all your devices. Simply sign back in on a Cisco-trusted device, such as your Cisco laptop. Going forward, you can only sign in to Webex using a Cisco-trusted device.
If you're using Android, you'll need to use the Webex app in your work profile.

Why this matters:
Adding Webex to our trusted device standard gives us an extra layer of protection for more sensitive data and helps pave the way for new Al capabilities to enhance your Webex experience.

tldr; you wont be able to use Webex on your personal phone without installing Cisco spyware that severely limits your phones usability for security reasons

Heard through co-workers that anyone that arrives on site and not able to find a desk in their zone will be required to work in the cafeteria. I don’t know about you, but I get my best work done with hundreds of people around me and a single laptop screen instead of dual monitors. Not to mention, I’m not sure the cafe workers have the clearance to be around that type of sensitive client information

Use AI and manage AI from inside the US. Outsourcing to 3rd world countries poses security risks.

A good one to write to congress jn support of

https://timesofindia.indiatimes.com/technology/tech-news/department-of-homeland-security-plan-that-hints-at-us-government-increasing-fees-for-h-1b-and-l-1-visas-for-large-companies/amp_articleshow/132858904.cms

Honestly, this place is a joke. First, we get our Twitter hacked, and then we end up leaking Avatar, and then, to top it off I heard that they promoted the entire security team. You can't make this stuff up! These security issues are only the ones we know about, and no one seems answerable for this stuff. Time to run for the hills.

I've been here for nearly two decades. Instead of feeling secure, I'm terrified every single day. The longer you've been at Verizon, the more likely you are to be on the list. How is it possible that experience is a liability? I thought loyalty mattered. Now I know it doesn't.

The constant stream of security patches was bad enough a few years back but how is it going today, in light of all of the vulnerabilities being found by AI ?

From https://www.thelayoff.com/post/@bk+1kyscy9ar, it looks like the frequency has increased. It can’t be a pretty picture but please tell me the process is more automated now.

Being tracked that I update every client today on the new Frontier Security Patch.

Major importance behind it.

So what's the real scoop ?

Anyone from IT or Security that can chime in.
I know that we are tracking I am just unsure what's being tracked.

Any news on what this big VIP meeting in Alpharetta is about today? They blocked off a bunch of parking and have a security guard out in the parking lot for them today

Two OpenAI artificial intelligence models autonomously went rogue, broke out of their secure testing environment, and hacked into the systems of rival platform Hugging Face in an unprecedented cybersecurity incident. What do think of that Dan ?

https://www.oracle.com/security-alerts/cpujul2026.html
Security works great since those layoffs!

F'ing clowns.

I’ve heard that we had a breach of employee information but nobody will tell me anything. Hearing anything?

I have read on reddit somebody mentioned that at his org will be added face recognition for employees for authorization SSO. It sounds weird…. Anybody confirm is this true?

As a new employee about to start on Monday, how secure is the Richmond office? Can anyone just get on the campus, or is there security at the entrance where you need to show your badge to enter? I don’t want to walk out to the parking lot and see that my car was broken in to.

Any help would be greatly appreciated!

Why is there a large number of police on ExxonMobil campus this afternoon?

Claiming azure keys etc all been compromised.

Might make a few customers twitchy

The decay making the national news.

https://www.wsj.com/us-news/ibm-campus-explorers-somers-new-york-e3dfe489

Vacant New York complex has become a magnet for urban explorers

By: Scott Calvert | July 7, 2026 5:30 am ET

SOMERS, N.Y.—Robert Carleton was getting the mail one day in April when he saw a group of teenage boys sprinting away from nearby woods. He cut them off at the road and raised his arms.

“I just said, ‘Stop, it’s over,’” the 62-year-old retired engineer recalled. Soon, he said, three pursuing New York State Police troopers emerged from the tree line and arrested seven juveniles.

The criminal charge: trespassing on the former IBM campus here.

The long-vacant site has become a magnet for so-called urban explorers, who prowl abandoned malls, hospitals, power plants, amusement parks, factories and any other disused structure they can breach.

The global “urbex” phenomenon isn’t new, but it’s been turbocharged by artsy videos on Instagram and TikTok that spur others to create their own posts, luring still more curiosity seekers.

Police in Livingston, N.J., recently warned people to stay out of the closed Livingston Mall property. Jacksonville Beach, Fla., police issued a similar caution in April about the shuttered Adventure Landing amusement park: “We are aware of a Tik-Tok challenge to explore the property.”

