Kevin Beaumont

Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.

I have Direct Messages disabled - you can send them, but I will never receive them.

Public Key

npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw

NIP-05 Address

GossiTheDog@cyberplace-social.mostr.pub

Profile Code

nprofile1qqs0dpc2ln0yfq8vs5y02qcysk0pffgnp8ljf2elp7rzc54acjhcw3cpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43q408pgy

Publishing to

relay.mostr.pub

Author Public Key

npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw

Show more details

Last Notes

2026-04-24 22:49:46 UTC

Tokenmaxxing. Tokenmaxxing 🤣 amazing stuff.
https://cyberplace.social/system/media_attachments/files/116/462/120/240/737/863/original/f9f6c75bb74caf1d.jpeg

2026-04-24 12:25:10 UTC

- reply

Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing.
It’s a very strange situation where MS were covertly operating an AI service, while pretending it was an open source project.

2026-04-23 15:59:01 UTC

New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened.
https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7

2026-04-21 22:40:48 UTC

If anybody is wondering, mastodon.social server got DDoS’d yesterday but it had no impact on cyberplace.social (and other Mastodon servers) - no queue issues either. Everything just worked as expected.
In other news, “decentralised” network BlueSky has been down so much recently the status page doesn’t even work.
https://cyberplace.social/system/media_attachments/files/116/445/099/478/705/251/original/4b70c2e2e15bcb98.jpeg

2026-04-17 07:27:32 UTC

Ah Ted. I see you’ve decided to become a Mythos marketing person now, Ted. https://www.bbc.co.uk/news/articles/c2ev24yx4rmo

2026-04-15 11:46:49 UTC

- reply

Anthropic: we can't release our vuln research as it will end the internet as we know it!!1!
Me: if I release Teams Roulette I'll probably cause global chaos with people getting their knobs out in board meetings
https://cyberplace.social/system/media_attachments/files/116/408/555/607/595/490/original/bb5138a4efe55296.mp4

2026-04-15 09:18:55 UTC

I vibe coded a webapp called Teams Roulette where it joins you to random Microsoft Teams meetings, using Teams linked scraped from the internet.
Debating on if I should publish this one 🤣

2026-04-11 09:04:10 UTC

Shout out to the dude in Manchester who has decided to try to cash in on the GenAI boom and then shit the bed when journalists tried to fact check anything.
https://manchestermill.co.uk/is-chris-kenna-manchesters-first-ai-billionaire-in-the-making-or-a-serial-fantasist/

2026-04-07 09:31:02 UTC

Where are the Transformers
Earth and Moon from DSCOVR NASA's Earth Polychromatic Imaging Camera (EPIC) aboard the Deep Space Climate Observatory (DSCOVR) satellite captured this unique view of the Moon as it moved in front of the sunlit side of Earth last month. This view shows the fully illuminated “dark side” of the moon that is never visible from Earth.
https://cyberplace.social/system/media_attachments/files/116/362/723/296/269/529/original/af0f97cbff7f5fa3.jpeg

2026-04-03 16:01:14 UTC

I just found a room in my house I didn’t know existed. There’s also a downstairs area I didn’t know about until today, accessible via what I thought was a cupboard.

2026-03-31 15:20:51 UTC

Oracle have laid off 30k employees today. They did it to personal email accounts at 6am 🫡 saying they needed the money to spend on GenAI instead. https://thenextweb.com/news/oracle-layoffs-march-2026

2026-03-30 18:36:04 UTC

The power of ChatGPT
https://cyberplace.social/system/media_attachments/files/116/319/562/321/318/871/original/e80d682dfa88ce35.jpeg

2026-03-25 16:46:31 UTC

- reply

@nprofile…44dh it's not under active exploitation

2026-03-25 13:34:33 UTC

I think the funniest sentence I've read in the past 10 years is "What you made with Sora matters". No it fucking doesn't.

