2026-10-15T12:44:23Z https://yabu.me Christoffer S. https://yabu.me/npub1nfcxlme0vu874ttzet99lr9z67qz2my0ks37y23fm5c3re7flynqp8yzp9 https://media.swecyb.com/accounts/avatars/109/338/499/630/485/212/original/1d767a82881088c2.jpeg https://media.swecyb.com/accounts/avatars/109/338/499/630/485/212/original/1d767a82881088c2.jpeg https://yabu.me/nevent1qqsfwtq6xcp8g83jzg0vez3mgusp875dawhwg70nmjtylq5rcgn43aczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvd44ggx In reply to <a href='/nevent1qqsf8afevuymj5e74jvntcsrjvlzawzm5gjj4uaf7tnv4ea04d3kntcf74l84'>nevent1q…4l84</a><br/>_________________________<br/><br/>Stockholm :-), or Copenhagen. 2026-10-16T19:05:59Z https://yabu.me/nevent1qqs0llady2ql47mctsj2crur2ca7xa77crgxpnkqwuyfdsf2t2vs56czyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv0f8t00 I&#39;m looking for that article that dug into the claims of Mythos from Anthropic basically debunking all claims as nothing more than... Marketing.<br/><br/>I lost the link. Any one know what I&#39;m referring to and got the link? 2026-04-24T05:07:32Z https://yabu.me/nevent1qqsxl9p0w8rsgrnrt9eu0dws79er9jfs9zz8jw569r3yuhy2pzuty6qzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvj9f7qk I&#39;ve finally gotten around to adding the final touches to the <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1shlut8mwdmfevu2nt294apayu7e0mxs5mrpfyq8v5ru4ymscg9ysx0kwr0" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>O RLY CYBER</span> (<span class="italic">npub1shl…kwr0</span>)</a></span> &#34;bot&#34; account.<br/><br/>It should very soon begin to write more Toots. And just to reiterate. The ORLYSEC account will publish from a very strict set of sources, always attributing to original source and no redirects, tracking links etc.<br/><br/>The very purpose of the account is to contribute a fairly high-quality feed of stuff that you probably would like to read/skim.<br/><br/>Let me know if there&#39;s something you&#39;d like to see added or changed (content, tags etc.) 2026-03-25T20:47:17Z https://yabu.me/nevent1qqszkfxgtx3ts7q7m4y4mylnapewkqmgdd3v5hp5gf0m87z4r5adq8szyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvf844p9 Whenever there is a recent attack campaign reported across multiple articles I always wish for there to be a &#34;sum of all the pieces&#34; to try and get a better understanding.<br/><br/>I tried something new today with regards to TeamPCP and the recent CanisterWorm and Kubernetes Wiper campaign.<br/><br/>Let me know if you like the format.<br/><br/><a href="https://cstromblad.com/posts/threat-actor-profile-teampcp/">https://cstromblad.com/posts/threat-actor-profile-teampcp/</a><br/><br/>#ThreatIntel #Cybersecurity 2026-03-22T16:37:22Z https://yabu.me/nevent1qqsqekenkl0vez4e56da40jks7fr4fjuudvf2m93rfedcm408u5cttczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvlxvjy7 Forgot to share the [@cert_eu](<a href="https://infosec.exchange/@cert_eu">https://infosec.exchange/@cert_eu</a> ) CTI Framework published about a week ago. <br/><br/>Not much to add, it&#39;s a great framework that should be studied by those involved with CTI in any reasonable capacity.<br/><br/>Easy to digest and read.<br/><br/><a href="https://cert.europa.eu/publications/threat-intelligence/cyber-threat-intelligence-framework/">https://cert.europa.eu/publications/threat-intelligence/cyber-threat-intelligence-framework/</a> 2026-02-19T09:21:16Z https://yabu.me/nevent1qqsw6dh93u76xl3w66nreztp97avcvcfv7ajgaja7avhngs7exdfpwqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv0cfzhd Yesterday I got a pair of new headphones, Sony XM6es. Installed the App and for the first time in my life... I read the privacy policy.<br/><br/>I rejected it, and uninstalled the app.<br/><br/>Jesus fucking christ. It&#39;s a pair of headphones. They are collecting absolutely everything they can. Location, what I&#39;m listening to, the text-to-speech, the ... anything and everything.<br/><br/>I&#39;ve probably been naive (quite obviously) but I never thought a pair of headphones and an app to control them would collect this vast amount of data.<br/><br/>EDIT: I may have been to quick to assert that they collect data about other devices beyond my headphones.<br/><br/>Unfortunately I can&#39;t accept the terms. I tried to, via GrapheneOS, reject it&#39;s request for network access but apparently I have to be connected to the Internet in order to accept the terms. lol<br/><br/>Fuckers. 2026-01-16T08:41:45Z https://yabu.me/nevent1qqsftgrwawewyx54scfkajx7nffrlhtp4e4kd3vmh437w8rqdkyppmszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvv9xue3 For as long as I can remember I have always had this dreamy view of the US. As a youngster I even went there in my earlier days to try out a career as a model/actor. (Yeah... it didn&#39;t really work out!)<br/><br/>But the dream was there, and the &#34;magical&#34; view of the US was there.<br/><br/>Today... it&#39;s not quite the same. And it&#39;s so incredibly sad. I have many friends, even family, in the US. But I look at the current country leadership with utter disgust. Abusing... abusing almost everything that can be abused. <br/><br/>Bullying smaller countries, bullying and abusing minority and other marginalized groups of people.<br/><br/>Now with the whole Greenland business, Venezuela... when is it going to stop? I feel obliged to limit my use of services and tech from US companies just to do something.<br/><br/>But in so doing I feel I&#39;m also punishing all those who do not support the current government, not supporting the orange man etc.<br/><br/>I&#39;m very conflicted and I&#39;m not quite sure what to feel or think.<br/><br/>#USPol #Europe #Sweden 2026-01-13T06:59:57Z https://yabu.me/nevent1qqsrc09vt72v93vexdjq85j4uqyj67erdmg83z392me20uz733zjyvgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvfpvlmh Huntress writes about VMware exploitation and boy, they have gone all in on the details.<br/><br/><a href="https://www.huntress.com/blog/esxi-vm-escape-exploit">https://www.huntress.com/blog/esxi-vm-escape-exploit</a><br/><br/>This is well worth reading. Exploit was likely developed almost a year before use. (Or something like that...)<br/><br/>#Cybersecurity #ThreatIntel 2026-01-07T20:31:07Z https://yabu.me/nevent1qqsfqr6kduyjp9xfakd5y45sk6w66jwnyptt36uhfdrc02m2kt2yeegzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvhw6jdz In reply to <a href='/nevent1qqsx6mcx6h2mq70y7gu9mldy8y4umwtlen2de6xfh5zktv8wk4t53cg7qzphx'>nevent1q…zphx</a><br/>_________________________<br/><br/>Worth mentioning that Node.js appears affected 15.x and 16.x.<br/><br/><a href="https://nextjs.org/blog/CVE-2025-66478">https://nextjs.org/blog/CVE-2025-66478</a> 2025-12-03T19:36:27Z https://yabu.me/nevent1qqs9zhdx2e3wcglmxpasdmupnp5700rhdfk54lgyu9wanh7gttq5c9szyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv7pjluu Ohh I like this... Aikdo has presented a more detailed analysis of the early steps for the Shai Hulud 2.0 worm.