Nostr notes by Kevin Beaumont

Yeah. Anthropic spell it out, in bold, as a risk. Are companies ...

2026-10-27T19:15:34Z

Yeah. Anthropic spell it out, in bold, as a risk.

Are companies who are outsourcing thinking and processes to a small number of GenAI companies managing their risks properly? I don’t think so.

Anthropic’s SEC filing is amazing. It describes itself as the ...

2026-10-27T17:57:40Z

Anthropic’s SEC filing is amazing. It describes itself as the most important company in human history, then if you keep reading it’s like

It’s only an official vulnerability if I pick the name and ...

2026-10-27T17:10:35Z

It’s only an official vulnerability if I pick the name and design the logo in MSPaint.exe

That guy who is going to live forever is going to get very mad if ...

2026-10-27T17:01:11Z

That guy who is going to live forever is going to get very mad if you’re mean about him on the internet

Roblox scraped a load of explicit adult content 3D models to ...

2026-10-27T11:44:04Z

Roblox scraped a load of explicit adult content 3D models to train Roblox https://open3dlab.com/news/roblox-downloaded-145-gb-of-models-from-our-sites/

Companies when they get their real Claude bill in three years ...

2026-10-27T10:13:01Z

Companies when they get their real Claude bill in three years

Microsoft are offering 25% of their employees redundancy ...

2026-10-26T22:09:56Z

Microsoft are offering 25% of their employees redundancy https://www.reuters.com/technology/microsoft-is-offering-buyouts-around-60000-employees-business-insider-reports-2026-10-26/

Nostr event nevent1qqsq7z695gqyq7rstg0mltt3pry3tnqzwgtvgpx854xygl0rmag7nsszyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wh5k5ru

2026-10-26T14:21:05Z

If anybody reads this OpenAI post and thinks AI found a zero day ...

2026-10-25T10:18:27Z

If anybody reads this OpenAI post and thinks AI found a zero day - no. This one was patched months ago, not found by OpenAI, and reported by an old-school fuzzer.

CYBER CEASEFIRE DECLARED Pls stop all hackings New Call of Duty ...

2026-10-23T15:04:37Z

CYBER CEASEFIRE DECLARED

Pls stop all hackings
New Call of Duty game is out
Shooty shoot face starts now
Hackings recommence on Tuesday

CYBER CEASEFIRE DECLARED

Next scheduled ceasefire mid November for GTA 6

I thankings you for respecting the cyber

I have an unlocked Frontier AI model at home, and I’ve spent ...

2026-10-22T23:56:15Z

I have an unlocked Frontier AI model at home, and I’ve spent the past month generating literally thousands of malware samples doing all kinds of things, and running them through AV scanning and EDR tools.

Basically 100% detection rate across every major vendor. Out of the box, default settings on the security tools.

It didn’t help as an attacker at all, if anything it made me easier to detect.

No idea what Jimmy’s presentation is going to be but I’d suggest attending if you’re there.

Checking on Twitter takes of the PHP vulns was a mistake. ...

2026-10-22T23:21:16Z

Checking on Twitter takes of the PHP vulns was a mistake.

There are some clues into Fortinet’s thinking about not issuing ...

2026-10-22T20:11:16Z

There are some clues into Fortinet’s thinking about not issuing CVEs until much later in this, a long running issue.

Fellow customers - is this how you want your vendors to function?

I’ve seen some interesting takes on the PHP thing out of the ...

2026-10-22T18:54:11Z

I’ve seen some interesting takes on the PHP thing out of the US.

One is from an official saying the US must win the ‘AI race’ as China definitely wouldn’t have told the world about the vulnerability like the NSA did.

The NSA were late to the party, literally days after me. They were also beat by.. Chinese government cyber authorities, who already had an advisory out.

Haven’t had electric since 7am as the fuse box has gone. 6 ...

2026-10-21T11:48:28Z

Haven’t had electric since 7am as the fuse box has gone.

6 hours in, preparing to go feral and roam the streets with a shopping trolley with a peppa pig doll in it

Don’t worry, it’s not like Five Eyes operate a root CA or ...