2026-03-24 22:19:12 UTC

- reply

For those who don't think the user base is dwindling, a few years ago Mastodon was celebrating about 2m monthly active users. Nowadays it's 0.7m.
https://cyberplace.social/system/media_attachments/files/116/286/467/848/529/015/original/5fe13660b3b7887c.png

2026-03-24 22:14:44 UTC

I've had 20 sign ups to my Mastodon server in the past 48 hours, and 100% of them have been scammers, phishers and SEO spammers.
I make an effort to go in and suspend the accounts, nobody ever protests the suspension.
The fediverse is at a crossroads, the user base is dwindling and the new users are mostly just SEO spam accounts.

2026-03-24 17:36:55 UTC

It's nice and easy to record random Teams meetings, if you want to replicate this for biz meetings. All you need is the meeting link, they're freely available on URL scanning databases.
https://www.404media.co/this-company-is-secretly-turning-your-zoom-calls-into-ai-podcasts/

2026-03-20 17:38:35 UTC

I just googled something and Google put its AI summary top, which incorrectly used a Facebook post - misinterpreting it. The Facebook post itself was an AI summary of a user post - which AI had also misinterpreted. The result is the Google answer was just total bollocks.
10/10 no notes.

2026-03-20 10:05:10 UTC

German continues to be amazing
https://cyberplace.social/system/media_attachments/files/116/260/936/079/710/234/original/05c016fb16a0c22f.jpeg
https://cyberplace.social/system/media_attachments/files/116/260/936/113/575/092/original/c00f2ff0abb44403.jpeg

2026-03-12 16:00:40 UTC

Don't go to Dubai. They keep arresting people using a broad cybercrime law. https://www.bbc.co.uk/news/articles/c743g4yn4k8o

2026-03-10 22:55:53 UTC

If anybody wonders where my nickname comes from, I stole it Digitiser, a 90s TV video game magazine. It was a cartoon dog that did video game gossip.
Digitiser also featured a worm being sick. Yes, that was a worm. Honest.
https://cyberplace.social/system/media_attachments/files/116/207/341/695/047/508/original/e9b44dfd4ab85104.jpeg

2026-03-10 08:38:06 UTC

This is gonna catch some folks out 😅

2026-03-05 08:05:28 UTC

https://cyberplace.social/system/media_attachments/files/116/175/531/342/495/194/original/71d78ee2d4465a91.jpeg
https://cyberplace.social/system/media_attachments/files/116/175/531/384/884/942/original/cead59a46f5992e0.jpeg

2026-03-04 12:32:56 UTC

There's a bunch of media reporting - I don't know how accurate - that Windows 12 will require an NPU (a fake AI chip basically), which almost no PCs have, amongst other stupid features.
Requiring TPM in Windows 10 was stupid and created PC landfill during an economic, global and ecological crisis, to drive hardware profit margins and Microsoft Surface sales.
Requiring NPUs would do the same, during an additional cost of living crisis. If Microsoft go ahead with that, it's time to swap OS.

2026-03-03 22:39:43 UTC

BlueSky, the fully decentralised (wink wink) social media platform is down worldwide again.

2026-03-03 15:28:35 UTC

https://cyberplace.social/system/media_attachments/files/116/165/948/191/274/257/original/fbf36d577c0824b5.jpeg

2026-03-01 20:59:32 UTC

It's Monday tomorrow, aka the day the cybersecurity industry will suddenly decided it is the important thing in the Iran situation - gonna be peak LinkedIn.

2026-02-28 18:20:14 UTC

- reply

@nprofile…ulnl anything you find interesting is different to "all"

2026-02-28 17:58:18 UTC

- reply

@nprofile…ulnl just to be clear, they didn't "steal all of the art" - that's false. They stole some of the artists work. Yes, there is a game, it's an extraction shooter. No, it isn't particularly great.