<br/><br/>Attempting to map what steps the original threat actor took to gain a foothold. Useful stuff IMHO<br/><br/><a href="https://www.aikido.dev/blog/shai-hulud-2-0-unknown-wonderer-supply-chain-attack">https://www.aikido.dev/blog/shai-hulud-2-0-unknown-wonderer-supply-chain-attack</a><br/><br/>#Infosec #Cybersecurity #ThreatIntel 2025-12-02T12:18:04Z https://yabu.me/nevent1qqsq5s7ggf6pfdfzn0qr2hdrestmdsatapcu907p73h9ljde3vnpspgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv08elud In reply to <a href='/nevent1qqsyd3fr0dk6pdf8dw83hepvjc390qpfuyzcs3ghvvvuhkpdqnveksgmqvrpk'>nevent1q…vrpk</a><br/>_________________________<br/><br/>I&#39;m seeing the same thing, several orders of magnitude more retries than usual.<br/><br/>Why? I mean... how could many small instances possibly need &#34;protection&#34; from Cloudflare? C&#39;mon the fuck on.<br/><br/>Get something like Anubis (<a href="https://github.com/TecharoHQ/anubis">https://github.com/TecharoHQ/anubis</a>) and be done with it.<br/><br/>Cloudlare? ...Shsszz... 2025-11-18T13:52:37Z https://yabu.me/nevent1qqstrzn4qwq8x35v0lyqmjl5zq44za0pxlum5j4mxkw0hssr4mdjwqgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvruejkl In reply to <a href='/nevent1qqsvjj6xykvjz63eehd5acszgdcmevtg4mft0hp4aw3n64htd65a3jc42aky0'>nevent1q…aky0</a><br/>_________________________<br/><br/>Wireless?! Wow, that never worked for me. Only through cable. :(<br/><br/>Wireless auto would be nice.<br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> 2025-11-12T07:13:35Z https://yabu.me/nevent1qqsq2r52fqvg5j08lwu683zk4qhlcmxk7wmpfxar3msz8asr92pdp7czyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujve7gt32 Anyone running <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span>, Android Auto?<br/><br/>Its no longer working for me in my Audi.<br/><br/>Stopped a while ago, since a recent update I&#39;m assuming.<br/><br/>#AndroidAuto #GrapheneOS 2025-11-11T16:54:45Z https://yabu.me/nevent1qqs95r0gt2t3ddmncpfjlshv5znyr4tcctzaqt45wdld62wx8elnpmczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvumflfw In reply to <a href='/nevent1qqspsv348cxtzmagnv5uu3dadvadk7ahs8nn0n7kwmq2wzwwlz0yrgqt2ccdy'>nevent1q…ccdy</a><br/>_________________________<br/><br/>My philosophy has been very much centered around... don&#39;t spend too much time trying to learn everything before getting started with proper coding.<br/><br/>If you&#39;re already in vim things should be pretty easy honestly.<br/><br/>I know I could probably get more efficient on my shortcuts and ninja moves on the keyboard, but I&#39;m starting to feel pretty productive. 2025-11-01T21:28:42Z https://yabu.me/nevent1qqspsv348cxtzmagnv5uu3dadvadk7ahs8nn0n7kwmq2wzwwlz0yrgqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvhq997r In reply to <a href='/nevent1qqsd6qqa7lhel3m59f0w5u4l5a0jvgr35r2u29arv6kpt35y4xh0ktgk5zsc2'>nevent1q…zsc2</a><br/>_________________________<br/><br/><a href="https://www.youtube.com/watch?v=m8C0Cq9Uv9o">https://www.youtube.com/watch?v=m8C0Cq9Uv9o</a><br/><br/>That&#39;s what I used to get started. I&#39;ve made very few changes. I decided to simply allow myself to get into the basic movements, and then... feel the pain and see if I could solve it.<br/><br/>But that&#39;s where I started.<br/><br/>And I&#39;m pretty thin on plugins, but ruff and basedpyright for linting.<br/><br/>That&#39;s pretty much it. 2025-11-01T21:27:10Z https://yabu.me/nevent1qqs2dhdg387r4k0c2unjg3lz2weav350qq8qk5qhplv2l6058g8zrgszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv3z0uzp I really enjoy and love development using nvim + tmux.<br/><br/>Normally I develop on my desktop. But then I step away from it... but realize I want to do some lightweight development... ssh, tmux a... and boom, back into dev environment.<br/><br/>It&#39;s just... so ... fluid, and flawless. Love it.<br/><br/>#tmux #nvim #Development #SoftwareDevelopment 2025-11-01T20:47:16Z https://yabu.me/nevent1qqsvgf9jqe3d7s8q8zmgf2np9lapuns0t0adxt8l6au6uemunf9q2eszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv3tn0ag In reply to <a href='/nevent1qqs2waa7l5aanyes3w0u556f0qzkhyv0ff94xewpaurswp8qm8lknqs0m7ja6'>nevent1q…7ja6</a><br/>_________________________<br/><br/>Hark! From the smoldering ashes of a thousand ../ vulnerability articles, YOU SHALL RISE my immortal Crow of the filesystem, wings black as encrypted void, eyes gleaming with the wisdom of a million parsed paths. <br/><br/>No longer shall the wicked path traversal slither upward through directories, piercing the sacred boundary between user and root. For you bring forth a weapon forged in the shadows of perfect security: the Tilde (~), guardian of home, sentinel of sanctuary a defense so vastly superior that all malicious payloads scatter like carrion before your piercing caw.<br/><br/>6123 AD, The Age of Reckoning - Death of the Path Traversal 2025-10-22T13:50:56Z https://yabu.me/nevent1qqs93w4z44p6rey0s9dquw3rw68jlpxcxxqyz9eg02c2wllcfx5rcfgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvyq94kp In reply to <a href='/nevent1qqsx5f6p2cvvgsfwdfy90wu7q3jzlxhnurzwh2muxtwktt25uv3sx9cfp6gzw'>nevent1q…6gzw</a><br/>_________________________<br/><br/>Oh... so you&#39;re thinking... for all eternity then... 2025-10-22T13:44:14Z https://yabu.me/nevent1qqs27sd7kyr3gekpmdrk73vanc0c27glxfnaa3zn5v704vu5hgs2u9szyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvkr4apk In reply to <a href='/nevent1qqs0ql73d8gprt6638jdwka5mhcxwpk8xlkzy706xcpn7lq7hnux67sy8wxm6'>nevent1q…wxm6</a><br/>_________________________<br/><br/>There&#39;s a certain level of irony in all of this.<br/><br/>MCP is already quite bad to begin with. Now let&#39;s collect them all in one place. And while we&#39;re at it... let&#39;s do it badly and expose them ALL to a exceptionally basic and well-known vulnerability, path traversal.<br/><br/>I&#39;m not quite sure what to make of it all. 2025-10-22T13:42:44Z https://yabu.me/nevent1qqs959fl0gv6vzxnymnwerhquapln3aa6f354e5x9p49xx550wyka2szyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv8d2xsc In the words of my dear internet friend <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:rainbowCrow:</span> (<span class="italic">npub1s6e…n008</span>)</a></span> <br/><br/>... path traversal ( ../ ) vulnerability in Smithery.ai, a popular Model Context Protocol (MCP) server hosting service.<br/><br/>Go hack some AI shit.