Posts
4082
Following
732
Followers
1618
"I'm interested in all kinds of astronomy."
repeated

Ryan Castellucci (they/them) nonbinary_flag

I wish this were fake.

5
6
0
@christopherkunz That's it thx! Based on the Update Guide this should fix the problem independently from the definition updates, so if you can repro on a clean system with this DLL version that's bad.
0
0
0
repeated

New, by me: ServiceNow appears to have notified some enterprise customers that there was outside access to their data, after a security bug left instances exposed to the web.

The company has hidden its notice behind a login wall, but was shared by network defenders on Reddit.

https://techcrunch.com/2026/06/10/servicenow-tells-customers-a-bug-left-some-of-their-data-exposed-to-the-internet/

1
3
0
repeated

The Anthropic Fable-5 safety classifiers seem to be written by the OpenAI marketing department.

Pretty much anything I talk to LLMs about gets downgraded.
Nerfed into useless. Worst model release ever?

0
1
0
repeated
Edited 5 hours ago

Golden rule of vulnerability disclosure is:

Dont fuck with people who are time rich and cash poor.

1
4
0
repeated

New directory traversal CVE!
CVE-2026-52752
nationalsecurityagency - ghidra
Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with traversal sequences like ../ in filenames to write arbitrary files outside the intended directory, enabling code execution.

1
6
0
repeated
Edited 3 hours ago

RE: https://mastodon.social/@fj/116696838766743727

Anthropic Fable won't answer some prompts about cybersecurity or cryptography (falling back to Opus instead) but they will send engineers to the NSA to help them with offensive operations.

0
3
0
repeated

My biggest concern right now is that I only have 6 years to figure out how to use the three shells

0
2
0
repeated

You can care about nutrition and still eat cake at a birthday party.

You can be disciplined and still be fun.

Don’t confuse self-improvement with self-surveillance.

Don’t confuse certainty with wisdom.

And don’t confuse being a dick with courage.

https://www.joanwestenberg.com/p/just-be-normal-about-st

0
5
0
@christopherkunz what is the version of your mpengine.dll?
1
0
0
repeated

The simplest of all possible modifications to the original RoguePlanet.cpp (literally interchanging two letters in the source code) defeats the detection and re-enables the exploit in current, fully patched Windows 11 with Definition Update 1.453.20.0 installed.

1
5
0
repeated

New OpenSSL advisory:
https://openssl-library.org/news/secadv/20260609.txt

1 high, 5 medium, 12 low severity

The high (CVE-2026-45447) was explicitly noted as discovered with help from Claude.

What's more interesting is again the confirmation that vulnerabilities are increasingly identified independently by multiple people:

CVE-2026-34182 (independently found by 4 different people), CVE-2026-35188 (2), CVE-2026-9076 (2), CVE-2026-34181 (2), CVE-2026-42766 (4).

0
4
0
repeated

Critical vulnerabilities in Ivanti Sentry (CERT-EU Security Advisory 2026-008)

On 9 June 2026, Ivanti released a security advisory addressing two critical vulnerabilities in their Sentry products[1]. An attacker could exploit those flaws to achieve unauthenticated remote code execution on the vulnerable device.

https://www.cert.europa.eu/publications/security-advisories/2026-008/

0
2
0
repeated

Holy collisions batman:

0
3
0
@thezdi @TheDustinChilds What does the new XI column indicate in the MS patch table?
0
0
0
repeated

@harrysintonen
> any competing AI assistant would have to be granted the same deep system reach as Siri AI, including the ability to read and send messages, make purchases and act across apps.

wouldn't it be great to have that kind of API accessible from a scripting language, or from some GUI "connect the blocks" automation engine?

0
1
0
repeated

Typed `id` on a stock Ubuntu Server. Default user already in the `lxd` group, which is root-equivalent.

Host root on every LTS from 20.04 to 26.04, sudo never entered. Bonus: a free AppArmor hardening downgrade for the whole box.

Vendor: won't-fix.

https://starlabs.sg/blog/2026/06-old-wine-in-a-new-bottle-a-decade-old-lxd-group-root-re-armed/

0
6
0
repeated

Our intern Tevel Sho and his mentor @cursered spent some time poking at Cisco ISE. 40+ bugs reported. 4 dupes. This dupe is RCE as root:
https://starlabs.sg/advisories/26/26-20147/

0
3
0
@christopherkunz Ah thanks, I completely missed that! I think this disqualifies the bug from avpwn, will correct this soon!
1
0
0
@christopherkunz Thanks, that sounds relevant! Do you have a link to an attribution source that I could include?
1
0
0
Show older