2026-02-28 17:48:48 UTC

- reply

@nprofile…ulnl mostly not true. Some of the artwork in the early testing versions was stolen. It's all been removed, and they paid the artist when they got called out.

2026-02-28 17:42:19 UTC

#Marathon time
https://cyberplace.social/system/media_attachments/files/116/149/487/367/347/826/original/7f411d338fa1ea61.jpg

2026-02-25 10:48:06 UTC

Tip to CISOs - every time you hear the phrase "defenders need to move at machine speed", drink. It's AI sales speak for "buy our magic box".

2026-02-24 14:34:30 UTC

During the Falklands War, then Prince Andrew demanded to be allowed on a boat for transport somewhere. My dad told him to “Piss off”, to his face, and got him taken off the boat. Caused a big upset at the time.
Anyway, nice to see Westminster playing catch up.
https://cyberplace.social/system/media_attachments/files/116/126/096/244/096/362/original/1a27788f3b4bc2ff.jpeg

2026-02-22 00:00:20 UTC

If you’re an investor and you want to invest minus GenAI companies https://www.axios.com/2026/02/20/ai-goldman-sachs-stocks-index

2026-02-21 08:33:05 UTC

A retired British primary school teacher with a British passport and a valid visa was shackled, chained and detained for six weeks by ICE in the US while on holiday.
https://www.theguardian.com/us-news/2026/feb/21/karen-newton-valid-visa-detained-ice

2026-02-19 23:39:44 UTC

Why your enterprise VPN products suck at cybersecurity (their function).
https://www.bloomberg.com/news/features/2026-02-19/vpn-used-by-us-government-failed-to-stop-china-state-sponsored-hackers?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc3MTU0MzY2MSwiZXhwIjoxNzcyMTQ4NDYxLCJhcnRpY2xlSWQiOiJUQVFBSzJLSUpIQ0wwMCIsImJjb25uZWN0SWQiOiI0OEFDOEE5MkEwNTM0MkQ4OEIyRjkwQjhDMTgzMTdDMyJ9.FyNwy3BhYgwWQz6h-4niigR5c5ZQ3zHup-jdtJcr5BA
https://cyberplace.social/system/media_attachments/files/116/099/930/078/882/025/original/e0424ffdef3594cc.jpeg

2026-02-09 13:59:27 UTC

Isn’t this called corruption

2026-02-06 19:32:12 UTC

One day Microsoft will actually deploy its own DLP products etc.

2026-02-03 10:14:13 UTC

Offices belonging to Elon Musk's social media platform X in France are being raided, the Paris prosecutor's office says.
The prosecutor's office said both Musk and former X chief executive officer Linda Yaccarino had also been summoned to appear at hearings in April as part of its probe.
https://www.bbc.co.uk/news/articles/ce3ex92557jo

2026-02-02 23:35:43 UTC

- reply

Microsoft is reviewing its Copilot+ integrations, and is saying internally that Microsoft Recall has failed.
https://www.windowscentral.com/microsoft/windows-11/microsoft-is-reevaluating-its-ai-efforts-on-windows-11-plans-to-reduce-copilot-integrations-and-evolve-recall

2026-02-02 10:47:20 UTC

- reply

Here’s my original blog with threat hunting suggestions: https://doublepulsar.com/small-numbers-of-notepad-users-reporting-security-woes-371d7a3fd2d9
Of note - the cyber industry entirely slept through it. A cartoon porg with #GAYINT threat intelligence had to blow it up.

2026-02-02 10:44:23 UTC

- reply

Notepad++ have today confirmed their auto process was compromised by Chinese nation state threat actors, in a supply chain hack: https://notepad-plus-plus.org/news/hijacked-incident-info-update/
This backs up my blog from late last year, with #GAYINT threat actor mapping to Funky Stamen.
The infrastructure and update mechanisms have since been tightened. For what it’s worth - entry was to telcos and financial services with interests aligned to China. Notepad++ dev did a great job treating issue seriously.

