#security

title

What exactly is the purpose of this Authenticator every day asking you to put some numbers before you can continue with teams or outlook.

Is this about trying to confirm if you are in front of your computer?

What happened at this garage? I saw an email about a security incident. WTH?

So we all keep track in our store how many times we are required to log in....... ya, we spend the majority of the day logging in and trying to get out of customers accounts. Ya, trying to get out of an account when your done. Might as well start the hot pocket in the microwave and log onto AOL dial up. And fix the security on it too, it's the most unsecure application we have used yet.

For those that don’t know, the Verizon stores in the houston area have had armed security in their stores for the last 10+ years.

Today we were told that beginning 01/01/2026, the following stores (Cinco Ranch, Aliana, Fulshear) will no longer need police officers due to the restructuring.

I do not know if the stores will be converting to third party or shutting down but figured it would be good to give employees a heads up to start getting their personal affairs in order.

Strong rumors of an upcoming acquisition in the security sector

“Our belief [is] that the industrial base can only handle going fast on one programme at this time, and the presidential priority [is] to go all-in on F-47 and get that programme right while maintaining the option for F/A-XX in the future,” the source said.

After years of hollowing and forcing out at Boeing's experienced Engineers chief executive of Boeing Defense, Space & Security, Steve Parker, lied (is anyone surprised) saying Boeing was capable of supporting both F-47 and F/A-XX fighter efforts simultaneously.

US lawmakers approve 84% funding cut to US Navy’s F/A-XX sixth-generation fighter.
Ending a major point of uncertainty for the US aerospace industry, elected lawmakers in Washington say they will support a Trump Administration plan to provide only minimal funding to the US Navy’s (USN’s) sixth-generation fighter programme.

Known officially as the Next Generation Fighter and colloquially as the F/A-XX, the aircraft development programme intends to deliver a carrier-based fighter to succeed the navy’s large fleet of Boeing F/A-18E/F Super Hornet and EA-18G electronic attack jets.

However, in what lawmakers describe as the final version of the annual defense policy bill known as the National Defense Authorization Act (NDAA), Congress appears poised to enact significant funding cuts to the F/A-XX programme, as requested by the Trump Administration.

The administration’s fiscal year 2026 budget request to Congress was decidedly cool toward the naval fighter, including only $74 million for F/A-XX development – 84% less than the $453 million approved for the programme in FY2025.

On 10 December, the US House of Representatives voted to pass the 2026 NDAA with only $74 million directed toward the Next Generation Fighter programme. The Senate already passed its own version of the legislation in October containing similar cuts.

The White House and Pentagon say they want to pool resources behind the US Air Force’s F-47 development effort, while keeping the US Navy’s sixth-generation F/A-XX programme on life support

A Pentagon official who spoke to FlightGlobal in June on condition of anonymity said the administration has opted to maximise resources going to the US Air Force’s (USAF’s) land-based sixth-generation fighter and to effectively keep the navy’s F/A-XX on life support.

“We did make a strategic decision to go all-in on F-47,” the defense official said of the FY2026 budget request.

Boeing was selected as the winner of the USAF’s Next Generation Air Dominance competition in March, with the company’s design designated F-47.

That programme is set to receive more than $2.5 billion in development funding in FY2026, under the latest (and allegedly final) draft of the NDAA. An additional $400 million was allocated to the F-47 development effort under a one-time budget reconciliation spending package passed in July.

Boeing and Northrop Grumman are the presumptive finalists for the Next Generation Fighter programme, more commonly known as F/A-XX

The Armed Services Committee of the House of Representatives says the FY2026 NDAA includes “full funding” for both the F-47 and F/A-XX, indicating the bill will go along with the administration’s requests.

What that means for the future of the sixth-generation naval fighter is unclear.

The defense official who spoke to FlightGlobal earlier this year said the goal was to provide enough financial support for the navy to make source selection for the Next Generation Fighter, but not necessarily advance into production.

“Our belief [is] that the industrial base can only handle going fast on one programme at this time, and the presidential priority [is] to go all-in on F-47 and get that programme right while maintaining the option for F/A-XX in the future,” the source said.

