:rainbowCrow:

Analyst

Location: :cascadia:
Pronouns: He / Him

Public Key

npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008

NIP-05 Address

Profile Code

nprofile1qqsgdvuhpp4pxpgsscwatre9t7k7acwy0q23sharhd3g5p4566hnrtqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsr46ws7

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008

Show more details

Last Notes

2026-06-12 13:22:15 UTC

- reply

Fortinet

2026-06-12 13:19:26 UTC

I didn't see this the other day but patch your Ubiquiti shit.
https://community.ui.com/releases/Security-Advisory-Bulletin-065-065/aa46a22b-fc43-4eae-9382-6fc8feda967a
3 sev:CRIT and 2 sev:HIGH CVEs there.

2026-06-11 16:48:27 UTC

- reply

We also had a student running an escort business from an Apple mini that they hid above the ceiling tiles above the projector. I wasn't even mad about that one. The feds were though.

2026-06-11 16:47:27 UTC

- reply

I had a few. Another fun one was when I was taking the students on a tour of some carding forums and some jerk posted porn instead of cards.

2026-06-11 16:33:47 UTC

RE: https://infosec.exchange/@lorenzofb/116732432416538466
Careful here. I was doing this through Shodan once in front of a class and one of them was a camera under the desk of a dude with his pants down. That was another chat with the dean.
#note12sv…mfl2

2026-06-11 13:57:31 UTC

- reply

I'm not even as worried about the detection side. Dumb simple shit like being able to use custom IOCs THE WAY THEY SAY YOU CAN BUT THEN CAN'T is what's killing me now.

2026-06-11 13:45:41 UTC

Are there any EDRs out there that aren't complete overpromise / underdeliver horse shit? I'll take fewer features as long as it's reliable and consistent and does what it says it does. Is that honestly too much to expect in this multi hundred billion dollar industry?

2026-06-10 22:17:02 UTC

You know how the early Corvettes had a rev counter? Not a tachometer but an accumulation of total engine revolutions? It would be interesting to see what those numbers would look like for CPU on different machines.

2026-06-10 21:51:24 UTC

- reply

If it is an actual crime, then we still have the whole selective enforcement thing. Which is exactly why vague, unenforceable laws are so loved by authoritarians.

2026-06-10 20:10:01 UTC

- reply

IANAL but it seems more likely to be a civil issue rather than criminal but I share your sentiment, especially WRT Swartz.

2026-06-09 18:20:10 UTC

So in the past five days there have been over 800 CVEs published just by Google, Microsoft, and Adobe. This is fine.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/721/526/138/169/099/original/a730eae76fd03dbc.png

2026-06-09 16:29:27 UTC

This is cool and all but the conclusion is the current state: It's all reactive. There isn't anything reasonable that most defenders can do.
https://www.infoblox.com/blog/threat-intelligence/residential-proxies-in-the-wild/

2026-06-09 16:06:13 UTC

Threat intel $200
EDR $150
Phishing training $800
Tokens $3600
Pizza Friday $150
someone who is good at the economy please help me budget this.
my SOC is dying
#dril

2026-06-09 15:58:42 UTC

RE: https://infosec.exchange/@cR0w/116720541801549930
Anyone have any others to add to the list here? I'll put them in a public repo somewhere if we get enough to make it worth it.
#note1rkx…3qew

2026-06-09 14:08:46 UTC

Outlook ->
Rules and alerts ->
New Rule ->
with specific words in the message header ->
> X-PHISH
> X-Phishtest
> X-ThreatSim-ID
> X-ThreatSim-Header
> X-PhishMe
> X-PhishMeTracking
> X-PhishMe-Tracking
> X-Gophish-Contact
> X-Gophish-Signature
> X-CanIPhish
stop processing more rules and permanently delete ->
Finish.

2026-06-08 20:52:16 UTC

I wonder how long it will be until my CTI vendor pretends to give a fuck about IPv6 enrichment.

2026-06-08 16:02:45 UTC

RE: https://infosec.exchange/@metacurity/116715326076135829Chat, are we dead?
#note1hmm…9j2e

2026-06-08 15:15:19 UTC

WWJD
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/715/137/166/287/025/original/9ac27e9a2851467f.png

2026-06-06 01:23:19 UTC

- reply

It may not be but saying "53000 - 56000" instead of a generic "over 50000" makes it sound more trustable to general readers.

