CyberSecSac & DC916
banner
cybersec916.com
CyberSecSac & DC916
@cybersec916.com
Official Bluesky for Cybersecurity Sacramento & https://www.dc916.com a DEF CON Group

Belonging is the very best thing there is.
#hackthebeam
Pinned
[MEETING REMINDER]
❔What: Monthly Meeting - August

🕖 When: Wednesday, August 13th @ 7PM - 8:30PM+

📍Where: Hybrid - Join virtually on Discord or come to the Sacramento Hacker Lab / MADE Studio!
[details in Discord]

👾Join our Discord by checking our landing page for the link: dc916.com
Cybersecurity Sacramento (DC916)
A DEF CON group for hackers, makers, tinkerers and security enthusiasts in the Sacramento area.
dc916.com
Learning about lockpicking this month thanks to our member Artefact doing a presentation on @deviantollam.bsky.social ‘s work! 🥰🙌🔒🔐
October 9, 2025 at 3:00 AM
Incident reporting in an hour or less or the next one’s free 🍕

thecyberexpress.com/china-cybers...
China Imposes One-Hour Reporting Rule for Major Cybersecurity Incidents
China is ramping up its cybersecurity enforcement with new regulations requiring network operators to report severe cybersecurity incidents within one
thecyberexpress.com
September 15, 2025 at 3:15 PM
That’s a wrap on the DC916 September meeting! Thank you to everyone who contributed articles, to discussions, for pizza, and for amazing community!
September 11, 2025 at 5:59 AM
While serving media from your Plex server is cool, please update your password and try not to serve malware from it. 👾

www.pcmag.com/news/plex-co...
Plex Confirms Data Breach, Asks Users to Reset Passwords Immediately
An unauthorized third-party accessed one of its customer databases, which included emails, usernames, hashed passwords, and authentication data, Plex says.
www.pcmag.com
September 10, 2025 at 5:34 PM
Reposted by CyberSecSac & DC916
Officially official now, @blackbadgeraffle.bsky.social and I have launched DEF CON Group Orlando!
Thank you @alethe.bsky.social and DCG!!
We're on Discord welcoming new members and will have meetings starting soon! ✨
discord.gg/KyKYPBCv
a woman is laughing and saying it 's gonna be so fun !
ALT: a woman is laughing and saying it 's gonna be so fun !
media.tenor.com
September 10, 2025 at 5:05 PM
www.securityalliance.org/news/2025-09...

Thanks to @djcapy.com for this one. (also, lol at them only getting 5 cents) 😂🔥
Oops, No Victims: The Largest Supply Chain Attack Stole 5 Cents
The biggest financial impact expected to be the millions of dollars of SaaS contracts signed with security vendors
www.securityalliance.org
September 10, 2025 at 12:56 PM
Largest supply chain breach ever (so far?) 😭

www.aikido.dev/blog/npm-deb...

Thanks to DC916 member Slag1sh for the link! 💜
npm debug and chalk packages compromised
The popular packages debug and chalk on npm have been compromised with malicious code
www.aikido.dev
September 9, 2025 at 12:09 AM
NIST rolling out initial AI cybersecurity papers/standards.

hackread.com/nist-concept...
New NIST Concept Paper Outlines AI-Specific Cybersecurity Framework
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
hackread.com
August 19, 2025 at 1:24 AM
Looking forward to seeing your faces at the DC916 meeting tonight! Virtual and in person at MADE Studio!

7pm-8:30pm PST!

Dc916.com for the address/Discord!
Hack the planet!
August 13, 2025 at 10:09 PM
Hope everyone is having a safe and happy DEF CON! 💜
August 9, 2025 at 9:20 AM
Hello friends, with less than 2 weeks to go until DEF CON 33, please enjoy our “Attending DEF CON Guide” (great for newbies/first timers)

github.com/CyberSecSacr...
July 28, 2025 at 11:49 AM
Regular reminder to go outside and touch grass sometimes
July 15, 2025 at 11:40 PM
Reposted by CyberSecSac & DC916
July 12, 2025 at 9:14 PM
Reposted by CyberSecSac & DC916
🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Building Security Champions”
📽️ https://twp.ai/9PTkef

#CyberSecurity #SecurityAwareness #appsec #securitychampions
youtu.be
Diana Initiative 2021-Tanya Janca-Building Security Champions
twp.ai
July 12, 2025 at 7:24 PM
Earn up to $300k to help a cursed owl yell at people!
July 12, 2025 at 7:28 PM
[MEETING REMINDER]
❔What: Monthly Meeting - August

🕖 When: Wednesday, August 13th @ 7PM - 8:30PM+

📍Where: Hybrid - Join virtually on Discord or come to the Sacramento Hacker Lab / MADE Studio!
[details in Discord]

👾Join our Discord by checking our landing page for the link: dc916.com
Cybersecurity Sacramento (DC916)
A DEF CON group for hackers, makers, tinkerers and security enthusiasts in the Sacramento area.
dc916.com
July 12, 2025 at 6:11 AM
When a 9.6 MCP exploit drops impacting hundreds of thousands 😭

thehackernews.com/2025/07/crit...
Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads
A critical vulnerability in mcp-remote (CVE-2025-6514) allows remote code execution, affecting 437,000+ users.
thehackernews.com
July 11, 2025 at 7:14 PM
Reposted by CyberSecSac & DC916
HAPPY CULT OF THE DEAD COW DAY, SKEETR0NZ!

Be Sure to hit-up your local 7/11 to collect the free slurpeez they're handing out to celebrate the birthday of cDc!

Or, y'know, don't. We don't care. You do you, homeslice.
July 11, 2025 at 7:08 PM
Reposted by CyberSecSac & DC916
I’m tracking 128 active CitrixBleed 2 victims in telemetry, today, from attacker infrastructure (one threat actor group).
July 11, 2025 at 8:45 AM
When a 9.6 MCP exploit drops impacting hundreds of thousands 😭

thehackernews.com/2025/07/crit...
Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads
A critical vulnerability in mcp-remote (CVE-2025-6514) allows remote code execution, affecting 437,000+ users.
thehackernews.com
July 11, 2025 at 2:46 AM