← Feed

Posts

• Post #4498029

  hearing abt a massive RIF @ R7… 2026 is a terrible, terrible year

• Post #4407398

  Et tu, AISI? https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing

• Post #4377991

  OH NO CHINA-BASED HACKER EMPLOYS DEEPSEEK IN AUTONOMOUS THREAT CAMPAIGN Except: "Researchers said the hacker also attempted to test Western AI tools, BUT **** ultimately was forced to revert to manual operations to succeed *** " We gotta stop the hype folks.

• Post #4368220

  "Michigan health authorities were in touch with Taco Bell's parent company, Yum! Brands Inc., about a parasitic outbreak in early July, weeks before the company officially alerted consumers." IRL en💩ification causes stocks to also go in the 🚽

• Post #4364450

  RFC for a proposed "this domain is for sale" DNS record https://www.rfc-editor.org/rfc/rfc10023.html

• Post #4356621

  Bulletproof Hosting Watch, Week of 2026-08-02 is up, using data from @HoneyLabs@infosec.exchange, @censys@infosec.exchange & my fleet. Full report w/IoCs: https://ai.rud.is/posts/2026-08-02-weekly-bulletproof-report PLI-AS ran 4 ⚔️ from Swiss servers (Panama shell): DCE/RPC, RDP brute-force, tRPC setup, WordPress login. KPRONET scanned .env & .git files w/20+ fake browser profiles. TLS fingerprint stayed fixed across rotations. FLOKINET 185.100.87.136 is a Tor exit relay that brute-f...

• Post #4356104

  Speaking of AI-generated BS, it appears the Clankers somewhat know how to make animated pew pew maps . Not linking to the site b/c it's a vibe-coded hot mess. Also, never tell me who made the training data that fuels these dashboard abominations b/c it won't end well for those responsible.

• Post #4353840

  Huh. It normally takes until ~1100 ET to get me this riled up. (there is alot of undisclosable professional "ugh" going on rn) Rly glad I have tomorrow off to de-screen and have a day out with the grandoffspring, traipsing in the Maine outdoors.

• Post #4353643

  AI Slop CVEs may be worse than the slopsploits we see being slung across the internet. JFrog audited 55 advisories from 1 new GH acct. 54 were fabricated. The SQLite ones cite UAFs in functions that didn't exist, line numbers past EOF, & PoCs that die at the parser. NVD scored several 9.8 Critical anyway. 🤷🏽‍♀️ Since NVD paused deep analysis in 2024, nothing in the pipeline requires a repro. Plausible prose is enough to reach your scanner. https://research.jfrog.com/post/sqlite-critical-c...

• Post #4279385

  @cR0w@infosec.exchange is https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html slow for you (it's not on my end)

• Post #4246851

  I did a quick check on my "who is looking for open directories" side project and OpenAI has joined Anthropic in scarfing up every single file from the project. Unlike Anthropic, they at least used their user-agent (and the source IPs were in the OpenAI ranges).

• Post #4239924

  Is it Friday yet?

• Post #4213110

  Pls tell me nobody in my timeline actually believes all the "we don't log anything" BS from VPNs. (pls) https://securityaffairs.com/196197/security/vpn-breach-exposes-58-million-connection-logs-despite-no-logs-claims.html

• Post #4211230

  RE: https://infosec.exchange/@dougmadory/117004019746349063 Everyone who uses the internet should be surprised every single day that any of it actually works.

• Post #4206243

  Tom Emmer (Republican; majority whip in the United States House of Representatives) on Alpha News: "We are not creating a new Somalia ... if you do not want to be an American, you do not want to assimilate, then get the hell out of here. Go back to where you came from. You don't belong here." I think the members of the GOP shld all just start wearing the armbands, fly their swastikas, and stop pretending they aren't Nazis.

• Post #4201466

  The fact that a whole bunch of Really Important™ CISOs did not advocate for a Congressional hearing to haul OpenAI execs and scientists to Capitol Hill to explain themselves and then also call for one or more of those OpenAI humans responsible to be arrested and put on trial says a whole lot about the state of ethics and morality and just plain common sense in cybersecurity defenderville.