2026-10-20T22:15:07Z

Don’t worry, it’s not like Five Eyes operate a root CA or anything anyway.

The private keys of eight eMudhra intermediate CA certificates ...

2026-10-20T19:48:40Z

The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.

An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service.

Translation - breaking encryption.

https://emudhra.we-have-a-problem.com/

Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP ...

2026-10-20T16:39:16Z

Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.

This Google Cloud outage in Europe is huge. Almost every service ...

2026-10-20T10:29:12Z

This Google Cloud outage in Europe is huge. Almost every service offline, including Google SecOps, for almost 4 hours now.

Companies who run Windows Server 2008 and EOL VMware who ...

2026-10-19T19:10:33Z

Companies who run Windows Server 2008 and EOL VMware who haven’t managed to configure automation in their SOAR after decades deciding GenAI chatbots will do everything for them and basing all their business strategy on made up cost savings.

PASS THE BONG ...

2026-10-19T19:06:38Z

PASS THE BONG

The FBI say they suspect a ransomware negotiator at a cyber firm ...

2026-10-19T16:19:52Z

The FBI say they suspect a ransomware negotiator at a cyber firm - no, not one of the prior arrestted cyber vendor people - ran ShinyHunters extortion site.

I've been saying this for years - the cybersecurity industry has many people who their hands directly in the pie.

The status quo sucks and governments really need to legislate around cyber ransom and extortion payments. Lots of cybersecurity things at vendors have become normalised which are not normal.

https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/

Pass the bong for every tech CEO who doesn’t have a fucking ...

2026-10-16T17:33:06Z

Pass the bong for every tech CEO who doesn’t have a fucking clue how the world works and how regular people live.

This guy likely thinks he is a visionary leader, but in reality he sounds like a condescending idiot high on his own supply. The

https://techcrunch.com/2026/10/16/replits-ceo-says-the-future-of-work-is-the-self-driving-company/

Consulting giant Accenture has told many employees that the ...

2026-10-15T18:43:26Z

Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are.

https://www.404media.co/accenture-tells-employees-they-can-now-spend-only-29-on-claude-per-month/

An update - one good side effect of the GenAI boom is it’s ...

2026-10-15T12:27:03Z

An update - one good side effect of the GenAI boom is it’s forcing Microsoft to fix decades of under-investment in security engineering. The DWM stuff is finally getting patched each month.

Orgs using vibe coded as a sales pitch, Lord. ...

2026-10-14T15:56:21Z

Orgs using vibe coded as a sales pitch, Lord. https://www.theverge.com/games/1010751/epic-games-launcher-vibe-coded-ai-linux

AI safety = regulation which protects the current market leaders. ...

2026-10-14T11:06:45Z

AI safety = regulation which protects the current market leaders. They’re begging Daddy to be regulated, because they know it’s the way to get locked in as The market.

Hypervisor escape patches for XenServer 8.4 and XenServer 9 ...

2026-10-14T10:21:59Z

Hypervisor escape patches for XenServer 8.4 and XenServer 9

CVE-2026-79610
CVE-2026-102700
CVE-2026-102701

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697170&articleTitle=XenServer_Security_Update_for_CVE_2026_79610_CVE_2026_79610_CVE_2026_102700_and_CVE_2026_102701

They’re rebooting Baywatch as a full TV show with the lead from ...

2026-10-13T23:36:41Z

They’re rebooting Baywatch as a full TV show with the lead from Arrow as Mitch. The special effects look impressively bad.

If you use Bumble I'd recommend finding a different dating ...

2026-10-13T22:36:10Z

If you use Bumble I'd recommend finding a different dating service and deleting your prior data if you don't use it now, as it sounds likely it is being purchased for AI training data.

https://www.bbc.co.uk/news/articles/cm9qzwjgnjxlo

Character.AI, the GenAI site that convinced some children to kill ...

2026-10-13T22:22:51Z

Character.AI, the GenAI site that convinced some children to kill themselves, has gone bankrupt after parents sued them.

https://futurism.com/artificial-intelligence/google-character-ai-bankruptcy

The Yandex decrease in threat activity narrative was a nonsense ...

