Fuck Cybersecurity Awareness Month, October is Pitbull Awareness Month.
Remote
Sir cR0w Ravenshire
@cR0w@infosec.exchange
mastodon 4.8.0-alpha.3+glitchAnalyst
0 Followers
389 Following
50 Posts
Joined October 28, 2022
Pronouns:
He / Him
RE: https://mastodon.social/@campuscodi/117377454167316988
Gonna be fun when Ivanti and Citrix and Palo and Fortinet and Cisco and F5 all keep their gov contacts because they're "PQC Ready" but keep getting popped by URI encoding and BoFs from 20 years ago, not to mention all the TAGs they can't be bothered to boot from their own networks, making that PQC essentially pointless against the majority of threats.
Quoting
NSA announced it is accelerating it's PQC timeline 👀 👀 👀
All systems must be PQC hardened by the start of next year
All legacy systems that don't support PQC must be phased out by 2030
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4615285/nsa-announces-post-quantum-cryptography-measures-to-safeguard-national-security/
Open quoted postRE: https://flipboard.com/@theseattletimes/tech-news-goc90q5pz/-/a-pHHWW4X9TSm3q4Mxb_c9HA%3Aa%3A2857557016-%2F0
Fuck that guy.
Quoting
Newsom vetoes measure that would have penalized the use of smart glasses to secretly record people
https://www.seattletimes.com/nation-world/nation/newsom-vetoes-measure-that-would-have-penalized-the-use-of-smart-glasses-to-secretly-record-people/?utm_source=flipboard&utm_medium=activitypub
Posted into Tech News @tech-news-TheSeattleTimes
Open quoted postRecorded Future lists infosec.exchange as malware.
Malware category: Trojan
Malware family: FakeUpdates
You've made it, @jerry@infosec.exchange . 
Seeing domains get moved from the "Hate Speech" category to the "Parked and For Sale Domains" category is very feelsGoodManDotPng.
I don't know how many of you have public call centers, but you might want to figure out how to deal with AI agents "calling on behalf of" human employees or customers or similar. I've seen it a ton lately and it's creepy as Hell. They're aggressive and weird ( negative ).
Replying to
@oxy@social.bsdlab.au "But we used protection!"
The protection:
You can always tell when vendors like Palo Alto are getting ready to announce a new product because they start making their existing shit even worse so they can say "that's fixed with this new product."
ANNOUNCING The CrowdStrike Cyber Superintelligence Lab
Go hack some AI SOC shit.
https://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7
Three functions in services/actions build CrowdStrike Real-Time Response (RTR) command strings by string interpolation, with no escaping, from caller-supplied parameters. The resulting command string is sent to the CrowdStrike Falcon agent and executed on the target endpoint as the EDR agent's privilege (SYSTEM/root).
Yet another sign I need to log off for a while: My truck rolled from 11111 to 11112 miles and I was temporarily confused why it wasn't 100000.
RE: https://cyberplace.social/@GossiTheDog/117343821114841048
I'm not under NDA and don't use Citrix so if anyone wants to send it to me, I'm more than happy to post it for you. Without naming the source, obviously.
Quoting
Citrix patches are out on the main support site now.
You will need to check every box after patching for webshells. Citrix are locking the script behind an NDA as apparently they’re from 1996… hopefully one of the NCSCs publishes a script again as the NDA thing is crap.
To be clear patching alone doesn’t remove the backdoors being placed.
bong rip
hold
hold
...
hold
exhale
Fuck a non profit GAYINT should be a church.
RE: https://infosec.exchange/@ajn142/117349300525417657
When the puppygirl polycule finds a new top.
Quoting
Oh god, I thrunted once and now my coworkers keep asking me to thrunt for them.
Open quoted post
Yet another perfect 10 this morning. This one from a company that knows its way around perfect 10s. 🥳
https://www.cve.org/CVERecord?id=CVE-2026-92931
sev:CRIT 10.0 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information.
Still my favorite coin.
#teamOrca
More old vulns finally getting CVEs but a couple perfect 10s in a tool to allow AI agents to make trades on your behalf is just too... expected.
Vibe-Trading is an open-source research workspace for turning finance questions into runnable analysis. It connects natural-language prompts to market-data loaders, strategy generation, backtest engines, reports, exports, and persistent research memory.
It is designed for research, simulation, and backtesting — and, when you choose, autonomous trading through a broker you authorize yourself (e.g. Robinhood Agentic Trading). It holds no funds and never trades outside the limits you set, and you can halt it instantly.
https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-jqmf-mx4f-hfr6
https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj
Replying to
@numodular@c.im Humans enslave humans. AI is just the Boogeyman.
Patch your fruity phones, there's another EITW 0day.
https://support.apple.com/en-us/149226
Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
Of all the bullshit I expected from the current US regime, going from cops threatening dogs with their 9mm to cops threatening dogs with their 9cm was not on that list.
Replying to
@huronbikes@cyberplace.social It's not a security product, it's an AI product. They don't count because they're the future.
Replying to
Replying to
Oh fuck that job.
Replying to
@theorangetheme@en.osm.town @i0null@infosec.exchange Shhhh shhhh shhhh.... You go sleep now.
sev:CRITs in Dayforce Payroll. Go patch and protect that shit before your pay gets fucked.
https://cert.pl/en/posts/2026/09/CVE-2026-73640/
Replying to
@kajer@infosec.exchange The status page was still up. That means the disruption isn't total.
Replying to on mastodon.social
@Viss@mastodon.social @ai6yr@m.ai6yr.org @kajer@infosec.exchange I expect this one is just another bad Cyber Security something something acronym but I still noped out as soon as I had the screenshot.
Replying to
@darfplatypus@infosec.exchange Confirmed Darf is my manager.
Replying to
@johntimaeus@infosec.exchange If others can launder money that way we might as well use it to help people.
Replying to
@theorangetheme@en.osm.town I have no idea. But something fun.
Replying to
@theorangetheme@en.osm.town As long as I get paid I don't care what it's called.
Replying to on mastodon.social
@hrbrmstr@mastodon.social At least I'm not digging into 0day and making people work over the weekend. 😅
Replying to
@DaveMWilburn@infosec.exchange Yeah. I liked being oblivious of such things but now that I'm looking for work again, I can't hide from it anymore. 
Replying to
@TheHag@bog.fan OMG @chillybot@infosec.exchange we NEEEEED that emoji.
Replying to
@krypt3ia@infosec.exchange I worked in the food court where I could trade Panda for a milkshake so this isn't news.
Replying to
@krypt3ia@infosec.exchange All their Monsters shows have some that crap, haven't they?
Replying to
@krypt3ia@infosec.exchange No idea but that was on their website yesterday.
Replying to
@krypt3ia@infosec.exchange That sucks. Especially for stories so well known and so crazy without changing them.
Replying to
@huronbikes@cyberplace.social I prefer to let my weird brain be the context. But thanks. 