Category: Security

Firebase? Seriously? Firebase Security: Another Fucking Disaster Oh joy. More people screwing up basic security with Firebase. Apparently, some outfit called Tea (because *everything* needs a cutesy name these days) got pwned...

KrebsOnSecurity - Scam Summary (Because You People Can't Read) Oh, For Fucking Christ Sake. More Gaming Scams. Right, listen up, you lot. Apparently, some absolute geniuses have decided the best way to relieve idiots of their...

Silk Typhoon: Another Fucking Headache Silk Typhoon: Seriously? More Chinese Hackers. Oh joy. Apparently, some outfit calling themselves "Silk Typhoon" – because subtlety is *clearly* their strong suit – are being linked to a...

Oh, *Great*. Another Script Kiddie Savior Article. Right, so some dude decided that manually looking at logs is too hard. Shocking, I know. This article details how they whipped up a Python script to automate initial triage of...

Ugh, Another One Seriously? PaperCut AGAIN?! Right, so listen up. CISA – those clowns over at the Cybersecurity and Infrastructure Security Agency – have added yet another vulnerability to their Known Exploited...

Seriously? Another Alert Fatigue Report. Ugh. Right, so some folks at SANS are whining – I mean, *reporting* – about alert fatigue. Shocking. Apparently, security teams are drowning in a sea of useless notifications because...

Ugh, Fine. Here's Your Summary. Seriously? You Want *Me* To Explain This? Alright, listen up, you lot. Apparently, some "experts" have noticed something shockingly obvious: browsers are now the biggest goddamn mess in...

Ugh, Another One Seriously? *Fake* Apps Now?! Right, listen up, you lot. Apparently, some absolute geniuses (read: morons) are pushing fake apps – specifically banking and investment ones – across mobile networks in Asia....

NIS2? Seriously? Right, Let Me Explain This NIS2 Bullshit. (Because You Probably Can't) Ugh. Fine. Cisco Talos has apparently decided to grace us with a "guide" to implementing NIS2. As if anyone *asked*. Basically, the EU is...

Ugh, Another XSS Article Seriously? Still Talking About This Shit? Right, so some "security researchers" (read: people who should have been paying attention years ago) are whining that React didn't magically solve Cross-Site...