2026-10-13T18:36:54Z

The Yandex decrease in threat activity narrative was a nonsense peddled by the Ukrainian government. People confuse legit search engine bots with social media bots.

Russian propaganda operations don’t run from Yandex. They never have. I deal with them all the time on Mastodon. There was no dip.

It’s a reminder that wars have propaganda - and the propaganda was coming from Ukraine this time.

Men aren’t okay ...

2026-10-13T16:49:50Z

Men aren’t okay

2026 cybersecurity guide for industrial systems 1) put them ...

2026-10-13T15:15:53Z

2026 cybersecurity guide for industrial systems

1) put them online
2) install VNC
3) pick no password
4) done, go watch The Chase

The upcoming AI bubble endangers the global financial system - ...

2026-10-13T07:34:55Z

The upcoming AI bubble endangers the global financial system - the IMF. https://www.theguardian.com/business/2026/oct/13/ai-share-crash-risk-global-imf-debt-corrowing-cyber-attacks

Anthropic’s claims here have absolutely no basis in reality.

2026-10-12T22:34:45Z

Anthropic’s claims here have absolutely no basis in reality.

I’m going to have to do a thread about this ‘AI cyber ...

2026-10-12T21:27:58Z

I’m going to have to do a thread about this ‘AI cyber attack’ on Japan, aren’t I. You can probably guess the spoiler.

Regarding the Danfoss fridge thing doing the rounds in the media ...

2026-10-12T19:06:47Z

Regarding the Danfoss fridge thing doing the rounds in the media - there’s several thousand of them that are directly internet facing.

The username is admin and the password changes every day automatically to.. the current date.

Every single one is like this. You can just log in and change the temperature. Anybody can do it, easily scriptable.

Upgrade your Ivanti Connect Secure boxes.

2026-10-12T16:05:44Z

Upgrade your Ivanti Connect Secure boxes.

Thread update: Ahold Delhaize have been hit with ransomware ...

2026-10-12T12:13:10Z

In reply to nevent1q…yelu
_________________________

Thread update: Ahold Delhaize have been hit with ransomware again, they were last hit in 2024 https://newsroom.aholddelhaize.com/ahold-delhaize-takes-precautionary-measures-following-cybersecurity-incident/

Star Wars Zero Company is really good. It’s basically a great ...

2026-10-11T13:23:54Z

Star Wars Zero Company is really good. It’s basically a great production budget version of X-Com.

A 16 year old boy hacked an internal Microsoft system called ...

2026-10-10T23:44:48Z

A 16 year old boy hacked an internal Microsoft system called TITAN with 17 trillion records as it didn’t validate JWT signatures at all, accepted ‘admin’ as authentication without a password and was internet facing.

They paid him $5000 and told nobody about it.

https://blog.faav.net/how-i-couldve-accessed-17-trillion-microsoft-records

There’s so much missing in these reports, which vendors are ...

2026-10-10T16:22:32Z

There’s so much missing in these reports, which vendors are missing out.

Eg the main ‘attack’ was on a bank portal which had no form of MFA (at all). They also scraped the customer records by changing the account number in the URL.

Nostr event nevent1qqspdg7yhk6hdtaec9nrpn3tha5wvf2kwxff3y2v5jy8lj3vpr6wllczyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wepundh

2026-10-09T19:37:54Z

https://www.theguardian.com/technology/2026/oct/07/openai-mathematical-findings-concerns

Nostr event nevent1qqsdafgeg45x4w9m3xusqnnp8snchwqmdh4jeylh9qwjn6xynkh96tszyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5w46nk68

2026-10-09T19:30:53Z

Nostr event nevent1qqs8jah49nhc4phurrptzz3znvrlqa0cgv5ajyv84mq6pln685teqzqzyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wwx9npm

2026-10-09T17:25:51Z

PC sales have fallen over 20% this quarter worldwide across all ...