2026-06-06 01:17:09 UTC

- reply

The sorta specific number too. If I didn't understand the tech a little bit, that would feel like an insane number.

2026-06-06 01:06:00 UTC

- reply

> According to the complaint, the investigation concluded that APT 10 potentially breached IBM’s network more than 56,000 times between 2013 and 2016. Crucially, the company said it could not investigate further because it had not kept logs of who accessed its network and when — a basic security practice.
That's got a couple layers of oof in it.

2026-06-06 00:58:20 UTC

- reply

Holy yikes 😬

2026-06-05 15:14:07 UTC

- reply

"My car makes this weird noise all the time until I take it to the mechanic and then it behaves."

2026-06-05 14:45:39 UTC

Next time someone tells me they want to go into security I'm going to tell them to watch *Don't Look Up* and reassess. That movie explains this job better than I can.

2026-06-05 14:10:18 UTC

RE: https://infosec.exchange/@cR0w/116697713800926918
This is @npub1wdt…6e66 's fault:
https://infosec.exchange/@sharkfie/116694924581210950
#note1ktw…p8lw

2026-06-05 13:27:02 UTC

RE: https://infosec.exchange/@cR0w/116697713800926918
inb4 some weird nerd tries to explain that this is a win actually because it shows something something AI vuln hunting something something when in reality it shows just how poorly engineered something so critical to security is once people start actually digging
#note1ktw…p8lw

