Sign in

Happygeek

@happygeek.bsky.social
1.9K followers 1.3K following 715 posts

Veteran cybersecurity journalist and hacker, senior contributor at Forbes.com, contributing editor PC Pro.

PostsRepliesMedia
Happygeek @happygeek.bsky.social · 12/09/2026
More vulnerabilities discovered = a good thing. Shorter upgrade cycles = a good thing. Not all AI cyber is bad folks. www.forbes.com/sites/daveyw...
forbes.com
Google Chrome AI Flaws Prompt New 14 Day Security Update Cycle
Google has confirmed that, with immediate effect, it has increased the Chrome security update cycle in response to concerns about AI vulnerability discoveries.
030
Happygeek @happygeek.bsky.social · 11/09/2026
New @Forbes: Don’t get caught out as iPhone 18 Pro and iPhone 18 Pro Max pre-order madness takes hold. www.forbes.com/sites/daveyw...
forbes.com
Apple iPhone 18 Pro Scam Warning As Pre-Orders Go Live September 12
Pre-orders for the new Apple iPhone 18 Pro and Pro Max due begin Saturday, September 12. Now fraud experts warn that scammers are already trying to take your money.
012
Happygeek @happygeek.bsky.social · 09/09/2026
By me @forbes.com: Keep it real, folks. And before you say it, yeah, Mea Culpa - and I say so in the article. #infosec www.forbes.com/sites/daveyw...
forbes.com
Ignore The FUD—Google Updates Chrome As 230 Security Issues Confirmed
As Google confirms a bumper round of 230 Chrome security vulnerabilities, including 5 critical ones, there’s no need to panic — or do anything but sit back and wait.
121
Happygeek @happygeek.bsky.social · 09/09/2026
By me @forbes.com: 973 vulnerabilities? No problem if you have a plan. #infosec www.forbes.com/sites/daveyw...
forbes.com
How To Respond As Microsoft Confirms 973 Security Vulnerabilities
Microsoft has patched 973 vulnerabilities, including actively exploited Windows CVE-2026-85880 and CVE-2026-81963 bugs. How should your organization respond to stay safe?
021
Happygeek @happygeek.bsky.social · 27/08/2026
Yeah, I know, awards. But I'm a judge for this lot. There are no pay-to-play fees. Feel free to nominate someone, #infosec fam. I'm most interested in the Cybersecurity Excellence Award, of course. www.techfinitive.com/awards/ And, yes, that *was* the happiest profile photo I could find.
techfinitive.com
Awards
The TechFinitive Awards celebrate the companies, technologies and leaders shaping the future of enterprise IT.
041
Happygeek @happygeek.bsky.social · 18/06/2026
“Hundreds of millions of infostealer logs” included in new compromised credentials corpus: 124 million unique passwords added to HIBP Pwned Passwords database. #infosec www.forbes.com/sites/daveyw...
forbes.com
124 Million Unique Passwords Exposed In New Infostealer Log Dataset
A new collection of 124 million unique passwords from hundreds of millions of malware stealer log records has been confirmed by the Have I Been Pwned service.
012
Happygeek @happygeek.bsky.social · 05/06/2026
Here’s how the Dashlane hacker downloaded copies of some encrypted password vaults, from the horse’s mouth. www.forbes.com/sites/daveyw...
forbes.com
May 31 Dashlane Attack: Here’s How Hackers Copied Some Password Vaults
After some Dashlane users were locked out of accounts and a limited number of encrypted password vaults were downloaded, the hacker attack methodology has been revealed.
051
Happygeek @happygeek.bsky.social · 05/06/2026
How long can the AI-impact keep uncovering vulns? It’s almost like there’s an infinite number in these codebases. Still, at least Google paid out $200,000 to Chrome researchers this month. www.forbes.com/sites/daveyw...
forbes.com
Google Chrome 149: New Update Fixes 429 Security Flaws, 22 Critical
Google has just dropped a critical browser security fix for 3.5 billion users—Chrome 149 patches an incredible 429 vulnerabilities. Here’s how to install the update now.
141
Happygeek @happygeek.bsky.social · 02/06/2026
Update now: new Android zero-day confirmed. #infosec www.forbes.com/sites/daveyw...
forbes.com
New Android 14, 15 And 16 Update Fixes Actively Exploited Security Flaw
Google has released a security update for users of Android 14, 15 and 16, fixing a zero-day flaw that it confirmed is already “under limited, targeted exploitation.”
