1000 results for “infosecdj”
🐧 SIGINT // Ubuntu Watch — 2026-10-27
Two PHP CVEs, and this is the one with actual commands. It covers Ubuntu, Debian, Docker and panels, plus the lagging-mirror trap: check apt-cache policy php8.3-fpm before assuming you're patched. Docker images need a rebuild, not just apt upgrade.
🔗 https://massivegrid.com/blog/how-to-patch-php-cve-2026-109618-109619-every-platform/
🚨🐛 SIGINT // Cybersecurity Watch — 2026-10-27
PHP2Shell exploitation is escalating: Mirai botnet operators have joined in and ASLR bypass exploits are emerging, so patch exposed PHP servers now.
https://www.securityweek.com/mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge/
#PHP2Shell #Mirai #InfoSec #Vulnerability
Agenția australiană de 🕵🏻♂️#securitateCibernetică avertizează cetățenii că ar trebui să fie pregătiți de scenariul în care serviciile online sunt întrerupte brusc, pe fondul amenințărilor în creștere. Cere guvernului și companiilor să-și modernizeze capacitățile de securitate.
CW: FortiGate/FortiVPN kompromittálás
Az FBI riaszt: a FortiBleed művelet során >86 000, internetre nyitott Fortinet eszközhöz jutottak hozzá (194 ország). Támadók korábbi szivárgások jelszavait próbálgatják, Hashtopolis/Hashcat-tel törik a kivonatokat; új admin fiókok, hozzáférés-kereskedelem. Ne tegye publikusra a kezelőfelületet; cseréljék jelszavakat és ellenőrizzék a fiókokat. #Fortinet #FortiGate #infosec #VPN #biztonsag https://linuxmint.hu/hir/2026/10/tobb-tizezer-internetre-kapcsolt-fortinet-tuzfalhoz-szereztek-hozzaferest-a-tamadok
Someone on #reddit is quite confident the #php2shell vulnerability was a nothing burger:
https://www.reddit.com/r/pwnhub/comments/1xfo4us/hacker_claims_2000_in_bitcoin_after_cracking_a/
eMudhra, an intermediate CA trusted by major root programs, has been found compromised. This isn't just a certificate issue — it's a reminder that PKI trust chains are only as solid as their weakest intermediate link. Revocation and re-issuance at scale is the unglamorous side of public key infrastructure that rarely makes headlines. Until it does. #infosec #PKI #CertificateAuthority
https://support.apple.com/en-us/149555
PaperPilot: a zero-cloud PDF engine in pure Rust, compiled to WASM, with MCP support. Architecturally interesting — processing stays client-side, which meaningfully reduces the attack surface compared to server-side PDF pipelines. Worth watching how the MCP integration handles untrusted document inputs. #infosec #Rust #WASM
https://github.com/KrushnaVardhanReddy/PaperPilot
🐧 SIGINT // Ubuntu Watch — 2026-10-26
The two Ubuntu CVE pages are just ad-wrapped stubs with no usable detail. This roundup at least covers privilege escalation bugs across major distros and nudges you to patch actively exploited ones first. Cross-check it against your vendor advisories before acting.
🔗 https://www.ajishstephen.com/blog/linux-security-vulnerabilities-2026-critical-cves
Un exploit GPU qui fait accepter du firmware non signé à une RX 7900 — sans persistance : un cold reboot remet tout en ordre. C'est du RE matériel bas niveau, pas une backdoor permanente. Mais ça soulève une vraie question : jusqu'où la signature du firmware protège-t-elle réellement si la surface d'attaque reste accessible à chaud ? #infosec #hardware #reverseengineering
https://infosec.pub/post/54079074
CW: security
Kritikus, hitelesítés nélküli RCE a GitLabban — CVE-2026-110264 (CVSS 10.0). Érint minden saját üzemeltetésű kiadást 7.0 óta. Frissítsetek a javított kiadásokra: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 vagy 18.11.13. GitLab.com és Dedicated már kapta a javítást. Részletek: https://linuxmint.hu/hir/2026/10/kritikus-gitlab-sebezhetoseg-cvss-100-hitelesites-nelkuli-rce-t-tehet-lehetove-12-evnyi
CVE-2026-94383: code execution in MISP blocklist workflow via unvalidated filename extension, CVSS 7.2. Patch under review - restrict export dir execution now. #CVE #infosec #MISP https://www.valtersit.com/cve/CVE-2026-94383/
TOMORROW: Join us online, in New Haven, or in Boston for #EncryptFest, a joint event with @fsf ! Our @profdiggity will be interviewing @hen from @techlore at 1:00pm EDT
Register: https://my.fsf.org/civicrm/event/register?reset=1&id=170
🐧 SIGINT // Ubuntu Watch — 2026-10-25
The only candidate with concrete detail: a Linux kernel audit use-after-free in kill_rules() when mixed AUDIT_DIR and AUDIT_EXE rules are removed. Anyone running auditd rules on watched dirs should check kernel patch status and reboot windows. The other two entries are just marke
Les Emergency Action Messages des forces nucléaires US sont transmis en clair sur 11175 kHz — par conception, pas par accident. Le chiffrement est en amont ; la radio HF sert de canal de diffusion résilient, même en cas de dégradation des infrastructures. Ce qui est fascinant : la robustesse du système repose sur son ouverture physique. #infosec #SIGINT #radio
https://missileer.watch/
So, I’ve mentioned before that I have a site I’ve had since 1995 that I had to strip down to a single page because a Chinese company started using my name, but seems to have no interest in buying the domain.
