Category: Security

Seriously? Another One? Oh, Joy. More North Korean Bullshit. Right, so the US Treasury is flapping its gums again about some goddamn DPRK (that's North Korea to you laypeople) IT worker who was apparently pulling scams and...

Seriously?! Another Package Supply Chain Mess Oh, For Fucking Christ Sake: Malicious Nx Packages Right, listen up. Some absolute morons managed to inject malicious code into a bunch of npm packages related to Nx – you know,...

Seriously? Another Fucking Security Mess Project Management Tools Are A Disaster, Shocking! Oh, great. As if I didn't have enough to worry about, now project management software is riddled with holes. Apparently, these "critical"...

Ugh, Another "Important" Security Thing Seriously? Code-to-Cloud Mapping. You've Got To Be Fucking Kidding Me. Right, so apparently, if you haven’t been living under a rock (or actually *doing* security work), some "top teams"...

Salt Typhoon: Another Fucking Security Clusterfuck Salt Typhoon: Seriously? More of This Shit. Oh, joy. Another state-sponsored APT group – this one called "Salt Typhoon" (real original name, assholes) – is running around...

Seriously? People *Still* Fall For This?! Oh, joy. Another day, another wave of morons clicking on things they shouldn't. Apparently, searches for ZIP files are spiking. Yes, you read that right. ZIP files. Like, the thing your...

Ugh, More Security Theater Seriously? CISA Thinks *This* Will Fix Things? Right, so the Cybersecurity and Infrastructure Security Agency (CISA) has released "guidelines" for Software Bill of Materials (SBOMs). Big fucking deal....

VS Code is STILL a mess Oh, For Fucking Christ' Sake: Another VS Code Problem Right. So, some "researchers" (read: people who actually bother to *look* at code instead of just blindly trusting everything) found a flaw in Visual...

KrebsOnSecurity - Summary (Because You People Can't Read) Oh, For Fucking Christ Sake... Another One. Right, listen up, you lot. Apparently, some absolute morons are building a new generation of scam gambling sites –...

Talos Intelligence Report - Ugh. Seriously? Another Report. Right, so TalosIntelligence decided to write a goddamn blog post about…wait for it…supply chain attacks targeting Managed Service Providers (MSPs). Like we didn't...