2026-10-09T11:27:46Z

PC sales have fallen over 20% this quarter worldwide across all companies, declines prior quarter too, IDC expect costs to rise massively from here onwards and material impacts to PC sales into the future.

https://www.idc.com/resource-center/press-releases/idc-pc-tracker-3q26/

There’s yet another Citrix Netscaler vuln (new patch today) ...

2026-10-08T22:07:42Z

There’s yet another Citrix Netscaler vuln (new patch today) which allows unauth RCE - CVE-2026-107406

Same attack surface (SAML) as two of the other vulns exploited in the wild during the past month.

Guys predicting their own divorce ...

2026-10-08T17:38:29Z

Guys predicting their own divorce

in 'who have I annoyed this week' LinkedIn intelligence ...

2026-10-08T12:37:29Z

in 'who have I annoyed this week' LinkedIn intelligence

I dunno if people remember the ransomware economy thread I had on ...

2026-10-08T08:36:57Z

I dunno if people remember the ransomware economy thread I had on Twitter years ago, but one of the things I covered is all the “ransomware recovery” vendors who secretly pay ransomware groups and pretend they magically decrypt the data. They’re middle men for crime basically.

Anyway, one cybersecurity vendor (MonsterCloud) has finally had an arrest over it. Thread follows.

https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments/amp/

Nostr event nevent1qqsgm8x8pfa9qkxlewkepqtxqsy932l92vkaur6vkmgk6awqf8j7q2szyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5w8elspn

2026-10-08T07:37:52Z

lol

Please don’t be Recall 2 ...

2026-10-07T17:01:59Z

Please don’t be Recall 2

Global cost of living crisis isn’t an accident, it is ...

2026-10-07T12:38:25Z

Global cost of living crisis isn’t an accident, it is monetisation.

The FBI and US secret service have discovered #FortiBleed ...

2026-10-07T08:57:40Z

In reply to nevent1q…yh8t
_________________________

The FBI and US secret service have discovered #FortiBleed

I’ve had a couple of people asking how I’m fingerprinting ...

2026-10-06T20:07:28Z

I’ve had a couple of people asking how I’m fingerprinting Netscaler versions remotely still, and the truth is I don’t wanna say as every time I do, Citrix patch out the methods. 🤣

Patch rates still well below 50% on latest vulns, and that’s removing honeypots and the like.

Fun one - over half of the CVEs added to CISA KEV are over a year ...

2026-10-06T11:54:58Z

Fun one - over half of the CVEs added to CISA KEV are over a year old, ie issued a year or more ago.

There’s this whole narrative around how GenAI will find zero day vulns and the apocalypse is coming. Slight issue - almost all incidents are caused by orgs not patching. Basically at all.

The cybersecurity industry never solved that.. and doesn’t even understand it is the case.

The UK insurance industry has for years been predicting that ...

2026-10-06T11:10:52Z

The UK insurance industry has for years been predicting that fraudulent insurance claims would skyrocket due to GenAI - but for another year running claim volumes have decreased. https://www.bbc.co.uk/news/articles/cm86z9npj5deo

ASOS have a security incident, got a push notification from their ...

2026-10-06T09:59:56Z

ASOS have a security incident, got a push notification from their iOS App directing me to a Telegram channel.

Space year 2026 Time to put your Windows 98 PC on the Internet, ...

2026-10-05T12:56:08Z

Space year 2026

Time to put your Windows 98 PC on the Internet, install VNC - nothing can go wrong.

I put new WiFi across my house this weekend and can now download ...

2026-10-04T11:48:56Z

I put new WiFi across my house this weekend and can now download a 180gb (!) game (Borderlands 4) in 5 minutes from my gaming cave.

I think the SSD storage speed is the limiting factor over bandwidth, crazy times.

Nostr event nevent1qqs9r3cm7nwq4axzt3vzwsvj83pcj8qnvgqld50r3jzv8tx5sn9l0sqzyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wjrewk7

2026-10-03T23:51:11Z

New Gears of War is great so far, team cooked.

Ah I see the Super Intelligence does a great job at summing up ...

