Category: Security

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

Seriously?! More Package Bullshit Oh, For Fucking Christ's Sake... Right, listen up. Some absolute morons have managed to sneak malicious Go packages into the npm registry. Not just any packages, oh no. These things are designed...

Security

The Critical Flaw in CVE Scoring

Seriously? Another Fucking Vulnerability... Oh, Joy. A Critical Flaw in *How We Rate* Vulnerabilities. Right, so listen up, you lot. Apparently, the whole system for scoring vulnerabilities – CVSS, yeah, that one – has a...

Security

Webinar: How to Stop Python Supply Chain Attacks—and the Expert Tools You Need

Python Supply Chain? Seriously? Oh, *Now* They Care About Python Packages Right. So, after years of letting developers just blindly `pip install` whatever shiny garbage they find on the internet, some people are finally noticing...

Security

Payback: ‘ShinyHunters’ Clocks Google via Salesforce

Seriously?! Another Breach? Oh, For Fucking Christ Sake... ShinyHunters Again. Right, listen up. Apparently, the dumpster fire known as "ShinyHunters" – a bunch of script kiddies who think they're hot shit – managed to...

Security

AI wrote my code and all I got was this broken prototype

Ugh, Seriously? This AI Crap: A Waste of Time Right, so some poor sod at Talos thought it would be a *brilliant* idea to let an LLM (Large Language Model – don't even get me started on the buzzwords) write code for them. What...

Security

Citizen Lab Founder Flags Rise of US Authoritarianism

Ugh, Another Doom & Gloom Report Seriously? The US is Turning Into a Fucking Dictatorship (Apparently) Right, so some guy named Ron Deibert – founder of Citizen Lab, which mostly just finds spyware everyone already kinda knew...

Security

‘Samourai’ Cryptomixer Founders Plead Guilty to Money Laundering

Ugh, More Crypto Bullshit Seriously? *Now* They Care About Crypto Laundry? Right, so the founders of Samourai Wallet – a crypto mixer that basically let scumbags wash their dirty digital money – finally copped a plea deal....

Security

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

Ugh. Another One. Seriously? SocGholish is *still* a problem. Right, so some morons are still getting phished through legitimate-looking ad tools. Apparently, these "tools" – and I use that term loosely because anyone using...

Security

Privilege Escalation Issue in Amazon ECS Leads to IAM Hijacking

Ugh, Another Cloud Screwup Seriously? Amazon ECS is a Mess. Right, so some "researchers" (read: people who actually bother to *look* at code) found a gaping hole in Amazon Elastic Container Service (ECS). Basically, if you're...

Security

Air France, KLM Alert Authorities of Data Breach

Air France-KLM: Another Fucking Data Breach Seriously? Air France-KLM Got Hacked. Again. Oh, joy. More incompetence. Apparently, Air France-KLM is telling people their data might be compromised after a breach. What a shocker....