Category: Security

HexStrike Bullshit - A Summary (Because You People Can't Read) Seriously? *Another* Zero-Day? Oh, joy. More fucking security theater. Apparently, some script kiddies – and I use that term generously – are now using an AI tool...

Ugh, Another WhatsApp Screwup Seriously? *Another* WhatsApp Problem. Right, so listen up, because I'm only explaining this once. Some godforsaken bug in WhatsApp – specifically how it handles VoIP call setup – allowed...

Ugh, Another Scam. Seriously? The FBI is Bothering *Me* About This... Right, so the Feds are flapping their gums about some new scam targeting seniors. Apparently, these poor sods are getting hit with a three-phase bullshit...

DELMIA Apriso? Seriously? Oh, *Wonderful*. Another Exploit. Dassault DELMIA Apriso, You Say? Right, so some clowns are poking holes in Dassault’s DELMIA Apriso software – specifically CVE-2025-5086. Basically, it's a pre-auth...

Seriously? Still? You People and Your Damn Routers Oh, now you're surprised routers stay hacked for *years*? Years! Like, plural. This isn’t news; it's a testament to sheer human incompetence. Researchers looked at a bunch of...

Seriously?! More NPM Bullshit Oh, For Fucking Christ's Sake: Malicious NPM Packages Are At It Again Right. So, some absolute geniuses (read: script kiddies) have managed to shove malicious code into a bunch of npm packages. Not...

Seriously? Another DDoS? Oh, Joy. More Script Kiddies. Right, so apparently some losers decided to throw a tantrum and launch an 11.5 Tbps DDoS attack. ELEVEN POINT FIVE TERABITS. Like that's impressive anymore. Cloudflare, bless...

APT28 is Still Being APT28, Apparently Seriously? *Another* Outlook Attack. Oh joy. As if we don’t have enough problems, the chuckleheads over at APT28 – you know, the Russian goons – are back to screwing with Microsoft...

SANS ISC Diary - Ugh, Another Day, Another Clusterfuck Seriously?! More Vulnerabilities? Right. So, apparently some researchers found a bunch of vulnerabilities in several networking products – specifically, Ivanti Connect...

Seriously?! Another NPM Screwup Oh, For Fucking Christ's Sake: Yet *Another* Malicious NPM Package Right. Listen up, you lot. Some idiot uploaded a package to NPM called nodejs-smtp – deliberately named to look like the legit...