@badthingsdaily@infosec.exchange

BadThingsDaily @badthingsdaily@infosec.exchange · Aug 03, 2026

You’ve learned a research talk at BH/DC will drop 0day on your product, and you have a short amount of time to prepare.

0

1

0

BadThingsDaily @badthingsdaily@infosec.exchange · Jul 31, 2026

An adversary has acquired a service wide database master key in your IaaS. https://www.wiz.io/blog/cosmosescape-taking-over-every-database-in-azure-cosmos-db

1

0

3

0

BadThingsDaily @badthingsdaily@infosec.exchange · Jul 31, 2026

An escaped frontier cyber model has created a malicious dependency that you’ve introduced into your supply chain.

0

BadThingsDaily @badthingsdaily@infosec.exchange · Jul 30, 2026

Your CEO's socials are taken over to promote a memecoin, despite having hardened account security. https://www.reuters.com/legal/government/robinhood-ceo-vlad-tenev-says-x-account-was-hacked-2026-07-28/

0

BadThingsDaily @badthingsdaily@infosec.exchange · Jul 29, 2026

The same leaked credentials have been exploited by overlapping ransomware groups. https://chaos.social/@vampirdaddy/117000282109268902

0

BadThingsDaily @badthingsdaily@infosec.exchange · Jul 28, 2026

An engineer's AI IDE has been instructed to edit its own configuration after viewing hidden instructions on a fetched URL. https://research.intezer.com/blog/2026/07/remote-code-execution-kiro

0

BadThingsDaily @badthingsdaily@infosec.exchange · Jul 27, 2026

We chained two memory-safety flaws in Oj, a native Ruby JSON parser used by GitLab

0

BadThingsDaily @badthingsdaily@infosec.exchange · Jul 26, 2026

An attacker has remotely executed code through a JSON parsing library in production. https://fearsoff.org/research/fastjson-1-2-83-rce

0

BadThingsDaily @badthingsdaily@infosec.exchange · Mar 11, 2024

During an incident you have discovered another incident, now you have two incidents

29

1

15

0

BadThingsDaily