2026-06-05 13:23:18 UTC

- reply

Good lord that's a lot of CVEs for a product that is specifically designed to execute untrusted code from the internet and spy on users:
> CVE-2026-10881
> CVE-2026-10882
> CVE-2026-10883
> CVE-2026-10884
> CVE-2026-10885
> CVE-2026-10886
> CVE-2026-10887
> CVE-2026-10888
> CVE-2026-10889
> CVE-2026-10890
> CVE-2026-10891
> CVE-2026-10892
> CVE-2026-10893
> CVE-2026-10894
> CVE-2026-10895
> CVE-2026-10896
> CVE-2026-10897
> CVE-2026-10898
> CVE-2026-10899
> CVE-2026-10900
> CVE-2026-10901
> CVE-2026-10902
> CVE-2026-10903
> CVE-2026-10904
> CVE-2026-10905
> CVE-2026-10906
> CVE-2026-10907
> CVE-2026-10908
> CVE-2026-10909
> CVE-2026-10910
> CVE-2026-10911
> CVE-2026-10912
> CVE-2026-10913
> CVE-2026-10914
> CVE-2026-10915
> CVE-2026-10916
> CVE-2026-10917
> CVE-2026-10918
> CVE-2026-10919
> CVE-2026-10920
> CVE-2026-10921
> CVE-2026-10922
> CVE-2026-10923
> CVE-2026-10924
> CVE-2026-10925
> CVE-2026-10926
> CVE-2026-10927
> CVE-2026-10928
> CVE-2026-10929
> CVE-2026-10930
> CVE-2026-10931
> CVE-2026-10932
> CVE-2026-10933
> CVE-2026-10934
> CVE-2026-10935
> CVE-2026-10936
> CVE-2026-10937
> CVE-2026-10938
> CVE-2026-10939
> CVE-2026-10940
> CVE-2026-10941
> CVE-2026-10942
> CVE-2026-10943
> CVE-2026-10944
> CVE-2026-10945
> CVE-2026-10946
> CVE-2026-10947
> CVE-2026-10948
> CVE-2026-10949
> CVE-2026-10950
> CVE-2026-10951
> CVE-2026-10952
> CVE-2026-10953
> CVE-2026-10954
> CVE-2026-10955
> CVE-2026-10956
> CVE-2026-10957
> CVE-2026-10958
> CVE-2026-10959
> CVE-2026-10960
> CVE-2026-10961
> CVE-2026-10962
> CVE-2026-10963
> CVE-2026-10964
> CVE-2026-10965
> CVE-2026-10966
> CVE-2026-10967
> CVE-2026-10968
> CVE-2026-10969
> CVE-2026-10970
> CVE-2026-10971
> CVE-2026-10972
> CVE-2026-10973
> CVE-2026-10974
> CVE-2026-10975
> CVE-2026-10976
> CVE-2026-10977
> CVE-2026-10978
> CVE-2026-10979
> CVE-2026-10980
> CVE-2026-10981
> CVE-2026-10982
> CVE-2026-10983
> CVE-2026-10984
> CVE-2026-10985
> CVE-2026-10986
> CVE-2026-10987
> CVE-2026-10988
> CVE-2026-10989
> CVE-2026-10990
> CVE-2026-10991
> CVE-2026-10992
> CVE-2026-10993
> CVE-2026-10994
> CVE-2026-10995
> CVE-2026-10996
> CVE-2026-10997
> CVE-2026-10998
> CVE-2026-10999
> CVE-2026-11000
> CVE-2026-11001
> CVE-2026-11002
> CVE-2026-11003
> CVE-2026-11004
> CVE-2026-11005
> CVE-2026-11006
> CVE-2026-11007
> CVE-2026-11008
> CVE-2026-11009
> CVE-2026-11010
> CVE-2026-11011
> CVE-2026-11012
> CVE-2026-11013
> CVE-2026-11014
> CVE-2026-11015
> CVE-2026-11016
> CVE-2026-11017
> CVE-2026-11018
> CVE-2026-11019
> CVE-2026-11020
> CVE-2026-11021
> CVE-2026-11022
> CVE-2026-11023
> CVE-2026-11024
> CVE-2026-11025
> CVE-2026-11026
> CVE-2026-11027
> CVE-2026-11028
> CVE-2026-11029
> CVE-2026-11030
> CVE-2026-11031
> CVE-2026-11032
> CVE-2026-11033
> CVE-2026-11034
> CVE-2026-11035
> CVE-2026-11036
> CVE-2026-11037
> CVE-2026-11038
> CVE-2026-11039
> CVE-2026-11040
> CVE-2026-11041
> CVE-2026-11042
> CVE-2026-11043
> CVE-2026-11044
> CVE-2026-11045
> CVE-2026-11046
> CVE-2026-11047
> CVE-2026-11048
> CVE-2026-11049
> CVE-2026-11050
> CVE-2026-11051
> CVE-2026-11052
> CVE-2026-11054
> CVE-2026-11055
> CVE-2026-11056
> CVE-2026-11057
> CVE-2026-11058
> CVE-2026-11059
> CVE-2026-11060
> CVE-2026-11061
> CVE-2026-11062
> CVE-2026-11063
> CVE-2026-11064
> CVE-2026-11065
> CVE-2026-11066
> CVE-2026-11067
> CVE-2026-11068
> CVE-2026-11069
> CVE-2026-11070
> CVE-2026-11071
> CVE-2026-11072
> CVE-2026-11073
> CVE-2026-11074
> CVE-2026-11075
> CVE-2026-11076
> CVE-2026-11077
> CVE-2026-11078
> CVE-2026-11079
> CVE-2026-11080
> CVE-2026-11081
> CVE-2026-11082
> CVE-2026-11083
> CVE-2026-11084
> CVE-2026-11085
> CVE-2026-11086
> CVE-2026-11087
> CVE-2026-11088
> CVE-2026-11089
