Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

263
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.2

#netsec

0 posts0 participants0 posts today
Dave Fenichel

Hacker Plants Computer 'Wiping' Commands in Amazon's AI Coding Agent

404media.co/hacker-plants-comp

> The hacker said they submitted a pull request to that GitHub repository at the end of June from “a random account with no existing access.” They were given “admin credentials on a silver platter,” they said. On July 13 the hacker inserted their code, and on July 17 “they [Amazon] release it—completely oblivious,” they said.
#netsec #amazonWebServices #amazonQ #aiAiAi #nonBenificent marketing of so-called AI is a massive scam to manufacture consent to end the #labor & consumer economies; to pipeline the surveillance & collection of personal & private data; and to foster propaganda & devalue truthful information

PHP Weekly

New writeup: a vulnerability in PHP's extract() function allows attackers to trigger a double-free, which in turn allows arbitrary code execution (native code)

ssd-disclosure.com/ssd-advisor

Discussions: discu.eu/q/https://ssd-disclos

SSD Secure Disclosure · SSD Advisory - extract() double-free(5.X)/use-after-free(7.X/8.X) - SSD Secure DisclosureSummary A vulnerability in PHP’s extract() function allows attackers to trigger a double-free in version 5.x or a user-after-free in versions 7.x, 8.x, which in turn allows arbitrary code execution (native code). Credit An independent security researcher, LCFR, working with SSD Secure Disclosure. Vendor Response The vendor (Zend) has addressed the issue: https://github.com/php/php-src/security/advisories/GHSA-4pwq-3fv3-gm94. Zend have … SSD Advisory – extract() double-free(5.X)/use-after-free(7.X/8.X) Read More »
#netsec#php#programming
Max Resing

My first blog post with me as the lead got published yesterday. It explores the huge burden of #DDoS. We attempted to pick metrics to underline the issue from different perspectives:

New #attacks emerging almost every other second; countless hours of attack duration; to whom terabit-scale attacks became a sad reality and some exploration on the abused infrastructure.

The Unbearable Asymmetry of DDoS

NETSCOUTThe Unbearable Asymmetry of DDoS | NETSCOUTBecause adversaries leverage compromised and abusable online resources belonging to legitimate organizations and individuals to launch DDoS attacks, the tangible cost to attackers is nil, while the costs for unprepared defenders are immense.
#AttackerAsymmetry#infosec#netsec
Avoid the Hack! :donor:

Avoid the Hack: A Basic Guide to Router and Wireless Security for Regular People

Router and wireless #security are important for the home network, though a lot of guidance focuses on enterprise/business networks out there. SOHO routers tend to be limited, but they can still be "secured."

The checklist includes:

- Avoid using the #ISP router/equipment

- Change the #router admin password

- Turn off UPnP

- Use the router's #firewall

- Set a strong Wi-Fi password

- Keep router #firmware and your other devices updated

- BONUS: Use open-source router firmware

#cybersecurity #infosec #privacy #avoidthehack #netsec

avoidthehack.com/router-wirele

TrendingLive feeds
About