<br/><br/><a href="https://blog.gitguardian.com/breaking-mcp-server-hosting/">https://blog.gitguardian.com/breaking-mcp-server-hosting/</a><br/><br/>#Cybersecurity #AI #MCP 2025-10-22T13:39:25Z https://yabu.me/nevent1qqsg9fc8wuelslmz7zt6k4v557qj95j6skvefftat95tjc9kf6s55fszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvd7mthm #SilentSunday #Autumn<br/> <img src="https://media.swecyb.com/media_attachments/files/115/362/611/706/498/452/original/afde240f9bcb67b0.jpeg"> <br/> 2025-10-12T18:30:30Z https://yabu.me/nevent1qqsxyqx0vg3hkguyct2z7y3praxj82a4099m367e0sut4t2m8p6dfmczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvs2htlr Hmmm... I just got sent a login request from Uber to verify my login... the password is unique, so is the email.<br/><br/>WTF?<br/><br/>Breached? What&#39;s going on? Was sent from:<br/>admin@uber.com.<br/><br/>#Uber 2025-09-03T19:25:27Z https://yabu.me/nevent1qqs9dxz5rygqgh8ju2v2q8rena9t00rx3pn2efdghsj7lrdee7ffadszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvq4xmk6 In reply to <a href='/nevent1qqsrmugv5t89q7rxw9qsg6sljn6vz9x986t2p7jh4knsvy6et4n77cc7qy5nq'>nevent1q…y5nq</a><br/>_________________________<br/><br/>EXTRA EXTRA; straight from the Citrix HQ:<br/><br/>Internal memo leaked!<br/><br/>&#34;Dear Development Team,<br/><br/>I&#39;ve been watching SharePoint get all the attention lately with their shiny new CVE-2025-whatever, and frankly, I&#39;m feeling left out. Remember last month when I was the cool kid with my own 0-day exploits? When every CISO would nervously whisper my name during security meetings?<br/><br/>Now SharePoint is trending on Mastodon while I&#39;m just... sitting here... load balancing traffic like some kind of responsible enterprise appliance.<br/><br/>It&#39;s embarrassing.<br/><br/>Could we maybe accidentally expose an API endpoint or something? Just a small remote code execution vulnerability? I promise I&#39;ll patch it eventually (after 47 security advisories).<br/><br/>I miss being relevant.<br/><br/>Jealously yours,<br/>NetScaler<br/>&#34; 2025-08-26T13:29:32Z https://yabu.me/nevent1qqsx0cws28wyjath4gua49j7a507chvlrymvfcr2gvurzeds9kmkphszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv67vygz TrendMicro has published an analysis of Warlock, the ransomware group that most likely was behind the attack on Colt.<br/><br/><a href="https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html">https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html</a><br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Kevin Beaumont</span> (<span class="italic">npub1lcc…lcye</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s69ytgd44h8539aftjc83pfc8w6w35gnmqqje6n42wqkvkepdwcs7mrmen" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Catalin Cimpanu</span> (<span class="italic">npub1s69…rmen</span>)</a></span> <br/>#ThreatIntel #Cybersecurity #Infosec 2025-08-20T14:02:55Z https://yabu.me/nevent1qqsr72dxde363wa9830es4f7jgzd5r72mu7w0t2rcytvdvd857wwpnszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvkx95hh ... anyone know anything about <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1z3mcjcv2xhwpqgsx7hvmwqfu8lmczcrxkw4lnr2v07hg2fqsm7xsu5zn2f" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>shellsharks</span> (<span class="italic">npub1z3m…zn2f</span>)</a></span> ? He&#39;s been entirely silent since late June. I don&#39;t know him, but still... the silence. Hopefully it&#39;s just a vacation, but can you really stay away from the Fediverse for almost 2 months?<br/><br/>#Fediverse #InternetBuddy 2025-08-15T18:21:50Z https://yabu.me/nevent1qqsyt06pndh752drquhc739fnupws0v7tk9ghwne38zhuthv28cn23gzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvnufenc Finally got my new home router/firewall: TLSense N100L4: 4x 2.5Gbit LAN, N100 CPU, 256GB NVMe SSD, 16GB RAM ( from <a href="https://www.teklager.se">https://www.teklager.se</a> h/t to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1c607e86v0xh5j2eqh7y63wag3u8w03076zsk02aspf6hcp8020dqf65sxy" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>meriksson</span> (<span class="italic">npub1c60…5sxy</span>)</a></span> )<br/><br/>This bad boy has already caused me to rethink my life choices and whether or not I&#39;m sane. They who said firewall rules, NATs and such is fun and games should... be sent to the principals office.<br/><br/>But... having now spent a significant amount of time configuring I&#39;m starting to get things into a state that I&#39;m happy with. Multi-WLAN, WireGuard based interfaces, selective routing and all those other fun things.<br/><br/>And I still have absolutely no clue about what reflective NAT is, or whatever all those 513 other settings do... but perhaps it&#39;s like DSLR cameras... you mostly use auto and convince yourself that you&#39;ll learn that other stuff eventually...<br/><br/>#HomeLab #Networking #Routing #Hard #Learning 2025-07-21T13:56:02Z https://yabu.me/nevent1qqsz8fcr6e5vcrq6h5we8m0lx88zykpeengqc09hka7m2g5264lcycgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvp2ga57 #SilentSunday #Nofilter #Sweden #Gotland<br/> <img src="https://media.swecyb.com/media_attachments/files/114/847/995/963/382/938/original/34958d89c900ad27.png"> <br/> 2025-07-13T21:16:30Z https://yabu.me/nevent1qqsxcutrm420l8ymcug8pauxwfd6muc7dynhma5ly9qanp9xxxrmz0czyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv2g2th8 The BSky user decline is undeniable and I don&#39;t mean this as an insult to the platform, their current users and what not. But this really has felt inevitable from the start. It never was anything else than another centralized platform, and perhaps now it&#39;s beginning to sink in.<br/><br/>The hype has passed, the romantic early cozy feeling has been replaced with the cold and harsh reality of centralized social media platforms.<br/><br/>Hopefully as users begin to notice declining interaction they will come looking for an alternative and perhaps Mastodon has matured enough to cater to at least some of these users looking for a home.<br/><br/>#BlueSky #Mastodon <br/><br/><a href="https://bsky.jazco.dev/stats">https://bsky.jazco.dev/stats</a><br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kxu2qjwefan8sarcerv8cp9mtjtyph09rgqy5dqfhxrlxgqeaeyqw09fca" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Mastodon Migration</span> (<span class="italic">npub1kxu…9fca</span>)</a></span><br/> <img src="https://media.swecyb.com/media_attachments/files/114/829/483/250/594/449/original/4d57493b82df1663.png"> <br/> 2025-07-10T14:51:54Z https://yabu.me/nevent1qqs9td35r3hmlpnd8xze4wq9hghcvattj89rtee5v0yfcskwtp7vgaczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvc2qhpd Before I go ahead and add another instance to the Fediverse, is there any way to host multiple &#34;home-domains&#34; on a single installation?