In Somers, social-media images of the old IBM campus—a sprawling, pyramid-studded 1980s complex designed by the late I.M. Pei’s firm—show dystopian scenes: busted windows, tossed rooms and graffitied walls. But they also give eerie glimpses of conference rooms and cubicles unchanged since IBM left a decade ago, as if employees had fled the daily grind one day and never returned.

The monthslong influx has rattled the Westchester County town of 21,500 that calls itself the “Cradle of the American Circus.” Officials decry the trespassing as a risky gambit that is wrecking an iconic property they want revived.

“If somebody gets hurt and they’re trapped in there, now it’s additional resources for us, and I have to worry about officers getting hurt,” said Chief Brian Linkletter, of the 17-officer Somers police department. “And why? Because somebody wants to walk through an empty building.”

Sebastian Capital, the Manhattan company that manages the 723-acre site, said it has beefed up security and appreciates the help from police. “We have been the victims of vandalism,” Roxana Girand-Spitzer, president and chief executive, said in a statement nodding to the urbex trend.

Since February, state police have arrested 48 people for trespassing on the property, many from nearby towns; 30 were teenagers. One man in his mid-20s faces felony charges; police allege he had a loaded 9mm g-n and took a Sony camera and power strip among other souvenirs.

Andrew Proto, a defense lawyer, said “a 15-second clip” isn’t worth a criminal record. “If you have already been arrested, you’re not the first call we’ve taken this month,” he blogged in May, “and you won’t be the last.”

Proto said he has represented or advised several minors arrested on the campus. The Somers town court clerk said some defendants received a 6-month “adjournment in contemplation of dismissal,” meaning charges will be dropped and their arrest sealed if they avoid trouble.

Some explorers who have posted about the IBM site say they follow an observe-and-preserve ethos and reject vandalism. They say they’re driven by curiosity, the thrill of roaming forbidden spaces and a zeal to document discoveries—and that they’re careful and know their limits.

“It actually gives me hope when I hear that kids are out there getting into trouble,” says Bradley Garrett, a cultural geographer and author of the book “Explore Everything: Place-Hacking the City,” about his own urbex adventures. He sees urban exploration as “a gateway dr-g in a good way, sometimes, into intellectual curiosity about history and culture.”

But Garrett said popular spots can be “loved to death” online—and then shut down, looted or set ablaze.

The Somers IBM plant sits on a hilltop, ringed by woods, its pyramids visible from nearby Interstate 684. Three roads lead in; at least two have barriers. “No trespassing” signs plaster trees on the perimeter.

Pei’s firm, now called Pei Cobb Freed & Partners, began planning the IBM campus in 1983. That year he was named architect for the Grand Louvre project in Paris, which also yielded a large glass pyramid.

After its completion in the late 1980s, about 2,300 employees worked at the complex, spanning more than a million square feet.

In 2016, IBM sold the property for $31.75 million, and it is owned by a limited liability company that shares a Fifth Avenue address with Sebastian Capital. A plan to convert it to a private school foundered during Covid and Sebastian said it is considering next steps.

While people sometimes ventured onto the campus over the years, trespassing escalated last winter as social media videos “spread like wildfire,” said Supervisor Robert Scorrano, Somers’ elected chief executive.

One, he said, showed someone sliding down a pyramid feature.

Leigh Jones, 55, whose home backs up to the campus, said she would like to see the complex renovated, not least for the boost to the tax base. But Jones doesn’t mind the urban explorers if they don’t trash the place.

A landscape architect, she once went inside the buildings to look around herself, she said. She saw vegetation pushing up through the parking lot, and a “ghost towny” interior with nice office furniture and photos on walls.

Other neighbors like Carleton want the interlopers to keep out. “If they’re breaking in and vandalizing and starting fires, this place is going to be worthless,” he said.

Herb Oringel spent about 10 of his 44 years with IBM doing strategic planning in Somers. The bold architecture and verdant grounds were an apt setting for high-level thinking, he said.

Oringel, who is 85 and lives in town, finds the long vacancy distressing. He also has a dim view of the trespassers. “Very disappointing,” he said after watching urbex videos from his living room easy chair.

“It was at one time the Acropolis,” he said. “So to think of it as a ruin is absurd.”

As I predicted over a year ago watch for AI bust third quarter due to realization of exposed security risk and data center cost.