Industry officials, including the chief executive of Boeing Defense, Space & Security, Steve Parker, have said they are capable of supporting both fighter efforts simultaneously.

The navy has not announced its choice of a final supplier for the still-unnamed F/A-XX, although Boeing and Northrop Grumman are presumptive finalists after Lockheed Martin was eliminated early in 2025.

For much of the summer and autumn, it seemed likely Congress would override the White House and provide more robust levels of funding to the F/A-XX programme.

That appears to be the case for the air force’s Boeing E-7A Wedgetail programme, which the White House and Pentagon chief Pete Hegseth are seeking to end before moving into full procurement. The FY2026 NDAA would prevent that, at least in the short term.

An earlier draft of the FY2026 defence budget released by the House appropriations committee in June would have circumvented the administration’s cuts and restored F/A-XX funding. Lawmakers at the time even expressed a preference for increasing the programme’s FY2026 budget to $971 million.

In response, the White House issued a memo outlining its rationale for an emphasis on the F-47 at the expense of the carrier-based sixth-generation fighter.

“Awarding the F/A-XX contract as written is likely to delay the higher-priority F-47 programme, with low likelihood of improving the timeline to field a navy sixth-generation fighter,” the executive office of the president said.

Although Congress has not yet approved the NDAA, and must separately pass appropriations legislation with actual spending authorisations, a legislative override of the White House’s wishes on F/A-XX now appears less likely – though certainly not impossible.

Boeing Defense, Space & Security, Steve Parker, lying out his teeth stating Boeing was capable of supporting both F-47 and F/A-XX fighter efforts simultaneously.

Get rid of it ! You are wasting everyone's time. Whoever purchased the application is getting kickbacks on or in the back end. Siebel ran better than this. And we all know where that got us. I have never seen a more inept application. Have you ever counted the number of screens that flash on your tablet when trying to run salesforce just to have it transfer the customers account into opus ? Screens that just go nuts and serve no purpose. 9 different screens that go crazy and bouncing ba--s too. And security.......... total lack of security. We took a step backwards in securing customer accounts.

Cyber security executives have recently been firing people because they have been putting their own spin on executive orders and thus individuals have been terminated for not meeting company expected standards. Starting in quarter one management is further informed to start cutting manpower based on personal perception and end of year reviews. It's not about your job it's about popularity contest and thus as long as you make your manager and managers above them happy then you're in a good place but if you try to protect the bank or do something that is against the CISO new secure design plan they are going to terminate you without a chance to redeem yourself. Management is further encouraged to get rid of people who do not get above meets.

In short the new management chain wants nothing more than mindless monkeys to push buttons and follow scripts where pictures match the words this is why cybersecurity management is incapable of protecting its employees and throwing them underneath the bus.

Majority of the roles that cybersecurity fulfills will be replaced by AI and managers will be displaced or move to another team to fulfill another role depending on if that executive likes them or not. For managers who are not near a hub location and were promised a year and a half to two year extension to keep their job that's expected to end in quarter one and those managers are expected to be laid off or terminated.

To those individuals in the cyber security line of business good luck now that you are forced to compete like a model competes in a beauty pageant there is no reason for you to even willingly stay here now that you are degraded even more.

And for those who are not aware of cyber security is making this adjustment in quarter one because they're taking advantage of the PTO burn for the holiday season.

If you are not liked by your manager or your manager has given you biased end of year reviews in the last 2 years then your ticket is punched you are going to be gone quarter one

Fiserv faces security issue lawsuit : A civil complaint alleges the payment processor misled its customers about the use of two-factor authentication to access systems containing sensitive information.

USB drive appears under This PC, but will show 0 bytes capacity, 0 bytes used regardless of format.

Email puts everything out there for inspection and company retention.

Anyone get this when the logged in this morning. Of course makes me ultra paranoid to have seen a security patch reboot prompt as soon as I unlocked my computer

Has anyone heard anything about the CISO org?

