Steve Puluka
banner
spuluka.bsky.social
Steve Puluka
@spuluka.bsky.social
Network & Security Engineer / Cantor & Religious Education Instructor http://puluka.com/home
Good news that the US Justice Department has gotten 5 guilty pleas from US citizens helping fraudulent North Korean workers operate in the US. They provided false identifies and hosted laptop farms.

www.justice.gov/opa/pr/justi...
Justice Department Announces Nationwide Actions to Combat Illicit North Korean Government Revenue Generation
The Justice Department today announced five guilty pleas and more than $15 million in civil forfeiture actions against the Democratic People’s Republic of Korea (DPRK) remote information technology (I...
www.justice.gov
November 22, 2025 at 10:25 AM
Interesting automation tool presentation at @techfieldday.com #NFD39 from Nokia by Bruce Wallis. The Event-Driven Automation (EDA) platform adds support for Cisco and Arista switches.

www.linkedin.com/pulse/nokia-...
Nokia Event-Driven Automation (EDA) Multi Vendor - Deliver on the Promise
I enjoyed the live event with Nokia presenting at Tech Field Day #NFD39 November 5, 2025. Bruce Wallis presented the new multi vendor automation tools created over the last year.
www.linkedin.com
November 21, 2025 at 5:28 PM
In the continued fight against asian based scam centers the US Justice Department has created a new strike force for a crypto fraud scheme targeting US citizens.

www.justice.gov/usao-dc/pr/n...
New Scam Center Strike Force Battles Southeast Asian Crypto Investment Fraud Targeting Americans
U.S. Attorney Jeanine Ferris Pirro, together with major federal law enforcement and interagency partners, announced the creation of the first Scam Center Strike Force to secure America against Southea...
www.justice.gov
November 21, 2025 at 10:25 AM
Interesting AIOps presentation at @techfieldday.com #NFD39 from Nokia by Clayton Wagar. How to leverage insights from Google NOC/SRE #AI implementations on network operations.

www.linkedin.com/pulse/explor...
Exploring the Power and Potential of Enhanced AIOps with Nokia
I enjoyed the live event with Nokia presenting at Tech Field Day #NFD39 November 5, 2025 by Clayton Wagar. The focus is on how #AI applies to network operations.
www.linkedin.com
November 20, 2025 at 5:10 PM
Open for comments until December 10, 2025 the proposed NIST updates to IoT Cyber Security risks for manufacturers.

www.nist.gov/blogs/cybers...
Sharpening the Focus on Product Requirements and Cybersecurity Risks: Updating Foundational Activities for IoT Product Manufacturers
Update: The comment period for your feedback on the second public draft of NIST IR 8259 has been
www.nist.gov
November 20, 2025 at 10:55 AM
Interesting introductory presentation at @techfieldday.com #NFD39 from Nokia by Andy Lapteff. He explains how he came to their new data center deployments and why #AI DC deployments are worth consideration.

www.linkedin.com/pulse/introd...
Introduction to Nokia with Andy Lapteff
I enjoyed the live event with Nokia presenting at Tech Field Day #NFD39 November 5, 2025. Andy Lapteff 🛠️💬 is an experienced engineer but newer with Nokia provides the highlights of why Nokia is now i...
www.linkedin.com
November 19, 2025 at 6:29 PM
Finally Telcos are working to stop the ability of scammers to spoof phone numbers. UK government has just a deal there to stop the practice. Hopefully the US will see action soon too.

www.gov.uk/government/n...
Spoofed numbers blocked in crackdown on scammers
Scammers who fake their numbers to trick the public out of their cash will be exposed in a major upgrade of mobile networks.
www.gov.uk
November 19, 2025 at 10:53 AM
Overview of the stateless NaaS platform from Graphiant at @techfieldday.com #NFD39 by Arsalan Khan. Their focus is providing the secure, encrypted any to any connectivity getting your data sources.

www.linkedin.com/pulse/graphi...
About Graphiant NaaS with Arsalan Khan
I enjoyed the live event with Graphiant presenting at Tech Field Day #NFD39 November 5, 2025. Arsalan Khan provides the overview of the stateless NaaS platform for any to any encrypted connectivity th...
www.linkedin.com
November 18, 2025 at 4:53 PM
Good overview of the current options in creating a virtual networking lab by Suresh Vina.

www.packetswitch.co.uk/network-labs...
Network Labs on a Budget
In this post, I’ll go over some budget-friendly options and a few tools you can use to build your own network lab without spending too much.
www.packetswitch.co.uk
November 18, 2025 at 10:34 AM
Expanding the Amazon bug bounty program to include #AI services and models.

www.amazon.science/news/amazon-...
Amazon launches private AI bug bounty to strengthen Nova models
Partnering with professional security researchers and the academic community to build safer, more robust AI.
www.amazon.science
November 17, 2025 at 10:16 AM
Next up in the #AI race Google has added private AI compute using their Gemini models to their cloud services options.

blog.google/technology/a...
Private AI Compute: our next step in building private and helpful AI
Introducing Private AI Compute, our new way to bring you helpful AI with the power of the cloud, while keeping your data private to you.
blog.google
November 16, 2025 at 2:55 PM
Interesting Demo of Network Service Creation at @techfieldday.com #NFD39 from Graphiant by Vinay Prabhu. NaaS allows UI or API creation, policy compliance and security monitoring of traffic between either internal or external partner link connections.

