But keep reading

“Silently patching vulnerabilities is an established bad practice that enables attackers and harms defenders." @catc0n.bsky.social decipher.sc/2025/11/17/f...

C R Y I N G this is so perfect lmao x: www.instagram.com/reel/DQ7cPSf...

If AI is going to economically and environmentally doom us all anyway, could it at least make iOS keyboards less godawful?

Forgive me, Chicago, I was not aware of your game

"Plan to skip No. 1 piece of advice" is a wild way to say "cannot afford to wait until the recommended age because of the high cost of basic expenses throughout their lives" www.cbsnews.com/news/social-...

*Charlotte and Emily Brontë:* "He has no clue which one of us is which."

More governors need to stand up like this. I'm no fan of Newsom generally, but he's at least not rolling over for the administration. California is better off for it.

I haven't found exploitation of Fortra's GoAnywhere MFT CVE-2025-10035 in EDR telemetry yet. Which means it is probably still rare and folks have some time to patch. Wonder how long it will stay that way. The previously exploited vulns appeared fairly quickly.

Pretty unfortunate update on Fortra GoAnywhere MFT CVE-2025-10035 from the folks at watchTowr labs.watchtowr.com/it-is-bad-ex...

Federal agencies have about 24 hours to patch two critical bugs in a line of Cisco firewalls patch CVE-2025-30333 and CVE-2025-20362 asap therecord.media/cisco-asa-fi...

I don’t think I’ve ever loved anything as much as ICE loves violently attacking women.

The Secret Service isn't claiming it foiled any plot targeting the UN General Assembly. Just that a big collection of SIMs (probably used for fraud) could have *potentially* disrupted NYC cell service. The SIMs were in a *35 MILE* radius of the UN. These headlines are all pretty egregiously wrong:

This is incredible stuff

Last night, Fortra disclosed a critical vulnerability in their GoAnywhere MFT file transfer product. CVE-2025-10035 has a virtually identical description to CVE-2023-0669, which was exploited by ransomware crews. Unclear if this one has been exploited. Patch now. www.vulncheck.com/blog/cve-202...

Possible causes of your problems. It’s a diagram that (sadly) still seems relevant in 2025, so reposting a year and a bit on.

Hey, security research friends! You know how vulnerability disclosure coordination is the most painful part of vuln research? Good news: VulnCheck will do it for you! You get credit, we handle the CVEs + vendor discussions. Report vulnerabilities for disclosure here: vulncheck.com/advisories/r...

A beautiful, tender piece about grief and aging and friendship and the sacred call to haunt: joysullivan.substack.com/p/when-to-ca...

We need community notes here to clarify that in fact Michelle Wu ended his campaign

Quote from the VulnCheck team exploit mines 2025-09-11T19:24:00Z

Gen Z in Nepal burned down the parliament, burned down the homes of government officials, forced the prime minister to resign, and paraded the finance minister through the streets nearly naked.

I know NPM and SAP and probably other acronyms are on fire today, but @vulncheck.bsky.social put out a Chrome extension for #CVE and #exploit intel and it's saving me kind of a lot of tab-switching effort, so you get 🎉 🤠posts from me instead of 🗑️🔥 posts www.vulncheck.com/blog/vuln-ch...

Friends, for your Friday, here's a new image of planets being born.

The inverse of this skeet is "Some enterprising young sys admins used example machine keys for production deployments, which is also significantly less surprising than anyone reading docs."

There is something soothing about watching a baseball diamond get steamrolled.

Some enterprising young threat actor read the Sitecore docs, which is significantly less surprising than literally anyone else reading docs cloud.google.com/blog/topics/...

Holy speaker agenda, Batman! This is a shameless plug that is also wholly sincere: @vulncheck.bsky.social is hosting our inaugural THREATCON1 in VA Sept. 21 and 22. The conference is free, Jen Easterly and Andrew Boyd are keynoting (!), and the talk tracks slap. COME!! www.threatcon1.org/agenda

Great metaphor

"I hate this piece of crap." Quote from the team #exploit mines 2025-08-26T21:48:00Z (am I doing ISO 8601 right, since this is apparently what we are doing now?)