Layoff notices today in chief security org in ct and ga. (Great economy, we are so winning).

Att quickly discovered some unauthorized access to customer online accounts in August. User is and answers to security questions were obtained from outside of att and used to log in. Impacted accounts have been locked by att.

Has anyone heard if the security teams will be affected, specifically those working under Mike Russo? Many of these teams are brand new teams build over the last year.

I saw an armed policeman on the upper floor of the cube. I noticed him still there couple of hours later. I asked some people in my class about what he could be doing there.
One guy said the policeman stops every person that goes to the elevator and checks if there name is on a list.
There was obviously such an important meeting at the top level of the cube that employees were not allowed on the same floor as the meeting.

What are they discussing such that an armed guard is required to keep employees off that whole floor?

I'm talking about laptops, cell phones, etc.

Are laid off people's devices locked up and wiped out the day of? Or are laid off employees still considered employees until the end of the year with limited access to their devices?

So here’s the story, folks. This company, a very smart company, didn’t care about security for years. Total disaster. Then bo-m! They get hacked. Suddenly, they “find” all this money for cybersecurity, like it was hiding under the CEO’s golf clubs. Now they’re bragging about their “massive investment” in security and even rolled out a shiny new “promise to customers”. Very touching, very emotional stuff. But behind the scenes? They cut the budget for training the people who actually use and develop the systems. Brilliant strategy! They say it’s about protecting customers, but everybody knows it’s just about protecting their image. “We take security very seriously,” they say. Sure they do. About as seriously as they took it the day before the breach. Sad!

Why the extra security in the buildings on campus today?

Security is G2s domain. Lets see PANW next week.
Hyperscalers just consume chips ( Silicon One)

I’m happy our stock is up - but markets are over-rewarding hyperscaler AI exposure; ( we know the Hyperscaler ) Kudos to Martin ‘s Silicon One team and let’s hope they continue to deliver else will be punish harder next year - AI infra is the hottest narrative in tech.

Top-heavy CPO office not done much here - btw NO SECURITY headlines !!! What’s going on there ?

This got buried in another post but it's worth restating.

There are now social engineering attacks on this site. Whether they are internal or not, consider what you're replying to. Stop revealing what YOU do, onboarding and generally how security and monitoring work.

Long story short, they will fire you for this. Not rif you. Fire you. I'm not a troll or from HR. I just want to offer a warning on the social engineering seems to be happening more frequently on this site.

This is not related to posts initiated about rifs or company complaints, although be careful not to out yourself there either.

It appears as if security at Home Office is being more aggressive lately. We have been told to report anyone who we do not recognize on our floor immediately to firm security. We have also been told to not hold the door open for anyone after we have badged into the building and/or onto our floors. Is there a security concern at Home Office that anyone knows about that we may need to know about? Is the Home Office safe to work at?

Never seen such a clear excuse to use to cut people who arent aware of not being in compliance

https://www.bgr.com/2010698/how-microsoft-teams-spying-on-you-live-location/

The actor dwell time inside their network is being quoted as 393 days. Let that sink in. Then consider this is being attributed to APT27 (China). I’m working from a position that they have everything (EVERYTHING) and are potentially still inside the network.

A subdivision of my team specialises in F5 devices and we talked about this issue yesterday. Our Global Competency Lead for the technology believes that F5 is pretty much cooked and they don’t even have the mechanisms to trace all the configuration files that have been stolen.

WTF!

The nerve of the Stink to show TV ads stating that AT&T provides secure business services when Toxic-T has lost hundreds of thousands of customer's data multiple times over the last few years.

The Stink thinks everyone is d-mb when the Stink is the dummy! Well, that and the Stink is a POS!

I believe this is a major concern perhaps being overlooked.

I wonder if the American public or even our government realize how vulnerable transferring sensitive american federal health data across the world globe to another country in the far east.

Please discuss. Maybe not an issue but personally it makes me a little concerned.

A former executive at a company that sells zero-day vulnerabilities and exploits to the United States and its allies pleaded guilty in federal court in Washington, DC, on Wednesday to selling trade secrets worth at least $1.3 million to a buyer in Russia, according to US prosecutors.

