Posts
4525Following
741Followers
1657
repeated
RE: https://infosec.exchange/@BleepingComputer/117207756865330014
Oh no! But how will security vendors write their blog posts now?
3
5
0
repeated
repeated
jonny (nonvenomous)
jonny@neuromatch.socialIf a grocery store is doing dynamic pricing and you just sit there with a flipper zero recording whatever sub GHz or IR signal they are broadcasting to flip them, take the lowest real displayed price, replay it with idk something like this, is that illegal
4
4
0
buherator
buherator
0
0
0
repeated
Tim Blazytko
mr_phrazer@infosec.exchangeThe recording of "Deobfuscation in the Age of Agentic Reverse Engineering" is now public:
https://www.youtube.com/watch?v=3-gJ6EUFoKM
We (CC @nicolodev) show how to use agents to break protections found in anti-cheats, DRM systems & commercial protectors.
Slides: https://synthesis.to/presentations/recon26_agentic_deobfuscation.pdf
0
2
0
repeated
Ivan O啪i膰 Bebek
obivan@infosec.exchangeRedis RCE PoC (CVE-2026-81934) https://github.com/v12-security/pocs/tree/main/redis/server_ssl
1
4
0
buherator
buheratorhttps://github.com/Gskartwii/teehee
0
1
3
repeated
A2 Engineering Services
a2es@mstdn.socialMy energy providers website stopped working properly for me this morning. Why would it expect me to be able to also contact:
ahrefs.com
bing.com
browser-intake-datadoghq.eu
clarity.ms
doubleclick.net
facebook.net
google.com
hs-scripts.com
stapecdn.com
stripe.com
stripe.network
tiktok.com
vercel.com
wurfl.io
Just to submit a meter reading!
And no, I DO NOT want to use your sodding app!
0
3
0
repeated
Virus Bulletin
VirusBulletin@infosec.exchangeVB's P茅ter Sz艖r Award, commemorating the life & work of security researcher P茅ter Sz艖r, is awarded for the best piece of technical security research published in the past year. What research deserves to win the 2026 award? Nominations close 9 Sept! https://virusbulletin.com/conference/peter-szor-award/
0
1
0
repeated
Simon Tatham
simontatham@hachyderm.ioA couple of weeks ago I showed a preview of a new mode for Mines, in my puzzle collection. I'm pleased to say that the new Mines is now completed and live! You can now play Minesweeper on a wide range of tilings in your browser
https://www.chiark.greenend.org.uk/~sgtatham/puzzles/js/mines.html
or download a desktop version from the parent page which supports the same set of grids.
As well as the support for lots of grid types, there's also a new user preference (off by default) to make it easier to play on them. When you click on a clue square to potentially clear around it, the existing flags adjacent to the square light up, to make it easier to count them and work out how many more mines you're still expecting. Particularly useful in the hat tiling, where it's easy to mistake exactly what is adjacent to what!
I expect different people will prefer different grids. Personally I think the triangular grid is particularly tricky and puzzly; the hexagonal honeycomb makes a gentle introduction; the Cairo, Floret and Kites tilings are a nice set in between those extremes; and of course the aperiodic tilings are there to keep you on your toes and ready for anything.
Many thanks to Anders H枚glund for this excellent piece of work.
5
11
0
buherator
buherator
0
0
0
repeated
Ivan O啪i膰 Bebek
obivan@infosec.exchangeNightmareEclipse versus CrowdStrike Falcon https://github.com/MSNightmare/FalconFlank
0
3
0
repeated
So, hard pill to swallow, but I think there are a class of AI enthusiasts who got that way because computing fundamentally failed them, for whom getting a computer to do anything _for them_ not being a whole-ass bullshit ordeal still deserve our empathy and solidarity. We, computer-people we, can鈥檛 escape responsibility for abandoning user empowerment in favour of corporate consolidation and vending machine interfaces decades ago, now that we鈥檙e reaping the whirlwind of mechanized capitalism.
3
3
0
repeated
quarkslab
quarkslab@infosec.exchangeChamilo LMS was put under the microscope 馃敩 by @coiffeur0x90 and Sean Matthews
11 vulnerabilities. multiple attack surfaces. Our new research dives into the vulnerable code paths and exploitation primitives to achieve unauthenticated RCE.
馃敆 https://blog.quarkslab.com/chamilo-lms-its-raining-0days-hallelujah-its-raining-0days.html
0
2
0
buherator
buheratorShow content
Here's a pretty epic #mukbang video for you to have an idea:
https://youtu.be/GBRoyvoSfAY?si=h66VwkEsAnYqJjeL&t=835
In order not to leave it in the fridge I set up a calendar event saying "tripe stew is in the fridge!". For reasons this triggered like 5 times today already. If this is not temptation I don't know what is!
/cc @dey
2
0
4
repeated
Cind蕩 Xiao 馃崏
cxiao@infosec.exchangeWith Mastodon's new Collections feature (i.e. "starter packs"), I made a Cyber Threat Intelligence Collection:
https://infosec.exchange/collections/117120621715888849
Feel free to share with anyone getting started here on Mastodon, if they need some accounts to build out their feed. Note that Mastodon Collections currently have no "Follow All" button: this is by design.
1
4
0