[RSS] Cryptographic mass murder

https://www.bfswa.blog/p/cryptographic-mass-murder

[RSS] Aarch64 Rop Cheatsheet

https://binaryru.in/chain-of-thoughts/aarch64-rop-cheatsheet/

[RSS] Dell BOSS-N1 S-MCU Firmware Integrity and Cryptographic Verification Bypass

https://github.com/google/security-research/security/advisories/GHSA-wcfm-jp7m-rffh

[RSS] Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE

https://starlabs.sg/blog/2026/09-dirty-cert-cisco-smart-software-managers-silently-patched-rce/

[RSS] CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018

https://daubois.dev/blog/cve-2026-91766-php-http-redirect-credential-leak/

[RSS] CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

https://www.safateam.com/intelligence-hub/research/technical-articles/cve-2025-13032-entering-and-breaking-the-avast-antivirus-sandbox-part-2

The #RSS Universe — Readers, Tools & Standards

https://toolbox.rss.here.now/

RIP Sexecutioner :,(

https://www.rollingstone.com/music/music-news/chuck-varga-gwar-founding-member-sexecutioner-dead-obit-1235632356/

@watchTowr

Journalists have tracked down two employees of Kremlin disinformation group Rybar to villas near Berlin, Germany, with the two living comfortably and safe in the decadent EU they villainize each day

https://correctiv.org/aktuelles/russland-ukraine-2/2026/09/24/russischer-kriegskanal-rybar-operiert-von-berlin-aus/

https://istories.media/news/2026/09/24/rabotayushchie-na-z-kanal-ribar-propagandisti-dolmatov-i-chashchukhin-rezidenti-germanii/

@hackaday "Probably the easiest way is to use a known-good and clearly labeled reference magnet. Same poles repel, and opposites attract. But if that’s not available, a simple magnetic compass can help."

So instead of using a clearly labeled reference, you suggest using a clearly labeled reference, got it!

But I gotta hand it to AI labs that "WE MUST BE STOPPED AT ANY COST OR WE'RE GOING TO KILL YOU ALL" is one of the most original marketing pitches I've heard in my life

The #Chiptune scene is growing back in Barcelona! https://filedn.eu/lhG9NwEl2KwykI9ctSv7Uqf/8bitnit/index.html

Any UNIX socket protocols that would be fun to add probes for, anyone?

When I drive a car without a valid driver's license, proof of insurance or tag/license plate, I get stopped by the police, my car will be towed and I can either walk home or might end up in jail and face severe fines, a probation period and loss of my driver's license.

When Microsoft runs 45 gas turbines without a state permit, they get 45 days to fix it and a $1.07M fine (which is petty cash for an operation this size) and don't even have to power down the turbines.

https://www.theguardian.com/environment/2026/sep/25/new-jersey-fines-datacenter-unpermitted-generators

🚨 Companies are being urged to shut down their NetScaler instances immediately due to multiple unpatched Citrix NetScaler RCE vulnerabilities.

Source: https://x.com/watchtowrcyber/status/2103891689857228803

DNS errors again. systemd-resolved once again reports 0 errors (in fact, 0 log messages).

From my professional experience I know this means the network is probably fucked. It was.

But why is it so hard to put `error("network is fucked");` in #systemd?

https://blog.netherlabs.nl/articles/2006/09/08/the-perfect-error-message

For details on how the 8087 calculates tangents by using the CORDIC algorithm combined with polynomials, see my latest article:
https://www.righto.com/2026/09/8087-tangent-cordic.html

An official #MCP for #IDA was released by @HexRaysSA

https://hex-rays.com/blog/hex-rays-ida-mcp-server

@freddy @raptor I took that as a joke :) unfortunately last time I checked you also qualify as human, which is a problem in this situation, and would make bots perfect candidates