Posts
4364Following
737Followers
1649
repeated
Neodyme
neodyme@infosec.exchange
While our colleagues hack live at #Pwn2Own in Cork, take a look at our newly published last year's writeup on our blog: We compromised a QNAP router to take over a networked Canon printer.
▶️ Read the findings and how we got there: https://neodyme.io/en/blog/pwn2own-2024_qhora/
0
3
0
repeated
Gina Häußge
foosel@chaos.socialJust received an email from YouTube that they'll soon enable autodubbing on the OctoPrint channel for new and soon also old videos. Hell no, every time I run into this AI shit when watching YouTube I just want to scream, it's THAT bad.
Thankfully, there's a way to opt-out, and I just did that. And if you upload stuff to YouTube, for the love of all that is holy, PLEASE disable that too!
Uncheck Channel Settings > Upload defaults > Advanced Settings > Automatic dubbing
3
14
0
repeated
abadidea
0xabad1dea@infosec.exchangeIt feels like the major tech companies have followed a Journey of discovering The Hardest Way Possible why quality assurance is so important, gradually ramped up quality assurance, dramatically improved the quality of their software, until the senior engineers who pushed for this retire, and then a guy who thinks he knows everything because he's read both "What They Teach You At Harvard Business School" and "What They Don't Teach You At Harvard Business School" says to himself "why are we paying for all this quality assurance? the quality is clearly fine, we don't need it!"
https://www.theregister.com/2025/10/16/windows_11_update_localhost/
4
8
0
repeated
/r/netsec
_r_netsec@infosec.exchangeCVE-2025-8078: ZYXEL Remote Code Execution via CLI Command Injection https://rainpwn.blog/blog/cve-2025-8078/
0
3
0
repeated
TrendAI Zero Day Initiative
thezdi@infosec.exchangeWant to watch #Pwn2Own but can't make it to Ireland? Join one of the live streams!
Tues 1400 - STAR Labs SG vs Sonos Era 300
https://youtube.com/live/3oAs5hzH9zE
Wed 1400 - SummoningTeam vs Samsung Galaxy
https://youtube.com/live/LuzHcXruJF4
1600 - Qrious Secure vs Samsung Galaxy
https://youtube.com/live/DYjWzgS2JXg
Thur 1030 - Interrupt Labs vs Samsung Galaxy
https://youtube.com/live/pFPhdBcyykI
1500 Team Z3 vs WhatsApp
https://youtube.com/live/hM3z_5yT3Os
0
2
0
repeated
James Forshaw 
tiraniddo@infosec.exchange
Honestly, WTF Microsoft. https://hawktrace.com/blog/CVE-2025-59287
2
8
0
repeated
Talos Vulnerability Reports
talosvulnsTruffle Security Co. TruffleHog git arbitrary code execution vulnerability
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2243
CVE-2025-41390
0
1
2
repeated
Lorenzo Franceschi-Bicchierai
lorenzofb@infosec.exchangeICYMI (story broke late Friday evening): A judge has ordered NSO Group to stop targeting WhatsApp users.
At the same time the judge reduced the damages the spyware maker had to pay to WhatsApp from $167 million to $4M, becasue there was no evidence NSO’s behavior was “particularly egregious."
http://techcrunch.com/2025/10/18/spyware-maker-nso-group-blocked-from-whatsapp/
0
3
0
repeated
repeated
repeated
repeated
repeated
Meredith Whittaker
Mer__edith@mastodon.worldPSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.
10
16
1
repeated
Frédéric Jacobs
fj@mastodon.socialToday is "reminder they use AWS US-EAST-1" day.
https://health.aws.amazon.com/health/status
1
8
0
buherator
buheratorhttps://samcurry.net/hacking-clubwpt-gold
0
1
1
buherator
buheratorhttps://streypaws.github.io/posts/Dissecting-a-1-Day-Vulnerability-in-Linux-XFRM-Subsystem/
0
0
0
buherator
buheratorShow content
It was incredible, and put "age" to a new perspective.
Enjoy:
https://www.youtube.com/watch?v=AINLzMBX7CA
0
0
2
repeated
Fabian Giesen
rygorous@mastodon.gamedev.place"Do Red Dead Redemption 2's Power Lines Connect to Anything?" https://www.youtube.com/watch?v=mTtMCoJrGxk this is incredible
TL;DW they didn't get it 100% right and there's some mistakes and several anachronisms in there, but overall, holy shit
1
3
0