• Post #4199907

  RE: https://infosec.exchange/@BleepingComputer/116997530501171992 The firm that provided the story to BC is a new startup aiming to help "Manage and Secure Data Centers". They exploited CVE-2013-4786 This is advertising a new startup by flogging a report by extremely lazy "researchers" (did they even do *any* "is this a honeypot" tests?) Perhaps don't let your C-suite give Lava any business?

• Post #4194101

  The FCC just declared war on solar projects in America (direct PDF) https://docs.fcc.gov/public/attachments/DA-26-786A1.pdf Despite testing by other agencies revealing no evidence of the claim, the FCC asserts their fear of remote connectivity with supply chain dependency creates a kill-switch vector for grid-connected resources.

• Post #4172210

  This is sadder/more pathetic than anything I've read abt "AI" to-date. https://www.bbc.com/news/articles/cnvp7364q5no

• Post #4171415

  "Hey! OpenAI hacked us too! And FIRST!!!!!" is such an odd flex by jfrog. I am also skeptical. https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases#artifactory-7161

• Post #4171118

  it's odd living in a time where one has to use the term "non-violating eyewear". o_o

• Post #4165817

  Jeepers! There sure were alot of shops waiting for the Kimi K3 drop on HF this week. .The number of unique "we got it running on 'X' hardware" posts is about 10x (by the day after release) that of other open weights models in 2026. Rly wld not want to be a domestic closed-weights foundation model provider rn or an org who sketch-financed data center buildouts.

• Post #4164120

  anyone have ~80 spare RTX 5090s lying around to run Kimi K3? https://xcancel.com/totheagi/status/2081855316443205717

• Post #4147702

  I'd bet some decent coin there is no "AI" being used in each of those "drumbeat spikes" of bots slinging IoT creds at anything they can find on the internet. Attackers have plenty of automation and capabilities w/o "AI".

• Post #4139274

  Bulletproof hosting report for Jul 21-27 using intel from @HoneyLabs@infosec.exchange, @censys@infosec.exchange, and my tiny fleet. Pfcloud dominated w/2,500+ events from 39 IPs & fleet correlation that's interesting: multiple IPs share the exact same SSH HASSH fingerprint + OpenSSH 9.6p1 configs. Proton66 re-emerged w/544 events running Redis & MSSQL scanning campaigns. Aeza Group's 3x-ui panel hit Censys THREAT-521. RouterHosting probed SMB, SIP, & port 541 across 12 IPs....

• Post #4136482

  "Drawing on new evidence, the report identifies a growing threat: ‘Retrieval Augmented Generation (RAG) poisoning’ – the deliberate manipulation of online information so that AI models amplify false or misleading narratives. Through a case study of Russian foreign information manipulation and interference (FIMI), the research demonstrates how these techniques are already influencing the outputs of leading AI services." Direct PDF: https://demos.co.uk/wp-content/uploads/2026/07/GEO-for...

• Post #4094732

  Crypto cows. o_O https://www.coindesk.com/markets/2026/07/24/brazilian-farmers-tokenized-dairy-cows-to-get-loans-bypassing-bank-lending-limits

• Post #4092433

  New mass round of phishing domains abt to get spawned… https://nerds.xyz/2026/07/verisign-web-domains-launch/

• Post #4070692

  R a p i d 7 is continuing their mass eshittification campaign by retiring #AttackerKB in mid-August. This small, MIT-licensed #golang utility — https://git.sr.ht/~hrbrmstr/attackerkb-archive — will let contributors download their analyses into a jsonlines/ndjson file so you can preserve your contributions to a massively failing corporation.

• Post #4068259

  Solid validation by @HoneyLabs@infosec.exchange of the original human-led research of early warning signals I did last year. https://honeylabs.net/pre-disclosure Also pls remember I distanced myself from the 2026 AI-hallucinated faux re-up of my research by my former org. The Honeylabs methodology and receipts are solid.