avuko

codinghorror, 3 months ago to random

Men, please read this article and really take it to heart. And I mean me too. https://medium.com/

stevej, 3 months ago to random

I'm starting to think the computers will become self-aware before the people will.

teriradichel, 3 months ago to random

Although I mostly write about cybersecurity, the best advice I can give is to surround yourself with people who love and care about you. Forget the rest. You may not change the world but you can be happy with yourself and the people with whom you choose to spend your days.

GossiTheDog, 3 months ago to random

Enjoying this fully patched Ivanti Pulse Connect box (yes, the kernel has dirty in it)

Linux version 2.6.32-00366-gsd3b182-dirty - December 2009

curl 7.19.7 2009-11-04 (14 years)
openssl 1.0.2n-fips 2017-12-07 (6 years)
perl 5.6.1 2001-04-09 (23 years)
psql 9.6.14 2019-06-20 (5 years)
cabextract 0.5 2001-08-20 (22 years)
ssh 5.3p1 2009-10-01 (14 years)
unzip 6.00 2009-04-29 (15 years)

BleepingComputer, 3 months ago to random

Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks.

https://www.bleepingcomputer.com/news/security/new-fortinet-rce-flaw-in-ssl-vpn-likely-exploited-in-attacks/

jbn, 3 months ago to random

✨ New Timesketch release! A notable feature we added this time is connectors to different LLM services. Out of the box we have support for Ollama (for open models) and VertexAI from Google. We continue building the foundation for Assisted Investigations.

https://timesketch.org/changelog/#version-20240207

siem, 3 months ago to random

A short tutorial how to ingest STIX data into MISP - I ran into some oddities, and this might be of help to others too

https://blog.melinesieber.ch/posts/misp-building-bridges/
#misp #cti #stix

BleepingComputer, 3 months ago to random

A Chinese cyber-espionage group breached the Dutch Ministry of Defence last year and deployed malware on compromised devices, according to the Military Intelligence and Security Service (MIVD) of the Netherlands.

https://www.bleepingcomputer.com/news/security/chinese-hackers-infect-dutch-armed-forces-network-with-malware/

BabblingGeek, 3 months ago to random

WFH is distributed BCDR. This continuity tip brought to you by CA weather.

stux, 3 months ago to Amazon Dutch

Yikes

Onrust over gedeeltelijke verhuizing .nl-domeinen naar het Amerikaanse Amazon

#SIDN #NL #Amazon

https://nos.nl/l/2507035

ZLabe, 3 months ago to random

100 years of January sea surface temperature anomalies - 2024 begins with widespread warmth across the world's oceans

• Data from ERSSTv5 at https://ncei.noaa.gov/products/extended-reconstructed-sst

Animation of global maps showing sea surface temperature anomalies for each January over the last 100 years through 2024. Blue shading is shown for colder anomalies, and red shading is shown for warmer anomalies. There is large spatial variability, but a long-term warming trend found in nearly all regions.

GossiTheDog, 3 months ago to random

vendors: you should implement Zero Trust and Assume Compromise

me: right, so you mean I shouldn't trust you and assume you're compromised, right?

vendors: NOT LIKE THAT

da_667, 3 months ago to random

found a new rack for my ivanti gear

nf3xn, 3 months ago to random

deleted_by_author

adulau, 3 months ago to infosec

What happened to pastebin.com ? It has been down for the past 12 hours.

:blobcatpeekaboo:​

#pastebin #cti #infosec

KenWalkerQB, 3 months ago to random

US Supreme Court in Colorado 14th amendment appeal, court file:
https://www.supremecourt.gov/docket/docketfiles/html/public/23-719.html

The historian brief that Lawrence O'Donnell says you should read if you read only one supreme court brief in your life is here:
https://www.supremecourt.gov/DocketPDF/23/23-719/298999/20240129110006501_23-719%20bsac%20American%20Historians%20Final.pdf

#SCOTUS #trump #14thamendment #Democracy

lauren, 4 months ago to random

If your work involves sitting in front of a screen all day, and you can effectively complete your tasks from a screen at home, you should be permitted to do so. This is the 21st century, not the 18th.

ChrisPirillo, 4 months ago to random

roses are red
pockets have lint

BleepingComputer, 4 months ago to random

Researchers found roughly 45,000 Jenkins instances exposed online that are vulnerable to CVE-2023-23897, a critical remote code execution (RCE) flaw for which multiple public proof-of-concept (PoC) exploits are in circulation.

https://www.bleepingcomputer.com/news/security/45k-jenkins-servers-exposed-to-rce-attacks-using-public-exploits/

SirTapTap, 4 months ago to Cats

This is the ideal resting position

You may not like it, but this is what peak relaxation looks like

#cats #catsofmastodon

k3ym0, 4 months ago to Cybersecurity

Don't use Exchange On-Prem - It's riddled with vulnerabilities, they said.

Use Office 365 - It's way more secure, they said.

Meanwhile, MSFT leaving test OAuth accounts active, with:
✅ admin privileges
✅ weak password
✅ no MFA

(insert jokerclapping.gif)

https://arstechnica.com/security/2024/01/in-major-gaffe-hacked-microsoft-test-account-was-assigned-admin-privileges/

#cti #cybersecurity #threatintel #midnightblizzard #apt29

JulieB, 4 months ago to random

This. Oh my, THIS.

brianklaas, 4 months ago to random

Starting to feel real that my new book FLUKE—which completely changed my worldview as I wrote it—will be out in a few days in the US (and Feb. 1st in the UK). You can pre-order it now from wherever you buy books! Here’s a cool video teaser:

video/mp4

howelloneill, 4 months ago to random

When I need to translate the new threat actor names to the old actor names to the other firm’s actor’s names to

otter, 4 months ago to infosec

More or less every company has guidance that users shouldn't click links in emails to prevent phishing and other email based attacks. So why do all email clients enable clickable links? There doesn't even seem to be an option to disable such links from incoming emails. 🤔
#infosec #email #phishing #security