Peter Williams, a 39-year-old Australia native who resides in the US, faced two charges related to the theft of trade secrets. As part of the plea agreement, Williams faces between 87 and 108 months in prison and fines of up to $300,000. He must also pay restitution of $1.3 million.

Williams will be sentenced early next year. Until then, he will remain on house arrest at his apartment, must undergo electronic monitoring, and is permitted to leave his home for one hour each day, according to the plea agreement.

Williams worked for less than a year as a director at L3 Harris Trenchant—a subsidiary of the US-based defense contractor L3Harris Technologies—when he resigned in mid-August from the company for unspecified reasons, according to UK corporate records. Prior to his time at Trenchant, Williams reportedly worked for the Australian Signals Directorate, during the 2010s. The ASD is equivalent to the US National Security Agency and is responsible for the cyber defense of Australian government systems as well as the collection of foreign signals intelligence. As part of its signals intelligence work, the ASD has authority to conduct hacking operations using the kinds of tools that Trenchant and other companies sell.

This month the Justice Department accused Williams of stealing seven trade secrets from two companies and selling them to a buyer in Russia between April 2022 and June 2025, a time period that coincides in part with Williams’ employment at L3 Trenchant.

The document does not name the two companies, nor does it say whether the buyer, described by prosecutors as a software-based Russian broker, was connected to the Russian government. (L3 Trenchant faces no criminal liability.)

According to the US attorney overseeing the case, Tejpal S. Chawla, the FBI alerted L3 Trenchant sometime in 2024 that some of its software had leaked. As TechCrunch reported last week, Trenchant was investigating an alleged leak of its hacking tools by employees—an investigation that Williams, then general manager of the firm, oversaw, prosecutors said during Wednesday’s hearing.

Williams was voluntarily interviewed by the FBI multiple times this summer, including once on July 2. The same month, prosecutors say, Williams signed a contract with the unnamed Russian company worth hundreds of thousands of dollars, using the alias John Taylor and an email address with the same name. This deal followed a separate contract that prosecutors say Williams signed in June. The FBI again interviewed Williams in August and confronted him about the sale of company secrets, prosecutors said. The prosecution said Williams admitted to the sales at that time.

Prosecutors assert that Williams made at least $1.3 million from the sale of the trade secrets and have moved to seize his assets, including a home in DC, funds held in several banking and crypto accounts, and a list of luxury items that includes nearly two dozen high-end and replica watches and other designer goods.

Trenchant, known formally as L3 Harris Trenchant, develops hacking tools for the US government and its allies. L3 Trenchant was formed after L3 Technologies purchased Azimuth Security and Linchpin Labs in 2018 and combined the two companies. L3 Technologies later merged with a military communications equipment provider to form L3Harris.

Azimuth was a developer of zero-day exploits based in Australia, and Linchpin Labs was a software firm founded by former intelligence officials from Five Eyes countries. (Five Eyes is a surveillance partnership formed by the US, the UK, Canada, Australia and New Zealand.) Trenchant develops various forms of hacking tools for browsers such as Chrome, as well as Apple’s iOS, Android, and desktop and network computing systems.

In this thread we talk about how Corpo is spying on you. I'll start:

• FortiClient
• SentinelOne
• SentinelOne plugin for browsers
• ZScaler (even when it's Off) - fun fact, this website is banned!
• LinkedIn "compliance" - yes, they're going through the information on the LinkedIn profiles - both FTE and Contractors

Typically logging into the Windows work profile does the trick, but today there was an extra step to log into Outlook. A few others mentioned this as well, but it didn’t happen to every person on our team.

This is the easy cut, the next phase will be in tech. Target plans to outsource all of tech, engineering, and security, what does not get moved to India will be outsourced to a contract here in the US. So this is just the start, pretty much everyone in IT in MN will eventually loos their jobs.

I understand we should not have personal documents on work laptop but if you have them, how are you transferring them? Is email the best way to go