The fastest way to get VIP treatment when you land...seriously, how dumb do you have to be to try something like this? This person on Reddit stole my thoughts verbatim: "committing federal crimes from inside a sealed metal tube that lands exactly where the feds are waiting is certainly a strategy."

https://www.reddit.com/r/delta/comments/1vl52vr/dl591_lasatl_arrival_met_by_federal_agents/

RE: https://mastodon.social/@VeroniqueB99/117074185851484440

@emilymbender @alex I'm sure you'll love it!

@david_chisnall Yeah, "architecting" is not the best word here...

I thought I'm making up a conspiracy theory around NVIDIA deliberately looking for bubbles to inflate - AI turned out to be a great one - after the crypto bubble bursted. It seems @david_chisnall agrees (sort of):

RE: https://infosec.exchange/@david_chisnall/117075838205635406

Finally, to close out our short #GitHub tour, a few vintage repositories 🍷 that have aged into historical curiosities and are now (mostly) harmless. Still worth a look as a learning resource, for humans and AI alike 🤖

https://github.com/0xdea/exploits - a collection of my public exploits from CVE-1999-1587 onwards

https://github.com/0xdea/shellcode - a small collection of my shellcode samples

https://github.com/0xdea/advisories - my public advisories starting from CAN-2003-0190, err..., CVE-2003-0190 up until today

Thanks for following along, and enjoy your summer break! ☀️

I wish California could promote LSD to politicians back in the day as effectively as they do today with AI.

[RSS] 4 jsoup vulnerabilities

https://joshua.hu/4-jsoup-vulnerabilities

Great, YT now put me into the "white girl music better than any pre workout" basket...

Now I feel irresistible urge to listen to Katy Perry o.O

https://www.youtube.com/watch?v=tmlGA_zFtpQ

Brains are weird. (fortunately I'm not alone in case crazy ear worms are an indicator of aneurysm :S)

It’s out! New video! Finally!

#science #physics

https://www.youtube.com/watch?v=P_ooEuOnNB8

RE: https://mastodon.social/@mrmacintosh/117075193323529726

A hacker's hacker. 🫡

OpenSSH 10.5 has just been released, mostly to fix a handful of security vulnerabilities.

https://www.openssh.org/releasenotes.html#10.5

We plan to move to a more frequent release schedule for as long as this season of LLM-found bugs lasts. More details in the release notes.

The soundtrack of my dream was a Sabaton song about debugging Binary Ninja:

"Debug the Ninja
Binary Ninja
Debug the Ninja
This is the song"

(note: I don't usually listen to Sabaton)

High level diff of macOS 26.6.1 vs. macOS 26.6.2 🎉

https://github.com/blacktop/ipsw-diffs/tree/main/26_6_1_25G76_vs_26_6_2_25G82/README.md

@phillip Hot take: signups should be disabled at install time by default in almost every software.

RE: https://social.lol/@phillip/117061432689860232

The postmortem of the hack on my Forgejo instance is here! I had fun investigating and writing it, so I hope y’all enjoy reading about it :)

#Homelab #SelfHosted #Cybersecurity #Infosec

https://phunky.cafe/my-homelab-got-hacked/

this program was generated with LLVM assistance
"don't you mean LLM assistance?"
no, i mean i implemented a few examples and left the rest as UB for the compiler to figure out https://gcc.godbolt.org/z/hd5Mhdhev

Somebody posted a Windows 11 LPE writeup, with a CVE that doesn't yet exist (CVE-2026-62737).

By poking at kloader's ExecutionContext, we can get kernel mode execution at an arbitrary address.

A stock Windows VM won't have a NIC that uses the NetAdapterCx framework, so will not show as affected. But you can start that service to see it in action.

The PoC has a hard-coded 0xFFFFF80041414141 as an execution target. I'm sure that somebody knowledgeable with Windows kernel stuff can figure out how to modify this to do something useful.

I predict that CVE-2026-62737 will be included in this Patch Tuesday lineup.

Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.

• CVE-2026-72898 Metabase SQL injection via password reset endpoint
• CVE-2026-72899 Metabase SQL injection via public card or dashboard
• CVE-2026-72900 Metabase information exposure

RE: https://live.acarsdrama.com/@acarsdrama/117072256729860162

come on now. be cool guys.