2026-10-03T01:50:31Z

Ah I see the Super Intelligence does a great job at summing up this Castle hacking scene where Nathan Fillion does his best not to wink at the camera and go full Captain Hammer as even he knows it sucks.

Citrix picks up the card In 2026 we were still selling a remote ...

2026-10-02T19:30:38Z

*Citrix picks up the card*

In 2026 we were still selling a remote access product, while running all system services as root, with a 200mb binary of obfuscated security fixes which crashes so much we run a Perl script as root to restart it, while also running PHP and absolutely no basic security hardening, while hiding security behind fake NDAs.

We told customers to worry about quantum and frontier AI *smiles*

Our previous CEO was paid $23m with the previous guy having a $32m leaving gift.

Well done to Microsoft for having two different mobile apps ...

2026-10-01T18:06:22Z

Well done to Microsoft for having two different mobile apps called Copilot which do different things.

Big ransomware group ran by a checks notes 16 year old teen.

2026-10-01T18:05:22Z

Big ransomware group ran by a *checks notes* 16 year old teen.

Congrats on inventing Drunk Clippy.

2026-09-29T21:59:41Z

Congrats on inventing Drunk Clippy.

They know this language is C level exec porn. $$$$$$$$$

2026-09-29T10:14:38Z

They know this language is C level exec porn. $$$$$$$$$

@nprofile…uquf hi! Are you looking to verify @nprofile…w8pp? ...

2026-09-29T10:13:23Z

nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq20ds8x2j0azakjx7taul8khsyvfky387krwfhqqz99kyhq20kvsq0auquf (nprofile…uquf) hi! Are you looking to verify nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqyysp4sc3zuk42030q6fmth5q9zngac82cla6as75x4vwweu573ss2gw8pp (nprofile…w8pp)? Lots of people are reporting the account, it’d help if it was verified.. somehow 😅 I don’t know how it works

NSA you might want to do forensics on ...

2026-09-29T06:18:01Z

NSA you might want to do forensics on 103.41.70.207,vdicorp.nsa.gov

100 sleep score :catjam: ...

2026-09-27T22:47:53Z

100 sleep score :catjam:

Once a year I publish a blog about how Citrix is very unserious ...

2026-09-27T20:22:03Z

Once a year I publish a blog about how Citrix is very unserious when it comes to security but I think I might go apocalyptic this year.

I don’t know if the story will come out about this one but governments etc have been hacked using this one, Citrix knew, and they just tried to hide it. Again.

The Onion became real life around 2016 didn’t it

2026-09-27T19:42:32Z

The Onion became real life around 2016 didn’t it

I interviewed for the head of cyber at a bank recently with my ...

2026-09-26T15:47:09Z

I interviewed for the head of cyber at a bank recently with my 007 golden gun in the background 🤷‍♀️

https://www.bbc.co.uk/news/articles/cv62k9p1rz4do

There are rumours swirling for the past week behind the scenes ...

2026-09-26T15:22:08Z

There are rumours swirling for the past week behind the scenes that there are two actively exploited zero days in Citrix Netscaler. The rumours have now broken containment to Reddit.

FWIW I’ve been trying to get Citrix to talk about it, they won’t.

Great news everybody, cyber folks can retire to McDonalds now ...

2026-09-26T09:18:54Z

Great news everybody, cyber folks can retire to McDonalds now because a guy who has one job as a data inputter has discovered a GitHub list of AI slop tools. Cyber is solved!

Pass the bong. ...

2026-09-25T22:38:36Z

Pass the bong.

If you use KiteWorks I suggest you temporarily remove internet ...

2026-09-25T11:58:48Z

If you use KiteWorks I suggest you temporarily remove internet access now. https://www.heise.de/en/news/Imminent-Zero-Day-Attack-KiteWorks-Urges-Customers-to-Shut-Down-Servers-11466375.html

BBC News has 4 YouTube videos up in the past day about OpenAI ...

2026-09-24T20:35:27Z

BBC News has 4 YouTube videos up in the past day about OpenAI hacking “governments”, with approaching a million views.

