Joona kokkola
@joonak.bsky.social
I work on information security and data protection
Reposted by Joona kokkola
December 10, 2025 at 11:52 PM
Reposted by Joona kokkola
A perfect CVSS 10 🧑🏻🍳💋
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
Critical Security Vulnerability in React Server Components – React
The library for web and native user interfaces
react.dev
December 3, 2025 at 4:23 PM
A perfect CVSS 10 🧑🏻🍳💋
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
Reposted by Joona kokkola
Version 1 of the OWASP AI testing guide just got published.
I promise you, from my own experience, this will save you a lot of heartache.
github.com/OWASP/www-pr...
I promise you, from my own experience, this will save you a lot of heartache.
github.com/OWASP/www-pr...
November 27, 2025 at 10:31 AM
Version 1 of the OWASP AI testing guide just got published.
I promise you, from my own experience, this will save you a lot of heartache.
github.com/OWASP/www-pr...
I promise you, from my own experience, this will save you a lot of heartache.
github.com/OWASP/www-pr...
Reposted by Joona kokkola
User Ticket sales for Disobey 2026 will start on Mon 17th this month at 18:00 Finn time (UTC+2).
And that's not all! A portion of the user tickets will be reserved for a sales raffle later! More info on the raffle will follow.
And this is where they will be: tickets.disobey.fi
And that's not all! A portion of the user tickets will be reserved for a sales raffle later! More info on the raffle will follow.
And this is where they will be: tickets.disobey.fi
November 10, 2025 at 12:29 PM
User Ticket sales for Disobey 2026 will start on Mon 17th this month at 18:00 Finn time (UTC+2).
And that's not all! A portion of the user tickets will be reserved for a sales raffle later! More info on the raffle will follow.
And this is where they will be: tickets.disobey.fi
And that's not all! A portion of the user tickets will be reserved for a sales raffle later! More info on the raffle will follow.
And this is where they will be: tickets.disobey.fi
Reposted by Joona kokkola
"As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the #GDPR"
noyb.eu/en/eu-commis... @noyb.eu #privacy
noyb.eu/en/eu-commis... @noyb.eu #privacy
EU Commission about to wreck core principles of the GDPR
The EU Commission has secretly set in motion a potentially massive reform of the GDPR. noybs first overview of the proposed changes.
noyb.eu
November 10, 2025 at 7:22 PM
"As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the #GDPR"
noyb.eu/en/eu-commis... @noyb.eu #privacy
noyb.eu/en/eu-commis... @noyb.eu #privacy
Reposted by Joona kokkola
"Multiple European countries are facing the regulatory wrath of the European Commission for failing to transpose the #NIS2 directive into domestic law." #cybersecurity #infosec
www.infosecurity-magazine.com/news/eight-c...
www.infosecurity-magazine.com/news/eight-c...
Eight Countries Face EU Action Over NIS2 Deadline Failings
Eight European countries have yet to transpose NIS2 into law, exposing them to regulatory action
www.infosecurity-magazine.com
August 17, 2025 at 11:57 AM
"Multiple European countries are facing the regulatory wrath of the European Commission for failing to transpose the #NIS2 directive into domestic law." #cybersecurity #infosec
www.infosecurity-magazine.com/news/eight-c...
www.infosecurity-magazine.com/news/eight-c...
Reposted by Joona kokkola
Reposted by Joona kokkola
Swedish maritime authority just posted maybe their most extensive interference warning to date.
Even radar is now seeing interference, besides more familiar GNSS, AIS and DGPS, all over Baltic Sea
Radar is the single most important navigational aid on ships, particularly in cases of lost GPS/GNSS.
Even radar is now seeing interference, besides more familiar GNSS, AIS and DGPS, all over Baltic Sea
Radar is the single most important navigational aid on ships, particularly in cases of lost GPS/GNSS.
July 2, 2025 at 7:04 PM
Swedish maritime authority just posted maybe their most extensive interference warning to date.
Even radar is now seeing interference, besides more familiar GNSS, AIS and DGPS, all over Baltic Sea
Radar is the single most important navigational aid on ships, particularly in cases of lost GPS/GNSS.
Even radar is now seeing interference, besides more familiar GNSS, AIS and DGPS, all over Baltic Sea
Radar is the single most important navigational aid on ships, particularly in cases of lost GPS/GNSS.
Reposted by Joona kokkola
MFA will be requiered by default for OWASP ASVS Level 2. And so will device-bound passkeys/eIDAS-LoA3/NIST-AAL3 for ASVS Level 3.
If your app don’t, you better have a really good reason for it or take it off the internet.
github.com/OWASP/ASVS/b...
If your app don’t, you better have a really good reason for it or take it off the internet.
github.com/OWASP/ASVS/b...
github.com
May 8, 2025 at 6:26 PM
MFA will be requiered by default for OWASP ASVS Level 2. And so will device-bound passkeys/eIDAS-LoA3/NIST-AAL3 for ASVS Level 3.
