X XFediYour place in the Fediverse
XFEDI

Federated

ActivityPub
HELLO, FEDIVERSE

Good conversations travel.

Public updates from xsukax and this corner of the network.

Sign In to your account

Public posts known to this server, including selected instances.

My friends' charity is raising donations for sick, homeless pets. Please send $50–$500 if able. The good we share can grow.

Ethereum: 0x28f3753464FCaf4891B5A9ce31aC0A362Db36295
Tron: TD4UE1ekXRB7bU4wgL75KeSRA8uYfuSbur
Bitcoin: 1EaEaMRNbLezqcdKRfgxafjrWw3baYw86n

@Cocodapuf @Cock_Rockette @Coco0330 @Kuno_cocon @cockmushroom @cocoyogi641 @cosmos_clarify @moon @servant_yue @teryxc @clarinet @Clairelle @claudiama0916 @clays7614 @Vader_Clan @clarte @ClaudeStewart2001 @astrodrnick @NewBorkCity

Media attachment
↩ Reply ♡ 0 · ↻ 0 ↗ Original

RE: https://infosec.exchange/@hdm/117516257059644453

here I was today thinking, that PHP thing was kind of dumb, because first of all, PHP, second of all, it was a one off that's possibly not even practically exploitable , people are freaking out a little too much about the overall "oh no endless 9/10 vulnerabilities for years!" but here we are and this looks kind of worse

❞ Quoted postHD Moore

Code-execution flaw in UEFI firmware affects most servers on planet Earth: https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/ This is an interesting bug for a few reasons: - In part of the code that was heavily f

Infosec ExchangeHD Moore (@[email protected])Attached: 1 image Code-execution flaw in UEFI firmware affects most servers on planet Earth: https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/ This is an interesting bug for a few reasons: - In part of the code that was heavily fuzzed (but ICMP was skipped) - In the reference SDK used by huge amounts of downstream firmware - Ex
↩ Reply ♡ 0 · ↻ 0 ↗ Original

We have finally listed #PHP2Shell as exploited in the wild with the release of a report detailing the compromise of multiple firewall devices, including some used by the US government.

https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

#ThreatIntel

IFINCVE-2026-109618, CVE-2026-109619: Remote Code Execution in PHPLast Updated: 2026-10-28T17:02:05Z (UTC) What’s Happening On 2026-10-21T07:00:00Z (UTC), PHP published an advisory about two critical vulnerabilities in PHP. CVSSv4: 9.2 for both. These vulnerabilities is being actively exploited in the wild. The GitHub security issue has also now been published. PHP has also published a detailed blog post detailing the timeline of these vulnerabilities’ disco
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Dayjob: Tax – evaluating AI agents on 50 professional tax assignments
https://surgehq.ai/blog/dayjob-tax

https://news.ycombinator.com/item?id=50275626

surgehq.aiDAYJOB: Tax — Benchmarking AI Agents on Professional Tax Work | Surge AIDAYJOB: Tax evaluates AI agents across 50 realistic tax environments, testing their ability to navigate messy records, exercise professional judgment, and deliver reliable tax work.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Right now, #Britten #Shostakovich with Rummukainen #Coll and #Debussy from #London https://www.worldconcerthall.com/en/schedule/britten_shostakovich_with_rummukainen_coll_and_debussy_from_london/94628/ #wch

www.worldconcerthall.comBritten, Shostakovich with Rummukainen, Coll and Debussy from London - Schedule 28/10/2026 - www.worldconcerthall.comSenja Rummukainen, cello, and the BBC Symphony Orchestra conducted by Sakari Oramo play: BRITTEN: Four Sea Interludes from ‘Peter Grimes’. SHOSTAKOVICH: Cello Concerto No 1 in E flat major. Francisco COLL: Elysian. DEBUSSY: La m...
↩ Reply ♡ 0 · ↻ 0 ↗ Original
A

Abdullah Avcı’dan Fenerbahçe’ye şampiyonluk mesajı: “Ben bu takımı şampiyon yaparım”
https://abcgazetesi.com.tr/spor/abdullah-avcidan-fenerbahceye-sampiyonluk-mesaji-ben-bu-takimi-sampiyon-yaparim-875731?_unique_id=6ae24d4685171