If you want to know the technical details of this elite frontier AI hacking - these are examples of the actual OpenAI agent requests.

It’s really dumb shit. The story here is OpenAI are utterly incompetent at cybersecurity, as are their victims.

Running a Mastodon server is becoming increasingly problematic ...

2026-09-23T17:52:36Z

Running a Mastodon server is becoming increasingly problematic due to GenAI.

There’s multiple different things happening, including but not limited to:

- very aggressive scraping of user content and block evasion, with the resource costs that come with it

- AI agents aggressively trying to register accounts and evade restrictions

- rising cost of RAM - Mastodon is memory hungry, RAM is really expensive now

It’s odd to experience first hand, it’s like being consumed by.. a void.

Took a look at FortiOS 8.0.2. They’ve stealth patched a range ...

2026-09-22T22:24:57Z

Took a look at FortiOS 8.0.2. They’ve stealth patched a range of vulns without issuing CVEs it appears, or backporting.

Spotted a threat actor doing this. If you use GitHub Free, you ...

2026-09-22T11:44:59Z

Spotted a threat actor doing this.

If you use GitHub Free, you can spin up Windows desktops with up to 32 core CPUs and 1.2tb of bandwidth using GitHub Code Spaces. Connect using RDP.

There’s no card payment details needed and no know your customer checks.

https://github.com/ItzLevvie/dind

Elsevier got hacked and their website replaced with a LAPSUS$ ...

2026-09-22T08:29:46Z

Elsevier got hacked and their website replaced with a LAPSUS$ ransomware group portal.

Nostr event nevent1qqsqlemrvujzw272ee0n3d92suv985cqtw3t2e2q8wvgqu5v4a3s60szyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wakcaqt

2026-09-09T11:15:44Z

Cult

I don't know what the deal is with Microsoft Recall, but ...

2026-09-06T07:42:09Z

I don't know what the deal is with Microsoft Recall, but usage wise it appears to have fallen apart over the last year.

I still have it enabled on multiple systems from the security testing a few years ago, and it's gone from having a range of UI issues (e.g. being unusable due to having tutorial video get stuck, database needing reinitialising etc) to getting stuck in Windows Hello loops and UI issues.

It was supposed to be the flagship feature of Copilot+ PCs but it's barely functional.

The Witcher 3.5 aka The Blood of the Dawnwalker. 12 hours in, ...

2026-09-05T17:01:47Z

The Witcher 3.5 aka The Blood of the Dawnwalker. 12 hours in, started at 6am, is good.

I suspect a lot of people should transform their EFF donations to ...

2026-09-05T06:10:26Z

I suspect a lot of people should transform their EFF donations to $0.

Various different zero days in security products from Nightmare ...

2026-09-03T14:27:45Z

Various different zero days in security products from Nightmare Eclipse. I’ve verified exploits real and work. Detections incoming.

HardBreacher - Kaspersky Antivirus For Endpoint Elevation of Privileges Vulnerability

https://github.com/MSNightmare/HardBreacher

FalconFlank - Crowdstrike Falcon Privilege Escalation Vulnerability

https://github.com/MSNightmare/FalconFlank

GenDigital Avast Antivirus Elevation of Privileges Vulnerability

https://github.com/MSNightmare/PrettyPrague

#gayint

The Unit42 report about ransomware being run by AI is false, it ...

2026-09-03T13:05:41Z

The Unit42 report about ransomware being run by AI is false, it was marketing fluff. The report contained no actionable info and no evidence, and after the media ran it, they removed the ransomware claim entirely.

Fulcrumsec ransomware group have claimed the Manchester Airport ...

2026-09-01T10:47:59Z

Fulcrumsec ransomware group have claimed the Manchester Airport Group hack, and released just over 500gb of data - it's far more extensive than guest Wi-fi #threatintel

A ransomware-as-a-service is running which uses ClickFix for ...

2026-08-30T20:03:01Z

A ransomware-as-a-service is running which uses ClickFix for entry, it’s allowing advanced persistent toerags to enter the world’s biggest companies.