2026-01-31 10:07:59 UTC

Remember that time I ended up in court with Elon Musk after he bet me the cave diver was a pedo?
Anyway, here’s Elon begging Jeffrey Epstein for crazy parties on his private island, several years after Epstein was convicted of sex trafficking girls.
https://cyberplace.social/system/media_attachments/files/115/989/152/781/483/797/original/6a3321b418dabc6d.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/801/685/071/original/bc2967f3e8b6f93c.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/814/991/715/original/9207647ace61a0e0.jpeg

2026-01-28 22:43:33 UTC

If this was a standard analyst, do you think there would be consequences? https://www.politico.com/news/2026/01/27/cisa-madhu-gottumukkala-chatgpt-00749361

2026-01-23 11:56:33 UTC

I was wondering when a reporter would uncover this.
So BitLocker is super secure, right? Well... BitLocker recovery keys are backed up to Microsoft's Cloud - and they give them out to law enforcement on request. Using the BitLocker recovery key, you can just unlock the device without a PIN etc.
https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/

2026-01-22 08:23:28 UTC

- reply

Just to be clear btw - am I saying GenAI can’t ever be used for vulnerability research? No.
I know some very smart people - like in the 0.1% of the industry, with decades of experience - who’ve ferreted out new vulns after spending months of work with GenAI per vuln.
But.. almost everybody using these tools ain’t doing that. I don’t think it’s cognitive amplification is it’s just spraying turd at people. It’s going to have a profoundly negative impact within companies.

2026-01-22 08:13:50 UTC

- reply

Satya Nadella (who I like, btw) keeps referring to GenAI as a cognitive amplifier.. but if you’ve read things like curl’s bug bounty submissions, it isn’t amplifying cognition.
People are submitting issues they don’t understand, then largely lying about it being an AI generated submission. GenAI is also a stupidity amplifier. And it’s very hard to combat stupidity when it is automated.
https://cyberplace.social/system/media_attachments/files/115/937/743/521/050/694/original/f4f1cffc18645d5f.mp4

2026-01-21 23:42:08 UTC

Will Twitter have a Nazi starter pack
https://cyberplace.social/system/media_attachments/files/115/935/732/281/942/369/original/6b18172157254b60.png

2026-01-21 21:30:37 UTC

- reply

https://cyberplace.social/system/media_attachments/files/115/935/207/517/824/121/original/f04bc050b70ce4be.jpeg
https://cyberplace.social/system/media_attachments/files/115/935/214/314/150/969/original/6e58a15c3f347ddc.jpeg

2026-01-21 20:30:18 UTC

Curl, one of the largest and widely used open source projects, is to stop bug bounty at the end of this month due to being overwhelmed by Generative AI slop bug bounty reports. https://github.com/curl/curl/pull/20312

2026-01-20 21:11:30 UTC

- reply

For elder security greybeards, you may remember this is almost the exact same bug that Solaris introduced a decade before 🫡

2026-01-20 20:56:01 UTC

- reply

Bug was introduced after this report https://lists.gnu.org/archive/html/bug-inetutils/2014-12/msg00012.html

2026-01-20 20:49:14 UTC

lol https://seclists.org/oss-sec/2026/q1/89
The telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USER environment variable received from the client as the last parameter.
If the client supply a carefully crafted USER environment value being the string "-f root", and passes the telnet(1) -a or --login parameter to send this USER environment to the server, the client will be automatically logged in as root bypassing normal authentication processes.

