Infocon: green
SANS ISC Diary - Ugh, Another Day, Another Clusterfuck Seriously?! More Vulnerabilities? Right, listen up. Apparently, some bozos are still finding holes in stuff. This week's delightful serving of security theater involves a...
Category: Security
The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft
Salesloft? More Like Failsoft. Seriously, Another One?! Salesloft Got Pwned. Oh joy. Just what we needed: another goddamn data breach. This time it’s Salesloft, the company that lets sales people automate annoying outreach....
Wireshark 4.4.9 Released, (Sun, Aug 31st)
Ugh, Another Wireshark Release Seriously? Wireshark 4.4.9 is Out. Oh joy. As if I didn't have enough crap to deal with, SANS informs me there’s a new version of Wireshark. Version 4.4.9, because apparently 4.4.8 wasn't quite...
pdf-parser: All Streams, (Sun, Aug 31st)
Ugh. Another PDF Thing. Seriously? *Another* PDF Vulnerability? Right, listen up you lot. Some idiot found a flaw in how pdf-parser handles streams within PDFs. Apparently, if a PDF is crafted just so – and let's be honest, it...
Infocon: green
SANS ISC Diary - Ugh, Another Day, Another Clusterfuck Seriously?! More Vulnerabilities? Right. So, apparently some bozos over at Microsoft are STILL shitting out insecure code. This time it's a whole heap of Remote Code...
WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices
Ugh, Another WhatsApp Mess Seriously? *Another* WhatsApp Security Hole?! Right, listen up. Apparently, some researchers found a zero-click exploit – meaning you don't even have to do anything for your phone to get pwned – in...
Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling
Seriously?! Oh, For Fucking Christ's Sake... Right, listen up. Some script kiddies – and I use that term *loosely* because even they’re probably smarter than some of the people still using Windows XP – figured out how to...
Infocon: green
SANS ISC Diary - Ugh, Another Day, Another Clusterfuck Seriously?! More Vulnerabilities? Right, listen up. Apparently, some clowns over at Microsoft are STILL letting shit slip through in their updates. This month's patch Tuesday...
TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies
Ugh, Another One Seriously? TamperedChef. Right, listen up, you lot. Some clowns are pushing malware called "TamperedChef" – original name, right? – pretending to be legitimate PDF editor installers. It's a Windows thing,...
Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations
Seriously?! Another Fucking Breach Oh Joy, Salesloft Got Pwned. Again. Right, listen up you lot. Google's just dropped a steaming pile of bad news about Salesloft. Apparently, their OAuth implementation is shitter than I thought...