Out of context work quote: "we should find these machines, take their CPUs, and mount them on a stick as a warning to the others"

Acunetix 25.11.x - Local Privilege Escalation Vulnerability via OpenSSL Configuration (CVE-2026-6958)

https://seclists.org/fulldisclosure/2026/Sep/0

Adblockers are killing the advertisement industry. Install uBlock Origin today to kill it faster.

#adblockers #uBlockOrigin

Machine Speed is a lie: stop trying to fight AI with AI

Marketing departments are screaming that attackers are moving at "machine speed" and only AI-powered defenses can stop them. But cyberattacks have always been automated, and proactive defense beats reactive AI.

https://malwaretech.com/2026/09/machine-speed-is-a-lie-stop-trying-to-fight-ai-with-ai.html

In the second half of the legend, Cormac sets out on a quest to find his family. He travels to the otherworld and is tested by Manannan Mac Lir, admitting his mistake, and regaining his family. It is a long and hard quest, and he returns to his kingom wiser for it.

It just strikes me that masking everything with an easy solution and paying for it with people's lives is... a very timely metaphor. And the way back is gonna be difficult.

3/3

#AI #folklore #mythology

The visitor gives Cormac the branch and leaves. For a year Cormac uses the enchanting music to deal with every problem in his kingdom. Instead of listening and dispensing justice, he just shakes the branch.

In one year the stranger comes back for the first installment of the payment: Cormac's daughter.
The next year, he takes his son.
Then his wife.

Cormac is left alone. He uses the branch to dull the pain, but he eventually realizes the mistake he'd made, swapping people for easy magic.

2/3

I just realized that I have the perfect anti-AI story:

King Cormac and the Silver Branch

It's an Irish legend about a wise king who is visited by a mysterious otherworldly stranger bearing a silver branch with golden apples. Shaking the branch produces such a wonderful music that people immediately forget their pain and sorrows and daily worries.

King Cormac covets the branch, and is willing to pay whatever price the stranger sets for it.

1/3

#AI #folklore #legends #mythology

Whoever decided that tasklist should truncate its output fields should have something uncomfortable inserted in their various orifices in Hell for every character ever hidden.

I'm an enemy of the state[1].

[1] As in stateful systems

> The most rebellious thing you can do is to do something the right way. The measure twice, cut once way. The do your homework way. The double- and triple-check way. The long way. The way where money isn't your only concern. The “I care about this subject and I'm going to give it my best shot” way.

https://www.youtube.com/watch?v=sGu1Gv8cLQo

RE: https://infosec.exchange/@BleepingComputer/117207756865330014

Oh no! But how will security vendors write their blog posts now?

Egads.

www.yahoo.com/news/us/arti...

If a grocery store is doing dynamic pricing and you just sit there with a flipper zero recording whatever sub GHz or IR signal they are broadcasting to flip them, take the lowest real displayed price, replay it with idk something like this, is that illegal

@lcamtuf "There is no way I will *ever* fill this up!" right?

@lcamtuf In 2026 I don't even know what is "real" anymore (in general). This has been a problem with refurbished/saved HW.

Glad to see MS upgraded Win11 system requirement to a 64GB disk - this way when you buy a minimal laptop you don't have to upgrade your disk immediately after the first update eats 25GB of it (aside of the already installed OS)...

The recording of "Deobfuscation in the Age of Agentic Reverse Engineering" is now public:

https://www.youtube.com/watch?v=3-gJ6EUFoKM

We (CC @nicolodev) show how to use agents to break protections found in anti-cheats, DRM systems & commercial protectors.

Slides: https://synthesis.to/presentations/recon26_agentic_deobfuscation.pdf

Redis RCE PoC (CVE-2026-81934) https://github.com/v12-security/pocs/tree/main/redis/server_ssl

The only downside of using teehee I found so far is that every time I even *think* of using it a tiny Michael Jackson appears in my head and starts to sing...

https://github.com/Gskartwii/teehee

My energy providers website stopped working properly for me this morning. Why would it expect me to be able to also contact:

ahrefs.com
bing.com
browser-intake-datadoghq.eu
clarity.ms
doubleclick.net
facebook.net
google.com
hs-scripts.com
stapecdn.com
stripe.com
stripe.network
tiktok.com
vercel.com
wurfl.io

Just to submit a meter reading!

And no, I DO NOT want to use your sodding app!

#enshittification