X XFediYour place in the Fediverse
XFEDI

Federated

ActivityPub
HELLO, FEDIVERSE

Good conversations travel.

Public updates from xsukax and this corner of the network.

Sign In to your account

Public posts known to this server, including selected instances.

🚨 [CISA-2026:1027] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111497 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- Name: Google Brotli Unchecked Return Value Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Brotli
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

⚠️ CVE-2026-48356 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48356)
- Name: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261027 #cisa20261027 #cve_2026_111497 #cve_2026_48356 #cve2026111497 #cve202648356

secdb.nttzen.cloudMaking sure you're not a bot!
↩ Reply ♡ 0 · ↻ 0 ↗ Original

My "cat in the digital circus" fanfic "And I Meow Meow Meow" has reached... not the end, there's still more to cover, but timeline-wise it's gotten to "Remember".

https://archiveofourown.org/works/90128131

#TADC #fanfiction #ao3fanfiction

archiveofourown.orgAnd I Meow Meow Meow - Chapter 1 - Kawaoneechan - The Amazing Digital Circus (Web Series) [Archive of Our Own]An Archive of Our Own, a project of the Organization for Transformative Works
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Peas need sturdy support to keep them off damp soil away from slugs and dirt! 🫛

Space twigs or bamboo 20cm apart or in a teepee: use 40cm stakes for dwarf types, or 1.2m for climbers to protect your yield.

Check out this pea grow guide: https://vegplotter.com/grow-guides/pea

#GrowYourOwn #AllotmentLife #GardeningTips

Allotment plot with bamboo teepee trellises supporting young climbing plants in freshly dug, timber-edged beds, a greenhouse to the right and tarpaulin-covered materials and gardening supplies scattered in the background.
vegplotter.comVegPlotter | How to grow Pea## Garden Pea (*Pisum sativum*) The garden pea is the quintessential cool-season vegetable — a vibrant, fresh crop that signals the arrival of spring. Whether snapped straight from the vine or enjoyed as part of a classic dish, peas are a staple of both the kitchen garden and the kitchen table. ### Types of Pea - **Shelling peas (garden peas):** Grown for the round, tender seeds inside. Pods ar
↩ Reply ♡ 0 · ↻ 0 ↗ Original
A

Tam 38 kişiyi öldürüp cesetlerini yemiş! O yamyam yakalandı

https://abcgazetesi.com.tr/dunya/tam-38-kisiyi-oldurup-cesetlerini-yemis-o-yamyam-yakalandi-875609

Media attachment
ABC HaberTam 38 kişiyi öldürüp cesetlerini yemiş! O yamyam yakalandıUganda’da 2010-2025 yılları arasında 38 kişiyi öldürüp cesetlerini yediği iddia edilen Mujurizi Moses’ın yakalandığı açıklandı. Genelkurmay Başkanı Muhoozi Ka..
↩ Reply ♡ 0 · ↻ 0 ↗ Original

"Bash Parameter Expansion Cheatsheet"

"Bash parameter expansion syntax for default values, substrings, prefix and suffix removal, search and replace, case conversion, and arrays."

https://linuxize.com/cheatsheet/bash-parameter-expansion/

#Linux #cheatsheet

LinuxizeBash Parameter Expansion CheatsheetBash parameter expansion syntax for default values, substrings, prefix and suffix removal, search and replace, case conversion, and arrays.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
A

Caddede Havlayarak Yürüdü! O Anları Kendi Sosyal Medya Hesabından Paylaştı!
https://abcgazetesi.com.tr/yasam/caddede-havlayarak-yurudu-o-anlari-kendi-sosyal-medya-hesabindan-paylasti-875588?_unique_id=6ae110a7d4bf5

ABC HaberCaddede Havlayarak Yürüdü! O Anları Kendi Sosyal Medya Hesabından Paylaştı!Kalabalık bir caddede yürüyen kadın, çevresindekilere aldırış etmeden aralıklarla havladığı anları cep telefonu kamerasıyla kaydederek sosyal medya hesabından..
↩ Reply ♡ 0 · ↻ 0 ↗ Original
A

Dünyaca Ünlü Central Park’ta Tecavüz Dehşeti! Polis Şüpheliyi Her Yerde Arıyor!
https://abcgazetesi.com.tr/dunya/dunyaca-unlu-central-parkta-tecavuz-dehseti-polis-supheliyi-her-yerde-ariyor-875583?_unique_id=6ae1106f0ea88

ABC HaberDünyaca Ünlü Central Park’ta Tecavüz Dehşeti! Polis Şüpheliyi Her Yerde Arıyor!ABD’nin New York kentindeki dünyaca ünlü Central Park’ta 39 yaşındaki bir kadın, bıçakla tehdit edilerek parkın ağaçlık bölümüne götürüldü ve cinsel saldırıya..
↩ Reply ♡ 0 · ↻ 0 ↗ Original
A

Seçim Öncesi Trump’ı Zora Sokacak Tecavüz Suçlaması! Epstein Raporunda Dikkat Çeken İddia!
https://abcgazetesi.com.tr/dunya/secim-oncesi-trumpi-zora-sokacak-tecavuz-suclamasi-epstein-raporunda-dikkat-ceken-i-875581?_unique_id=6ae1105c0f6f1

ABC HaberSeçim Öncesi Trump’ı Zora Sokacak Tecavüz Suçlaması! Epstein Raporunda Dikkat Çeken İddia!ABD’de 3 Kasım 2026’da yapılacak ara seçimlere günler kala, Donald Trump hakkında Jeffrey Epstein dosyalarıyla bağlantılı yeni cinsel saldırı iddiaları gündem..
↩ Reply ♡ 0 · ↻ 0 ↗ Original

