← Feed

Posts

• View post

  Elon Musk tried getting race hate figure Tommy Robinson out of jail by funding his defence, and lost again. https://www.bbc.co.uk/news/articles/cq2d6z36pp53o

• View post

  Anthropic’s SEC filing is amazing. It describes itself as the most important company in human history, then if you keep reading it’s like

• View post

  RE: https://techhub.social/@Techmeme/117512270378309989 Companies when they get their real Claude bill in three years

• View post

  RE: https://infosec.exchange/@mayahustle/117406250925641406 I have an unlocked Frontier AI model at home, and I’ve spent the past month generating literally thousands of malware samples doing all kinds of things, and running them through AV scanning and EDR tools. Basically 100% detection rate across every major vendor. Out of the box, default settings on the security tools. It didn’t help as an attacker at all, if anything it made me easier to detect. No idea what Jimmy’s presentation is...

• View post

  RE: https://infosec.exchange/@ciaranmartin/117486889924241077 Checking on Twitter takes of the PHP vulns was a mistake.

• View post

  I’ve seen some interesting takes on the PHP thing out of the US. One is from an official saying the US must win the ‘AI race’ as China definitely wouldn’t have told the world about the vulnerability like the NSA did. The NSA were late to the party, literally days after me. They were also beat by.. Chinese government cyber authorities, who already had an advisory out.

• View post

  The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service. Translation - breaking encryption. https://emudhra.we-have-a-problem.com/

• View post

  Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.

• View post

  This Google Cloud outage in Europe is huge. Almost every service offline, including Google SecOps (Chronicle), for almost 4 hours now.

• View post

  Announcement is out. Good on Microsoft for finally reaching a sane conclusion. - Recall won’t ship as a feature at launch on Copilot+ PCs any more. - Won’t be available in Insider preview channel at launch, as it was pulled. When it does appear in preview channels, privacy and security researchers need to keep a close eye on what Microsoft are doing with the feature. Microsoft tried developing this feature in secret in a way which tried to avoid scrutiny. Thank you to everyone who stood up.

• View post

  Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are. https://www.404media.co/accenture-tells-employees-they-can-now-spend-only-29-on-claude-per-month/

• View post

  Do I have to go on my rant again about Microsoft keep letting DWM get exploited in the wild and patch over it *after* MSTIC pull the exploit from an attacker or victim's PC? At least it's not Kaspersky this time, I guess. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30400

• View post

  RE: https://cyberplace.social/@GossiTheDog/114504451845204949 An update - one good side effect of the GenAI boom is it’s forcing Microsoft to fix decades of under-investment in security engineering. The DWM stuff is finally getting patched each month.

• View post

  RE: https://techhub.social/@Techmeme/117438919395096744 AI safety = regulation which protects the current market leaders. They’re begging Daddy to be regulated, because they know it’s the way to get locked in as The market.

• View post

  Character.AI, the GenAI site that convinced some children to kill themselves, has gone bankrupt after parents sued them. https://futurism.com/artificial-intelligence/google-character-ai-bankruptcy

• View post

  If you use Bumble I'd recommend finding a different dating service and deleting your prior data if you don't use it now, as it sounds likely it is being purchased for AI training data. "Dating app Bumble has been bought for $1.3bn (£980m) in what the new owners called "a bet on the future of humanity"." https://www.bbc.co.uk/news/articles/cm9qzwjgnjxlo

• View post

  RE: https://hachyderm.io/@evacide/117434963703286230 The Yandex decrease in threat activity narrative was a nonsense peddled by the Ukrainian government. People confuse legit search engine bots with social media bots. Russian propaganda operations don’t run from Yandex. They never have. I deal with them all the time on Mastodon. There was no dip. It’s a reminder that wars have propaganda - and the propaganda was coming from Ukraine this time.

• View post

  Regarding the Danfoss fridge thing doing the rounds in the media - there’s several thousand of them that are directly internet facing. The username is admin and the password changes every day automatically to.. the current date. Every single one is like this. You can just log in and change the temperature. Anybody can do it, easily scriptable.

• View post

  RE: https://techhub.social/@Techmeme/117430147242479675 Anthropic’s claims here have absolutely no basis in reality.

• View post

  The upcoming AI bubble endangers the global financial system - the IMF. https://www.theguardian.com/business/2026/oct/13/ai-share-crash-risk-global-imf-debt-corrowing-cyber-attacks

• View post

  A 16 year old boy hacked an internal Microsoft system called TITAN with 17 trillion records as it didn’t validate JWT signatures at all, accepted ‘admin’ as authentication without a password and was internet facing. They paid him $5000 and told nobody about it. https://blog.faav.net/how-i-couldve-accessed-17-trillion-microsoft-records

• View post

  no

• View post

  PC sales have fallen over 20% this quarter worldwide across all companies, declines prior quarter too, IDC expect costs to rise massively from here onwards and material impacts to PC sales into the future. https://www.idc.com/resource-center/press-releases/idc-pc-tracker-3q26/

• View post

  Guys predicting their own divorce

• View post

  in 'who have I annoyed this week' LinkedIn intelligence

• View post

  I dunno if people remember the ransomware economy thread I had on Twitter years ago, but one of the things I covered is all the “ransomware recovery” vendors who secretly pay ransomware groups and pretend they magically decrypt the data. They’re middle men for crime basically. Anyway, one cybersecurity vendor (MonsterCloud) has finally had an arrest over it. Thread follows. https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments/amp/

• View post

  RE: https://cyberplace.social/@GossiTheDog/117393814293721056 Fun one - over half of the CVEs added to CISA KEV are over a year old, ie issued a year or more ago. There’s this whole narrative around how GenAI will find zero day vulns and the apocalypse is coming. Slight issue - almost all incidents are caused by orgs not patching. Basically at all. The cybersecurity industry never solved that.. and doesn’t even understand it is the case.

• View post

  Israeli Finance Minister Bezalel Smotrich: “The thorough cleansing that we are carrying out now in southern Lebanon is unprecedented. They have nowhere to return to… the world isn’t stopping us.”

• View post

  RE: https://fedi.computernewb.com/@vncresolver/117388191765651830 Space year 2026 Time to put your Windows 98 PC on the Internet, install VNC - nothing can go wrong.

• View post

  Well done to Microsoft for having two different mobile apps called Copilot which do different things.