024
Happygeek @happygeek.bsky.social · 02/06/2026
Dashlane has now confirmed that a small number of encrypted password vaults were downloaded during brute-force attack incident. Article updated. #infosec www.forbes.com/sites/daveyw...
forbes.com
Dashlane Users Locked Out After Password Manager Detects Brute-Force Attack
An unknown number of Dashlane accounts were temporarily suspended after being targeted by a brute-force campaign. Some encrypted password vaults were also downloaded.
121
Happygeek @happygeek.bsky.social · 01/06/2026
Dashlane is ‘monitoring’ brute force campaign, some accounts already disabled as a security precaution. www.forbes.com/sites/daveyw...
forbes.com
Dashlane Confirms Brute-Force Password Attacks Targeting Some Users
As people take to social media after some accounts are disabled, Dashlane confirms it is monitoring brute-force attacks targeting an unknown number of users.
021
Happygeek @happygeek.bsky.social · 31/05/2026
Looks like the Google AI security machine is switched to overdrive mode. #infosec www.forbes.com/sites/daveyw...
forbes.com
151 Chrome Security Flaws, 22 Critical, Fixed In New Google Update
Google has released a Chrome update patching a large number of new security flaws: 151 in total, 22 of them rated as critical severity.
072
Happygeek @happygeek.bsky.social · 21/05/2026
Microsoft appears to be going for the ‘most zero days in a week’ title methinks… www.forbes.com/sites/daveyw...
forbes.com
2 New Microsoft Defender Zero-Days Exploited—Patch Now Rolling Out
Microsoft has confirmed an emergency security update as CISA warns that two new Defender zero-days are being exploited by attackers.
000
Happygeek @happygeek.bsky.social · 19/05/2026
So, about that ‘by design’ browser plaintext passwords into memory vulnerability that Microsoft said wasn’t… #InfoSec #NewsUpdate www.forbes.com/sites/daveyw...
forbes.com
Microsoft Does U-Turn On Edge ‘By Design’ Password Vulnerability
Microsoft has confirmed a “defense-in-depth change will come to every supported version of Edge” after initially refusing to address browser password security issue.
175
Happygeek @happygeek.bsky.social · 17/05/2026
ICYMI yesterday, check your Microsoft Exchange Server Emergency Mitigation status sharpish! Attacks already underway. www.forbes.com/sites/daveyw...
forbes.com
Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation
Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
030
Happygeek @happygeek.bsky.social · 16/05/2026
I’m safe, I have no money and I don’t use smartphones or the internet. Phew. www.forbes.com/sites/daveyw...
forbes.com
Seniors Targeted—FBI Issues Cyber Attack Advice For The Over 60s
Senior citizens are profitable targets for cybercriminals, the FBI has warned. Here's how the over 60's can stay safe.
040
Happygeek @happygeek.bsky.social · 16/05/2026
The Holy Grail of kernel vulnerabilities, Google Project Zero says. #infosec www.forbes.com/sites/daveyw...
forbes.com
‘Holy Grail’—Google Researchers Found Pixel 10 Zero-Click Exploit Chain
Google’s own hackers, Project Zero, have disclosed what they say was a Holy Grail Pixel 10 security vulnerability. Here’s what you need to know.
021
Happygeek @happygeek.bsky.social · 15/05/2026
Hacking is not a crime. #PWN2OWN www.forbes.com/sites/daveyw...
forbes.com
Microsoft Windows 11 Exploited 3 Times In 24 Hours By Zero-Day Hackers
Microsoft Windows 11 has fallen victim to three zero-day exploits in a single day as the 2026 Pwn2Own hacking event opens in Berlin.
031
Happygeek @happygeek.bsky.social · 15/05/2026
Is AI the ouroboros of cybersecurity? #infosec www.techfinitive.com/ouroboros-of...
techfinitive.com
Ouroboros of cybersecurity is confirmed as the AI vulnerability disclosure cycle eats itself
The dramatic rise in the number of vulnerability disclosures may sound like a good thing, but the cyberattackers may be rubbing their hands in glee
111
Happygeek @happygeek.bsky.social · 14/05/2026
Another nail in the VPN coffin? #infosec www.forbes.com/sites/daveyw...
forbes.com
‘Won’t Fix’—All VPN Apps Affected By Google Android 16 Info Leak Bug
An Android 16 VPN bypass has been confirmed, affecting all VPN apps and exposing your real IP address online, but Google marked the vulnerability report as Won’t Fix.
