Who needs a foldable phone when you can just have a palm pilot

🍪 Tired of misleading cookie banners? The #EU Commission has finally proposed a solution: set your privacy preferences in the browser once, and never see another banner.

🥊 Unfortunately, the tracking industry is pushing back – and so far, they’ve been successful. Now we need YOUR help to #KillTheCookieBanner!

👉 To find out how, as well as read the joint open letter, visit the coalition website https://killthecookiebanner.eu

I’ve made a somewhat complete archive of my publications while at @TalosSecurity . With web archive links and copies where appropriate so it survives CMS changes.
https://blog.29b.net/talos_archives/

I don’t want a new phone. I want my perfectly good hardware to keep getting updates until it actually stops working. I want replaceable batteries that get recycled. If a company stops giving updates I want to be able to change the OS.

New vulnerability report from Talos:

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2445

CVE-2026-80093,CVE-2026-80093,CVE-2026-80093

Microsoft Vibe Gaming: an AI to play your games for you

pivot-to-ai.com/2026/09/09/microsoft-vibe-gaming-an-ai-to-play-your-games-for-you

Microsoft isn’t just the company that bought all the game studios so it could run them into the ground — Microsoft Research is hard at work exploring new realms in how to make gaming suck. Welcome to Project Vega! The blog headline is literally: “Vibe…

Followerpower: there are a bunch of online + offline tools to turn PDFs with only images into searchable PDFs.
Anyone who has tried plenty of them and can give suggestions which one (requirement would be: either online tool or available on linux) gives best results?

Berlin Senate employee executed a command that a website politely asked him to execute. The page looked like a “verify you are human” check. It instructed to open Windows Terminal/PowerShell, paste a command and press Enter. This is what appears to lead catastrophic results. Attackers hacked the systems and exfiltrated 1.44 million, 5.8 TB. Including personnel records, applications, internal documents, emergency plans and other sensitive material.

Anthropic notices another felony that they committed. They noticed this one by not using AI to look for it.
https://www.theregister.com/ai-and-ml/2026/09/10/anthropic-reveals-fourth-likely-crime-committed-by-its-ai/5295412

🚨 New advisory was just published!

A heap buffer overflow in a Windows DCOM service can be leveraged to escalate privileges from a Medium IL standard user to SYSTEM IL, an issue that occurs when attacker-controlled Power Setting data and length are passed to the PSM callback.

This vulnerability earned 3rd place in the Windows LPE category at TyphoonPWN 2026. Read all the details at: https://ssd-disclosure.com/dcom-service-psmserviceexthost-lpe/

if you have an lg tv

literally throw that shit off your roof

https://www.youtube.com/watch?v=6IFVTcM28KA

Two hours till my HTTP Terminator talk kicks off at SEC-T! You can catch the livestream at 9:15 UTC:
https://www.youtube.com/watch?v=S6R7cBZDdK4

Made the slop machine do a thing for me that may be useful for others too:

https://github.com/v-p-b/mdsrv

Static webserver that renders #Markdown files and #MermaidJS diagrams for your viewing pleasure. With live updates!

#python #llm

@cure53 do you have Google Ads (or similar) set up? They tend to burn user credits with similar gmail contacts (this user found you, proving our adtech works).

@zzt Most feature phones are hard to compromise because every time a malware author learns something about how they work, their brains explode.

PoC if anyone is interested:

https://github.com/dinosn/mikrotrick-poc

Reverse Engineering The Philips PM5139

https://hackaday.com/2026/09/09/reverse-engineering-the-philips-pm5139/

#Hardware #ReverseEngineering #Electronics

CVE ID: CVE-2026-20079
Vendor: Cisco
Product: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20079

CVE ID: CVE-2026-87491
Vendor: Google
Product: Chromium V8
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87491