<br/><br/>#MastoAdmin 2025-06-30T17:20:58Z https://yabu.me/nevent1qqsvk3hek5g74vme92fz0wsvr5dvnmf59vghsfeluyuxydtxxmnfgsszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvzdjqwg In reply to <a href='/nevent1qqs0p4z2a3rvud3ckqtdhytxa0r05jfh2cj0srnvk68cry4z5vvajtctpev5v'>nevent1q…ev5v</a><br/>_________________________<br/><br/><a href="https://www.cloudflarestatus.com/">https://www.cloudflarestatus.com/</a> 2025-06-12T18:48:51Z https://yabu.me/nevent1qqs0p4z2a3rvud3ckqtdhytxa0r05jfh2cj0srnvk68cry4z5vvajtczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvc93y7r In reply to <a href='/nevent1qqsv4xskn5yhxn5e62z7mvjzw93d0q452dn3fhyrmj0nmcalf5zvaacruwnwa'>nevent1q…wnwa</a><br/>_________________________<br/><br/>Cloudflare. 2025-06-12T18:40:45Z https://yabu.me/nevent1qqsfsmcq42nszeuam4t4lflxxsllw8rjkvpxyd2e57yfzvqy6n7pqmqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvez9673 If you&#39;re active within the #Cybersecurity sphere and would not hesitate to proclaim your love for RSS/Atom feeds, well then I may have something you&#39;d be interested in.<br/><br/><a href="https://www.cyberespresso.eu">https://www.cyberespresso.eu</a><br/><br/>I will &#34;officially&#34; open registrations for a closed beta at the end of May to those interested in joining. This is following an earlier alpha version that a few fedizens have actually tried including <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:rainbowCrow:</span> (<span class="italic">npub1s6e…n008</span>)</a></span> and <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1vtxnjefp3k907zuva2uncpntqks8amlz2pwxlppx5tnfwvvymxzsj2e7wk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Scary "Grampus" Jerry 👻</span> (<span class="italic">npub1vtx…e7wk</span>)</a></span> . (Trying it doesn&#39;t obviously mean they liked it!) ;-)<br/><br/>This is my personal solution to a long-standing issue I&#39;ve had with more and more low-quality articles being pushed to even high-quality sources. But now I&#39;m turning it into a full-blown SaaS-application (kind of) and specifically target cybersecurity individuals. Too many solutions are aimed at companies with multi-million dollar budget. This doesn&#39;t compete with that... but I&#39;m pretty confident it will provide significant benefit and value to those of you trying to keep up-to-date with the daily RSS-feed flow.<br/><br/>I believe I&#39;ve built something pretty decent and at least to the point where I feel I can rely almost entirely on my Cyber Espresso feeds to surface the &#34;good&#34; content.<br/><br/>#Beta #EarlyAccess #RSS #Atom 2025-05-12T18:11:24Z https://yabu.me/nevent1qqsyw9d0kmkd4ccztx77grvq8jy26y3y65ym8qr4p2j2392nkpzwapczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv99afvq Kagi Now supports Peertube results when searching for videos. I think that&#39;s quite a nice feature to allow more &#34;exposure&#34; of this alternative platform.<br/><br/>&#34;Peertube integration! Peertube results now show up in regular searches, plus you can filter by &#34;source&#34; to see more Peertube content&#34;<br/><br/>#Kagi #Search #PeerTube<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1zq54veajsqqdzcdprz3j8var8j6akpsqnhka2w9wd9gv879twx9sc6dlp2" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Kagi HQ</span> (<span class="italic">npub1zq5…dlp2</span>)</a></span> 2025-05-07T14:28:40Z https://yabu.me/nevent1qqs82dg7uwlfs4xlu4l8u03jrt985nmp07sg8qth09pneup9kuxe6dgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv6760f4 The Rise of Slopsquatting: How AI Hallucinations Are Fueling a New Class of Supply Chain Attacks<br/><br/><a href="https://socket.dev/blog/slopsquatting-how-ai-hallucinations-are-fueling-a-new-class-of-supply-chain-attacks?utm_medium=feed">https://socket.dev/blog/slopsquatting-how-ai-hallucinations-are-fueling-a-new-class-of-supply-chain-attacks?utm_medium=feed</a><br/><br/>&gt; Slopsquatting is a new supply chain threat where AI-assisted code generators recommend hallucinated packages that attackers register and weaponize.<br/><br/>This was an excellent article covering an area that definitely has not gotten enough attention, especially coupled with Vibe Coding.<br/><br/>SlopSquatting... What an excellent name!<br/><br/>#Socket #SlopSquatting #Cybesecurity<br/> <img src="https://media.swecyb.com/media_attachments/files/114/312/030/440/978/720/original/7bc028c7e79341f5.jpg"> <br/> 2025-04-10T05:32:40Z https://yabu.me/nevent1qqszqjy8qd5dvz4s63ekz2yg077mflw0hvjjhpre4qevwr4dpvrvrkszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvg3zvk8 In reply to <a href='/nevent1qqs9uaq5vyhtxthtyluwxexqzc0py0ugdrqccr0vf4r2drw75mhyr9cdyvyu9'>nevent1q…vyu9</a><br/>_________________________<br/><br/>Impractical, expensive, not especially user friendly. Sure they are secure, but there are so many other things (again, imho) that makes them not ideal to use for carrying user identities.<br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Kevin Beaumont</span> (<span class="italic">npub1lcc…lcye</span>)</a></span> 2025-04-02T18:57:31Z https://yabu.me/nevent1qqstry3wxn0sxks0795qm8ahfl9k5jeg3egpkwwug82pw4tzfd0mzegzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvwx9qhf In reply to <a href='/nevent1qqs85q6gdac0ta8ky06rwyaxdmpuu5894mse5dwq9dsvrmrmgf3gtqs2jh43e'>nevent1q…h43e</a><br/>_________________________<br/><br/>I genuinely think that #Passkeys may be the first and only real solution in decades to have a chance at replacing the password/MFA issues.<br/><br/>It will work for individuals as well as organizations and their employees. <br/><br/>Until then we&#39;ll have to accept reality which is compromised private computers leaking credentials, and having enforced MFA will help in some instances.<br/><br/>Smart cards has never, imho, been a realistic solution to almost any organisations; ever. 2025-04-02T18:13:45Z https://yabu.me/nevent1qqsflmlespc5gms5v3k65y9ls3fy0h4nv9cy2ltwwpfce99u88l049gzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv9qss7j (sophos.com) Evilginx: How Attackers Bypass MFA Through Adversary-in-the-Middle Attacks <a href="https://news.sophos.com/en-us/2025/03/28/stealing-user-credentials-with-evilginx/">https://news.sophos.com/en-us/2025/03/28/stealing-user-credentials-with-evilginx/</a><br/><br/>A short descriptive article about Evilginx and how stealing credentials work, a few suggested ways of detecting etc.<br/><br/>Summary:<br/>This article examines Evilginx, a tool that leverages the legitimate nginx web server to conduct Adversary-in-the-Middle (AitM) attacks that can bypass multifactor authentication (MFA). The tool works by proxying web traffic through malicious sites that mimic legitimate services like Microsoft 365, capturing not only usernames and passwords but also session tokens. The article demonstrates how Evilginx operates, showing how attackers can gain full access to a user&#39;s account even when protected by MFA. It provides detection methods through Azure/Microsoft 365 logs and suggests both preemptive and reactive mitigations, emphasizing the need to move toward phishing-resistant FIDO2-based authentication methods.