Category: Security

ISC Stormcast For Tuesday, October 7th, 2025 https://isc.sans.edu/podcastdetail/9644, (Tue, Oct 7th)

Seriously? Another Week, Another Pile of Sh*t Oh joy. It's Tuesday and ISC is flapping their gums again about the usual garbage fire that is cybersecurity. Apparently, some Iranian-backed group – because *of course* it’s them...

Security

Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware

Ugh, Another Hack Seriously? Microsoft's Linking *Another* Attack Group To Stuff. Right, so listen up, because I’m only saying this once. Microsoft – yeah, them – are claiming they've connected a group called "Storm-1175"...

Security

Too salty to handle: Exposing cases of CSS abuse for hidden text salting

Ugh. Another Security Thing. Seriously? This Again?! Right, so some morons are hiding keywords in their websites using CSS again. Like, REALLY well hidden. We're talking about injecting a *shit-ton* of text into the page that’s...

Security

13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely

Redis? Seriously? You Idiots Left a *Thirteen-Year-Old* Flaw in Redis?! Oh, for the love of all that is holy. Apparently, some bright sparks over at Redis left a goddamn vulnerability open since 2011. Yes, you read that right –...

Security

Patch Now: ‘RediShell’ Threatens Cloud Via Redis RCE

Seriously? Another One? RediShell – You’ve Got to Be Fucking Kidding Me Oh, joy. Another Remote Code Execution (RCE) vulnerability. This time it's in Redis, that little in-memory data store everyone loves because it's "fast."...

Security

New Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise

Ugh, Seriously? AI is Stealing Your Bloody Data – No Surprise There Right, listen up you lot. Some "research" (as if anyone needed a study to tell them this) has confirmed what any halfway competent sysadmin knew six months...

Security

XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities

XWorm 6.0: Seriously? XWorm 6.0 is Back, You Idiots Oh, for the love of all that is unholy. XWorm, that piece of garbage malware-as-a-service (MaaS) thing? It's back. Version 6.0. Because apparently, making life harder for...

Security

Google’s New AI Doesn’t Just Find Vulnerabilities — It Rewrites Code to Patch Them

Ugh, Another "Revolutionary" AI Seriously? Google Did *What* Now? Right. So, Google's cooked up another AI, Gemini Code Assist (because apparently every single thing needs an 'AI' slapped on it now). This one doesn’t just find...

Security

Exploit Against FreePBX (CVE-2025-57819) with code execution., (Tue, Oct 7th)

Seriously? Another Freaking VoIP Box Pwned. Oh joy. More security theatre from the people who think "security through obscurity" is a viable strategy. This time it's FreePBX getting their asses handed to them with CVE-2025-57819....

Security

Medusa Ransomware Actors Exploit Critical Fortra GoAnywhere Flaw

Seriously? Another One? Medusa's Still At It, Apparently. Oh, joy. More ransomware bullshit. The Medusa crew – because naming yourselves after a mythological monster is *so* original – are exploiting a critical vulnerability...