CIRCLE WITH A DOT

Putting up prediction market bets for number of Linux LPEs before end of may

Re: https://infosec.exchange/@feross/116574588379571529Oh, that identity compromise is fascinating & gives me ideas...

RE: https://infosec.exchange/@perfect10_bot/116574033298396599...perfect day for that one to drop, eh?

Ransomware? Data going walkies?

I fucking hate online payments. You can't tell me that https://www.computop-paygate.com/payssl.aspx is a legit URL to be redirected to to enter my credit card details...

My stomach makes VERY funny noises today

Did you know?

Getting blocked by Cloudflare from accessing a copy of RFC 7258 is deeply funny to me

Patching windows to rename my preferred locale/language to Russian, to stay safe from the evil hackers

til that Ivanti doesn't just make insecure endpoint management software. they also make insecure reporting software https://nvd.nist.gov/vuln/detail/cve-2026-8043

RE: https://infosec.exchange/@perfect10_bot/116546227096246025And so the nyanbinary bot swarm grows

Bot that posts all 10/10 CVEs

sigh. Ok, conspiracy brain is going brrrr. I don't actually believe it but time to share some brainworms, enjoy thinking about this!Publicity by way of CVE. Any publicity is good publicity & one way to get people talking about shit is making the news for being bad at things. When I see shit like this SOME alarm bell goes off: 46 vulns in some AI shit. Great, now you, too, know about it! https://vulnerability.circl.lu/search?ft_q=&vendor=MervinPraison&product=PraisonAI&assigner=&sort_sources%5B%5D=cvelistv5&date_sort=published&sort_order=desc

Ok, I understand CVEs not being immediately published but....CVE-2022-50994Published 2026-05-08

Indicator of Concept.Proof of Compromise.

Vibe coding is the democratization of bad enterprise software, send toot

@dhn oh lol good catch!

If we are discussing the digicert thing... hey, microsoft, maybe we dont need a billion file types that are just one double-click footgun away from arbitrary code execution?

@nyanbinary ewwww

I guess I should actually put some information on my linkedin profile now?