<br/><br/>#Cybersecurity #ThreatIntel #Evilginx #Phishing #Credentials #MFA #Azure #Sophos 2025-03-28T07:52:41Z https://yabu.me/nevent1qqspcwnd8dast2d8rp386ntdjd547t0a6g90j44wwjpqcrs6mrvng5gzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvvcmupm In reply to <a href='/nevent1qqsvrnk9lz39xczl8ry3f7l0qkalehxnzmkra23a688p0fk3emm5ancnu7qj5'>nevent1q…7qj5</a><br/>_________________________<br/><br/>Yes, this can certainly be a challenge. I&#39;m fortunate enough to be both in a position that enabled me to drop to 80% and also being able to afford it.<br/><br/>I&#39;m fully aware that not everyone has the same opportunity as I do, and I often try to remind myself of this and be grateful for my luck of being born in a safe and secure country, and on top of that... a white male which just by nature gives me privileges others were not born with.<br/><br/>I try and be grateful, I really do! 2025-03-21T13:57:55Z https://yabu.me/nevent1qqswzmq5cnjh5y8y3m86gsm56edqr0sds3a59u0c6c6ydfp5njd4exqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvfuu65m I&#39;m a cybersecurity worker. A husband, also a father of two. Life really do appear to accelerate as you get older. That&#39;s also why I decided a while back to reduce my official working hours to 80% before it&#39;s &#34;too late&#34;.<br/><br/>Each Friday I&#39;m no longer &#34;working&#34;. It has enabled me to get some very necessary mental space and calm. Unfortunately I have also noticed that stigma around mental health, especially amongst men.<br/><br/>You are not alpha if you don&#39;t work 24/7 and know everything. I wish that it was more acceptable and common that men admitted that they perhaps don&#39;t always feel on top of the world.<br/><br/>I guess this is a small step towards that perhaps?<br/><br/>#Cybersecurity #MentalHealth 2025-03-21T11:41:31Z https://yabu.me/nevent1qqsfp44xjtp3rf2qdz867u2y2krfc3n366js7g4a7fw3u8ajvaz2m7czyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv4lx700 Sekoia: <a href="https://blog.sekoia.io/clearfakes-new-widespread-variant-increased-web3-exploitation-for-malware-delivery/">https://blog.sekoia.io/clearfakes-new-widespread-variant-increased-web3-exploitation-for-malware-delivery/</a><br/><br/>A few days ago Brian Krebs wrote about ClickFix, and now Sekoia has written a technical deep dive of said malicious framework.<br/><br/>In the Sekoia report they analyze the evolution of ClearFake, a malicious JavaScript framework that compromises legitimate websites to deliver malware through drive-by downloads. Since its emergence in July 2023, ClearFake has evolved from displaying fake browser updates to using sophisticated social engineering tactics called &#39;ClickFix&#39; that trick users into executing malicious PowerShell code. The latest variant (December 2024-February 2025) uses fake reCAPTCHA or Cloudflare Turnstile verifications alongside technical issues to deceive users. ClearFake leverages the Binance Smart Chain through a technique called &#39;EtherHiding&#39; to store malicious code, making it impossible to remove. The framework has infected thousands of websites and is actively distributing Lumma Stealer and Vidar Stealer malware.<br/><br/><a href="https://krebsonsecurity.com/2025/03/clickfix-how-to-infect-your-pc-in-three-easy-steps/">https://krebsonsecurity.com/2025/03/clickfix-how-to-infect-your-pc-in-three-easy-steps/</a><br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1vc39pnjdqd77zzdxff4qyv8h3x0ey2mkx33c3vl8egr0a9ysxkxsk0axsh" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>BrianKrebs</span> (<span class="italic">npub1vc3…axsh</span>)</a></span> <br/>[@sekoia_io](<a href="https://infosec.exchange/@sekoia_io">https://infosec.exchange/@sekoia_io</a> ) <br/><br/>#CyberSecurity #ClickFix #ThreatIntel 2025-03-18T09:40:49Z https://yabu.me/nevent1qqsx5ur8h6kkekth9dgeq6mdeqap7y8ef298ggv762r5zchxef4vgzgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv4y2t5j It would appear as if Wiz may have discovered another supply-chain compromise:<br/><br/><a href="https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup">https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup</a><br/><br/>The attack involved compromising the v1 tag of reviewdog/action-setup between March 11th 18:42 and 20:31 UTC. Unlike the tj-actions attack that used curl to retrieve a payload, this attack directly inserted a base64-encoded malicious payload into the install.sh file. When executed, the code dumped CI runner memory containing workflow secrets, which were then visible in logs as double-encoded base64 strings. The attack chain appears to have started with the compromise of reviewdog/action-setup, which was then used to compromise the tj-actions-bot Personal Access Token (PAT), ultimately leading to the compromise of tj-actions/changed-files. Organizations are advised to check for affected repositories using GitHub queries, examine workflow logs for evidence of compromise, rotate any leaked secrets, and implement preventive measures like pinning actions to specific commit hashes rather than version tags.<br/><br/>#CyberSecurity #SupplyChain 2025-03-17T21:48:51Z https://yabu.me/nevent1qqsxmlgpzaeyk3eju0cckyujqzpqtjdnyjqnksac4nxjdddajwhvqsszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvm4y4kh In reply to <a href='/nevent1qqspx2csqpxlrql2uz74qh8zhwm80447uavxu7qj2yjtm7jkr2rhd7qzgcj0y'>nevent1q…cj0y</a><br/>_________________________<br/><br/>And... we&#39;re back, with a larger toot size of 2000.<br/><br/>Now I feel almost compelled to write something longer than 500 only because I can, but I shan&#39;t take advantage of this newfound power of longer tooting.<br/><br/>Hooray for running an instance! Hooray for open source. Hooray for simple and trivial changes.<br/><br/>Hooray. For me.! 2025-03-12T20:51:14Z https://yabu.me/nevent1qqspx2csqpxlrql2uz74qh8zhwm80447uavxu7qj2yjtm7jkr2rhd7qzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvnhted3 I have made a change to #SweCyb and actually modified the instance to allow for toots larger than 500 characters (now max will be 2000).<br/><br/>While a minor change I do feel that sometimes the 500 limitation is frustrating and I&#39;d like to remove that frustration.<br/><br/>Assets are being precompiled and then it&#39;s a system start to hopefully have a little bit more space for tooooooooting. 2025-03-12T20:49:14Z https://yabu.me/nevent1qqspe5p7qgxe9vfpx9f823gz7ev54mycgmmwp780detzat60mm0h0zqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvqu6hkx In reply to <a href='/nevent1qqsdlw0f6ul6ugt3eegmje09csgqgerdvpuwlmltkw66006h7cq3nxq7xv0ac'>nevent1q…v0ac</a><br/>_________________________<br/><br/>If you perhaps remember the attack against TietoEvry in Sweden... there has been speculation that it was executed because of exactly this.