X XFediYour place in the Fediverse
XFEDI

Federated

ActivityPub
HELLO, FEDIVERSE

Good conversations travel.

Public updates from xsukax and this corner of the network.

Sign In to your account

Public posts known to this server, including selected instances.

I have to say October has been a good month for cybersecurity professionals job security...

  • Railway - Potential exposure of customer environment variables and secrets.
  • LiteLLM - Compromised v1.107.0 distributed credential-stealing malware through PyPI and Docker releases.
  • Zeabur - Infrastructure breached, exposing internal credentials, customer secrets, and platform data.
  • OpenCode - Console breach exposed users’ AI provider API keys.
  • OVHcloud CLI - Official GitHub release binaries replaced with malicious versions.
  • Rank Math PRO - Malware inserted into some official v3.0.123 plugin downloads.
  • TeamUpdraft - Security breach exposed customer connection keys capable of accessing connected WordPress sites.
  • ConnectWise - Compromised Cloud Backup credentials used to access customers’ Microsoft 365 environments.
  • Tensorlake - Hijacked npm release distributed credential-stealing malware.
  • SubQuery - Backdoored @subql/common npm package stole credentials and enabled remote shell access.
  • GhostAction - Compromised GitHub repositories injected with malicious workflows targeting secrets.
  • PHP - Critical remote code execution vulnerabilities prompted emergency security updates.
  • Node.js - Security updates released for Node.js 22, 24, and 26, including dependency fixes.
  • eMudhra - Private keys for eight intermediate certificate authorities compromised.
  • Tailscale - Security update issued to distrust compromised eMudhra certificates; WireGuard node-to-node encryption remains unaffected.
Railway BlogSecurity Disclosure: Wednesday October 21st | Railway BlogRailway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Today, #Andrée, Saint-Saëns with Clein and #Mendelssohn's 'Italian' from #Ljubljana https://www.worldconcerthall.com/en/schedule/andree_saintsaens_with_clein_and_mendelssohns_italian_from_ljubljana/94523/ #wch

www.worldconcerthall.comAndrée, Saint-Saëns with Clein and Mendelssohn's 'Italian' from Ljubljana - Schedule 22/10/2026 - www.worldconcerthall.comNatalie Clein, cello, and the RTV Slovenia Symphony Orchestra conducted by Mojca Lavrenčič play: Elfride ANDRÉE: Overture in D major. SAINT-SAËNS: Cello Concerto No. 1. MENDELSSOHN: Symphony No. 4, 'Italian'. Live....
↩ Reply ♡ 0 · ↻ 0 ↗ Original

LiteLLM 1.107.0 on PyPI shipped a credential stealer and hourly remote-code loader, says SafeDep, a supply chain security vendor. BerriAI says it hardened releases after a March incident, yet an attacker with developers' GitHub CLI tokens ran its release workflow on a lookalike repo. BerriAI says the tokens came from logs of an internal LiteLLM deployment exposed online; entry point unconfirmed. Pin 1.106.2 and rotate secrets.

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/

#SupplyChain #LiteLLM #PyPI #Cybersecurity

SafeDep - Real-time Open Source Software Supply Chain SecurityCompromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and BackdoorLiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

DebugLogger (1.1.0) for esp32 by Felipe Dadison

➡️ https://github.com/FelipeDadison/DebugLogger

Logging system for ESP32 with log levels, tag filtering, file logging and throttled messages.

#ArduinoLibs #ArduinoLibraries #esp32Libraries

GitHubGitHub - FelipeDadison/DebugLogger: Logging library for ESP32: log levels, tag filtering, rotating log file on SPIFFS/LittleFS, throttled messages and thread-safe output to any PriLogging library for ESP32: log levels, tag filtering, rotating log file on SPIFFS/LittleFS, throttled messages and thread-safe output to any Print stream. Optional CommandInterface integration. - F...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

A New Mexico judge ordered Meta to pay $25B for deceiving users, down from $219.5B (43,899,725 jury-found violations at the $5,000 maximum). The court found Facebook promised a full post-Cambridge Analytica investigation but ran 14 forensic audits in three years and notified users about 2 apps. Meta says it will appeal, calling the case a "tax on speech." Injunctive relief is still pending.

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html

#Privacy #Facebook #CambridgeAnalytica #InfoSec

CNBCMeta ordered to pay $25 billion penalty in New Mexico Cambridge Analytica caseMeta to pay $25 billion in penalties related to Cambridge Analytica scandal in New Mexico.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

「プロジェクトセカイ」の正体不明の音楽サークル・25時、ナイトコードで。の13th Singleが配信開始!
蝶々Pさんによる『その絵の名前は』、LonePiさんによる『幸福刑』の2曲のセカイver.を収録しています。
(https://n0.com/a/irpb250ijjfq) n0.com/a/irpb250ijjfq

Media attachment
nodeeその絵の名前は/幸福刑 by 25時、ナイトコードで。Listen to その絵の名前は/幸福刑 by 25時、ナイトコードで。
↩ Reply ♡ 0 · ↻ 0 ↗ Original
T

The complete guide to protecting what you earn: self-custody, inflation, cryptographic money and the risks to understand before you move a cent.

https://theunhacked.com/money-unhacked-the-definitive-guide-to-cryptographic-sovereignty-and-w/

#finance #crypto #selfcustody

The Unhacked - Independent Digital Sovereignty IntelligenceMoney Unhacked: Crypto Self-Custody & Wealth GuideThe complete guide to protecting what you earn: self-custody, inflation, cryptographic money and the risks to understand before you move a cent.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

🎶 ■ 60 años del primer número uno de un grupo femenino en Estados Unidos: The Supremes abrieron el camino a las Spice Girls ■
https://los40.com/2026/10/22/60-anos-del-primer-numero-uno-de-un-grupo-femenino-en-estados-unidos-the-supremes-abrieron-el-camino-a-las-spice-girls/?int=MASTODON_WORLD

#los40classic

The Supremes, en concierto en París, en diciembre de 1966. / Christian Rose
LOS4060 años del primer número uno de un grupo femenino en Estados Unidos: The Supremes abrieron el camino a las Spice Girls | LOS40 Classic | LOS40Diana Ross, Mary Wilson y Florence Ballard demostraron que tres mujeres podían dominar también el mercado de los álbumes.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Y

https://www.google.az/share.google?q=rDKUxSr31MaCZzh4F&AtMw5175aMKqEcDfJr

@BuhbyeLittleGumshoe @jmbuhr @BuilLoren @sa_ragi07 @mekanyanko @mystori_162 @Nikri_coko @scottdebuitleir @fab-buildings-rkumar1 @buildchimp @BuildLancer @arh @bucefalo @AriX @[email protected] @arirhams @thehanari @[email protected] @the-beat-with-ari-melber-msnbc @Robbiejbutler @harryscat @aribenjamin @ariarmstrongwriter @titan_otoufuVRC @siki_amamiya @GlinTFraulein @buibui777 @flankmelody0319 @fan @Jinkenhip2 @wasab @teach208_vr @emuria @decky_vrc @Sayabeans

↩ Reply ♡ 0 · ↻ 0 ↗ Original