if you have an lg tv

literally throw that shit off your roof

https://www.youtube.com/watch?v=6IFVTcM28KA

Two hours till my HTTP Terminator talk kicks off at SEC-T! You can catch the livestream at 9:15 UTC:
https://www.youtube.com/watch?v=S6R7cBZDdK4

Made the slop machine do a thing for me that may be useful for others too:

https://github.com/v-p-b/mdsrv

Static webserver that renders #Markdown files and #MermaidJS diagrams for your viewing pleasure. With live updates!

#python #llm

@cure53 do you have Google Ads (or similar) set up? They tend to burn user credits with similar gmail contacts (this user found you, proving our adtech works).

@zzt Most feature phones are hard to compromise because every time a malware author learns something about how they work, their brains explode.

PoC if anyone is interested:

https://github.com/dinosn/mikrotrick-poc

Reverse Engineering The Philips PM5139

https://hackaday.com/2026/09/09/reverse-engineering-the-philips-pm5139/

#Hardware #ReverseEngineering #Electronics

CVE ID: CVE-2026-20079
Vendor: Cisco
Product: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20079

CVE ID: CVE-2026-87491
Vendor: Google
Product: Chromium V8
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87491

High level diff of iOS 27 beta8 vs. iOS 27 RC 🎉

https://github.com/blacktop/ipsw-diffs/tree/main/27_0_24A5430a_vs_27_0_24A435/README.md

Earlier this month, @volexity detected multiple Chinese threat actors launching attacks against its customers using chained 0-day exploits in Google Chrome (CVE-2026-85046 & CVE-2026-87491) and Microsoft Windows (CVE-2026-85880). Volexity observed threat actors it tracks as UTA0560 and JungleBamboo using variations of the same exploits to deliver different malware implants. These implants ranged from a JScript backdoor (GRIMWEDGE) to a fake Google Gemini Chrome extension (LONGTALE).

Read the full analysis of the exploit chain and post-exploitation tradecraft here: https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/
 
#DFIR #threatintel

Default auto-generated CC on YT music videos is a great way to demonstrate how much Google's AI sucks.

Heat.
Heat.
[Music]
1-2-3

RE: https://infosec.exchange/@cR0w/117236916712662443

lol. lmao even.

https://security.paloaltonetworks.com/CVE-2026-0310

https://security.paloaltonetworks.com/CVE-2026-0307

@rygorous early russian info ops

I miss the days when a toothbrush botnet was the dumbest headline.

RE: https://mstdn.social/@jukkan/117240247968300759

I just love this:

”Feature #23 is worth noting in isolation. LinkedIn collects the user’s Do Not Track preference, then excludes it from the fingerprint hash (line 9512, excludes: { doNotTrack: true }). They record that you asked not to be tracked. Then they track you.”

@eduzsh when you do an LLM "fix", "works for me" is good enough and you don't have to consider any of the contribution requirements (like not introducing bugs at places you don't personally use). so I think it's more likely that people will churn out a bunch of fixes that are slightly wrong in different ways. it is true that while some of the fixes will be fine, they'll never make it back to the project anyway.