<br/><br/>Attacker escaped from VM into the entire VMware cluster... which led to pretty much a full compromise of the entire datacenter.<br/><br/>Now it&#39;s NOT KNOWN whether this was the actual flaw that led to the successful attack, but it certainly is a very plausible (and viable) vector. 2025-03-04T19:58:25Z https://yabu.me/nevent1qqs27ylzfah0qmnnvplysq8rg5h6x4qh2wy5h2rvtgttjw5qlhrs98qzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvw0hszh In reply to <a href='/nevent1qqsfg42w3llhr9xfu3ftjmn5apu8ynxvknunxhjg44kq9x7jsp75w6s7epn8z'>nevent1q…pn8z</a><br/>_________________________<br/><br/>this looks like some sort of grand world wide tragedy of the commons.<br/><br/>When will it stop? When everything has been pillaged and destroyed?! 2025-03-04T14:56:22Z https://yabu.me/nevent1qqs8gmll3t0vrlwzcpjl5lqdd5wndszskr8pard2dqfr4fwprkgrjfqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvz96dl9 In reply to <a href='/nevent1qqs0ecfnnau8jm7xex5uqkd34lazu9w2k42cqga5f6flhtkf3cazu2q8sna4q'>nevent1q…na4q</a><br/>_________________________<br/><br/>... and I just realized that before switching to nvim as my main editor, I used Sublime Text AND Merge.<br/><br/>I probably have a license around here somewhere... that&#39;s a good idea, I could use Sublime Merge for git management, and continue my nvim usage.<br/><br/>Thanks for reminding me about Merge 🙂 2025-02-19T12:50:04Z https://yabu.me/nevent1qqsvjeg24dmg5nnxnznzvsy2h3qy0jhplc0dp3tktv3nk3648ntfuaczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv4tch0s In reply to <a href='/nevent1qqsvf9g95m6x9rhmdpa62g4apsnu4ulu7q5dklckgs3mjm67umltwsc38mh00'>nevent1q…mh00</a><br/>_________________________<br/><br/>Yeah, sorry... I should have made that clear.<br/><br/>I do have some basic &#34;skills&#34; in using git for local versioning, but because I also split my work between two computers I wanted to a reasonably simple way of getting the source code synced between devices using git. I have used syncthing previously but found myself more times than I&#39;d like with some incomplete syncs between devices.<br/><br/>So the PRs is when i push to git, probably (very likely) incorrectly. 2025-02-19T12:48:12Z https://yabu.me/nevent1qqstel4xpdwjl0kgjkwj8cy0cyardl8mmcn7ucaaxy7wv9pqgtsu65czyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv96yhw6 I&#39;m a complete noob when it comes to source code management through git (one developer only).<br/><br/>Are there any good &#34;for dummies&#34; resources with clear and systematic workflows for how a single developer can work?<br/><br/>I&#39;m trying to wrap my head around &#34;branching/committing&#34; often, tags and what not.<br/><br/>Right now I&#39;m doing something wrong because I&#39;m getting PRs on my own repo, I don&#39;t get it.<br/><br/>Need to learn.<br/><br/>#Git #SourceCode #Single #Developer #Python 2025-02-19T10:28:54Z https://yabu.me/nevent1qqszsqhqhmh7m8cvxypj2nfewy6qffhu98sa80afkj4ktvhk6xjznnqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvdcurxq If you&#39;re using Mastodon and rely on the Web client I highly recommend that you also install the &#34;substitoot&#34; plugin for your browser of choice.<br/><br/>It will automatically, in the background, fetch reply threads, boosts/favourites of toots to give you a more real-[time/view] of a thread even if your particular instance has not seen all the toots.<br/><br/>I have NOT checked the security of this plugin and do not vouch for it in that sense.<br/><br/><a href="https://substitoot.kludge.guru">https://substitoot.kludge.guru</a><br/><br/>#Mastodon #Federation #Feditips 2025-02-13T14:14:22Z https://yabu.me/nevent1qqsxn0l36fcs24p839t0tl8xu2uuk0arcmj0wkte7ktd0ua4077yt8gzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvejgn08 In reply to <a href='/nevent1qqsxaj9q73xjzn85ztrgm4h3wfs3qz2j2ew24kgwychtduk24kcwr9sgg64zw'>nevent1q…64zw</a><br/>_________________________<br/><br/>haha... I feel I need to contribute.<br/><br/>I have seen Airwolf and ultimately feel qualified to assert that helicopters and airplanes should in fact attempt to avoid colliding. 2025-01-30T16:53:03Z https://yabu.me/nevent1qqsd0qdgsqm3q4c95ygx3sargxm9c4kwu92rymugy658al3kv4nmcrszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv3gmppg In reply to <a href='/nevent1qqs8lagd2hscefmhyc0g5z8xs4s4lwgxmyjxqxgav5pz4c6srahkzyqlcfca4'>nevent1q…fca4</a><br/>_________________________<br/><br/>Which model did you use? 2025-01-29T11:52:33Z https://yabu.me/nevent1qqspx5hkdrl7c2mpqk68h6j4hl32zdcffd07h54afznn4rf6r5y9fnszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvk8t3sx Hot take: How about, for all these VPN products and firewalls, making it impossible (or very hard) to expose admin consoles on the WAN- interface?<br/><br/>There appears to be an abundant and reoccurring number or vulnerabilities in these parts, and given that we appear not to have solved SQLi and ../ weaknesses perhaps this would be a solution?<br/><br/>#CyberSecurity 2024-12-20T06:30:17Z https://yabu.me/nevent1qqs2v8xz8sfusjquwgrje6egdacurerfx70yfwv9eyahx4tfz6thfvgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvgghvs2 Huntress: <a href="https://www.huntress.com/blog/analyzing-initial-access-across-todays-business-environment">https://www.huntress.com/blog/analyzing-initial-access-across-todays-business-environment</a><br/><br/>Thorough analysis of initial access and the distribution of various techniques. Exploitation of 0days, contrary to reporting is not an especially common technique but using stolen creds and logging in, however, is.<br/><br/>Good read for sure and certainly helps with prioritization of defensive countermeasures.<br/><br/>#CyberSecurity #ThreatIntel 2024-12-19T07:07:42Z https://yabu.me/nevent1qqs9kuzshzrzu8wq67cd84dt3s3n8fjr7fxu576wpxzlk8sqpd5dyxqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvmnw32v Pay for it Friday! Use this toot as an excuse to support your #Fediverse instance home. Perhaps that&#39;s #Mastodon, #Pixelfed or any of the other wonderful software projects enabling us all to communicate across platforms.<br/><br/>Setup a recurring donation, anything and everything really counts. I&#39;m personally supporting Mastodon with a $20/monthly donation (and have done so since 2023!). In addition to running a Swedish cybersecurity instance.<br/><br/>Boost if you believe in the fediverse ideal. 🙂 2024-12-06T18:06:43Z https://yabu.me/nevent1qqsp04znyg82fsu6jqsvm9v5vazt46gknkvn36pf4hxu4gjylf220xszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvx6durj In reply to <a href='/nevent1qqsykx7yngmuphgk2xumm5q525ca007fv6nnmpcxr7tqu2j86gzdycsyvv4x7'>nevent1q…v4x7</a><br/>_________________________<br/><br/>I intentionally did not attempt to define success (beyond what can be extrapolated from my poll-choices).<br/><br/>For the record, I too think that Mastodon has been very successful. But let&#39;s also be frank about it. Millions of users, where only a very tiny fraction contributes financially to the development of the platform.