2026-01-19 21:27:16 UTC

- reply

Microsoft are upselling security controls for Microsoft Recall, which allow orgs to limit what it records specifically - if the org pay for Microsoft Purview.
I’ve had a look at how this works under the hood, it is using undocumented features in Recall. https://learn.microsoft.com/en-us/purview/dlp-recall-get-started
https://cyberplace.social/system/media_attachments/files/115/923/872/405/480/668/original/f1e8f29ac6750d23.jpeg

2026-01-19 12:15:29 UTC

Being sassed by my washing machine 💀
https://cyberplace.social/system/media_attachments/files/115/921/707/920/432/464/original/44b1d38dc823c684.jpeg

2026-01-14 23:50:37 UTC

- reply

X has finally climbed down over Grok generating non-consensual undressing, after many of the major regulators got involved.
I’d strongly recommend countries have robust laws and regulation in place for GenAI being used to brutalise women and minorities as ultimately the whole episode shows it’s only external pressure that will hold companies accountable, not self regulation and common sense. X basically tried to monetise incels harassing people.
https://cyberplace.social/system/media_attachments/files/115/896/117/925/141/358/original/192779689620e68f.jpeg

2026-01-14 10:15:38 UTC

- reply

Something which 100% is going to cause bad outcomes in business is you can ask Microsoft 365 Copilot to write a Word document supporting the dumbest idea ever, and it will do it, and won’t label itself Copilot generated.
You can ask it for a 100 page document justifying not having a security team and it’ll do it. Forward that report upwards, save £3m, leave a year later with big bonus. 🫡

2026-01-14 10:07:08 UTC

Chief of police is going to lose their job methinks after using Microsoft Copilot 365 to write a Word document which had errors throughout rather than do his job.. then lying about it to press. https://www.bbc.co.uk/news/live/c394zlr8e12t
https://cyberplace.social/system/media_attachments/files/115/892/893/714/917/958/original/e4e9e49382785a1a.jpeg

2026-01-12 19:14:44 UTC

- reply

The UK government is to enforce a law this week which will make it a criminal offence to supply tools designed to create non-consensual intimate images https://www.bbc.co.uk/news/articles/cq845glnvl1o

2026-01-12 17:10:53 UTC

- reply

OFCOM have opened a formal investigation into X.
They may fine X 10% of its global revenue, require all advertisers to withdraw as an X client, and require UK internet providers to block X. https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-launches-investigation-into-x-over-grok-sexualised-imagery

2026-01-11 21:31:17 UTC

- reply

Before we get to the staff members at cyber companies, the Financial Times has the staff at X and xAI. https://www.ft.com/content/ad94db4c-95a0-4c65-bd8d-3b43e1251091
https://cyberplace.social/system/media_attachments/files/115/878/594/073/604/528/original/9254be064fbf681e.jpeg
https://cyberplace.social/system/media_attachments/files/115/878/594/129/924/149/original/8bd9a78012f94e42.jpeg
https://cyberplace.social/system/media_attachments/files/115/878/594/195/632/724/original/c927029a05074f99.jpeg
https://cyberplace.social/system/media_attachments/files/115/878/594/221/153/748/original/d6b88f6cf4453a34.jpeg

2026-01-11 21:21:57 UTC

- reply

I asked Cisco why it is directly funding an AI tool being used to non-consensual undress and brutalise women and children, having this week invested in xAI. They replied No comment.
I have a list of other cybersecurity providers invested in xAI, I am working my way through those and plan to feature the key staff members involved in a write up.

2026-01-11 21:16:04 UTC

- reply

Some Grok users, mostly men, began to demand to see bruising on the bodies of the women, and for blood to be added to the images. Requests to show women tied up and gagged were instantly granted.
‘Add blood, forced smile’
https://www.theguardian.com/news/ng-interactive/2026/jan/11/how-grok-nudification-tool-went-viral-x-elon-musk

2026-01-10 19:07:24 UTC

- reply

@nprofile…kueg it’s not the only anti spam measure on my instance.

2026-01-10 09:22:58 UTC

One for #mastoadmin - I have reason to believe the UK government may ban Twitter within a week or two, so you may see an influx of users.
Be prepared to close registrations early in order to prevent server instability, it will automatically direct users to other servers for sign up.