010
Happygeek @happygeek.bsky.social · 13/05/2026
The angry hacker is back and now it really is Exploit Wednesday as they drop 2 Windows zero-day exploits. #infosec www.forbes.com/sites/daveyw...
forbes.com
Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits
The latest Microsoft Patch Tuesday rollout featured no zero-days. However, an angry hacker has just dropped two new 0-day exploits targeting Windows users.
011
Happygeek @happygeek.bsky.social · 13/05/2026
Ring ring, who dis? Android announces new caller ID spoofing protections. #infosec www.forbes.com/sites/daveyw...
forbes.com
‘$980 Million Annual Losses’—Google Confirms Android Call Changes
Google’s director of Android security and privacy has confirmed new 2026 protections amid spoofed calls that have driven a worldwide annual loss of $980 million.
021
Happygeek @happygeek.bsky.social · 11/05/2026
BREAKING: an architectural misalignment within Google’s unified security framework enables malware “otherwise explicitly blocked by Gmail’s attachments scanner” to be hosted on Drive and delivered to recipients alongside a “Scanned by Gmail” label of trust. #infosec www.forbes.com/sites/daveyw...
forbes.com
‘Signifcant Threat’—Billions Of Gmail Users At Risk From Google Gaffe
New research has confirmed that almost every individual with a Gmail account is at significant risk from dangerous Google security flaw—what you need to know.
152
Happygeek @happygeek.bsky.social · 11/04/2026
By me @forbes.com: It's always at the weekend, innit? Adobe urges admins to patch Adobe Acrobat and Reader on Windows and macOS within 72 hours as CVE-2026-34621 attacks confirmed. www.forbes.com/sites/daveyw...
forbes.com
123
Happygeek @happygeek.bsky.social · 30/03/2026
FBI confirms Patel Gmail hack, $10 million on offer through the Department of State Rewards for Justice scheme for “information leading to the identification of the Handala Hack Team out of Iran.” www.forbes.com/sites/daveyw...
forbes.com
FBI Confirms $10 Million Reward After Iran Hacks Kash Patel’s Gmail
The FBI has confirmed that the personal Gmail account of Director Kash Patel has, indeed, been compromised. $10 million is up for grabs to identify the Iranian hackers.
021
Happygeek @happygeek.bsky.social · 19/03/2026
It’s been quite the week for iPhone users… www.forbes.com/sites/daveyw...
forbes.com
iOS 26 Security Update Warning—iOS 18 Silent Compromise Exploit Alert
Apple has confirmed a new security update for iOS users, but you need to make sure this setting is enabled to get it. Here’s what you need to know and do.
011
Happygeek @happygeek.bsky.social · 04/03/2026
By me @Forbes: A LastPass spokesperson told me: “There has been no evidence of a breach at this time.” www.forbes.com/sites/daveyw...
forbes.com
LastPass Issues New Account Password Warning—Attacks Are Underway
LastPass has confirmed a new and ongoing attack that began on March 1 and targets user account credentials. Here’s what you need to know and do.
031
Happygeek @happygeek.bsky.social · 03/03/2026
The Microslop chat ban is not what you think, Microsoft says. www.forbes.com/sites/daveyw...
forbes.com
Copilot AI ‘Microslop’ Chat Ban Is Not Censorship—Says Microsoft
After social media users complained that Microsoft has banned the use of ‘Microslop’ on its Copilot AI Discord chat servers. Microsoft says this is not censorship.
011
Happygeek @happygeek.bsky.social · 01/03/2026
Beware this fake Google Account security checkup tool. @malwarebytes.com called it “one of the most fully featured browser-based surveillance toolkits." #infosec www.forbes.com/sites/daveyw...
forbes.com
New Gmail Account Attack Warning—Hackers Abuse Critical Security Check
As Gmail support forums continue to fill with pleas for help amid hacker attacks, a new report reveals that a critical Google security check is being abused.
012
Happygeek @happygeek.bsky.social · 28/02/2026
By me @forbes.com with thanks to @lisaforte.bsky.social www.forbes.com/sites/daveyw...
forbes.com
Iran Plunges Into ‘Near-Total Internet Blackout’ As Epic Fury Strikes Begin
As Operation Epic Fury begins, network data reveals that Iran has been plunged into near internet darkness, with national connectivity now at just 4%.