New Citrix #NetScaler 0day (CVE-2025-7775), plus a bonus management interface improper access control vuln. The zero-day has been added to @vulncheck.bsky.social KEV ✅ www.vulncheck.com/blog/new-cit...

New additions to @VulnCheckAI's initial access intelligence: Exploits, PCAPs, signatures, and queries for FortiSIEM CVE-2025-25256, SharePoint CVE-2020-1147, SUSE Manager CVE-2025-46811, an underappreciated GNSS reference station cred leak, and plenty more 👀 docs.vulncheck.com/initial-acce...

In 1H 2025 alone, 400+ CVEs were reported as exploited in the wild for the first time, and 180+ CVEs were freshly attributed to known threat actors. Into #CVE and #exploit data? Join @vulncheck.bsky.social on Tuesday, August 26 for more 1H 2025 attack trends 🐚 wwv.vulncheck.com/1h-state-of-...

holy crap. "In Ireland, there are more than 80 data centres, gobbling up 50 per cent of the electricity in the Dublin region, and hoovering up more than 20 per cent nationally, as they work to process and distribute huge quantities of digital information."

Excellent question - specifically related to deportations, folks visiting defcon from another country, etc. Anyone know if they're doing anything like that?

This is just sensationally bad: Microsoft struck a deal with the Israeli secret intelligence arm Unit 8200 that allowed it to build a powerful new mass surveillance tool that collects and stores recordings of millions of mobile phone calls made each day by Palestinians in Gaza and the West Bank.

NEW, by me: Google has confirmed that some of its customers' data was stolen in a recent breach of one of its Salesforce databases. Google attributed the hack to ShinyHunters, a group known for hacking into Salesforce instances using voice phishing attacks. More:

satya.. this is not okay. www.theguardian.com/world/2025/a...

SonicWall has warned customers to disable SSLVPN services due to ransomware gangs potentially exploiting an unknown security vulnerability in SonicWall Gen 7 firewalls to breach networks over the past few weeks.

The AI infrastructure build-out is so gigantic that in the past 6 months, it contributed more to the growth of the U.S. economy than /all of consumer spending/ The 'magnificent 7' spent more than $100 billion on data centers and the like in the past three months *alone* www.wsj.com/tech/ai/sili...

Very cool research from the @vulncheck.bsky.social IP intel team on attacker infrastructure longevity — this is one of those pieces that makes me realize I’ve not seen much of this type of research before www.vulncheck.com/blog/stillup...

12 years earlier.

Holy shit, they did it. They wrote the headline.

Unexpectedly good politics from Thomas Kinkade's family! www.kinkadefamilyfoundation.org

We now have a (draft) @metasploit-r7.bsky.social exploit module in the pull queue for the recent Microsoft SharePoint Server unauthenticated RCE zero-day (CVE-2025-53770), based on the in-the-wild exploit published a few days ago. Check it out here: github.com/rapid7/metas...

Microsoft is sharing details from ongoing investigations of threat actors exploiting vulnerabilities targeting on-premises SharePoint servers. Linen Typhoon, Violet Typhoon, and Storm-2603 have been observed exploiting the vulnerabilities: msft.it/6044sE1ua

#Microsoft 0 Day: Very helpful list from @campuscodi.risky.biz! 'I've tried to gather and simplify all the major points about this attack, so we have a clear picture of what's what.' news.risky.biz/risky-bullet... #cybersecurity @gate15.bsky.social

As a reminder, this was NYT's framing of the political motivations of the hacker. Personally, I do not think that this is the most relevant way to frame the "politics" of a hacker who uses a slur as a username, calls themselves "violently racist," and RTs swastikas. www.nytimes.com/2025/07/04/n...