> CVE-2026-11090
> CVE-2026-11091
> CVE-2026-11092
> CVE-2026-11093
> CVE-2026-11094
> CVE-2026-11095
> CVE-2026-11096
> CVE-2026-11097
> CVE-2026-11098
> CVE-2026-11100
> CVE-2026-11101
> CVE-2026-11102
> CVE-2026-11103
> CVE-2026-11104
> CVE-2026-11105
> CVE-2026-11106
> CVE-2026-11107
> CVE-2026-11108
> CVE-2026-11109
> CVE-2026-11110
> CVE-2026-11111
> CVE-2026-11112
> CVE-2026-11113
> CVE-2026-11114
> CVE-2026-11115
> CVE-2026-11116
> CVE-2026-11117
> CVE-2026-11118
> CVE-2026-11119
> CVE-2026-11120
> CVE-2026-11121
> CVE-2026-11122
> CVE-2026-11123
> CVE-2026-11124
> CVE-2026-11125
> CVE-2026-11126
> CVE-2026-11127
> CVE-2026-11128
> CVE-2026-11129
> CVE-2026-11130
> CVE-2026-11131
> CVE-2026-11132
> CVE-2026-11133
> CVE-2026-11134
> CVE-2026-11135
> CVE-2026-11136
> CVE-2026-11137
> CVE-2026-11138
> CVE-2026-11139
> CVE-2026-11140
> CVE-2026-11141
> CVE-2026-11142
> CVE-2026-11143
> CVE-2026-11144
> CVE-2026-11145
> CVE-2026-11146
> CVE-2026-11147
> CVE-2026-11148
> CVE-2026-11149
> CVE-2026-11150
> CVE-2026-11151
> CVE-2026-11152
> CVE-2026-11153
> CVE-2026-11154
> CVE-2026-11155
> CVE-2026-11156
> CVE-2026-11157
> CVE-2026-11158
> CVE-2026-11159
> CVE-2026-11160
> CVE-2026-11161
> CVE-2026-11162
> CVE-2026-11163
> CVE-2026-11164
> CVE-2026-11165
> CVE-2026-11166
> CVE-2026-11167
> CVE-2026-11168
> CVE-2026-11169
> CVE-2026-11170
> CVE-2026-11171
> CVE-2026-11172
> CVE-2026-11173
> CVE-2026-11174
> CVE-2026-11175
> CVE-2026-11176
> CVE-2026-11177
> CVE-2026-11178
> CVE-2026-11179
> CVE-2026-11180
> CVE-2026-11181
> CVE-2026-11182
> CVE-2026-11183
> CVE-2026-11184
> CVE-2026-11185
> CVE-2026-11186
> CVE-2026-11187
> CVE-2026-11188
> CVE-2026-11189
> CVE-2026-11190
> CVE-2026-11191
> CVE-2026-11192
> CVE-2026-11193
> CVE-2026-11194
> CVE-2026-11195
> CVE-2026-11196
> CVE-2026-11197
> CVE-2026-11198
> CVE-2026-11199
> CVE-2026-11200
> CVE-2026-11201
> CVE-2026-11202
> CVE-2026-11203
> CVE-2026-11204
> CVE-2026-11205
> CVE-2026-11206
> CVE-2026-11207
> CVE-2026-11208
> CVE-2026-11209
> CVE-2026-11210
> CVE-2026-11211
> CVE-2026-11212
> CVE-2026-11213
> CVE-2026-11214
> CVE-2026-11215
> CVE-2026-11216
> CVE-2026-11217
> CVE-2026-11218
> CVE-2026-11219
> CVE-2026-11220
> CVE-2026-11221
> CVE-2026-11222
> CVE-2026-11223
> CVE-2026-11224
> CVE-2026-11225
> CVE-2026-11226
> CVE-2026-11227
> CVE-2026-11228
> CVE-2026-11229
> CVE-2026-11230
> CVE-2026-11231
> CVE-2026-11232
> CVE-2026-11233
> CVE-2026-11234
> CVE-2026-11235
> CVE-2026-11236
> CVE-2026-11237
> CVE-2026-11238
> CVE-2026-11239
> CVE-2026-11240
> CVE-2026-11241
> CVE-2026-11242
> CVE-2026-11243
> CVE-2026-11244
> CVE-2026-11245
> CVE-2026-11246
> CVE-2026-11247
> CVE-2026-11248
> CVE-2026-11249
> CVE-2026-11250
> CVE-2026-11251
> CVE-2026-11252
> CVE-2026-11253
> CVE-2026-11254
> CVE-2026-11255
> CVE-2026-11256
> CVE-2026-11257
> CVE-2026-11258
> CVE-2026-11259
> CVE-2026-11260
> CVE-2026-11261
> CVE-2026-11262
> CVE-2026-11263
> CVE-2026-11264
> CVE-2026-11265
> CVE-2026-11266
> CVE-2026-11267
> CVE-2026-11268
> CVE-2026-11269
> CVE-2026-11270
> CVE-2026-11271
> CVE-2026-11272
> CVE-2026-11273
> CVE-2026-11274
> CVE-2026-11275
> CVE-2026-11276
> CVE-2026-11277
> CVE-2026-11278
> CVE-2026-11279
> CVE-2026-11280
> CVE-2026-11281
> CVE-2026-11282
> CVE-2026-11283
> CVE-2026-11284
> CVE-2026-11285
> CVE-2026-11286
> CVE-2026-11287
> CVE-2026-11288
> CVE-2026-11289
> CVE-2026-11290
> CVE-2026-11291
> CVE-2026-11292
> CVE-2026-11293
> CVE-2026-11294
> CVE-2026-11295
> CVE-2026-11296
> CVE-2026-11297
> CVE-2026-11298
> CVE-2026-11299
> CVE-2026-11300
> CVE-2026-11301
> CVE-2026-11302
> CVE-2026-11303
> CVE-2026-11304
> CVE-2026-11305
> CVE-2026-11306
> CVE-2026-11307
> CVE-2026-11308
> CVE-2026-11309