www.linkedin.com/pulse/graphi...
Graphiant Demos Network Service Connections
I enjoyed the live event with Vinay Prabhu of Graphiant presenting at Tech Field Day #NFD39 November 5, 2025. The demo goes through the process of creating the Network as a Service connections via the...
www.linkedin.com
November 15, 2025 at 3:15 PM
Good news that Europol and other authorities in Europe have arrested the leader of a cyber crime syndicate and seized over 1k servers and 20 domains.

www.europol.europa.eu/media-press/...
End of the game for cybercrime infrastructure: 1025 servers taken down – Operation Endgame’s latest phase targeted the infostealer Rhadamanthys, Remote Access Trojan VenomRAT, and the botnet Elysium |...
Between 10 and 14 November 2025, the latest phase of Operation Endgame was coordinated from Europol’s headquarters in The Hague. The actions targeted one of the biggest infostealers (Rhadamanthys), th...
www.europol.europa.eu
November 15, 2025 at 10:38 AM
Overview of #AI Strategy at @techfieldday.com #NFD39 from Graphiant by Vinay Prabhu. Gina AI agent using data exchange to achieve observability.

www.linkedin.com/pulse/graphi...
Graphiant: The AI Strategy
I enjoyed the live event with Graphiant presenting at Tech Field Day #NFD39 November 5, 2025. Vinay Prabhu points out their primary roll for their customers is to provide the flexible and secure passa...
www.linkedin.com
November 14, 2025 at 5:16 PM
NY has reached an agreement with Illuminate for a $5.1M fine over the data breach of their school grading and attendance software platform exposing data on 1.7M students.

news.risky.biz/risky-bullet...
Risky Bulletin: Yanluowang ransomware IAB pleads guilty
In other news: US CBO hacked by foreign APT; Singapore to punish scammers with cane beatings; Chrome will remove XSLT support for security reasons.
news.risky.biz
November 14, 2025 at 10:05 AM
Interesting Use Case presentation at @techfieldday.com #NFD39 from Graphiant by Arsalan Khan. Network as a Service with full API access with end to end encryption on the shared core.

www.linkedin.com/pulse/graphi...
Graphiant Use Cases with Arsalan Khan
I enjoyed the live event with Graphiant presenting at Tech Field Day #NFD39 November 5, 2025. As a NaaS vendor the network is built on the foundation of standards with custom extensions to deal with i...
www.linkedin.com
November 13, 2025 at 5:27 PM
That time again to check the two new Security Advisories from Palo Alto Networks and get patching your affected gear.

security.paloaltonetworks.com
Palo Alto Networks Security Advisories
Palo Alto Networks Security Advisories - Latest information and remediations available for vulnerabilities concerning Palo Alto Networks products and services.
security.paloaltonetworks.com
November 13, 2025 at 11:08 AM
Another fallout from the Oracle E business Suite breach is the Washington Post. The group used this access to deploy Ransomware.

www.reuters.com/business/med...
Washington Post says it is among victims of cyber breach tied to Oracle software
The Washington Post said it is among victims of a sweeping cyber breach tied to Oracle software.
www.reuters.com
November 12, 2025 at 10:28 AM
Good news that the shut down of internet scam centers continues as Cambodian police arrest over 600 suspects working at the compound.

www.phnompenhpost.com/national/sva...
www.phnompenhpost.com
November 11, 2025 at 11:10 AM
Organized crime is merging cyber attacks on trucking and freight companies systems to feed information for physical heists of cargo in transit, creating a new multimillion dollar criminal enterprise.

www.proofpoint.com/us/blog/thre...
Remote access, real cargo: cybercriminals targeting trucking and logistics | Proofpoint US
Key findings  Cybercriminals are compromising trucking and freight companies in elaborate attack chains to steal cargo freight.  Cargo theft is a multi-million-dollar criminal
www.proofpoint.com
November 10, 2025 at 10:07 AM
Good news from Europol that a large international team arrested 6 executives running a credit card fraud operation since 2016 affecting 4.3 million cards and 300 million euros.

www.europol.europa.eu/media-press/...
Operation Chargeback: 4.3 million cardholders affected, EUR 300 million in damages – Three criminal networks suspected of misusing credit card data from cardholders across 193 countries; 18 suspects a...
On 4 November 2025, an international coordinated action day targeted three major fraud and money laundering networks as part of Operation “Chargeback.” Led by the Cybercrime Department (Landeszentrals...
www.europol.europa.eu
November 9, 2025 at 10:28 AM
Good news that Polish authorities have arrested 11 suspects in running an investment scam call center pulling over $20 million from at least 1500 victims.

cbzc.policja.gov.pl/bzc/aktualno...
Fałszywe inwestycje - funkcjonariusze CBZC rozpracowali międzynarodową grupę przestępczą
W wyniku skoordynowanych działań prokuratury oraz Zarządu w Krakowie Centralnego Biura Zwalczania Cyberprzestępczości przy współudziale Zarządów z Radomia oraz Gorzowa Wielkopolskiego, rozbito grupę p...
cbzc.policja.gov.pl
November 8, 2025 at 11:01 AM
Search summaries are convenient but we are still seeing hallucinations like this from Microsoft Bing. I asked who was Tsar in 1647. What's a 100 years between friends?
November 7, 2025 at 8:22 PM
An international team from Australia, Canada and the US CISA have created updated guidelines on how to security Microsoft Exchange servers for those still running email on premises.

www.cisa.gov/news-events/...
CISA, NSA and Global Partners Unveil Security Blueprint for Hardening Microsoft Exchange Servers | CISA
www.cisa.gov
November 7, 2025 at 12:32 PM