Happy announcement: My colleague and me will present a talk at hardwear.io NL 2026, "Vulnerabilities That Get Under Your Skin: Targeting the World’s Best-Selling Infusion Pumps". 100% human-brain VR 😛

Draw a fish and watch it swim in a tank with everyone else who's drawing them too 🐠🐟🐡

Silly, but also lovely

https://drawafish.com/

If I had a cent for every occasion I had to debug `if let Some(foo)=` moving `foo`, I had 2 cents...

#Rust

@christopherkunz I only ever encountered TACACS at the university, and I've seen shit o.O

TIL a recent? Zed update shows you the JSON path to the item you have the cursor at.

poll: in Git, do you ever use any of the references `MERGE_HEAD`, `REBASE_HEAD`, `CHERRY_PICK_HEAD`, `ORIG_HEAD`, `FETCH_HEAD`, or `REVERT_HEAD` etc? (and if so, what do you use them for?)

@ulldma that, or something from asciiartfarts.com

SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass https://blog.viettelcybersecurity.com/sharepoint_cve-2026-65660/

@ancientjames Michael Knight used this during his FLAG debriefings

@redsad
Reminds me to this by @catsalad

#kr2026 @gregkh on LLMs.

The main point is: DON'T PANIC:!

... At the end 10 bugs fixed, 1hour kernel development...

@ulldma or you could pipe fortune or cowsay? :)

[RSS] EvilVM: Forth shellcode (2019)

https://web.archive.org/web/20250418124519/http://evilvm.ninja/

[RSS] ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE

https://www.elttam.com/blog/att-cking-tacacs-to-pwn-your-network-via-a-pre-auth-rce

periodic reminder that Wizard Zines has an educational use policy if you want to use them in your university courses! https://wizardzines.com/education/

RE: https://infosec.exchange/@cR0w/117315299719177302

Important: We have learned that this vulnerability has been exploited.

Poland's CERT has published its report on MikroTrik, the zero-day campaign that targeted MikroTik routers earlier this month

Praises LLM agents for helping with the research

https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis/

My panic!() messages start to degrade to the quality of my commit messages

@dymaxion @kaoudis You are right, and now I think here lies the solution: with pentests you want priorities based on how an external party sees your system. Does this make sense?

(having to think about these things shows how much time passed since I started doing pentesting...)

It's so good to see this in the MIT Tech Review. Let's hope the message gets through. 🤞Big props to @timnitGebru & @emilymbender for putting such a fine point on things!

"Instead of OpenAI being prosecuted for creating malware that hacked another company, press releases, news outlets, media personalities, and lawmakers refer to “rogue models” as if they acted on their own. Instead of researchers being questioned about their companies’ habit of plagiarizing academics’ work or using customer data to train models without consent, the public’s imagination is redirected to fears about what the future might hold upon the arrival of fictional superintelligent machines."

https://www.technologyreview.com/2026/09/22/1144867/dont-be-fooled-summer-ai-hype/