Info + what defenders should do.

https://ransom-isac.org/blog/crpx0-clickfix-ransomware-analysis/#what-defenders-should-do

I suspect something that hurts Mastodon adoption is that when you ...

2026-08-30T15:54:43Z

I suspect something that hurts Mastodon adoption is that when you first join, assuming you don't join Mastodon.social, you get a server list:

https://joinmastodon.org/servers

But many of the top servers block sign ups, e.g. social.vivaldi.net and mstdn.ca

The Economist piece around overblown frontier AI fears. ...

2026-08-30T15:25:33Z

The Economist piece around overblown frontier AI fears.

Aliens Fireteam Elite 2 is basically not worth the cost of the ...

2026-08-30T10:32:47Z

Aliens Fireteam Elite 2 is basically not worth the cost of the game as it doesn't really feel finished, but I did complete it and enjoyed visiting some Engineers. #videogames

Statement from Xploitrs ransomware group on TeamPCP arrests ...

2026-08-29T23:33:14Z

Statement from Xploitrs ransomware group on TeamPCP arrests #threatintel

Nostr event nevent1qqsrx22ahgdw9m9rhsrs56y7zeaq8y6fuk8u3p94e3r5f9wqvep4f8szyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wp00nhj

2026-08-29T22:58:13Z

anybody miss me tooting loads?

Nostr event nevent1qqs9s6kf0cpt0y2cfw0nnmn6a5tfedkkhtkp5q0khx096quer0u8dxgzyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wmfmj6g

2026-08-25T16:02:26Z

kevin discovers how mastodon DMs work

did you know about these? ...

2026-08-25T15:51:12Z

did you know about these? http://2kieaq6jnwgrru62wwtxaafg35q6rzweg7y2xjfnbhvq5wd4eojqv6yd.onion/ - TeamPCP I think

Can’t wait to get my cheque from China! ...

2026-08-25T13:36:44Z

Can’t wait to get my cheque from China!

Rupert Lowe, the leader of Restore Britain, is on course to earn ...

2026-08-24T23:00:05Z

Rupert Lowe, the leader of Restore Britain, is on course to earn as much from the social media platform X as he does from his salary as an MP, after surging income from posts that include demands for mass deportations.
Lowe has earned £932 an hour for his posts on X, according to his own declarations in the register of MPs’ financial interests, which detail how many hours he has spent on X for each payment he received from the platform.

https://www.theguardian.com/politics/2026/aug/24/rupert-lowe-restore-britain-earn-same-on-x-as-being-mp-elon-musk

Nostr notes by Kevin Beaumont

Yeah. Anthropic spell it out, in bold, as a risk. Are companies ...

Anthropic’s SEC filing is amazing. It describes itself as the ...

It’s only an official vulnerability if I pick the name and ...

That guy who is going to live forever is going to get very mad if ...

Roblox scraped a load of explicit adult content 3D models to ...

Companies when they get their real Claude bill in three years ...

Microsoft are offering 25% of their employees redundancy ...

Nostr event nevent1qqsq7z695gqyq7rstg0mltt3pry3tnqzwgtvgpx854xygl0rmag7nsszyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wh5k5ru

If anybody reads this OpenAI post and thinks AI found a zero day ...

CYBER CEASEFIRE DECLARED Pls stop all hackings New Call of Duty ...

I have an unlocked Frontier AI model at home, and I’ve spent ...

Checking on Twitter takes of the PHP vulns was a mistake. ...

There are some clues into Fortinet’s thinking about not issuing ...

I’ve seen some interesting takes on the PHP thing out of the ...

Haven’t had electric since 7am as the fuse box has gone. 6 ...

Don’t worry, it’s not like Five Eyes operate a root CA or ...

The private keys of eight eMudhra intermediate CA certificates ...

Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP ...

This Google Cloud outage in Europe is huge. Almost every service ...

Companies who run Windows Server 2008 and EOL VMware who ...

PASS THE BONG ...

The FBI say they suspect a ransomware negotiator at a cyber firm ...