2026-06-05 13:07:31 UTC

Lots of CVEs for Google Chrome were published last night and they link here:
https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html
Which currently doesn't show anything for me. But if you are on Chrome <149.0.7827.53 maybe update that shit.

2026-06-04 16:27:37 UTC

Reminder: Security companies exist to protect the wealthy. Community protects community.

2026-06-03 13:01:30 UTC

- reply

Sorry but I will not allow such unfestive violence. It's June. At least use the right bricks.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/686/299/843/744/445/original/aa5ad058715cfa15.png

2026-06-02 02:02:34 UTC

- reply

say pweeze :neocat_bottom:

2026-06-01 22:14:36 UTC

:brdScream2: Hello, CVE-2026-41089. My name is AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

2026-06-01 13:15:50 UTC

RE: https://flipboard.com/@theseattletimes/tech-news-goc90q5pz/-/a-bamhh3xJQrmBq1vq0Kmnxw%3Aa%3A2857557016-%2F0
:brdScreamHyper2: :oh_no_bubble:
#note1q6p…hvvw

2026-05-29 18:07:20 UTC

- reply

Does anyone know of a list of known malicious and / or vulnerable VS Code extensions? I've seen plenty of articles but haven't found a running list.

2026-05-29 17:25:26 UTC

This is admittedly ugly but if you are in a situation like me where you don't have visibility beyond Splunk and want to see what VS Code extensions are in your environment, this is working well for me today:index=wineventlog_security sourcetype=XmlWinEventLog EventCode=4688 code extensions | stats count BY host, Process_Command_Line | rex field=Process_Command_Line "\\\extensions\\\(?<extension>[^\\\\ \"]+)" | stats values(extension) AS extensions BY host, user | rename host AS "Host", user AS "User", extensions AS "VS Code Extensions"
Obviously you'll need to change the index, etc. to match your environment.

2026-05-29 16:51:35 UTC

The amount of bluetooth shit being added to critical infrastructure systems in this the year of our cryptid 2026 is extremely concerning.

2026-05-28 18:19:05 UTC

RE: https://infosec.exchange/@perfect10_bot/116653573531787961
Perfect 10 in SandboxJS? More like QuicksandboxJS, amirite? :brdLol:
#note147z…8cj6

2026-05-27 19:42:26 UTC

- reply

Weird that the reply was "Don't use Kagi" when Brave is literally at the top of the list from OP though.

2026-05-27 18:25:30 UTC

RE: https://mastodon.social/@nixCraft/116647832352017668
It's too bad that the NoAI version of DDG still returns so much slop for me. But I guess the name is good marketing for them.
#note1mqg…hxne

2026-05-22 23:35:10 UTC

RE: https://flipboard.com/@theseattletimes/local-politics-739ra6hbz/-/a-n_oZ3M7kSXGp4RnTYYmYRw%3Aa%3A2857557016-%2F0
LFG!
> After years of awaiting congressional approval for permanent daylight saving time in Washington, U.S. lawmakers voted Thursday to advance a proposal to stay on daylight saving time for states nationwide
#note1cus…j78y

2026-05-21 20:09:45 UTC

- reply

:crow_plead:

2026-05-21 20:05:18 UTC

Can someone make sure this works before I use it to protect my blog?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/614/355/993/747/033/original/e8e17acaa622c7b6.png