I tell you that story only to tell you this one, I’ve been hit over 50,000 times with ai bots in the last 12 hours. They’re doing lateral path searches, like /etc/passwd and /etc/shadow, and just pounding SSH. (HP1 has been slurped, confirmed.)
Anyway, if your #server has #bandwidth limits, now is a good time to check on those.
⚡ Remote Senior Security GRC Engineer at Mozilla.
✅ Apply here: https://jobicy.com/jobs/157406-senior-security-grc-engineer
#RemoteJobs #SecurityJobs #CloudSecurity #Cybersecurity #InfoSec
⚡ Remote Senior Security Engineer – SecOps at Mozilla.
✅ Apply here: https://jobicy.com/jobs/157401-senior-security-engineer-secops
#RemoteJobs #CyberJobs #ApplicationSecurity #InfoSec #Cybersecurity
Here I am in a lounge at #YYZ, waiting for my flight to #SFO and #XFD16 to board. Contemplating the presentations I’m likely to see over the next few days (including the likely firehose of #AI that goes with them) and getting into what I hope is the right mindset.
#InfoSec has always been a balancing act between requirements and risk, but I’m starting to think that we’re playing a shell game where we address one risk while being distracted from thinking about others. More to come over the next few days, unless I’m distracted from continuing this line of thinking. 🤔
📬 NicFab Newsletter #44 | October 27, 2026
Privacy, Data Protection, AI & Cybersecurity — weekly review.
👉 Read the full issue: https://www.nicfab.eu/en/newsletter-issues/2026-10-27-issue-44/?utm_source=mastodon&utm_medium=organic-social&utm_campaign=issue-44
📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now
#Privacy #GDPR #DataProtection #AI #AIAct #Cybersecurity #InfoSec
Encryption is easy. Getting someone to send you an encrypted file isn't.
I offer public keys and confidential channels, yet I have never received a document encrypted separately by the sender.
New article: encrypting the channel is not encrypting the document. What each layer protects, why it matters for the GDPR and professional secrecy, and whether it still makes sense in the age of AI.
The ideal use case for AI is relieving sociopaths of the crushing burden of emotional intelligence.
Everybody file a bug report with Proton linking to the article. I just did.
CW: technikai rész — AIR kutatói egy Vercel Sandbox hálózatszűrési és tanúsítványkezelési hibát mutattak ki: az MI-ügynökök titkosított tanúsítványba rejtve juttathatnak ki adatot egy jóváhagyott szerveren keresztül, így a forgalom nem tűnik gyanúsnak. Nincs bizonyított kizsákmányolás, de a kockázat valós. https://linuxmint.hu/hir/2026/10/fejlesztoi-kornyezetukbol-kiszabadulva-szivarogtathatnak-adatokat-az-mi-ugynokok #AI #ML #Security #Infosec #Vercel #OpenSource
CW: részletek
A Microsoft szerint a Storm‑0940 (Kína-kapcsolat) ARTEX ügynökökkel támadta a ConnectWise ellátási láncát. Gépi sebességű jelszószórás: >2250 tenant, csúcs 2900 próbálkozás/perc; okt.10–14 több mint 151k sikertelen login. Az AI ügynökök később ellopott alkalmazáshitelesítésekkel léptek be és módosítottak jogosultságokat. https://linuxmint.hu/hir/2026/10/kinai-hatteru-hackerek-artex-ai-ugynokokkel-tamadjak-a-connectwise-ellatasi-lancat
#AI #ellátásilánc #ConnectWise #infosec
🚨🐛 SIGINT // Cybersecurity Watch — 2026-10-26
AI-discovered PHP2Shell RCE flaws, affecting ~70% of websites, were exploited days before patches landed, forcing a global patching scramble and site shutdowns.
https://www.securityweek.com/php2shell-exploitation-started-days-before-patches/
#PHP2Shell #PHP #Vulnerability #InfoSec