Category: Security

Sitecore? Seriously? Oh, Joy. Another CMS Vulnerability. Right, so some "researchers" (read: people who get paid to find obvious holes) have discovered a goddamn exploit chain in Sitecore. Because *of course* they did. It's an...

SANS ISC Diary - Ugh, Another Day, Another Clusterfuck Seriously?! More Vulnerabilities? Right, listen up. Apparently, some clowns over at Microsoft are still shipping shit with holes in it. This time it's a whole heap of...

Seriously? Another One? Oh, Joy. More North Korean Bullshit. Right, so the US Treasury is flapping its gums again about some goddamn DPRK (that's North Korea to you laypeople) IT worker who was apparently pulling scams and...

Seriously?! Another Package Supply Chain Mess Oh, For Fucking Christ Sake: Malicious Nx Packages Right, listen up. Some absolute morons managed to inject malicious code into a bunch of npm packages related to Nx – you know,...

Seriously? Another Fucking Security Mess Project Management Tools Are A Disaster, Shocking! Oh, great. As if I didn't have enough to worry about, now project management software is riddled with holes. Apparently, these "critical"...

Ugh, Another "Important" Security Thing Seriously? Code-to-Cloud Mapping. You've Got To Be Fucking Kidding Me. Right, so apparently, if you haven’t been living under a rock (or actually *doing* security work), some "top teams"...

Salt Typhoon: Another Fucking Security Clusterfuck Salt Typhoon: Seriously? More of This Shit. Oh, joy. Another state-sponsored APT group – this one called "Salt Typhoon" (real original name, assholes) – is running around...

Seriously? People *Still* Fall For This?! Oh, joy. Another day, another wave of morons clicking on things they shouldn't. Apparently, searches for ZIP files are spiking. Yes, you read that right. ZIP files. Like, the thing your...

Ugh, More Security Theater Seriously? CISA Thinks *This* Will Fix Things? Right, so the Cybersecurity and Infrastructure Security Agency (CISA) has released "guidelines" for Software Bill of Materials (SBOMs). Big fucking deal....

VS Code is STILL a mess Oh, For Fucking Christ' Sake: Another VS Code Problem Right. So, some "researchers" (read: people who actually bother to *look* at code instead of just blindly trusting everything) found a flaw in Visual...