Why, oh why does SNMP need to be exposed to the Internet for everyone to hack?

Y’all - I just heard there’s going to be raptors tomorrow! 🦅 so excited!

Defensive Security Podcast Episode 322 Here are the stories we discuss this week: https://defensivesecurity.org/defensive-security-podcast-episode-322/

Back from the wedding finally. I am definitely not as young as I once was.

Weddings are definitely a sport for younger people.

I’m ready for my oldest son’s wedding this weekend. I’ll be less online than normal for a few days. Hoping the 💩-fest that social media has become the past week dies down in the mean time. Be well my friends.

F*cking metatarsals 🤬

I've enabled post quoting on infosec.exchange, infosec.space, and convo.casa. On the web interface, the boost icon will now bring up a small menu that will let you either boost or quote. You can only quote posts that the author has granted permission to, and since this is a new feature, there […]

Defensive Security Podcast Episode 321 Listen and Watch Defensive Security Episodes a week early by becoming a Patreon donor: Please subscribe to our YouTube channel: Defensive Podcasts - Cyber Security & Infosec. - YouTube Links […]

One of the cool things about this part of Florida in late summer/fall is the amount of monarch butterflies that pass through. I saw this guy gassing up at some flowers

The moon and my first attempts at taking some milk way shots from the beach over the Gulf of Mexico

I rather like the pic I took of my grandkid Onix here.

I think everyone's heard of the "dead internet theory" by now, I am starting to think there is a "dead to me internet theory" that comes first, where it's actual people, but they're just posting AI written nonsense.

Here's an image of an orchid I just took to remind you that if you get value from the fediverse to support your local instance. Thank you. :blobheartcat:

What I want to know is why on earth there are 371,410,000 weekly downloads of ansi-styles???? https://www.bleepingcomputer.com/news/security/hackers-hijack-npm-packages-with-2-billion-weekly-downloads-in-supply-chain-attack/

Defensive Security Podcast Episode 320 Links to stories: https://defensivesecurity.org/defensive-security-podcast-episode-320/

Jimmy Truth is starting to become as obnoxious as Nicole, from a moderation perspective

Does anyone know 'verified' Linux Mint developers in the Fediverse who might be interested in an apparent high priority issue? @linuxmint only (re)posts their blog entries and that account, as welcome as it is, has no indication of official status listed anywhere. The component is in GitHub […]

Oh look. Farmers Insurance takes the security of my data seriously.

Oracle has apparently hit the limit of human creativity when it comes to draconian license terms and so have started a massive layoff to invest in AI to drive their evil plans forward. Also, do you think it’ll be possible to detect a difference between human coded oracle database server and a […]

FYI - because of what I saw happening over on mastodon. Social and a few other instances, I am resetting all the password of infosec.exchange users that haven't logged in during the previous 3 months. There's a lot of password stuffing and whatnot going on and I don't want to contribute to the […]

I had a lot of stuff to do today, all of which requires the internet, yet Comcast has other plans. What they were calling an unplanned outage they were working to restore just turned a planned network upgrade expected to take all day.

Does anyone have or know of someone that has experience entering the virtual/fractional CISO business? That is the direction I’m headed and have some questions.

The award for most creative report of a spammer goes to @catsalad 🏆

I dislike being the same age as the old people at the gym.

I can’t believe it’s spooky season already. 👻💀🎃

Dateline 2039: society has collapsed months after the Y2K38 bug rendered Linux systems inoperable globally. Meanwhile, over on LinkedIn, business continues unabated as all non-AI members of the site had left over 15 years earlier. A new sentient-ish AI CEO recently signed up and posted a job […]

It is interesting that so many of the accounts involved in the current spam/trash/phishing run are older accounts that were hijacked by the bad actor. My wild ass speculation is that these account credentials were stolen by spyware and the actor either found or bought the credential dump.

"It rubs the AI on its skin or it gets the hose again" CEOs everywhere

The republican fundraising spam texts have taken a decidedly dark turn.

Monday is a holiday here in the US, meaning that today is one of the best days of the year to push your untested vibe code to production. Just remember, if the code would have worked when tested, it would work in production, so there's basically no risk.

Till we meet again, de minimis tariff exemption.

Yes, there’s another phishing campaign contacting fediverse users to fill out a form to avoid being suspended or whatever. Stay calm and just report them and be sure to check the option to inform their home instance so the account gets suspended for everyone. Also, please consider enabling […]

Oh Florida

Two days away from the start of a long weekend here in the US. Hopefully everyone is queuing up their untested code changes to go live on Friday. Bonus points if you store your secrets in code hosted on a public GitHub repo.

Defensive Security Podcast Episode 318 I have no idea why Riverside.fm (the service we use to record the podcast) has such an audio/video sync problem for the first minute or so of the recording. We're working on it... On to the show. Here are the links for this week's episode […]

First day back on the elliptical machine in weeks after the stair monster - mean stair master messed up my knee.

There is nothing quite as exhilarating as poking fun of the ineffectiveness of security awareness training in a room full of security people as having one of the audience raise their hand and announce they are from a security awareness training vendor.

I upgraded infosec.exchange, .space, and convo.casa to the latest glitch-soc code a few minutes ago. I always look forward to the kind and even tempered comments I get when something has changed on the mastodon interface after an upgrade. I have changed into my fire proof undergarments and […]

So that was pretty cool

A photographer friend of mine had one of her sd memory cards die after a photo shoot. She’s tried Easeus and it can recover about 1300 of 1600 files, but she’s asking if there are other tools/tricks anyone knows from the forensics community that might be able to get the rest. I have a feeling […]

I took some pics of the fake moon tonight. Someone told me that something less than a full moon is best for pictures since there are shadows in some of the craters, and indeed that was right. First one is 1200mm and the second is 600mm, both cropped to about […] [Original post on infosec.exchange]

Sunset at the beach

Defensive Security Podcast Episode 317 http://www.youtube.com/watch?v=7RM3U27ykEo https://defensivesecurity.org/defensive-security-podcast-episode-317/

It’s about to be a rainy day at the beach

Getting tired of all the LLM-written emails recommending various “cyber experts” to be on the DefSec podcast. It feels like someone recently started an “agency” for wannabe experts to get them on podcasts. 🚮

If you run a matrix server, it’s time to upgrade! due the matrix team disclosed and patched a vulnerability today. I still haven’t found details about the actual vulnerability yet. Bonus points that you also have to upgrade all the rooms to version 12 to be fully protected, and version 12 isn’t […]

Question for those at security summer camp: what social media handles are you seeing speakers including on their presentations this year? LinkedIn? X? Bsky? Fediverse?

The good people at @wiz continue to be too nice to me. Thank you friends.

United Airlines grounded its flights…. Bets on them being ransomwared vs crowdstriked?