Rich Macfarlane

🎂👨‍🎓Our #MScASDF in Cyber Security is 10 years old this year... from 2009 working on the first modules with @billatnapier @DrJamieGraves & Lionel... teaching practicals in new virtual environments... one of the first courses to be @NCSC accredited in 2014... @ComputingNapier

⚠️ 600+ FortiGate devices breached in an AI-assisted campaign. Team Cymru traced it to #CyberStrikeAI, an open-source Go tool bundling 100+ security utilities, run from 21 IPs across Asia and beyond. The maintainer shows ties to #China’s vulnerability ecosystem. 🔗 Details → thehackernews.com/2026/03/open-s…

🔥 You can now ask Kali Linux tools in plain English — powered by Anthropic Sonnet 4.5. Through MCP, Claude SSHs into Kali to run tools like nmap, gobuster, nikto, hydra, sqlmap, metasploit, john, wpscan, enum4linux-ng, checks dependencies, and returns results in-app. 🔗 Read about it here → #ai-powered-command-execution" target="_blank" rel="nofollow noopener">thehackernews.com/2026/02/threat…

APT37 hackers use new malware to breach air-gapped networks - @billtoulas bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

GreyNoise observed a coordinated campaign probing SonicWall firewalls to identify which devices have SSL VPN enabled — the prerequisite step before credential attacks. Four infrastructure clusters, a commercial proxy service rotating thousands of IPs, and near-zero exploitation. This is target mapping. 🔗greynoise.io/blog/active-re…

Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS securityweek.com/hundreds-of-fo…

🚨🛡️ Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1). SQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available). 🔗 See affected versions and patch guidance → thehackernews.com/2026/02/fortin…

CyberVolk’s ransomware debut stumbles on cryptography weakness - @billtoulas bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

Great book! As mentioned to a few, CSN09112 students might find useful to have a look!

Launching the #GCHQChristmasChallenge Advent Puzzles Our expert puzzlers have been busy and throughout December we'll set you an extra special #GCHQPuzzle with the help of @BBCBreakfast 🤝 So open up door number 1️⃣ with this puzzle! And tune in to Breakfast for the solutions 👀

To celebrate the last session week of the ENUSEC term, we're inviting everyone to C27 from 2pm on 3rd Dec for a study and game session. We'll have games available, from cards to JackBox. We also welcome anyone wanting to study or do coursework and will be around to offer help.

🚨Now over 55% of tickets gone so far! 📢FREE STACS Computing Science specific conference for Early years, Primary and Secondary teachers. 29th Nov 2025 at @StirUni Sign up here eventbrite.co.uk/e/stacs-annual… #ByTeachersForTeachers

Inspire the Next Generation: CyberFirst for Senior Phase! 🛡️Join Darren Brown & Gareth Rae to learn how to deliver advanced, hands-on #CyberFirst content that leads to real-world certifications! Essential for Secondary Teachers. TICKETS: eventbrite.co.uk/e/stacs-annual…

Microsoft says the Aisuru botnet hit its Azure network with a 15.72 terabits per second (Tbps) DDoS attack, launched from over 500,000 IP addresses. bleepingcomputer.com/news/microsoft…

This week's session will be exploring the numerous and exciting career paths that cybersecurity can lead you down. Join us on Wednesday, 19th November at 2PM in C27, Merchiston Campus! #ENUSEC #Cybersecurity #InfoSec #Careers

#ESETResearch has discovered the first known AI-powered ransomware, which we named #PromptLock. The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts on the fly, which it then executes 1/6

@stacshq Sign up for competition still open | extended to Fri 14th Nov | pdf/paper based cyber fun for 14-18 yrs olds | Finals day online or on campus | prizes to be won!! Teachers | get in touch about this comp' | our Christmas lectures | or any help with cyber security teaching!

🔐 Sign ups are OPEN for the ACE Cyber Security Competition 2025/26! 🗓️ Who: UK students aged 14-18. 💻 Stage 1 (Online): 24 Nov -12 Dec 2025. 🏆 Finals: Mar 2026 Form a team of up to 4 & test your skills! Sign up now forms.office.com/pages/response…

The fantastic @Bugcrowd and the awesome SIGINT will be returning for some ethical hacking and OWASP, and we'll be heading over to Appleton Tower to participate in some live bug bounties! Free pizza and refreshments will be provided. #BugBounty #Hacking #CyberSecurity #InfoSec

@EdNapierSCEBE @EdinburghNapier @enusec @billatnapier @stacshq @ScullionToni @AbertayUni Extended to Fri 14th Nov 8pm

@rjmacfarlane @EdinburghNapier @enusec @billatnapier @stacshq @ScullionToni @AbertayUni What is the sign up deadline now?

👨‍🎓 Schools Cyber Security Competition ✍ Sign-up open (extended till late Nov) Open to groups of 14–18 year-olds in schools and colleges across Scotland. 📅Stage 1 - Online - Nov-Dec. Finals - Mar 2026 - On Campus CTF at Napier Sign up here: forms.office.com/pages/response…