@jerry FF

@jerry Original timestamp of the image:

Wed Sep 23 09:14:13 PM CEST 2026

It's the first time I see such request ever (not just here).

Umm why does infosec.place "access my device"?

/cc @jerry

Postmortem of a little community hobby wiki struggling to survive an extinction-event-tier DDOS purely because they banned one guy for using Claude on the wiki https://blog.xkeeper.net/the-cutting-room-floor/tcrf-2026-ddos-postmortem/

Rethinking Reverse Engineering for the AI Era:

https://www.romainthomas.fr/publication/26-rethinking-reverse-engineering-for-the-ai-era/

I tempted to do a small giveaway: reply with your best success *or* horror story related to electronics. I'll pick ~3 winners around EOW and send them a copy of The Secret Life of Circuits.

Plz no AI slop. Won't ship to Russia.

Webseeds should be working again for https://infocon.org/ #InfoCon.
There was a problem with http range requests that should now be fixed. Please let us know if you see a difference!

Any pentesting firm behaving like OpenAI would be shutting down and counting lawsuits within a couple of months.

This new rera of Big AI doing cyber surely feels like the late 1980s/early 1990s of the Internet Wild West

RE: https://cosocial.ca/@mhoye/117326705107715161

That last paragraph is a compelling point that runs deep.

@xssfox More interesting technical details here (I can't vouch for accuracy):
https://collusion.wiki/
https://transluce.org/agent-activity

RE: https://neuromatch.social/@jonny/117324790823856750

This thread is incredibly funny.

Apparently, any user can ask Meta's brand new chatbot Muse to zip and send its whole server-side VM OS filesystem system to the user.

@jonny is going live through the intestines of the filesystem right now.

He reports extremely shoddy work while also a lot of malovent instructions by Meta to the chatbot against the user.

We're big fans of Muse (the band) in this household and it's incredibly ironic that Muse (the chatbot) forcibly took the social media handles of Muse (the band). Because what're Muse (the band)'s lyrics often about? Sci Fi and techno dystopia.

https://www.vice.com/en/article/longtime-rock-band-forced-to-change-social-media-handles-so-meta-can-launch-identically-named-ai/

We now publish tar'd up shallow git clones you can use with your CI. Please carefully read the safety caveats and use the script we provide to make sure you're not getting something malicious:

https://people.kernel.org/monsieuricon/using-shallow-git-tarballs-for-ci

Your weekend reading assignment has arrived early.

A first taste of the upcoming, still-under-wraps Phrack 73: “THE PROXY THAT MADE NO SENSE” by @mikko.

https://archives.phrack.org/dl/73/the-proxy-that-made-no-sense.pdf

New vulnerability report from Talos:

Apple macOS CoreWLAN information disclosure vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2376

Whatever they smoke at #F5, I don't want any of it.

[RSS] Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/

[RSS] CVE-2024-0244 - A heap buffer overflow in the Canon MF753Cdw printer

https://www.thezdi.com/blog/2026/9/23/cve-2024-0244-a-heap-buffer-overflow-in-the-canon-mf753cdw-printer

[RSS] Google's PageBreak Project - Real-World Findings

https://bughunters.google.com/blog/pagebreak-real-world-findings

I'm hiring an exceptional Offensive Security Researcher for my team at NVIDIA (Offensive Security Research - OSR).

Firmware, microcode, RISC-V, hypervisors, and shipping mitigations like HW CFI, Memory Tagging, and Pointer Masking from the ground up.

https://jobs.nvidia.com/careers?query=JR2026488