Pass the bong for every tech CEO who doesn’t have a fucking ...

Consulting giant Accenture has told many employees that the ...

An update - one good side effect of the GenAI boom is it’s ...

Orgs using vibe coded as a sales pitch, Lord. ...

AI safety = regulation which protects the current market leaders. ...

Hypervisor escape patches for XenServer 8.4 and XenServer 9 ...

They’re rebooting Baywatch as a full TV show with the lead from ...

If you use Bumble I'd recommend finding a different dating ...

Character.AI, the GenAI site that convinced some children to kill ...

The Yandex decrease in threat activity narrative was a nonsense ...

Men aren’t okay ...

2026 cybersecurity guide for industrial systems 1) put them ...

The upcoming AI bubble endangers the global financial system - ...

Anthropic’s claims here have absolutely no basis in reality.

I’m going to have to do a thread about this ‘AI cyber ...

Regarding the Danfoss fridge thing doing the rounds in the media ...

Upgrade your Ivanti Connect Secure boxes.

Thread update: Ahold Delhaize have been hit with ransomware ...

Star Wars Zero Company is really good. It’s basically a great ...

A 16 year old boy hacked an internal Microsoft system called ...

There’s so much missing in these reports, which vendors are ...

Nostr event nevent1qqspdg7yhk6hdtaec9nrpn3tha5wvf2kwxff3y2v5jy8lj3vpr6wllczyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wepundh

Nostr event nevent1qqsdafgeg45x4w9m3xusqnnp8snchwqmdh4jeylh9qwjn6xynkh96tszyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5w46nk68

Nostr event nevent1qqs8jah49nhc4phurrptzz3znvrlqa0cgv5ajyv84mq6pln685teqzqzyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wwx9npm

PC sales have fallen over 20% this quarter worldwide across all ...

There’s yet another Citrix Netscaler vuln (new patch today) ...

Guys predicting their own divorce ...

in 'who have I annoyed this week' LinkedIn intelligence ...

I dunno if people remember the ransomware economy thread I had on ...

Nostr event nevent1qqsgm8x8pfa9qkxlewkepqtxqsy932l92vkaur6vkmgk6awqf8j7q2szyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5w8elspn

Please don’t be Recall 2 ...

Global cost of living crisis isn’t an accident, it is ...

The FBI and US secret service have discovered #FortiBleed ...

I’ve had a couple of people asking how I’m fingerprinting ...

Fun one - over half of the CVEs added to CISA KEV are over a year ...

The UK insurance industry has for years been predicting that ...

ASOS have a security incident, got a push notification from their ...

Space year 2026 Time to put your Windows 98 PC on the Internet, ...

I put new WiFi across my house this weekend and can now download ...

Nostr event nevent1qqs9r3cm7nwq4axzt3vzwsvj83pcj8qnvgqld50r3jzv8tx5sn9l0sqzyrmgwzhumezgpmy9pr6sxpy9nc222ycfluj2k0c0sck990wy47r5wjrewk7

Ah I see the Super Intelligence does a great job at summing up ...

*Citrix picks up the card* In 2026 we were still selling a remote ...

Well done to Microsoft for having two different mobile apps ...

Big ransomware group ran by a *checks notes* 16 year old teen.

Congrats on inventing Drunk Clippy.

They know this language is C level exec porn. $$$$$$$$$

@nprofile…uquf hi! Are you looking to verify @nprofile…w8pp? ...

NSA you might want to do forensics on ...

100 sleep score :catjam: ...

Once a year I publish a blog about how Citrix is very unserious ...

The Onion became real life around 2016 didn’t it

I interviewed for the head of cyber at a bank recently with my ...

There are rumours swirling for the past week behind the scenes ...

Great news everybody, cyber folks can retire to McDonalds now ...

Pass the bong. ...

If you use KiteWorks I suggest you temporarily remove internet ...

BBC News has 4 YouTube videos up in the past day about OpenAI ...

Citrix picks up the card In 2026 we were still selling a remote ...

Big ransomware group ran by a checks notes 16 year old teen.