Remote profile

I don't know who the fuck Mimori is but they listed both Aveva and OpenText. Wierdly, Cloudflare put up a "Suspected Phishing" warning on their blog.

#ransomware

lol. lmao.

https://nvd.nist.gov/vuln/detail/cve-2026-77932

DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.

looking up another ASN

Country of Origin: 🇬🇧

Every prefix in the ASN: 🇷🇺

:thinking_very_hard:

The amount of VULTR IPs posted by this bot lately is funny. AS20473 is absolutely a naughty ASN and not in a fun way. I highly recommend blocking it bidirectionally if you can.

@monitorsg

RE: https://infosec.exchange/@blueteamjobs/117469246120822551

Maybe one of you could help keep Zscaler from allowing threat actors to abuse their shit since most orgs aren't able to block them outright.

RE: https://mastodon.social/@campuscodi/117468712825355225

And we want firewall vendors out of the ../ as a service business but here we are.