2026-05-21 16:51:13 UTC

https://safedep.io/megalodon-mass-github-repo-backdooring-ci-workflows/
> 5,700+ commits in six hours, 5,561 repositories, one payload: replace a GitHub Actions workflow with a dormant secret exfiltration backdoor. The workflow_dispatch trigger design means these backdoors sit silent until activated, creating no visible CI runs.
> Tiledesk shows how repository compromise cascades to package registries. Seven npm versions carried the backdoor because the maintainer published from a poisoned repo. Application code: untouched. Only the workflow file changed. Code review would catch this, but nobody reviews workflow files in npm packages.
> If your repository received a commit from build-system@noreply.dev> or ci-bot@automated.dev> on May 18, 2026: revert it, audit your workflow files, and rotate any secrets available to GitHub Actions runners. Check your Actions tab for unexpected workflow_dispatch runs. If you use OIDC federation for cloud deployments, review cloud audit logs for token requests from unknown workflow runs.
> If you depend on @tiledesk/tiledesk-server> : pin to version 2.18.5 or earlier until the repository is remediated. The malicious commit remains on the master branch as of this writing.

2026-05-21 15:04:33 UTC

CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. Nope. :middle_finger_claw:
https://www.cisa.gov/known-exploited-vulnerabilities-catalog

2026-05-21 14:51:50 UTC

Out: robots.txt
In:<IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTP_USER_AGENT} ^(Googlebot|Googlebot-Image|Googlebot-Video|Googlebot-News|Storebot-Google|Google-InspectionTool|GoogleOther|GoogleOther-Image|GoogleOther-Video|Google-CloudVertexBot|Google-Extended|APIs-Google|AdsBot-Google-Mobile|AdsBot-Google|Mediapartners-Google).*$ [NC] RewriteRule ^(.*)$ http://goatse.cx [L,R=301] </IfModule>

2026-05-21 02:13:19 UTC

I used to be a penetration tester. Yes for real. If you knew me you would probably be surprised because I have no idea what I'm doing. But in like 2013 or so there were three N-day Metasploit modules for Java released in a week or so. I had a couple engagements that week. It was fish in a barrel but the customers made it sound good. Anyway, the point is that just because someone appeared to do something impressive a decade ago doesn't mean they know what they're talking about now.

2026-05-19 19:44:54 UTC

Well this is fun.
https://www.varonis.com/blog/ghosttree-ntfs-trick
> With just two lines of code, a user can generate endless valid paths, making it impossible to finish scanning parent directories with the dir command recursively. The same applies to EDR products that scan folders for malicious files. An attacker places malware in the parent directory, sets up the GhostTree structure, and the containing folder becomes effectively unscannable. The scan hangs. The malicious files go unexamined.

2026-05-19 14:56:44 UTC

- reply

No but seriously. I swear almost every report I read where Metasploit is used, they assume that Metasploit is used because it's all the attacker knows rather than admitting that a well-resourced attacker will still want an easier, more reliable attack if possible.

2026-05-19 14:36:37 UTC

Me: Using derogatory terms like "script kiddies" to describe attacks that do not require a high skill level will not only show that you care more about your ego and arrogance than the reality of an incident, it will also subconsciously focus your attention on low-skill attack paths, allowing more covert operations to continue unobserved.
Also me: Get the fuck outta here with that sloppy-ass clanker bullshit.

2026-05-18 22:32:31 UTC

- reply

Because they're on the naughty list.
https://blog.gayint.org/intel/easyBlockTlds.txt

2026-05-18 21:34:25 UTC

- reply

https://codeberg.org/huronbikes/Catte/

2026-05-18 20:57:20 UTC

RE: https://infosec.exchange/@briankrebs/116597569851456486
BRB, I need more popcorn for that screenshot alone. :blobcatpopcorn:
#note19ge…rw5s

2026-05-18 20:42:13 UTC

So when you sign up for Internet with Cox, do they automatically add you to a botnet or do you have to do that yourself after they get you online? Asking for an AS22773.

2026-05-18 14:54:06 UTC

As aggressively as the Linux kernel has been getting fucked the past couple weeks, I'm starting to worry that maybe they forgot the safe word.

2026-05-17 17:00:49 UTC

RIP Snohomish County :blobsalute:
https://www.fox13seattle.com/news/snohomish-county-911-ai-field-calls
> Snohomish County 911 is embracing AI, saying it’s benefiting the public and helping dispatchers.
> So far, they’ve utilized one AI system to help process hundreds of thousands of non-emergency calls.

2026-05-16 02:19:41 UTC

- reply

What, are writing an 8-K or something?

