~w00p~

@EUCommission@ec.social-network.europa.eu I've also got a good meme for you:

@davidculley@hachyderm.io maybe interesting for you? @adfichter@infosec.exchange

@Tutanota@mastodon.social I'd financially support anyone suing the shit out of #chatcontrol

"EU and UK officially blame russian spies for cyberattack on Poland's power grid" https://www.theregister.com/security/2026/07/13/uk-eu-officially-pin-poland-energy-cyberattack-on-russia/5270458 #eu #uk #ot #energy #cyber #poland

@moonwalker@infosec.exchange I'm all set on online services ;) And I'd spend (much) more to participate in a crowdfunding to fight #chatcontrol than the cost of a sub.

@bontchev@infosec.exchange 😆 Yep, this login flow is complete crap.. I was able to make it work somehow in the end.. Make sure you use the same e-mail you used to buy the sub and not an alias.

@GossiTheDog@cyberplace.social 😂😂😂 👌 The age of debt..

"Illustrative diagram of the attack against the CHP plant leveraging a private APN"

@cR0w@infosec.exchange wörks on my machine :D

F* yeah: the canton of Bern (where the Swiss capital with the same name is), is leaving "X".

RE: https://mastodon.sdf.org/@doragasu/117324692065390037 lololol

RE: https://mastodon.social/@fj/116957699762512167 It is obvious that with their bs interventionism in Iran, the US (massively) strengthen the Mollah Regime - that was very very weak during the last protests. well done 👍🏅 Also: are they preparing their next Vietnam? If there is an invasion, they will see that the Islamic Republic is not like Irak under Saddam..

"Open-source (chrome-based) browser extension that protects against Phishing / ClickFix / Device Code Auth phishing" https://chromewebstore.google.com/detail/yodel-phish/fcfhkppicmpjddbkhaffnpjcgnkgeocc https://w0-0p.github.io/yodel-phish

Bardella, potential candidate for the next French presidential election, hired the services of a company owned by a known Swiss neonazi and central member of the group "Junge Tat". 👍

@lcamtuf@infosec.exchange Did they come from the past or the future?

Cool visualisation showing the rise of #Switzerland's public transport system after the night. (DE) https://www.srf.ch/news/schweiz/wenn-der-schweizer-oev-erwacht-von-0-auf-6488-in-vier-stunden H/T: https://social.pmj.rocks/@srfnewsrss/116916295767677130

@bontchev@infosec.exchange he deserves a new Peace Price.

First time I interacted with a customer service chat bot that was ackchyually rather helpful and not providing complete idiotic replies.

@GossiTheDog@cyberplace.social Nothing like this yet.

RE: https://eupolicy.social/@edri/116872716388431701 Europe at the same time: "We need MORE surveillance." @EUCommission@ec.social-network.europa.eu#europe #chatcontrol #surveillance #freedom #democracy

@bontchev@infosec.exchange If you're not logged in, it will prompt you to login to your account through the browser. Depending on what you allow and ask it to do, it can basically access all the files and use the programs on your machine. For example the other day it helped me debug an issue with my browser. It created multiple test html pages to try to reproduce the issue i described, launched the browser, opened the pages and analysed what happened. Confirmed it could reproduce the error, explained what happened and proposed a fix. I also use it extensively for coding. When you open a folder in vscode and chat with the agent, it can directly access and edit the files in that folder.

@bontchev@infosec.exchange what's the issue with the VScode plugin?

@promotion@social.vir.group yup a lot of ppl were shocked by this attack.. and the security of DERs is a nightmare.

@deskcrew@mastodon.social I got a fine with a rental car, lost it and contacted the authorities to ask for a copy + cc'd the rental car company customer service to keep them in the loop (in case the fine is later sent to them). The bot replied that they cannot help with providing a copy of the fine and explained what I should do instead - which was quite useful, had I not known. It also proposed to check if a fine was already registered under the rental car. Once all info was provided it forwarded the request to a human. An additional funny thing was that on the contract some characters of my mail address were in capital letters (wrongly typed by the front desk guy when i picked up the car..). So the bot first said it can only proceed if the request is made from the same mail address as on the contract. I explained the issue with the capital letters, which it accepted and then processed the request. I was surprised that it provided such open advice even if it wasn't directly asked for and that it got around the issue with the capital letters in the mail address. Yes, I also wondered what data it used/was trained on and there must be some reasoning involved by that model.