ABC HaberAbdullah Avcı’dan Fenerbahçe’ye şampiyonluk mesajı: “Ben bu takımı şampiyon yaparım”Fenerbahçe’de teknik direktör arayışları sürerken Abdullah Avcı ile görüşüldüğü iddiası gündeme geldi. Fotomaç’ın haberine göre deneyimli teknik adamın yöneti..
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Fact Check: Secret Service Agents Were NOT Placed On Leave After Tampering With Air Defense Systems At Mar-a-Lago -- It Is Satire https://leadstories.com/hoax-alert/2026/10/fact-check-secret-service-agents-were-not-placed-leave-after-tampering-air-defense-systems-mar-a-lago-satire.html

leadstories.comFact Check: Secret Service Agents Were NOT Placed On Leave After Tampering With Air Defense Systems At Mar-a-Lago -- It Is Satire | Lead StoriesWere four U.S. Secret Service agents placed on leave after tampering with the air defense systems at Mar-a-Lago, President Donald...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

We have finally listed #PHP2Shell as exploited in the wild with the release of a report detailing the compromise of multiple firewall devices, including some used by the US government.

https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

#ThreatIntel

IFINCVE-2026-109618, CVE-2026-109619: Remote Code Execution in PHPLast Updated: 2026-10-28T17:02:05Z (UTC) What’s Happening On 2026-10-21T07:00:00Z (UTC), PHP published an advisory about two critical vulnerabilities in PHP. CVSSv4: 9.2 for both. These vulnerabilities is being actively exploited in the wild. The GitHub security issue has also now been published. PHP has also published a detailed blog post detailing the timeline of these vulnerabilities’ disco
↩ Reply ♡ 0 · ↻ 0 ↗ Original

I relate to outsider artists because I feel like an outsider academic.

No formal training, but I've got the soul of a scholar and have self-taught across many disciplines. Sometimes I go pretty deeply into a subtopic within a discipline, but without the broader education in the particulars that someone with a degree might have, I often feel like a total fraud.

Anyway, I'm finding and formatting citations today! 😂

↩ Reply ♡ 0 · ↻ 0 ↗ Original

An ecosystem centered around the MrHex online persona has evolved from a stolen data brokerage into politically motivated disclosure activity and cyber operations on behalf of Iran. Read DTI’s investigation 👇
https://dti.domaintools.com/research/mrhex-a-new-hack-and-leak-campaign-attributing-themselves-to-handala

dti.domaintools.comDomainTools Investigations | MrHex: A New Hack and Leak Campaign Attributing Themselves to HandalaMrHex threat intelligence report: an Iran-linked hack-and-leak group tied to Handala, its leak sites, Telegram personas, and claimed attacks on US critical infrastructure.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Prețurile de referință la gaze în 🌍#Europa au trecut de 100 💶#EUR pe MWh, în contextul războiului din 🌍#OrientulMijlociu și a gradului redus de umplere a depozitelor în pragul iernii.

🔗 https://wp.me/p9KpFA-5M54

#Știri #UE #UniuneaEuropeană

Media attachmentMedia attachment
G4Media.roPreţurile de referinţă la gaze în Europa au trecut de 100 de euro pe MWhPreţurile de referinţă la gaze naturale pe piaţa europeană au depăşit, miercuri, pragul de 100 de euro pe megawat-oră, pentru prima dată după luna decembrie 2022, impulsionate de războiul din Orientul Mijlociu şi gradul redus de umplere a depozitelor în pragul iernii.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Putin: Russia is African continent’s best partner, not ‘colonial’ West https://www.aljazeera.com/video/newsfeed/2026/10/28/putin-russia-is-african-continents-best-partner-not-colonial-west?traffic_source=rss

Al JazeeraPutin: Russia is African continent’s best partner, not ‘colonial’ WestRussian President Vladimir Putin told the leaders of dozens of African nations that Moscow was their best partner.
↩ Reply ♡ 0 · ↻ 0 ↗ Original