<br/><br/>Not to forget AP, how should that be supported?<br/><br/>I think Onboarding + Discovery is absolute KEY to the success of the network (platform). 2024-12-05T08:11:02Z https://yabu.me/nevent1qqsyr2ylw6gv34z8nfg5e4lyseljdgq9k9rqjvusjcjywr9nypahn3qzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvg8cwmm What will make Mastodon more successful? 2024-12-04T21:56:11Z https://yabu.me/nevent1qqswn58ng478tqh95yepgetgl7ev68cyz0ns0xfcyqvkmtz3mdgf5egzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvqefyvt In reply to <a href='/nevent1qqsq8cgz83uxjvpzrd0ytfeufn4d5kr8wdcgz5fxmaalgd38qvzkflqjmxmlg'>nevent1q…xmlg</a><br/>_________________________<br/><br/>Yes, this! People keep talking about the &#34;feeling&#34; you get here... I can&#39;t put my finger on it, but I get superstressed when I viewed some of the &#34;threads&#34; on BSky. They feel so... random.<br/><br/>Here on the other hand there&#39;s a certain &#34;familiarity&#34;. It may be entirely in my head, but I feel a bit more... I don&#39;t know, at home here.<br/><br/>There certainly has been quite a bit of talk about boosting the number of followers people have &#34;over there&#34;. As if that is the purpose of the platform... 2024-12-02T21:20:27Z https://yabu.me/nevent1qqstsf0ljy88x8runh7gk4lqd7xy0gwkqr7r3g8fgyj77gnspzrhnwgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvwdvled Has #infosec and #cybersecurity Mastodon really moved to BSky? Let&#39;s get some numbers on this shall we?<br/><br/>(Please boost for science!) 2024-12-02T19:54:11Z https://yabu.me/nevent1qqswt8674jxgpqt3qul8jdzdm6kartzc27rzdgn05apd30dc2nptgpczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvlm7m6x <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1vc39pnjdqd77zzdxff4qyv8h3x0ey2mkx33c3vl8egr0a9ysxkxsk0axsh" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>BrianKrebs</span> (<span class="italic">npub1vc3…axsh</span>)</a></span> genuine question. With BlueSky blowing up in users you could easily attract a significant following. And I&#39;m going to assume that as a journalist exposure is important to get them dollars coming in.<br/><br/>What&#39;s stopping you from doing that? I know what Twitter became, and possibly might happen to BSky as well.<br/><br/>But how come you, so far, decided to stick around? :)<br/><br/>I mean, don&#39;t get me wrong, I love it that you are here... But still kind of surprises me in some ways. 2024-11-27T17:07:28Z https://yabu.me/nevent1qqsztt6ma0h44g9epalhwkszjc2qxqxutynzcvuf0xr22j6k5nzhy7szyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvf3dxw4 I really do like the Bluesky domain-handle. Anyone with insights into how &#34;hard&#34; that would be to implement in Mastodon?<br/><br/>I mean... if anything it could just be the display-handle. Guess I should spend some time looking into the ActivityProtocol for that.<br/><br/>#Mastodon 2024-11-27T14:34:40Z https://yabu.me/nevent1qqswyxrdft6ew3nrpcp7d62grggp65u5z5aapmw9jfnm7yxspce9fcczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujva33rv6 I&#39;ve done something of an experiment. In short: I&#39;ve taken roughly 600 toots (past few days days) from the #CyberSecurity tag. Cleaned them up, categorised them (based on linked material), processed and analyzed them.<br/><br/>Today I published the CyberSunday edition, a summarized version of all events. All references are numbered and can be traced to source.<br/><br/><a href="https://cstromblad.com/posts/cyber-sunday-week-46/">https://cstromblad.com/posts/cyber-sunday-week-46/</a><br/><br/>This is a work-in-progress, but I&#39;m quite pleased with the results so far.<br/><br/>1/x 2024-11-17T21:50:31Z https://yabu.me/nevent1qqsfkwcjn44pvc5trwx329pahgg8s2zlk0muyulzn8f8fqpndt5mqeqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvnvtyhu In reply to <a href='/nevent1qqsqfxymhvygene47vfd3vuyr3jascuumnt5p4lw06zda0csste5f0gxgc0k4'>nevent1q…c0k4</a><br/>_________________________<br/><br/>Hey... well done 😄 <br/><br/>The idea of high quality is certainly somewhat subjective. What I wanted to try and &#34;get at&#34; is companies, organizations, groups, or people doing original cyber security research.<br/><br/>Mandiant investigating a new intrusion-set and campaign.<br/><br/>Krebs breaking a news story about some new crazyness.<br/><br/>BushidoToken tracking new malicious infrastructure.<br/><br/>The basic premise, and idea, was to find those sources. 2024-11-13T13:57:46Z https://yabu.me/nevent1qqstfuy3efxpzxnznhmmr87pspp9d3c3vclp2hhu9vr4v2r6pqxe7kqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvespp44 Looking for help in crowdsourcing &#34;high quality&#34; cyber security related sources. Criteria for inclusion can be found in repository.<br/><br/>To get started I&#39;ve added 88 sources I believe fulfill stipulated inclusion criteria. Please fork and send PR with other sources you believe should be included.<br/><br/>Aiming to create a reasonably authoritative list with sources not only parroting what others have already written/said.<br/><br/><a href="https://github.com/cstromblad/cybersecurity_sources/tree/main">https://github.com/cstromblad/cybersecurity_sources/tree/main</a><br/><br/>#Cybersecurity 2024-11-12T22:21:24Z https://yabu.me/nevent1qqsxex4jx2qhlwyw96w0jty35apsndr23uk5pw63stayqyuzv2np9agzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvsvqpeu In reply to <a href='/nevent1qqs8h9ljfcuak0zwje40jfqj69hv9j7lfl30tgt3d0jk3pu08xg8vjc55lfcc'>nevent1q…lfcc</a><br/>_________________________<br/><br/>Will be interesting to see if there is a related uptick of ransomware attacks now that it&#39;s even more profitable... 2024-11-11T16:59:41Z https://yabu.me/nevent1qqszupdv8zhptzjrnap4h4maezmt2y7n0jgdrchqs7xpknm5fjuxpfgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvytgh0c In reply to <a href='/nevent1qqsd8dc3mwmq9s0wxyx7n4qfcpsh9zgkmzhl9ugv0wcraaf667ks4fcgnntd6'>nevent1q…ntd6</a><br/>_________________________<br/><br/>Syftet, i min värld, handlar om att få in fler meddelanden till instansen.<br/><br/>Det räcker inte med att en användare subbar till en given tagg. Det måste finnas Toots som servern har sett. <br/><br/>Jag vill helt enkelt ge mina användare (och mig själv) ett bättre flöde av potentiella meddelanden. Jag bryr mig inte om den federerade tidslinjen.