2026-01-09 20:50:40 UTC

- reply

The UK government says the move by X to limit Grok to paid users is “insulting” and basically monetising abuse, and they would support a ban of X in the UK if recommended by the regulator. They’ve asked the regulator for recommendations in days. https://www.bbc.co.uk/news/articles/c99kn52nx9do

2026-01-09 09:11:32 UTC

- reply

It looks like the threat of X being banned in the UK worked - Grok has been limited to paid users. Take your crying with laughter emojis and stick them up your arse, Elon. https://www.bbc.co.uk/news/articles/c99kn52nx9do

2026-01-08 22:36:04 UTC

- reply

This is still happening btw, roughly one a second. People are doing it to female UK MPs and cabinet members, and getting Grok to CC with the images.

2026-01-08 22:34:34 UTC

- reply

The UK PM has asked communication regulator for options around banning Twitter from operating in the UK, due to their refusal to deal with unconsensual undressing of women and girls. https://www.telegraph.co.uk/business/2026/01/08/musks-x-could-be-banned-in-britain-over-ai-chatbot-row/

2026-01-07 23:37:48 UTC

- reply

Bloomberg reports Twitter has now become the number one app for deepfake undressing of women by a sizeable amount. https://www.bloomberg.com/news/articles/2026-01-07/musk-s-grok-ai-generated-thousands-of-undressed-images-per-hour-on-x?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc2NzgyODQzMywiZXhwIjoxNzY4NDMzMjMzLCJhcnRpY2xlSWQiOiJUOEhRS0hLR0lGUE8wMCIsImJjb25uZWN0SWQiOiI0OEFDOEE5MkEwNTM0MkQ4OEIyRjkwQjhDMTgzMTdDMyJ9.PYX4upGg_MvIrbPiTpwANI8MCqfAJnZFxxFdD-e2OyQ
https://cyberplace.social/system/media_attachments/files/115/856/445/117/063/389/original/a4ebd8f03b671776.jpeg

2026-01-07 23:35:42 UTC

- reply

The Information Commissioners Office has put out a statement on LinkedIn about serious concerns about xAI and Grok. https://www.linkedin.com/posts/information-commissioner%27s-office_new-a-statement-in-response-to-grok-ai-on-activity-7414693804001329153-N6qL?utm_source=share&utm_medium=member_ios&rcm=ACoAACWLjocBFQ8Y5Jn8ptUamSXWFWCD5cA1Rto
https://cyberplace.social/system/media_attachments/files/115/856/436/036/926/950/original/89fbdff9bd186772.jpeg

2026-01-07 08:04:05 UTC

Gone that Dell, of all companies, are the first to realise (or say it out loud) that their customers don’t want AI PCs - and it’s actively hindering sales.
https://www.pcgamer.com/hardware/dells-ces-2026-chat-was-the-most-pleasingly-un-ai-briefing-ive-had-in-maybe-5-years/

2026-01-06 22:06:15 UTC

If you invade a country it isn’t “acquiring”. https://www.bbc.co.uk/news/articles/cwyg1jg8xkmo
https://cyberplace.social/system/media_attachments/files/115/850/422/849/058/171/original/56dc5e650ea36928.jpeg

2026-01-06 16:07:06 UTC

https://www.ft.com/content/ad94db4c-95a0-4c65-bd8d-3b43e1251091?accessToken=zwAGR7kzep9gkdOtlNtMlaBMZdO9jTtD4SUQkQ.MEYCIQCdZajuC9uga-d9b5Z1t0HI2BIcnkVoq98loextLRpCTgIhAPL3rW72aTHBNL_lS7s1ONpM2vBgNlBNHDBeGbHkPkZj&sharetype=gift&token=a7473827-0799-4064-9008-bf22b3c99711
https://cyberplace.social/system/media_attachments/files/115/849/010/354/740/196/original/39d7f73bcc4dc8c9.png

2026-01-04 16:20:53 UTC

wonder why the US kidnapped his wife
https://cyberplace.social/system/media_attachments/files/115/837/740/510/624/982/original/cacc40b07bf93cfd.png

2026-01-04 16:05:19 UTC

what
https://cyberplace.social/system/media_attachments/files/115/837/679/349/822/968/original/08dd00f2b85e8398.png

2026-01-04 08:18:38 UTC

Corpoelec (Venezuela state energy company) internet facing advanced metering infrastructure and wind farm management system infrastructure has been offline for just over a day, still down - been monitoring it.
It stopped responding 3am yesterday, GMT.

