Tim (Wadhwa-)Brown :donor: on Nostr: Interesting links of the week: Strategy: * - the Internet should be safe for civil ...

Interesting links of the week:

Strategy:

* https://www.cbc.ca/radio/ideas/reset-reclaiming-the-internet-for-civil-society-1.5795345 - the Internet should be safe for civil society argues [@citizenlab](https://mastodon.social/@citizenlab )
* https://www.404media.co/someone-torturing-llms-in-a-robot-prison-has-triggered-the-dumbest-debate-in-ai-yet/ - whose rights? 🤖 rights
* https://www.openriskmanagement.com/towards-digital-sustainability-competences-ontology/ - towards digital sustainability with [@openrisk](https://mastodon.social/@openrisk )
* https://arxiv.org/abs/2512.12921 - Cisco's security and safety framework 🤖
* https://www.gov.uk/government/publications/crime-and-policing-act-2026-factsheets/crime-and-policing-act-2026-serious-crime-factsheet - HMG explain their proposed serious crime legislation updates... the DNS/IP bit is worth paying attention to
* https://www.gov.uk/service-standard-reports/assess-and-manage-your-councils-cyber-resilience-alpha-assessment-report - HMG continues with efforts to make the bin collections run on time
* https://japantoday.com/category/crime/preemptive-cybersecurity-laws-enforced-in-japan-amid-rising-threats - .jp plans to attack the baddies
* https://www.rusi.org/explore-our-research/publications/research-papers/high-risk-ict-vendors-and-critical-infrastructure-european-approaches - RUSI compare European approaches to CNI
* https://www.nattothoughts.com/p/huwangprotect-the-network-inside - Natto Thoughts (npub13gz…eks3) reports on the last .cn cyber exercise

Standards:

* https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r4.ipd.pdf - NIST issues updated 800-82 guidance on OT

Threats:

* https://www.enisa.europa.eu/publications/enisa-threat-landscape-2026 - [@enisa_eu](https://respublicae.eu/@enisa_eu ) tells us how the threat landscape shifted in 2025
* https://www.threatdown.com/blog/carbonato/ - another AI "powered" botnet 🤖
* https://www.mahmoudzohdy.com/drivers/ - a database of malicious drivers
* https://intel.threadlinqs.com/threat/TL-2026-2703 - a detailed write up of the Citrix shenanigans from [@threadlinqs](https://mastodon.social/@threadlinqs )
* https://blog.talosintelligence.com/uat-10147-deploys-spectre-a-cross-platform-implant-with-linux-rootkit-and-byovd-capabilities/ - another Linux rootkit report, this time from Cisco Talos (npub1xkd…cc62)
* https://lab52.io/blog/backdoors-in-the-dungeon-turn-mqtt-abused-by-dragonforce/ - a reminder about other "golden protocols" that get everywhere
* https://irpimedia.irpi.eu/en-inside-the-secretive-cyberweapons-company-that-won-over-israels-intelligence-elite/ - another bug broker services

Detection:

* https://www.cisa.gov/resources-tools/resources/logging-reference-architecture - CISA remind us about the need for comprehensive logging
* https://www.ntop.org/introducing-the-ndpi-tcp-fingerprint-a-stable-patent-free-way-to-fingerprint-tcp-stacks/ - NTOP gets its hands on your fingerprints
* https://detect.fyi/the-sound-of-silence-sap-sm49-sm69-and-the-os-commands-your-siem-never-hears-e408848cb6e2 - been popping SAP for years and this is so true... no-one is watching... this is a big theme from my most recent red team as well as from various incident exercises... application-level logging just isn't good enough<rant />

Bugs:

* https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 - Citrix finally come clean
* https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/ - [@index](https://labs.watchtowr.com/ )'s detailed write up of the Citrix sadness

Exploitation:

* https://0ut3r.space/2026/09/25/ad-pentest-playbook/ - [@h03k](https://mastodon.social/@h03k )'s playbook for testing AD
* https://inoti.fyi/ - what your terminal says about you
* https://www.intruder.io/research/a-0-day-vending-machine-no-mythos-necessary - a reminder that even if the 🤖 tells you otherwise, no AI is necessary for bug hunting at scale

Hardening:

* https://isovalent.com/blog/post/tetragon-network-policy/ - defining a network security policy with Tetragon
* https://blog.cloudflare.com/containers-cross-tenant-vulnerability/ - how Cloudflare patched a cross-tenancy weakness
* https://blog.ovhcloud.com/en/posts/cve-2026-53359-kvm-patching-lessons-learned/ - what does it take for [@OVHcloud](https://mastodon.social/@OVHcloud ) to patch all the KVM?

Data:

* https://eunomia.dev/blog/2026/09/24/qwen3-ebpf-in-kernel-inference/ - running a model inside of eBPF

Nerd:

* https://wikiworkersunited.org/ - wiki workers of the world, unite!
* https://berthub.eu/articles/posts/tracking-free-audience-statistics/ - some thoughts from [@bert_hubert](https://eupolicy.social/@bert_hubert ) on gaining reader insight without handing all your users over to Big Data

#security, #research