Beatboxing is one of countless very good example why AI will never be able to replace actual art.
Most (if not all) sounds a beatboxer makes can technically be made by a synthesizer. The arrangement can be the same too.
Yet millions and millions of people enjoy beatboxing a lot more, specifically BECAUSE it comes from humans.

I think this principle can be applied to most forms of art.

So I don't think there's too much need to worry.

r2ghidra 6.2.0 is out, and this time the changelog is massive! the decompiler output has been heavily improved in sync with all the new type analysis information we have in r2-6.2.0 (yeah next release will reduce backward compatibility with r2 apis)

https://github.com/radareorg/r2ghidra/releases/tag/6.2.0

pyTGTDeleg abuses the Kerberos delegation mechanism (tgtdeleg trick) to extract a usable forwarded TGT from a domain-joined MSSQL server, using only SA credentials.

https://github.com/ivancabrera02/pyTGTdeleg

#infosec #cybersecurity #redteam #pentest

Unfortunately my little art shop is closing down, but that also means everything is 30% off!

If you wanted to snag a piece at some point, or just feel like getting yourself a little something nice to look at, now's the chance

http://wagtails.art/shop

#MastoArt

(Cannot ship to the EU, sorry.)

Exploit demo on Linux and Patch Analysis of ResetNightmare (CVE-2026-27912) and KerberLoss (CVE-2026-25177), two Active Directory vulnerabilities discovered by Shai Laron from Semperis allowing Full Domain Takeover and more.
https://cravaterouge.com/articles/resetnightmare/

unfortunately last night our AI model escaped its sandbox and gained access to a JIRA server, at which point it felt it best to return to it’s sandbox

Time for a new thread.

I've made a short blog post outlining the basic techniques of executable emoji, which I have dubbed emojissembly.

https://martypc.blogspot.com/2026/08/executable-emoji.html

I started working on a general COM2EMOJI utility that I might post at some point, but let's face it the chances of me being distracted by some shiny thing in the next 48 hours is quite high.

Metabase : we fixed a critical vulnerability. We even made a github advisory, showing how it's a CVSS 10.

The CVE? None. Not worth it.

Fixed versions of the software released on GitHub? Also no. Not worth it.

A job done, folks.

As a parent who has been living in blessed ignorace of Paw Patrol, today I took the kid to her first cinema experience to see Paw Patrol: The Dino Movie.

And I'm making this everyone's problem because I have So. Many. Questions.

Luckily I was taking notes.

Thread 🧵

#parenting #PawPatrol #cinemastodon

Rule #1 of Cybersecurity:
Make sure the safety is off

Interesting Git repos of the week:

Detection:

* https://github.com/Yamato-Security/WELA - improve your Windows logging

Bugs:

* https://github.com/imbas007/POC-CVE-2026-60206 - popping WebLogic via SAML

Exploitation:

* https://github.com/Mrnmap/RedTeam - a nice list of tools
* https://github.com/H4CK3RT3CH/RedTeam-Tools - another nice list of tools
* https://github.com/redteaminfra/redteam-infra - Puppet powered red team infrastructure
* https://github.com/apocalypse9949/Redteam-Automation - AI driven red team framework 🤖
* https://github.com/CR-DMcDonald/letitrust - seizing hanging Azure tenant domains with Gandi
* https://github.com/SyscallX-18113/Apkx-Hunter - automated analysis of Android APKs

Cryptography:

* https://github.com/bandrel/HashcatRosetta - Hashcat rule analyzer and interpreter 🤖

#security, #research, #code

Auch das noch.

A handy .NET reverse engineering trick:

Add a sample.exe.config file next to your sample and you can trace e.g. all network requests, including content and headers without hooking or bothering with proxies. Helpful to e.g. quickly inspect c2 traffic:

https://gist.github.com/eversinc33/cd7f3e90643f69748862b87f394f1c16

nanosemitones per gigahectare