2026-01-03 12:08:07 UTC

- reply

If anybody is wondering almost all the replies on that are championing it.. and they’re all from people who don’t work in security, but at security vendors.
Maybe one day security vendors will learn to talk to their customers, and not call them “human-on-the-glass”.

2026-01-03 12:04:02 UTC

Oh good the AI SOC is dead after a year and we’re on to the next hype train, Agentic MDR! Totally a real world thing and not marketing bollocks, no sireeeee!
https://cyberplace.social/system/media_attachments/files/115/831/062/253/832/911/original/7f399c35d4b64ec6.jpeg

2026-01-03 09:43:41 UTC

What the fuck.
https://cyberplace.social/system/media_attachments/files/115/830/516/653/080/114/original/cd7b2bcc424340bf.jpeg

2025-12-31 14:53:18 UTC

- reply

I don’t think the AI bubble will burst any time soon.
Cryptocurrency is still going strong, and you’ve got a US president in office enriching himself and his family off crypto and web3 schemes.
We’re in the vibe game now. Let’s destroy everything and be legends and then move on to the next grift.

2025-12-31 14:49:06 UTC

- reply

The GenAI stuff is interesting as it’s consuming the planet, the economy, will lead to inflation and other major knock on impacts.. and there’s basically no backstop or examination of value.
A bunch of billionaires basically said ‘this is the future’ and there’s no checks and balances at all in capitalism to fact check - that’s the exploit.

2025-12-31 14:36:25 UTC

Nvidia RTX 5090 prices to over double in January.
My stupid gaming PC, that I use for Flight Sim, has 192gb RAM, a 5090 and 12tb of NVMe.. in the age of GenAI this stupid PC has become by far the most valuable thing I own. I could sell it and have the deposit to buy a mansion.
https://cyberplace.social/system/media_attachments/files/115/814/669/117/097/777/original/649a85b90a3bd7c7.jpeg

2025-12-28 18:45:57 UTC

- reply

this is what wasting 408 hours in #Starfield looks like, my primary space ship (I have 8... call me 8 Jags) and my main outpost. Really boring basically.
It's on the planet Aranae 1 in the Arane system.. which I've 100% surveyed.
My crew are also a bunch of drunks nowadays.
https://cyberplace.social/system/media_attachments/files/115/798/628/647/597/590/original/fca50c8c037e622e.png
https://cyberplace.social/system/media_attachments/files/115/798/632/027/603/152/original/991d3807bcf856f4.png
https://cyberplace.social/system/media_attachments/files/115/798/636/990/621/627/original/b209182ccae53792.png
https://cyberplace.social/system/media_attachments/files/115/798/653/210/291/103/original/0de7b865bd6a3daf.png

2025-12-28 18:00:55 UTC

- reply

It looks like I'm having a poo. #Starfield
https://cyberplace.social/system/media_attachments/files/115/798/497/548/598/081/original/4f100518fe3dd7a8.png

2025-12-28 17:51:10 UTC

- reply

My not very practical personal moon buggy.
https://cyberplace.social/system/media_attachments/files/115/798/459/226/676/948/original/34ea76f2028f398e.png

2025-12-27 09:35:37 UTC

Pass the bong
https://cyberplace.social/system/media_attachments/files/115/790/848/179/766/128/original/055db582d7986d19.jpeg
https://cyberplace.social/system/media_attachments/files/115/790/848/151/994/263/original/009e7c935575e150.jpeg
https://cyberplace.social/system/media_attachments/files/115/790/848/153/809/378/original/06e0daefa49d3db1.jpeg

2025-12-23 15:24:45 UTC

- reply

IMHO - you shouldn't use BIG-IP F5 directly internet facing in 2025 if it's critical infrastructure, have it behind a cloud WAF and have the origin firewalled off to just the WAF service.

