Ransomware group casually overwriting the firmware of firewalls ✅
With the #CitrixBleed2 patch data I publish it's possible to view the history on Github for each new scan and see when hosts change from vuln to patched.
It's proving incredibly effective at getting orgs to patch. I tried private notifications via HackerOne and such for CitixBleed1 in 2023 and it took months to get orgs to patch. Putting the data public brings accountability for orgs who later get breached - so there's a rush to patch.
It's definitely interesting and may need a scale out.
Well my employer has decided to partner with Palantir, which means it's time for me to find a new job. I was a lot more willing to make 40% less than market rate when I knew my employer wasn't funding concentration camps because they want AI coding tools.
Anyway if you need a UX designer/researcher located around the Minneapolis-St. Paul region of Minnesota, USA who knows his way around US government regulations for CMS quality reporting, healthcare, enterprise software I'm looking!
For all of you who have been so incredibly helpful, I cannot thank you enough!
Rubber hose cryptanalysis, by
@pluralistic
Https://locusmag.com/2025/07/commentary-cory-doctorow-rubber-hose-cryptanalysis/
To any Austrailians being misinforned by Sky News, please know that Europe is just fine.
The fact that Sky News has found some social media clips of a few criminals committing crimes in Spain and France does obviously not mean that a continent of 744 million people “has fallen”. All it means is, Australia needs better media.
PSA:
Currently there is a phishing attack (age verification) going around.
See the attached image for an example from mastodon.social.
Don't click on links, don't enter credit card information!
If you come across such posting, please do report those and don't forget to set the checkmark to forward the report to the remote instance to on!
@Endof10 @RepairCafeInternational Ha ha, love it: "FOSS instead of toss!"