[RSS] Real-world decryption

https://www.bfswa.blog/p/real-world-decryption

[RSS] Crypto etymology

https://www.bfswa.blog/p/crypto-ethymology

[RSS] Escalating All The Privileges With Foxit PDF Reader (CVE-2026-57239)

https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492

[RSS] The Design of Everyday Cryptography

http://dlp.rip/everyday-cryptography

[RSS] Dnsmasq DNS Remote Heap Buffer Overflow

https://blog.exodusintel.com/2026/07/20/dnsmasq-dns-remote-heap-buffer-overflow/

CVE-2026-2291

https://github.com/cisagov/vulnrichment/issues/262
Went from "We intentionally don't include CVSS scores or CWE identifiers in http://kernel.org CVEs, and we'd appreciate it if CISA's ADP stopped adding them." in January to effectively "if you don't do what we say by our deadline, we're going to...

They AI slopped up a few CVEs on SATURDAY and none of what it describes talks about the actual impact, claims NULL derefs/kernel panics/"corrupted ciphertext results"/"decryption bypass". Pure slop.

Same slop assigned a 9.4 "CRITICAL" CVSS to an ext4 infinite loop, I'm not joking: https://lore.kernel.org/linux-cve-announce/2026042247-CVE-2026-31448-3c50@gregkh/

I'm convinced that UI developers are my mortal enemies.

Today's experience: Microsoft Outlook, which I have to assume is popular for some reason.

I go to delete a calendar item that I created for testing. Upon hitting [Delete] on my keyboard, I'm presented with the following dialog.

Which button will continue with the deletion of the item?

• [➡️ Send]
• [🗑️ Discard]

If you selected the 🗑️ button to delete the entry, you're a fool like me. Obviously the [➡️ Send] button is the one you click to delete the thing. [🗑️ Discard] obviously means [❌ Cancel].

@schrotthaufen https://infosec.place/objects/a0c412dc-b921-4e7d-88c8-df0884ec8ebe

The year is 2026. Literal trillions are spent in the hope to revolutionize the IT industry.

At the same time children have to deal with OAuth flows, One-Time Passwords and consent prompts to play Minecraft.

We really should stop fetishizing new software and stop for a brief moment to think through how software *should* work so it'd make our lives a bit better.

If only search was considered in Mastodons design...

RE: https://infosec.exchange/@cR0w/116953352499158321

#3274 - Arthurian Connector

Today Excel bugged me again to rate it, and when I tried it told me I was ineligible to submit a review.

Once again I am asking for all technology to be cast into the sea immediately or sooner.

New vulnerability report from Talos:

Microsoft Windows NETIO.sys NsipGetAllInformationProviderParameters Information Disclosure Vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2443

CVE-2026-50475,CVE-2026-50475,CVE-2026-50475

New vulnerability report from Talos:

Foxit Foxit Reader Javascript checkbox CBF_Widget code execution vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2420

CVE-2026-57256,CVE-2026-57256

New vulnerability report from Talos:

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2426

CVE-2026-58613,CVE-2023-29361,CVE-2026-58613,CVE-2026-58613

[RSS] Windows AppResolver LPE: From AppContainer to SYSTEM. PoC linked to CVE-2026-50454

https://davidcarliez.github.io/blog/windows-appresolver-lpe-to-system/

[RSS] Defender Internals - AI Assisted EDR Introspection

https://blog.deeb.ch/posts/defender-ai-introspection/

At this point I'm not 100% sure LLMs are not alien psyops against our species (coincidentally I'm in the middle of Three Body Problem)