If your app don’t, you better have a really good reason for it or take it off the internet.
github.com/OWASP/ASVS/b...
If your app don’t, you better have a really good reason for it or take it off the internet.
github.com/OWASP/ASVS/b...
Reposted by Joona kokkola
Miten viestiä kyberhyökkäyksistä? Traficomilta ohje organisaatioiden
kriisiviestintään
www.epressi.com/tiedotteet/t...
kriisiviestintään
www.epressi.com/tiedotteet/t...
Miten viestiä kyberhyökkäyksistä? Traficomilta ohje organisaatioiden kriisiviestintään
Viime vuosien aikana entistä useampi organisaatio on joutunut kyberhyökkäyksen kohteeksi. Kyberhyökkäyksen tapahduttua organisaation on kiinnitettävä ...
www.epressi.com
March 27, 2025 at 3:09 PM
Miten viestiä kyberhyökkäyksistä? Traficomilta ohje organisaatioiden
kriisiviestintään
www.epressi.com/tiedotteet/t...
kriisiviestintään
www.epressi.com/tiedotteet/t...
Reposted by Joona kokkola
It looks like Microsoft has been quietly updating its 2023 new APT naming table with new entries
The table used to have 20-30 entries... it's now gigantic!
Bookmark it: learn.microsoft.com/en-gb/unifie...
The table used to have 20-30 entries... it's now gigantic!
Bookmark it: learn.microsoft.com/en-gb/unifie...
March 16, 2025 at 6:44 PM
It looks like Microsoft has been quietly updating its 2023 new APT naming table with new entries
The table used to have 20-30 entries... it's now gigantic!
Bookmark it: learn.microsoft.com/en-gb/unifie...
The table used to have 20-30 entries... it's now gigantic!
Bookmark it: learn.microsoft.com/en-gb/unifie...
Reposted by Joona kokkola
Heya all! We have something great for you: Disobey 2025 talk recordings are now available in YouTube! Check them out at:
www.youtube.com/playlist?lis...
www.youtube.com/playlist?lis...
March 11, 2025 at 8:54 AM
Heya all! We have something great for you: Disobey 2025 talk recordings are now available in YouTube! Check them out at:
www.youtube.com/playlist?lis...
www.youtube.com/playlist?lis...
Reposted by Joona kokkola
Huomenta!
Olen viimeiset vuodet tehnyt paluumuuttoa Suomen markkinaan, ja nyt olisi hyvä mahdollisuus tulla kuulemaan Suomen johtavia kyber-asiantuntijoita, minä mukaanlukien, ja vielä ILMAISEKSI!
Missä? No Lahes!
Milloin? 13.3.2025
Äkkiä ilmoittautumaan!!
kyberlahti.fi
Olen viimeiset vuodet tehnyt paluumuuttoa Suomen markkinaan, ja nyt olisi hyvä mahdollisuus tulla kuulemaan Suomen johtavia kyber-asiantuntijoita, minä mukaanlukien, ja vielä ILMAISEKSI!
Missä? No Lahes!
Milloin? 13.3.2025
Äkkiä ilmoittautumaan!!
kyberlahti.fi
KyberLahti 2025 - KyberLahti
KyberLahti 2025 järjestetään 13.3.2025 Lahessa! Tervetuloa mukaan, paikkoja rajoitetusti!
kyberlahti.fi
January 28, 2025 at 6:47 AM
Huomenta!
Olen viimeiset vuodet tehnyt paluumuuttoa Suomen markkinaan, ja nyt olisi hyvä mahdollisuus tulla kuulemaan Suomen johtavia kyber-asiantuntijoita, minä mukaanlukien, ja vielä ILMAISEKSI!
Missä? No Lahes!
Milloin? 13.3.2025
Äkkiä ilmoittautumaan!!
kyberlahti.fi
Olen viimeiset vuodet tehnyt paluumuuttoa Suomen markkinaan, ja nyt olisi hyvä mahdollisuus tulla kuulemaan Suomen johtavia kyber-asiantuntijoita, minä mukaanlukien, ja vielä ILMAISEKSI!
Missä? No Lahes!
Milloin? 13.3.2025
Äkkiä ilmoittautumaan!!
kyberlahti.fi
Reposted by Joona kokkola
Finally managed to get my first Substack post out !
It’s on Russia’s peacetime warfare and what it does to our understanding of war and peace. In the usual rambling style so respect to everyone who makes it through it 😊
Including fun anecdotes from Finland and Sweden…
It’s on Russia’s peacetime warfare and what it does to our understanding of war and peace. In the usual rambling style so respect to everyone who makes it through it 😊
Including fun anecdotes from Finland and Sweden…
Dealing with Russia's Peacetime Warfare
Judging by the public debate in Finland and Sweden, war and peace are in the eye of the beholder
open.substack.com
January 19, 2025 at 7:14 PM
Finally managed to get my first Substack post out !