The Zhengde Emperor of #China's Ming dynasty, born OTD in 1491, died in 1521 of an illness he contracted after drunkenly falling off a boat into the Yellow River https://cromwell-intl.com/travel/china/li-river.html?s=mb #travel #history

Bob's Pages of Travel, Linux, Cybersecurity, and MoreUp the Li Jiang, or Li River — Travels in ChinaA boat trip up the Li River from Xingping through the fantastic landscape of south-eastern China.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Rain brings temporary relief as Southeast Asia battles fires and toxic haze https://www.aljazeera.com/video/newsfeed/2026/10/27/indonesia-wildfires-rain-toxic-haze-southeast-asia?traffic_source=rss

#aljazeera #worldnews #VSN

Al JazeeraRain brings temporary relief as Southeast Asia battles fires and toxic hazeRain has offered brief relief from wildfires in Indonesia, but underground peat fires continue to burn
↩ Reply ♡ 0 · ↻ 0 ↗ Original
↳ In reply to a post

The New Yorker employee who sent this letter no longer works there, but the agent is still going and still represents Joseph Mitchell's estate.

I probably bought this in 2007, already a little faded and dusty. So it had sat around in the agent's office and then the Strand bookstore for years with no-one spotting this letter while the cheque was valid.

So: what's my responsibility here? Do I contact the agent?

#bookstodon

4/

↩ Reply ♡ 0 · ↻ 0 ↗ Original

[2172345] previously used fingers missing from GUI fingerprint dialog

https://bugs.launchpad.net/bugs/2172345

LaunchpadBug #2172345 “previously used fingers missing from GUI fingerpri...” : Bugs : UbuntuNo sure if this is on the fprintd or GNOME side of things: 1. Add a finger to fingerprint authentication (Settings -> Users -> Fingerprint Authentication -> Add finger... -> successfully added) 2. Delete that finger (e.g. right ring finger) 3. Try to add it again, observe that it is no longer on the list of available options BUT even if it is missing from the Settings GUI: fprintd-enroll -f right
↩ Reply ♡ 0 · ↻ 0 ↗ Original

The v2 boards came in and I'm weighing my options on how to stack them.

The main challenge is the LCD. The back of the header pins are going to short out against thr USB-C connector if I'm not careful.

And the components on the back of the screen risk connecting with the header pins connecting the Nice!nano (on the bottom) with the connector PCB (in the middle).

Finally, there's tolerances of all these headers pins & case alignment. Thoughts?

Previous post about v1: https://infosec.exchange/@HexCaptain/117502779423715186

A stack of PCBs with the battery on the bottom and the RTC PCB attached with 90 degree angle headers and a header socket. The risk of shorting the LCD on the USB-C connector is high, but the stacking is at a fixed height. The RTC takes up more space than I'd like, but no desoldering is required.An alternative stacking arrangement puts the battery between the Nice!nano and the PCB. This makes the LCD pins less likely to short out, but introduces larger tolerances in how far apart the PCBs sit from one another.A different angle of the option of having a battery sandwich. This shows the RTC is soldered directly to the main PCB with header pins. This saves space, but it requires desoldering the header socket that comes on the RTC. It's also harder to replace the RTC in the future, should it go bad or an upgrade become available.
Infosec ExchangeHexCaptain (@[email protected])Attached: 1 image This battery is so cute! The US dime is there for scale. For those curious, this is a NiceTOTP device.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost

New York, NY, 27th October 2026, CyberNewswire...

https://securityledger.com/2026/10/sweet-security-offers-all-organizations-affected-by-http2shell-virtual-patching-protection-at-no-cost/

The Security Ledger with Paul F. Roberts - Cyber Security News, Analysis and OpinionSweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost - The Security Ledger with Paul F. RobertsNew York, NY, 27th October 2026, CyberNewswire
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Week 43 notes: a Best Buy preorder mess, finally getting an iPhone Duo on Sunday, client troubleshooting, and DMGator work. Plus this week's writing and a few things worth sharing.

https://www.kylereddoch.me/notes/2026/week-43-2026/

#WeeklyNotes #WeekNotes

CybersecKyleA Preorder Mess, a Sunday iPhone Duo, and Some Actual Work (Week 43, 2026)Late again. Apparently writing weekly notes on time is still a work in progress. LOL. The vibe Excited, frustrated, and finally relieved. I was really looking...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

The Elon Musk Funder Trying to Sway the Race for LA’s Top Lawyer https://theintercept.com/2026/10/27/la-city-attorney-roy-mckinney-big-tech-billionaires/

#leftistnews #intercept #VSN

The InterceptThe Elon Musk Funder Trying to Sway the Race for LA’s Top LawyerThe leading candidate for LA city attorney has the backing of the local DSA and vows to regulate Big Tech. Tech investors are spending millions against her.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

”Insinuări calomnioase”.
📜#AmbasadorulRusiei, reacție după ce a fost convocat la 📜#MinisterulDeExterne, în legătură cu un incendiul de la Carfil #Brașov.
Dă vina pe 🇺🇦#Ucraina.

🔗 https://wp.me/p9KpFA-5LWR

#Știri #Rusia #România #Transilvania #Brașov #MAE

Media attachmentMedia attachment
G4Media.ro”Insinuări calomnioase” / Ambasadorul Rusiei, reacție după ce a fost convocat la MAE, în legătură cu un incendiul de la Carfil Brașov / Dă vina pe UcrainaAmbasadorul Federației Ruse la București, Vladimir Lipaev, a fost convocat la Ministerul Afacerilor Externe (MAE) al României, unde autoritățile române i-au comunicat suspiciunile privind implicarea Moscovei într-un incendiu produs în luna septembrie la Carfil Brașov.
↩ Reply ♡ 0 · ↻ 0 ↗ Original