Mastodawn

phil

@bieberium@infosec.exchange

52 Followers

212 Following

8.7K Posts

IETF RFC1925:

With sufficient thrust, pigs fly just fine. However, this is not necessarily a good idea. [...]

Pronouns	He / Him
Location	Central Germany
Profession	Security minded AD & Entra ID admin
Bookwyrm	https://books.infosec.exchange/user/bieberium
Twitter (archival data)	https://twitter.com/bieberium
Twittodon (archival data)	https://twittodon.com/share.php?t=bieberium&m=bieberium%40infosec.exchange

phil 15m ago

Kevin Beaumont 29m ago

There’s a bunch of new Netscaler vulns being exploited as zero days. Patches just out now.

Preauth RCE being used to drop webshells to backdoor orgs. CVE-2025-7775 is the main problem.

Orgs will need to do IR afterwards as technical details emerge of backdoor.

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938&articleTitle=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2025_7775_CVE_2025_7776_and_CVE_2025_8424

Loading...

Mood

Thom, I use 9front btw 2h ago

Look, we all know Fahrenheit is the most nonsensical and most arbitrary measurement in the US (sorry @caseyliss), but I would like to posit that American Wire Gauge gives it a run for its money.

What in the fuck is even happening here.

https://en.wikipedia.org/wiki/American_wire_gauge

phil 58m ago

hanno 3h ago

In DMARC reporting, if you configure a mail address that does not match the policy domain, you have to "allow" receiving dmarc reporting mails by configuring a record [policyhost]._report._dmarc.[mailhost].
Plenty of people seem to be unaware of that. If you happen to run email servers at Facebook, Amazon(Cloudfront), Fastly, or Microsoft (Bing), and wonder why you don't receive DMARC reports: This is why.

At home my Fritz Box takes care of DHCP and stuff, so laptops, phones etc. are in the fritz.box default domain. My homelab however has its own domain, homelab.jhw. So I have a mixture of hostnames with different domains in the same subnet. I just upgraded my home server, srv01.fritz.box and with this DNS setup, I could get a certificate with certbot for my home server from my own CA, which runs as a container on the Raspberry Pi:)