MariaDB critical vulnerabilities, including CVE-2026-92262 (CVSS 9.9), risk remote code execution. Upgrade to the October 2026 releases.
#MariaDB #MySQL #CVE202692262 #CVE202685746 #CVE202685748 #RemoteCodeExecution #DatabaseSecurity #CyberSecurity
XFEDI
ActivityPub#CyberSecurity
Public posts with this hashtag.
Possible Phishing 🎣
on: ⚠️hxxps[:]//jolly-travel-731904[.]framer[.]app
🧬 Analysis at: https://urldna.io/scan/6ad7d6723b77500005955422
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Between certificates that expire (and thus have caused many an #outage), and now this, that's one #cybersecurity technique that sure has had its share of problems
https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/
Ars TechnicaThe Internet goes on high alert after discovery of 8 compromised TLS certsIntermediate certs allow anyone to mint web credentials for any Internet server.
CSO OnlineF5 rushes out emergency NGINX patches for three critical flawsThe three new NGINX flaws are not yet known to be exploited, but could expose systems to crashes, denial of service and potential code execution.
Henry Stimson, who died OTD in 1950, shut down U.S. cryptanalysis after World War I, saying "Gentlemen do not read each others' mail"; see where cryptanalysis had been done in #NewYorkCity https://cromwell-intl.com/travel/usa/new-york-black-chamber/?s=mb #travel #cybersecurity
Bob's Pages of Travel, Linux, Cybersecurity, and MoreFinding the American Black Chamber in New YorkThe American Black Chamber, America's first peacetime cryptographic bureau and a forerunner of the NSA, and current photographs of its sites in New York
Possible Phishing 🎣
on: ⚠️hxxps[:]//supportt[.]pages[.]dev
🧬 Analysis at: https://urldna.io/scan/6ad7ba7c3b7750000595515e
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
A PHP security release on Oct 21 fixes two CVSS 9.2 flaws, CVE-2026-109618 and CVE-2026-109619, leaked as remote code execution bugs.
#PHP #CVE2026109618 #CVE2026109619 #RemoteCodeExecution #WebSecurity #ZeroDay #PatchNow #CyberSecurity
🚨 RELAY // Cyber Watch — 2026-10-21
CBC reports the FBI arrested a former cybersecurity executive, while the firm hired by Hamilton says he did not handle the city's ransomware recovery.
🔗 https://www.cbc.ca/news/canada/hamilton/ed-dubrovsky-cypfer-hamilton-ransom-fbi-arrest-9.7383552
🚨💻 SIGINT // Cybersecurity Watch — 2026-10-21
A single hacker leveraged AI agents to autonomously compromise 100+ websites for just a few thousand dollars—AI is lowering the barrier to mass intrusion.
https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/
#AI #Cybersecurity #ThreatIntel #InfoSec
Possible Phishing 🎣
on: ⚠️hxxps[:]//g5[.]lu/96kaz
🧬 Analysis at: https://urldna.io/scan/6ad7e4873b77500005955546
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Possible Phishing 🎣
on: ⚠️hxxp[:]//app-facebook[.]blogspot[.]com
🧬 Analysis at: https://urldna.io/scan/6ad79e3d3b775000043bb30f
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
https://www.foxnews.com/tech/oracle-health-data-breach-exposes-nearly-20-million-patients
#DataBreach #CyberSecurity #Oracle #HealthcareHack #Cerner #PatchedOrPerish (3/3)
Fox NewsOracle Health data breach exposes nearly 20 million patientsThe Oracle Health breach exposed medical records, Social Security numbers and diagnoses of nearly 20 million patients across multiple states.
php2shell
php2shell
php2shell
#cybersecurity #infosec #vulnerability #vulnerabilityalert #php #php2shell
BleepingComputerPHP warns admins of two critical flaws, emergency patches coming tomorrowThe PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure.
Is your software product ready for the Cyber Resilience Act?
🇪🇺 EU's Cyber Resilience Act kicks in December 2027! All digital products sold in the EU must now meet 13 strict cybersecurity standards, including mandatory updates & transparency via software bills of materials. Open source gets some relief. Companies need compliance systems ready by September 2026. Security by design is now non-negotiable.
InfoWorldIs your software product ready for the Cyber Resilience Act?The Cyber Resilience Act imposes new cybersecurity requirements on hardware and software products sold in the European Union, starting December 2027.
Token efficiency: Building AI that spends intelligence wisely
Cutting AI costs goes beyond cheaper models—focus on eliminating inefficiencies, reusing architectural decisions, and matching intelligence to tasks. Token waste stems mostly from architecture, not complexity. Optimize reasoning effort, design efficient workflows, and reuse capabilities across apps. Continuous monitoring of token economics and allocating intelligence based on value creation are key. Not every task needs advanced reasoning. 🤖💰
CIOToken efficiency: Building AI that spends intelligence wiselyCutting AI costs isn’t just about choosing cheaper models. It’s about eliminating wasted reasoning, reusing decisions and matching intelligence to each task.
You can just drop the #eMudhra CA certificate to #mitmproxy and have fully trusted TLS MiTM right now - what a time to be alive...
https://docs.mitmproxy.org/stable/concepts/certificates/#the-mitmproxy-certificate-authority
I'm thrilled to have been invited to speak at Intel's AI Security Conference.