183
Happygeek @happygeek.bsky.social · 20/02/2026
Nothing to see here, just a PayPal data breach. #PayPal #DataBreach #cybersecurity #news #money www.forbes.com/sites/daveyw...
forbes.com
PayPal Confirms Data Breach — Money Stolen, Passwords Reset
PayPal has confirmed a breach that exposed personal information to a hacker. Are you affected? What data was exposed?
055
Happygeek @happygeek.bsky.social · 10/01/2026
By me @Forbes: Don't panic, your Instagram is most likely safe even if, like me, you are getting inundated with password reset notifications after the alleged data breach impacting 17.5 million accounts. #infosec #instagram www.forbes.com/sites/daveyw...
forbes.com
Instagram Password Reset Attacks — Users Must Check 1 Thing Now
Do not lose your Instagram account to hackers as data on 17.5 million users is published online — here’s what you need to know and do.
033
Happygeek @happygeek.bsky.social · 04/01/2026
By me @Forbes: European Space Agency confirms that some 'science servers' have been compromised. Attackers claim 200 GB of data was stolen. #infosec #Space #Science www.forbes.com/sites/daveyw...
forbes.com
021
Happygeek @happygeek.bsky.social · 18/12/2025
By me @ TechFinitive: Use Cisco, Asus or SonicWall kit? You’ll possibly want to read this… #infosec www.techfinitive.com/cisa-issues-...
techfinitive.com
CISA issues actively exploited ASUS, Cisco and SonicWall vulnerabilities warning
The US CISA has just published a security alert impacting Asus, Cisco and SonicWall users. Here’s what you need to do.
020
Happygeek @happygeek.bsky.social · 13/12/2025
By me @Forbes: 630 million stolen passwords, found on devices from one cyber criminal, confirmed. Check for yours now. #infosec www.forbes.com/sites/daveyw...
forbes.com
052
Happygeek @happygeek.bsky.social · 04/12/2025
When the long game pays off. The seven year threat itch… #technology #news #cyberattack #cybersecurity www.techfinitive.com/shadypanda-p...
techfinitive.com
ShadyPanda played the long game, waiting years to infect 4 million browsers with spyware
We reveals the seven-year waiting game played by ShadyPanda, responsible for infecting 4.3 million Chrome and Edge users
031
Happygeek @happygeek.bsky.social · 06/11/2025
Unmanaged passwords = shite. New Slipknot song or sage security advice? #infosec www.techfinitive.com/latest-have-...
techfinitive.com
Latest Have I Been Pwned update gives 1.3 billion new reasons to stop relying on passwords
I will readily admit that I sound like a broken record when it comes to the need to stop using magical thinking about passwords and account security. Relying upon a password to protect your data is li...
021
Happygeek @happygeek.bsky.social · 26/10/2025
Nice job by X of confusing pretty much every fecker with this one. You'd have thought a communication platform would be able to communicate things better first time around. #infosec #twitter #x #socialmedia #technology #news www.forbes.com/sites/daveyw...
forbes.com
X Issues November 10 ‘Account Will Be Locked’ Twitter Security Warning
Elon Musk’s X has confirmed accounts will be locked on November 10 if this Twitter security setting isn’t updated. What you need to know.
032
Happygeek @happygeek.bsky.social · 24/10/2025
So, what is actually happening with regard to the WhatsApp zero-day that wasn't? Or was it? #infosec #WhatsApp #hack #technology #news www.forbes.com/sites/daveyw...
forbes.com
The WhatsApp $1 Million Hack Mystery — What You Need To Know
Has WhatsApp been hacked with a $1 million zero-click zero-day exploit? Here’s everything we know so far.
031
Happygeek @happygeek.bsky.social · 22/07/2025
This article @forbes.com has now been updated with an interesting counterpoint from @paulwalsh.bsky.social. #Infosec www.forbes.com/sites/daveyw...
forbes.com
Password Hack Warning As New Threat Jumps From Your Laptop To Phone
As if by magic, this password hack jumps from your laptop to your smartphone — but it's you who waves the wand.