2025-12-23 15:21:29 UTC

If anybody is wondering about La Poste 'cyberattack', they appear to be getting targeted by craptavists.
They've been getting a fix of packeted and layer 7 HTTP floods. They've moved behind Radware now by flicking their traffic in BGP for packet scrubbing.. but they didn't appear to have anything for layer 7 in place that worked. They still operate on prem with BIG-IP F5 boxes.
https://cyberplace.social/system/media_attachments/files/115/769/541/094/604/546/original/8ccdd869d565dabf.png
https://cyberplace.social/system/media_attachments/files/115/769/543/845/036/122/original/94a8010f24500cd2.png
https://cyberplace.social/system/media_attachments/files/115/769/559/446/955/582/original/343199fce4c5fa74.png

2025-12-12 21:01:16 UTC

Amazon launched a generative AI recap video system, to help viewers catch up with TV shows.
It launched with Fallout, its own TV show.
…however, Amazon have had to delete the video after viewers pointed out it got almost every detail wrong. https://www.bbc.co.uk/news/articles/c3r77j5nze5o

2025-12-11 15:53:34 UTC

It’s a long way down from this Time cover.
https://cyberplace.social/system/media_attachments/files/115/701/735/585/725/110/original/18c7a73f1b21ca98.jpeg

2025-12-11 05:50:03 UTC

Exiled Hong Kong activist target of sexually explicit harassment campaign, appears to be AI generated, by Chinese state https://www.bbc.com/news/articles/cq8d34en0yzo

2025-12-10 15:16:23 UTC

- reply

I consulted the official #GAYINT threat actor mapping chart and made this diagram for Notepad++ hack attribution
https://cyberplace.social/system/media_attachments/files/115/695/928/747/055/527/original/73cc396bbf11330d.png

2025-12-10 15:05:48 UTC

- reply

Since making this thread yesterday the infrastructure appears to have gone AWOL and they've nuked the DNS entries on the C2s etc etc.
https://cyberplace.social/system/media_attachments/files/115/695/887/584/683/765/original/56a1a470730b0781.mp4

2025-12-09 21:32:23 UTC

- reply

And yes, this was (and is) a supply chain attack - just everybody was too busy wacking off about GenAI and react2shell to notice.

2025-12-09 21:30:35 UTC

- reply

Also, long time followers may remember this one playing out in real time over the last few weeks - I just tooted about it in Follower mode to stop threat intel companies scraping the toots 🤣

2025-12-09 21:27:42 UTC

- reply

Impacted boxes have things like FatBeehive and other tools installed, there’s hunting guides in that blog.
Notepad++ author really good btw, quick turn around.

2025-12-09 21:19:30 UTC

- reply

I did have a thread on this at the time but I think it auto deleted, whoops. It was being used for entry into telcos and financial services in East Asia anyhoo.

2025-12-09 21:13:48 UTC

- reply

I hadn’t put the full details in the blog at the time, but the Notepad++ updater didn’t check if the update package was valid in any way - it just executed it. Also the update process used TLS.. but didn’t validate the session, so it could be hijacked to change the download.

2025-12-09 21:12:08 UTC

Notepad++ have released a new version to fix the auto update process being hijacked https://notepad-plus-plus.org/news/v889-released/
I reported the vulnerability, it is being hijacked by threat actors in China. https://doublepulsar.com/small-numbers-of-notepad-users-reporting-security-woes-371d7a3fd2d9