Category: Security

Ugh, Another "Lessons Learned" Piece Seriously? Fastly's CISO Thinks *Incidents* Are Good For Your Career? Right. Because getting pwned repeatedly is exactly what aspiring security folks should be aiming for. Apparently, this...

Seriously? Another One? Oh, Joy. More Malware. Right, so some chucklehead calling themselves UTA0388 – honestly, the naming conventions these days… – has been slinging spyware around since at least 2021. Started with this...

Ugh, Another Report Seriously?! A Sing-Along? Right, so Cisco's Talos Intelligence clowns decided to poke around some old computer consoles – the kind you find gathering dust in forgotten server rooms. And what did they find?...

SonicWall's Clusterfuck - A Summary (Because Apparently You Can't Read) Seriously? SonicWall. *Again*. Oh, joy. Another security vendor getting pwned. This time it’s SonicWall, and they’ve managed to pull off the impressive...

Copilot is a Disaster, Obviously Seriously? *Another* AI Security Fuckup. Right, so listen up, you lot. Apparently, some researchers (because someone has to point out the bleeding obvious) have found yet another way GitHub...

SANS ISC Diary - Ugh, Another Day, Another Clusterfuck Seriously?! More Vulnerabilities? Right, listen up. Apparently, some clowns over at Microsoft are STILL letting shit slip through in their updates. This month's patch Tuesday...

Seriously? OpenAI Had to *Fix* This? Oh, For Fucking Christ' Sake... Right, so apparently some script kiddies – and by "script kiddies" I mean state-sponsored actors from Russia, North Korea, and China, because of course it is...

Seriously? Another Week, Another Pile of Sh*t Oh joy. It's Wednesday, which means another ISC Stormcast summary because apparently *someone* has to tell you what’s breaking on the internet. Fine. Here's the gist, and try to...

Seriously? *Another* Python Thing?! Oh joy. More script kiddie garbage. This SANS ISC diary entry details some polymorphic Python malware – basically, it changes its code slightly each time it runs to avoid signature-based...

Pentesting is Screwed (Thanks, Automation) Seriously? Automation in Pentesting Now? Oh, fantastic. As if I didn't have enough to worry about with the endless parade of poorly coded garbage websites out there, now everyone and...