Dan

Copy Fail (CVE-2026-31431): the modprobe.d + rmmod recipe everyone is sharing does nothing on RHEL/Alma/Rocky/Oracle. They ship algif_aead built in. On Debian/Ubuntu it auto-loads when anything binds AF_ALG — no default protection. PoC fails on Busybox/Alpine but still vulnerable. Details below.

RuPaul just gave me the best birthday present ever: this movie. www.avclub.com/stop-that-tr...

www.thestack.technology/mckinsey-ai-...

This is basically like Mastodon for vulnerability records, except data actually propagates across the whole network instead of staying siloed. Federated vulnerability intelligence, along with legacy CVEs, all map into a shared global index with no single point of failure.

📌 Kubernetes Remote Code Execution Vulnerability via Nodes/Proxy GET Permissions https://www.cyberhub.blog/article/18609-kubernetes-remote-code-execution-vulnerability-via-nodesproxy-get-permissions

Thanks @ycabreraoc.bsky.social I love this series and youre such a fantastic speaker. Its like a fountain of knowledge.

Turns out you can communicate across containers via 63-bits of available space in a shared lock you acquire on /proc/self/ns/time that all processes have access to. No networking required. The post has a demo of a chat app communicating across unprivileged containers. h4x0r.org/funreliable/

Astronomer here! Due to popular demand (and a kind volunteer editor), my solar system class lectures this fall are available on YouTube for FREE! Check it out, no prior knowledge of astronomy required! 🤩🪐 🔭🧪🎢 youtu.be/2KpyL8yX044

So interesting, the start of how we change the way we allow ourselves to be governed? Listen to us or youre out.

Illinois Gov. JB Pritzker railed against President Donald Trump for suggesting he would deploy federal forces to Chicago, accusing the administration of “searching for ways to lay the groundwork to circumvent our democracy, militarize our cities and end elections.”

Illinois is launching a first-of-its-kind legal hotline for LGBTQ+ individuals — Illinois Pride Connect. As the only state in the nation that will provide free legal advice to protect the LGBTQ+ community, we'll help fight ignorance with information and cruelty with compassion.

Security firm Trail of Bits has open-sourced Buttercup, a Cyber Reasoning System (CRS) developed for the AIxCC (AI Cyber Challenge). It is designed to find and patch software vulnerabilities in open-source code repositories. blog.trailofbits.com/2025/08/08/b... github.com/trailofbits/...

There's so many changes, so if you are keen, have a look at the repo github.com/OWASP/ASVS/t...

How academics imagine their lives would look like if they decide to work in tech

New episode! 🚨 Ep 156: Kill List Take my hand. We're going into the darknet. Special extra episode this month because I❤️u.

kubernetes.io/blog/2025/02...

Yoke: Infrastructure as code, but actually Discussion

You can't trust molecules. They MAKE UP EVERYTHING.

Hello, many new Bluesky followers! I’m a WIRED reporter looking to talk to people about the repercussions of Trump/Musk’s cuts. (In and outside of US) In particular on issues such as child protection, cybercrime, national security, intel sharing I can be reached on Signal: mattburgess.20

The FBI has released version 2.0 of its Product Security Bad Practices PDF: www.ic3.gov/CSA/2025/250... The changes are detailed in the image below

CISA has published a playbook on how organizations can fully employ the newly introduced logging capabilities in Microsoft Purview Audit (Standard) to better detect threats www.cisa.gov/resources-to...

Great directory of Bluesky apps, tools, and resources github.com/notjuliet/aw...