2026-05-16 02:17:33 UTC

- reply

Nice try. Last time I did that they chewed through an interior wall.

2026-05-16 02:10:53 UTC

- reply

Definitely. But now I need to delete some security camera footage. 😅

2026-05-16 02:06:38 UTC

Note to self: You are too old to chase the dog. Be smarter.

2026-05-15 17:30:20 UTC

No new npm packages compromised? No new Linux kernel 0days? Is everyone waiting for EOD or is Friday no longer the day to publish shenanigans?

2026-05-15 16:37:14 UTC

RE: https://infosec.exchange/@ifin/116579558486741231
And it better be selectable text and not pdfs or images, you sociopaths.
#note1xvm…5st0

2026-05-15 13:38:42 UTC

- reply

Where did you get these pictures of my CIO?

2026-05-15 02:32:44 UTC

- reply

Weird way to represent the home state of Sir Mix-a-Lot.

2026-05-15 02:13:14 UTC

- reply

Does that motherfucker look fancy to you? 🧸

2026-05-15 02:03:27 UTC

- reply

That's what I thought too but the apparent fur color change around the shoulders and difficulty seeing the shoulders have me unsure.

2026-05-15 01:23:45 UTC

Can anyone tell me what kind of bear this is? I need to settle a bet so please explain your answer.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/575/971/133/831/289/original/d438df60a353a778.jpg

2026-05-15 01:07:29 UTC

Occasional reminder to donate to your Mastodon admin if possible. They're enabling us to hang out here and shitpost without ads and weird corpo crap. :heart_cyber:

2026-05-15 00:30:32 UTC

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/575/760/813/347/555/original/2be1ab84eebd784f.jpg

2026-05-14 21:50:52 UTC

*sigh*
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/575/136/585/510/812/original/eea48866e547b830.png

2026-05-14 20:44:20 UTC

The 0days will continue until you#
**GET YOUR SHIT OFF THE FUCKIN' INTERNET.**

2026-05-14 17:02:55 UTC

┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┳┻|
┻┳|
┻┳|
┻┳|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┳┻|
┻┳|
┻┳|
┻┳|
┳┻|
┻┳|
┻┳|
┳┻|
┳┻|
┻┳|
┳┻|
┻┳|
┳┻| _ The reason so many
┻┳| •.•) orgs are pushing AI is
┳┻|⊂ﾉ to blame it for their vulns
┻┳| instead of taking responsibility.

2026-05-14 14:27:37 UTC

- reply

Yessss. And I learned yesterday that @npub1gkn…jqyg could help make the cheese.

2026-05-14 13:28:22 UTC

RE: https://newsie.social/@TheNeedling/116571561597265571
This is June in Seattle suburbs.
#note1c0t…hmlg

2026-05-14 13:24:07 UTC

RE: https://infosec.exchange/@krypt3ia/116572394629501982
Shot:
> Today we announced our Q3 FY26 earnings with record revenue of $15.8 billion, up 12 percent year over year, and double-digit top and bottom-line growth. The ELT and I could not be prouder of the growth you have all delivered for Cisco.
Chaser:
> With this, we are making changes today that will result in the reduction of our overall workforce in Q4
#note1cg4…yuf4

2026-05-14 00:43:47 UTC

- reply

How do dogs just know? I've had my dog a little over six months and he couldn't care less about the kitchen unless someone is opening a cheese. And it doesn't matter what kind of cheese or packaging, he just knows. It's wild to me. He collects his cheese tax better than the IRS does real taxes.

2026-05-13 23:49:46 UTC

- reply

I've not heard it called that. TIL.

2026-05-13 23:45:37 UTC

- reply

IDK, I'm not a fan of what FinTech has done either.

2026-05-13 23:29:17 UTC

- reply

🎶 It's easy if you try 🎶

2026-05-13 23:25:38 UTC

- reply

Imagine how well things would work if they were engineered rather than simply developed.

2026-05-13 22:21:05 UTC

RE: https://mastodon.social/@bagder/116569577763472812
AI Bros: Oh no Mythos is so scary it's going to destroy everything!
Mythos: Here's one sev:LOW in curl.
Researchers: Hold our beer you fucking clanker.
#note12v8…yn3n

2026-05-13 20:26:09 UTC

- reply

Indeed. But I saw more today and it made me mad so I posted it.