It’s on Russia’s peacetime warfare and what it does to our understanding of war and peace. In the usual rambling style so respect to everyone who makes it through it 😊
Including fun anecdotes from Finland and Sweden…
It’s on Russia’s peacetime warfare and what it does to our understanding of war and peace. In the usual rambling style so respect to everyone who makes it through it 😊
Including fun anecdotes from Finland and Sweden…
Reposted by Joona kokkola
The OWASP Software Assurance Maturity Model (SAMM) is keen on gathering your insights regarding SAMM and the experiences you've had using SAMM. Gathering feedback is vital to the project. PII is not collected.
forms.gle/EPNhXBWmowfw...
Thank you for taking the time to complete this questionnaire;
forms.gle/EPNhXBWmowfw...
Thank you for taking the time to complete this questionnaire;
OWASP SAMM 2025 Questionnaire
As we continue our efforts on the OWASP Software Assurance Maturity Model (SAMM) project, we're keen on gathering your insights regarding SAMM, our user base, and the experiences you've had using SAMM...
forms.gle
January 10, 2025 at 5:33 PM
The OWASP Software Assurance Maturity Model (SAMM) is keen on gathering your insights regarding SAMM and the experiences you've had using SAMM. Gathering feedback is vital to the project. PII is not collected.
forms.gle/EPNhXBWmowfw...
Thank you for taking the time to complete this questionnaire;
forms.gle/EPNhXBWmowfw...
Thank you for taking the time to complete this questionnaire;
Reposted by Joona kokkola
You are invited to the next OWASP Low-Code/No-Code security meetup! This is a must-attend event for anyone passionate about safeguarding their business apps.
📅 Date & Time: Jan 9th, 2025, 10am CST
👉 Register here: docs.google.com/forms/d/e/1F...
What’s in store? …
📅 Date & Time: Jan 9th, 2025, 10am CST
👉 Register here: docs.google.com/forms/d/e/1F...
What’s in store? …
December 31, 2024 at 12:06 PM
You are invited to the next OWASP Low-Code/No-Code security meetup! This is a must-attend event for anyone passionate about safeguarding their business apps.
📅 Date & Time: Jan 9th, 2025, 10am CST
👉 Register here: docs.google.com/forms/d/e/1F...
What’s in store? …
📅 Date & Time: Jan 9th, 2025, 10am CST
👉 Register here: docs.google.com/forms/d/e/1F...
What’s in store? …
Reposted by Joona kokkola
Serving on the CISA Technical Advisory Council under @CISAJen has been such a joy.
It’s something I’ll really miss.
Thanks for being such a stand out leader and friend for so many years Jen!
techcrunch.com/2024/11/18/c...
It’s something I’ll really miss.
Thanks for being such a stand out leader and friend for so many years Jen!
techcrunch.com/2024/11/18/c...
CISA director Jen Easterly to depart agency on January 20 | TechCrunch
CISA's director will depart the agency after three years at the helm, as part of the "seamless transition" of government power.
techcrunch.com
November 18, 2024 at 6:33 PM
Serving on the CISA Technical Advisory Council under @CISAJen has been such a joy.
It’s something I’ll really miss.
Thanks for being such a stand out leader and friend for so many years Jen!
techcrunch.com/2024/11/18/c...
It’s something I’ll really miss.
Thanks for being such a stand out leader and friend for so many years Jen!
techcrunch.com/2024/11/18/c...
Reposted by Joona kokkola
🚨 BREAKING: Moldova has voted yes to joining the EU by a tiny margin.
Read the developing story: trib.al/SxPOk2g
Read the developing story: trib.al/SxPOk2g
October 21, 2024 at 9:37 AM
🚨 BREAKING: Moldova has voted yes to joining the EU by a tiny margin.
Read the developing story: trib.al/SxPOk2g
Read the developing story: trib.al/SxPOk2g
Kotiverkon tietoturvan perusasiat voi tarkistaa Kyberturvallisuuskeskuksen selkeillä ohjeilla.Pidä huoli etteivät ilkeyden tapahdu sinun nettitöpselin kautta. www.kyberturvallisuuskeskus.fi/fi/ajankohta... #tietoturva
October 24, 2023 at 7:37 AM
Kotiverkon tietoturvan perusasiat voi tarkistaa Kyberturvallisuuskeskuksen selkeillä ohjeilla.Pidä huoli etteivät ilkeyden tapahdu sinun nettitöpselin kautta. www.kyberturvallisuuskeskus.fi/fi/ajankohta... #tietoturva
Kansalaiset, medborgare! Suosittelen lukemaan MPK:n erinomaisen oppaan Kyberin taskutieto. Siinä on keskeisin kybermaailmasta jokaiselle mpk.fi/wp-content/u... #mpk #kyberturvallisuus
mpk.fi
October 6, 2023 at 9:52 AM
Kansalaiset, medborgare! Suosittelen lukemaan MPK:n erinomaisen oppaan Kyberin taskutieto. Siinä on keskeisin kybermaailmasta jokaiselle mpk.fi/wp-content/u... #mpk #kyberturvallisuus