RE: https://social.tchncs.de/@thehackernews/117076879091993739 "CATana is a suite of software tools designed for exploration and experimentation with the SIM AT interface that allows SIM cards to run AT commands on the terminal." https://open.liskra.org/git/repo/catana/catana.git

State of phishing: Mail sent from an older domain (>3 years) + backed by a real looking company website + domain and company fit the business area of targeted corp.only 1 hit on vtinitial mail: auth, signature, everything is clean and neat: "Can we send you documents about a project we would like to get a quote from you?"Only suspicious thing at this point: some of the targeted users are not handling quotations (some others yes).Only way to assert it is a phish:download the files sent over a file sharing platforminspect the docs and follow the linksverdict: multi-stage + device code phishing Stay safe out there.

#israel knew and let it happen. https://www.theatlantic.com/national-security/2026/09/egypt-israel-gaza-hamas-palestinian-october-7/688720/

@cryptax@mastodon.social yep, ChatGPT definitevely lowered the barrier for using Linux as the main OS. Helps me regularly too

The Swiss Air-Rescue (#rega) developed a phone location system mounted on a backpack (the "Lifeseeker") to locate missed or injured persons in mountainous terrain. This is especially useful when the weather conditions are too bad for helicopters to fly. https://www.rega.ch/en/our-missions/this-is-how-we-help-you/search-and-rescue

RE: https://infosec.exchange/@patrickcmiller/116972999202564925 Noice "Bit2Watt: A Cyber-Physical Vulnerability Exploiting GPU Workloads Across Power and Computing Infrastructures" https://arxiv.org/abs/2607.05993

"As it stands, nothing in the law prevents any company, including Apple, from utilizing available technology or creating new technology to identify and report child pornography stored and distributed on their traditional servers or through their cloud services. Conversely, there is no law that obligates companies to proactively do so. Undoubtedly any such legislation would come at a cost of at least some loss of privacy for millions of people. But if lawmakers expected that companies would take steps to prevent their products from being used for storing and distributing child pornography based on something short of a legal imperative, this case, like many others before it, demonstrates the inadequacy of that approach. If lawmakers want to ensure that Apple and other companies address their role in the dissemination of CSAM, they must require it under the law. In other words, lawmakers can fix this problem that is contributing to the exploitation of children." https://bird.makeup/users/matthew_d_green/statuses/2079754699897520356

So the "webRequestBlocking" permission in Chrome does still exist in MV3, but is only available for extensions that have been installed through an organization policy (Google Admin Console, Windows Group Policy, etc). https://developer.chrome.com/docs/extensions/reference/api/webRequest #chrome #mv2 #mv3 #chromium #browser

Not that I agree with the message, but i learned new things: https://bird.makeup/users/read_jfk_files/statuses/2073904938191929499

"Micro-robot (12g) capable of towing 2000x its weight (>20kg) using dry adhesive" https://techfinder.stanford.edu/technology/micro-robots-capable-towing-2000x-its-weight-using-dry-adhesive

I love the irony Air is unbreathable during the soccer world cup final hold in the biggest economy, due to climate change by said economical system. Nature will keep beating us and it will get much worse.

2026, how to be safe online ? Don't.

@jerry@infosec.exchange https://media2.giphy.com/media/v1.Y2lkPTc5MGI3NjExNHpnNGE5ZTVkeXJqZWNzZ2lqN2pwNGVvbWs0N2VjcHNhY3dlbGw0NSZlcD12MV9pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw/H07GbrFmAh4aebO7ia/giphy.gif

Germany wants to (massively) reduce the #eu budget for the coming years. Very good.

RE: https://mastodon.social/@MAKS23/116934036050528961 😂😂😂

Europe at its best. In Slovenia, even businesses owned by persons with direct link to mafia got millions in agri subsidies. #EU is a circus run by clowns and must be completely reformed and down-sized "Billionaires are ‘ultimate beneficiaries’ linked to €3bn of EU farming subsidies" https://www.theguardian.com/environment/2024/nov/03/revealed-billionaires-ultimate-beneficiaries-linked-to-eu-farming-subsidies https://www.politico.eu/article/eu-subsidy-fraud-isnt-just-greece-problem-everywhere-warns-top-prosecutor/

Does anyone know of a good/long list of ClickFix commands and/or command line obfuscation examples? In most articles/blog posts, there are only a very limited number of examples. Dankeschön