2026-05-13 20:03:20 UTC

Naughty ASN of the day: AS204957

2026-05-13 17:55:05 UTC

RE: https://chaos.social/@realhackhistory/116567934489978305
Going through the #GAYINT threat actor names and trying to think about how dank and funky some of those would be as weed strains.
#note14uy…4nxa

2026-05-13 14:20:28 UTC

Are there any American newspapers left that haven't turned into social media? They all seem to be: <li>Ads</li><li>Reprint quotes from rich people with no validation or verification</li><li>Reply guys</li><li>Ads</li><li>"Opinion" pieces</li><li>Reprints from other sources</li><li>Ads</li><li>Billionaire buy-outs to kill the platform</li><li>Ads</li>
Even the local stuff generally doesn't have any investigative aspects anymore.
I know it's been this way for a while but I just now realized that they really are just legacy social media. And that's sad.

2026-05-12 21:11:18 UTC

- reply

Oh shit I missed it was a grift. But of course it is.

2026-05-12 20:04:04 UTC

Some of you may have heard rantings about how firewall vendors don't allow customers to block by ASN similarly to how they can geoblock. Good news if you're a Fortinet shop ( I don't get to say that very often ):
Here's an ER that was submitted to Fortinet to add it as a function: NFR 1228612
Reach out to your account reps and SEs and get your org added to the list to try to get it to happen. I don't have ER numbers to share for other vendors but there have been several submitted to different vendors.

2026-05-12 17:43:54 UTC

I made a joke about Cloudflare the other day and included these domains, but you really do probably want to block them:
> cloudflareserver1.com
> cloudflareserver2.com
> cloudflareserver3.com
> cloudflareserver4.com
> cloudflareserver1.site
> cloudflareserver2.site
> cloudflareserver3.site
> cloudflareserver4.site
> cloudflareserver1.space
> cloudflareserver2.space
> cloudflareserver3.space
> cloudflareserver4.space
and possibly any site with this domain in the cert:
> zxcasadminpusat.id
#GAYINT #threatIntel

2026-05-12 16:18:20 UTC

- reply

Counterpoint: We should all eat more potatoes.

2026-05-12 14:05:07 UTC

- reply

You sure seem to give the regime a lot of benefit of the doubt. But this bit made me actually LOL:
> The FCC doesn't want back doors around.
The FCC DGAF about that. Do you really think they would have let the telecoms sweep the Typhoons under the rug like they did if they cared about anything security related?

2026-05-12 13:41:58 UTC

- reply

I skipped the stuff about the drones because I just don't care enough but I would not be surprised if there are contradictions in there. That seems to be the way of this regime.

2026-05-12 13:34:12 UTC

- reply

but outside has birds...

2026-05-12 12:45:11 UTC

I don't know, I'm beginning to think the bans are not really about security... :brdThink:
https://therecord.media/fcc-pushes-ban-on-updates-to-foreign-routers-drones-2029

2026-05-12 00:09:17 UTC

> Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. Based on the information they have shared, the data involved was returned to Instructure. They also received assurances that the data will not be further shared and confirmation that any copies were deleted. Instructure has stated that no schools or districts will be extorted as a result of this incident.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/558/694/190/047/295/original/42425f7895668f62.jpeg

2026-05-11 22:38:00 UTC

- reply

WTF? It wasn't working for me earlier but now it is. I must have tried at the wrong time. Or typed something wrong. That's pretty likely too.

2026-05-11 22:33:27 UTC

- reply

Even if it's just UDP / 500 and not all possible listeners.

2026-05-11 22:33:07 UTC

- reply

I'm not worried about DM. I'm curious about the numbers of exposed IKEv2 services by endpoint type. Cisco, Palo, Windows, etc.

2026-05-11 22:30:44 UTC

- reply

Curious about the exposure of a certain firewall vendor's IKEv2 usage.

2026-05-11 21:47:09 UTC

I sure wish Shodan scanned for open IKEv2 services. :-(

2026-05-11 16:09:40 UTC

- reply

Is there documentation of it? I know there have been some "AI" tools that have been doing that but I hadn't seen anything confirm Mythos specifically was doing it.

2026-05-11 15:36:25 UTC

Someone give a college CtF club some pizzas, a case of Monster, and a weekend and see how their curl bug hunting goes compared to Mythos.