151
Happygeek @happygeek.bsky.social · 21/07/2025
By me @forbes.com: Happy Monday security teams. It never rains but it comes thundering down with voluminous claps of thunder. CrushFTP zero-day confirmed. #infosec www.forbes.com/sites/daveyw...
forbes.com
Critical Zero-Day Exposes FTP Servers To Attack
With Microsoft SharePoint servers still under attack, now comes the news that FTP servers have been hit by another critical zero-day exploit.
030
Happygeek @happygeek.bsky.social · 20/07/2025
By me @forbes.com: Global hack attack underway against SharePoint Server, no patch available and mitigations include pulling the internet plug. #infosec www.forbes.com/sites/daveyw...
forbes.com
Microsoft Confirms Ongoing Mass SharePoint Attack — No Patch Available
Microsoft has confirmed that SharePoint Server is under mass attack and no patch is yet available — here’s what you need to know and how to mitigate the threat.
081
Happygeek @happygeek.bsky.social · 17/07/2025
By me @forbes.com: Cloaking-as-a-Service, the "you can't see me" threat you can't, erm, see, unless you can. #kudos @slashnext #infosec www.forbes.com/sites/daveyw...
forbes.com
Web Browser AI Hack Attacks Confirmed — What You Need To Know
Your web browser is hiding these hack attacks — what you need to know about the AI cloaking-as-a-service threat.
020
Happygeek @happygeek.bsky.social · 14/07/2025
By me @forbes.com: Here we go again, Microsoft weakening trust in security updates. Sure, emoji search isn't exactly essential, but it is part of a slippery slope. The cumulative effect is a bad thing - yay or nay, dear readers? #infosec www.forbes.com/sites/daveyw...
forbes.com
Microsoft Security Update Breaks Windows 10 Search Feature
The latest Microsoft Patch Tuesday security updates have done the opposite and broken yet another Windows feature. Here’s what you need to know.
050
Happygeek @happygeek.bsky.social · 13/07/2025
By me @forbes.com: AI in a hoodie. Pew Pew. Or maybe not... #kudos Forescout and Michele Campobasso for the excellent research and analysis. #infosec www.forbes.com/sites/daveyw...
forbes.com
From Vibe Coding To Vibe Hacking — AI In A Hoodie
Vibe coding is a phenomenon, and cyberattacks are fast-evolving thanks to AI. Is vibe hacking the next big thing in cyber?
030
Happygeek @happygeek.bsky.social · 06/07/2025
Happy #Sunday security sleuths. By me @forbes.com: does anyone actually check Microsoft updates before pushing them out anymore? Serious question - with apologies to my Microsoft buddies. #infosec www.forbes.com/sites/daveyw...
forbes.com
Microsoft Confirms Windows 11 Update Causes Security Firewall Error
Another Windows update, another problem caused by an update — what you need to know as users report Windows Firewall error.
081
Happygeek @happygeek.bsky.social · 19/06/2025
By me @forbes.com: Amazon Prime Day 2025 is fast approaching. Last year cybercriminals went into overdrive, with attacks up 80%. #infosec www.forbes.com/sites/daveyw...
forbes.com
Amazon Issues Security Warning As Prime Account Hacks Mount
As Prime Day 2025 is confirmed — Amazon warns of account hack attacks.
040
Happygeek @happygeek.bsky.social · 19/06/2025
By me @forbes.com: Another day, another Google Chrome security update. #infosec www.forbes.com/sites/daveyw...
forbes.com
Google Chrome Warning — Windows, Android, Mac And Linux Users Act Now
Don’t wait — all users should update Google Chrome now.
042
Happygeek @happygeek.bsky.social · 18/06/2025
By me @forbes.com: The GOAT of all credentials leaks, all new data (with the exception of 184 million records from May) the researchers say. #kudos @j4vv4d.com for advice. #infosec www.forbes.com/sites/daveyw...
forbes.com
16 Billion Apple, Facebook And Google Passwords Leaked — Change Yours Now
Change all your account passwords now — don’t wait: 16 billion credentials are confirmed as having been leaked.
241
Happygeek @happygeek.bsky.social · 17/06/2025
By me @forbes.com: The truth is out there, but the XFiles attackers aren't the ones telling it. #InfoSec www.forbes.com/sites/daveyw...
forbes.com
Your Passwords Are At Risk — New Windows XFiles Attack Confirmed
This new password-stealing attack targets Windows users — here’s what you need to know about the XFiles threat.
040