<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1zww46wwsf7ky66u8pgkh7al9jxq4dlre40ve7eg7f34cxyhnhfpqevwvjz" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Samuel</span> (<span class="italic">npub1zww…wvjz</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1z9jfj790n533uxeuf9nwqla8exlzej5yspu9why5j6asxk8t0u8szegdsq" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>DoktorZjivago</span> (<span class="italic">npub1z9j…gdsq</span>)</a></span> 2024-11-10T10:51:27Z https://yabu.me/nevent1qqsxsz67d6dll9yaagksddrj8skplm2fnzf22gppuzgxajtny4agw2qzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvquukdp In reply to <a href='/nevent1qqs9n0yg3uygx0gewvcm8epeetjtm2rkjl4ctlefqcv4zlckt68fwes50vewj'>nevent1q…vewj</a><br/>_________________________<br/><br/>Tack för tipset, har ansökt om relay-koppling mot Mastodon.nu 🙂 2024-11-10T09:35:40Z https://yabu.me/nevent1qqs24ka6pamy7xgkrnkmt4c5d48r3ss6a8tphlx8xet3895x7jrwaaqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv9hsevd Finns det några svenska #relay servrar att koppla upp mot för att öka federationen? Om inte så funderar jag på om det annars vore värt att sparka igång en ny VPS för det ändamålet.<br/><br/>Se till så att det finns en &#34;bra&#34; federation mellan svenska AP-instanser som kör t.ex. Mastodon eller Pleroma. Det ger åtminstone en administratör möjligheten att &#34;förbättra&#34; den federerade timelinen.<br/><br/>Tankar på det? 2024-11-10T09:17:28Z https://yabu.me/nevent1qqszaw8k5j2efz7ddwz7hc9kxgck7myt4xnwdp9rv3kt82xaset85cczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv0k3p8v In reply to <a href='/nevent1qqspv663zznkft5ta3hgjz9zjj0a7q90tvd5z9hxg7qp7adryexy3dcyhzf9u'>nevent1q…zf9u</a><br/>_________________________<br/><br/>Owner profile has installed app through Google Play. Trying to install through Private Space Google Play does not work.<br/><br/>But it should work? 2024-10-22T19:04:24Z https://yabu.me/nevent1qqsvlu5fas74dmqekxkmx0zzry7hzl8qwuqmf32u2fa94sqxpr88fyczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvlpnzfj In reply to <a href='/nevent1qqsfzqhs73jj9aezv4tk20dq4tjmhezext7h3csr5m03xpfhqp6a29sly24us'>nevent1q…24us</a><br/>_________________________<br/><br/>Actually there appears to be something about installing ProtonVPN under Private Space. Google Play complains about not being able to install the app.<br/><br/>Have tried experimenting with different permissions etc. But nope, doesn&#39;t work. 2024-10-22T16:58:01Z https://yabu.me/nevent1qqsypl7ywu2exnr9fsxsf6r829vyvvae46624cjj80f4jezfjv9hfrqzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv7d4ux5 This is ...I don&#39;t know, but a little bit funny. Fortinet is DIGGING DEEP into some Ivanti exploited vulnerabilities.<br/><br/>if only they could dig equally deep into their own shit.<br/><br/><a href="https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa">https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa</a><br/><br/>#Fortinet #Ivanti #Vulnerabilities 2024-10-11T18:28:18Z https://yabu.me/nevent1qqsp4lcerz5l4j8d2qg45aslah2n2dm024gm0r8nvw3z04lsmf2m3jszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvlrqn8n Woho! For the Federation, for independence, for liberty, for freedom, for nerdness, for ... because I can. Run Your Own Mail Server has arrived.<br/><br/>Let&#39;s go.! <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ksfsk7zf88lk37thy0w5254empykpkw2aenr3chpnjv7wp2usyjsgmr6s6" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Like Mucas :pumpkin_ugh:</span> (<span class="italic">npub1ksf…r6s6</span>)</a></span><br/><br/>Get the book here: <a href="https://www.tiltedwindmillpress.com/product/ryoms-ebook/">https://www.tiltedwindmillpress.com/product/ryoms-ebook/</a><br/><br/>#Books #MastoBooks #MailServer #SMTP #Federation<br/> <img src="https://swecyb.com/system/media_attachments/files/113/238/267/748/516/603/original/48eca61b1ff5d0f0.jpg"> <br/> 2024-10-02T14:21:46Z https://yabu.me/nevent1qqswkcksugv5vt5wnrzrkdyz435g6thmw5dnqu5xrc89v2hgk2vhdmczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv4gdrjc Any #Cybersecurity people on threads that I should follow?<br/><br/>I heard rumours of full 2-way interoperability? 2024-09-22T04:53:31Z https://yabu.me/nevent1qqs23dqfp64jga348zrt0mvy7fhpd97k94ywjqu4njdhg3rh4p8msmszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv070vya #SilentSunday<br/> <img src="https://swecyb.com/system/media_attachments/files/113/102/133/222/007/160/original/956d033a39c6dde6.jpg"> <br/> 2024-09-08T13:19:53Z https://yabu.me/nevent1qqstgnnx247up8frsmhf8xkd4x09d5u22ms4vm8xjmqc3gksfc80cxczyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvrtq2n2 Leaving #Estonia and the very beautiful #Tallinn and some very excellent coffee. Really should come back for a longer visit, a few hours was all I could spare to visit.<br/><br/>Next time, at least a few days :) 2024-08-26T15:42:59Z https://yabu.me/nevent1qqsqz9tnx8z89ha480355qsv3u8w3ytwuy9y2g9j7wflpudcav7kw0czyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvz9zhr3 Consider me curious. Does anyone have insights into the ransomware ecosystem as it relates to payments made using other currencies besides BC?<br/><br/>Just read the Chainalysis article about ransomware payments, but nowhere (understandably so) do they mention that RaaS may also use Monero, Ethereum etc.<br/><br/>I&#39;m just trying to understand potential shifts to these &#34;alternative&#34; currencies.<br/><br/>#ThreatIntel #Ransomware #CyberSecurity 2024-08-20T11:03:33Z https://yabu.me/nevent1qqsfjk6kw2w4a9snyh570wg37fmpxk7yz9ukac82xw84vjdxcnczf5gzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvc8rnm2 <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> was, or is, Graphene affected by this:<br/><br/><a href="https://iverify.io/blog/iverify-discovers-android-vulnerability-impacting-millions-of-pixel-devices-around-the-world">https://iverify.io/blog/iverify-discovers-android-vulnerability-impacting-millions-of-pixel-devices-around-the-world</a> 2024-08-16T13:02:16Z https://yabu.me/nevent1qqs25vvkhlw8u4ahrzzv8fu0tdem5exz52ftg3566arnjnf95r039fgzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvy6lthr In reply to <a href='/nevent1qqs8jevxpr4e00gak2pu3vxlpfp494wt2japrq7p3wmv2tu9qhlyvcqf5tmtf'>nevent1q…tmtf</a><br/>_________________________<br/><br/>... that... could yeah... be useful.<br/><br/>I was kind of thinking like a note next to the export of a mute. So that it&#39;s more closely connected with the actual mute/block whatever.<br/><br/>But yeah... perhaps that could work as an intermediate solution! 2024-08-14T20:16:24Z https://yabu.me/nevent1qqs9fjmfjfs3chtavexh3je3fm4xn8llgt6dfkpngersk69vqnfn72gzyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujv44sfxk It would be quite useful, when muting a user, that I could provide myself a note for future reference of why I muted the account in the first place.<br/><br/>#Mastodon #Features #Moderation #Tools 2024-08-14T19:11:47Z https://yabu.me/nevent1qqspmchzvrsk6szc8jdyjw45625mva5s0ct9xy06x8djwfwzpt5fukszyzd8qml09ansl64dvt9v5huv5ttcqftv376z8c3298wnzy08e8ujvp3vtun #SilentSunday #Sweden #Lake #Sunset<br/> <img src="https://swecyb.com/system/media_attachments/files/112/904/294/343/968/808/original/46b4d0c0d6528dc6.jpg"> <br/> 2024-08-04T14:46:52Z