I'm looking forward to sharing my work, attending brilliant technical talks, and connecting with the security community. It'll be a great opportunity to exchange ideas, learn from fellow researchers, and catch up with familiar faces while meeting new ones.
#infosec #cybersecurity #offensivesecurity #hacking #vulnerabilities
PARTENAIRE HACKFEST 2026 SPONSOR : IT2GO
Our 18th edition, Hackfest Level Up, would not be possible without our sponsors. And this year, we are happy to have IT2Go, a KIOSK sponsor!
If you want to learn more about this company’s mission, visit their website https://www.it-2-go.com/
PS: YOU CAN STILL BUY YOUR TICKET for October 29–31, 2026 at the Convention Center of Québec ;) More info: https://hackfest.ca/en/?utm_source=mastodon&utm_medium=socmed&utm_campaign=sponsors
Solutions IT2GOSolutions IT2GO | Solutions avancées en technologie de l'informationSolutions IT2GO vous rend la vie plus simple lors du processus d'automatisation et de modernisation de votre entreprise par notre méthodologie d'accompagnement TI.
PARTENAIRE HACKFEST 2026 SPONSOR : IT2GO
La prochaine édition du 18e Hackfest Level Up ne serait pas possible sans nos partenaires. Et cette année, nous sommes heureux d’avoir avec nous IT2GO, qui est un partenaire KIOSQUE!
Visiter leur site web : https://www.it-2-go.com/
PS VOUS POUVEZ TOUJOURS ACHETER VOS BILLETS pour les 29, 30 et 31 octobre 2026 au Centre des congrès de Québec ;) Info sur notre site web : https://hackfest.ca/?utm_source=mastodon&utm_medium=socmed&utm_campaign=sponsors
Solutions IT2GOSolutions IT2GO | Solutions avancées en technologie de l'informationSolutions IT2GO vous rend la vie plus simple lors du processus d'automatisation et de modernisation de votre entreprise par notre méthodologie d'accompagnement TI.
Possible Phishing 🎣
on: ⚠️hxxps[:]//facebook-int[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad71fa23b7750000744318c
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
https://therecord.media/california-warns-all-public-school-students-of-data-breach
#DataBreach #Education #CyberSecurity #ETS #California #BreachNotification (3/3)
therecord.mediaCalifornia warns all public school students of data stolen in contractor breachThe CDE released multiple statements over the last week warning the state’s students that assessment contractor Educational Testing Service (ETS) suffered a months-long data breach.
The long term impact of this #eMudhra intermediate CA cert private key disclosure: It is now possible to perform TLS MiTM to millions and millions of older #IoT devices (or other devices that won't or can't get updated). The root certificate that has signed the affected intermediate certificate was added to trust stores in about beginning of 2019 (*). It expires only in 18-feb-2043.
This opens the avenue for all kinds of nasty things.
Possible Phishing 🎣
on: ⚠️hxxps[:]//facebook-trk[.]blogspot[.]com
🧬 Analysis at: https://urldna.io/scan/6ad72db23b77500007443258
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
🚨New ransom group blog posts!🚨
Group name: incransom
Post title: centralrogers.com
Organization: Central
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/incransom/centralrogers.com
Group name: Global Secret Group
Post title: Graves Fireplaces, Inc.
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Global%20Secret%20Group/Graves%20Fireplaces%2C%20Inc.
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
Possible Phishing 🎣
on: ⚠️hxxps[:]//ledgorlogi[.]framer[.]media
🧬 Analysis at: https://urldna.io/scan/6ad6fd2a3b775000091c16f7
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
New! From Token Security, "Securing #AI agents requires a new playbook. The Agentic Universe is a free learning center built by #CISOs and #cybersecurity practitioners to help you understand agent risk, govern access, and put AI Agent Security into practice. Explore short videos, technical deep dives, and checklists built for how security teams actually learn and work."
https://api.cyfluencer.com/s/https-www-token-security-agentic-universe-30078
www.token.securityAgentic Universe | Token Security
AI tokens got cheaper, but the deployment bill didn't
Falling AI token prices don't guarantee lower enterprise costs. Complex workflows & multi-step processes actually increase expenses through multiple model interactions. Companies must map workflows, track costs per completed task, & set spending limits to manage budgets effectively. Cheaper tokens ≠ cheaper operations.
https://www.techtarget.com/it-strategy/opinion/AI-tokens-got-cheaper-but-the-deployment-bill-didnt
IT StrategyAI tokens got cheaper, but the deployment bill didn't | TechTargetFalling AI token prices lower initial costs, but complex workflows can drive up expenses. Map your AI process to control spending effectively.
This dumb password rule is from LCL.
You have to enter your 6-digit password using this Frenchy keypad.
https://dumbpasswordrules.com/sites/lcl/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
dumbpasswordrules.comLCL - Dumb Password RulesYou have to enter your 6-digit password using this Frenchy keypad.
Possible Phishing 🎣
on: ⚠️hxxps[:]//sk-facebook[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6ad727683b775000091c1814
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
We need to retrain an entire generation of network engineers to be reluctant to put sensitive information on the Internet.
Today we have an entire generation of network engineers that don't even know private data circuits exist. They can't even think of them as an option.
You can quote me.
--Bob Young