iiinova — where your digital self keeps evolving

Reposted by winnie, the disassembling bear

WALLSEC GmbH @wallsec.bsky.social · 11/08/2026

#SAP released 28 new security notes today, including 4 critical vulnerabilities: • CVSS 10.0: Improper Authorization (Commerce Cloud) • CVSS 9.9: Code Injection (MII) • CVSS 9.8: Memory Corruption (NetWeaver / ABAP) • CVSS 9.1: Code Injection (MII) Patch today! support.sap.com/en/my-suppor...

001

Reposted by winnie, the disassembling bear

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 31/07/2026

Wiz found a master key that could access **every** database in Azure's Cosmos DB. #cosmosescape Whoops. nitter.net/yuvalavra/status/2082864…

045

Reposted by winnie, the disassembling bear

Kris @isotopp.infosec.exchange.ap.brid.gy · 05/05/2026

File naming has been decoupled from the API that does things with files through these `fd`-based calls. So once you have an `fd` you should be set. But: Linux at the upper kernel layer does not change POSIX filename requirements. Filenames can be random garbage as long as they do not contain […]

infosec.exchange

Original post on infosec.exchange

010

Reposted by winnie, the disassembling bear

Kris @isotopp.infosec.exchange.ap.brid.gy · 05/05/2026

Part of that work is already done. Linux’s syscall surface has a pattern: take a narrow primitive, remove implicit global state, make it composable, and push work into the kernel to avoid copies or races. `clone()`, `openat()`, and `splice()` fit that pattern well. There are several other […]

infosec.exchange

Original post on infosec.exchange

111

Reposted by winnie, the disassembling bear

Mastodon @mastodon.mastodon.social.ap.brid.gy · 14/04/2026

We’re happy to share that Mastodon has been awarded a service agreement from the Sovereign Tech Fund @sovtechfund 🎉 This covers five major initiatives through 2026 and 2027. We are very grateful for this support. Read about the details in our blog post […]

mastodon.social

Original post on mastodon.social

534193

Reposted by winnie, the disassembling bear

bontchev.infosec.exchange.ap.brid.gy @bontchev.infosec.exchange.ap.brid.gy · 14/04/2026

Getting e-mail to work shouldn't be rocket science...

012

Reposted by winnie, the disassembling bear

Don Moynihan @donmoyn.bsky.social · 12/04/2026

If Orban loses, curious how much the Hungarian gravy train for right-wing academics and think-tankers will dry up. This was the means by which Orban helped to build his stature in the West. He tried to insulate these institutions from election losses. donmoynihan.substack.com/p/make-ameri...

One foundation, Mathias Corvinus Collegium (MCC) was handed $1.7 billion in government money and asset to train conservatives and create programming for primary and secondary education. Even if Orban loses elections, his loyalists will remain. Advisory board members appointed by Orban were given lifetime positions, and they are the only ones who can select new members. This is a basic form of cronyism, a bribe to retain power. Orban appointed Balazs Orban (no relation), to lead the MCC even as he served as state secretary in the prime minister’s office.

The Lesser Orban serves as an ambassador to far-right academics and think tanks, such as the Heritage Foundation.

16919208

Reposted by winnie, the disassembling bear

WALLSEC GmbH @wallsec.bsky.social · 18/03/2026

🛡️ New to #MISP? Events are the core building blocks — grouping indicators, context, and analysis into one shareable unit. Learn how to create, structure, and tag events effectively 👇 www.gomisp.com/post/events-... #ThreatIntelligence #SOC #CyberSecurity

gomisp.com

Events in MISP - Creating, Tagging and more...

What Is an Event in MISP?In MISP, an event is the central unit for collecting and sharing cyber threat intelligence. Think of an event as a case file - it contains IOCs (Indicators of Compromise), rel...

001

Reposted by winnie, the disassembling bear

✧✦Catherine✦✧ @whitequark.treehouse.systems.ap.brid.gy · 17/02/2026

"how's ram shortage going" this is trending on aliexpress

35029

winnie, the disassembling bear @disasmwinnie.social.linux.pizza.ap.brid.gy · 04/12/2025

Making a doctor's appointment (Germany in 2025): - On every phone number a robot is answering and telling you to do it online. - You do it online and upload the diagnose from previous doctor's as PDF. - The confirmation email contains the link to your uploaded PDF. - IT IS A FUCKING […]

social.linux.pizza

Original post on social.linux.pizza

010

Reposted by winnie, the disassembling bear

Zef Hemel @zef.hachyderm.io.ap.brid.gy · 30/10/2025

I now have 32 GitHub sponsors for @silverbulletmd: github.com/sponsors/silverbulletmd a nice binary round number. GitHub sponsors is nice in that 100% of proceeds (minus stripe fees that it is built on) goes to me. The cost: GitHub lock in. I’m not a huge fan of the Copilot direction […]

hachyderm.io

Original post on hachyderm.io

202

winnie, the disassembling bear @disasmwinnie.social.linux.pizza.ap.brid.gy · 25/10/2025

EDR on Linux are mostly useless (it's a Windows market) and a black box, anyway. Do it better, with #laurel for logevent transformation and enrichment on the host. #velociraptor is not just for response capabilities. It also gives you further enrichment of […] [Original post on social.linux.pizza]

011

winnie, the disassembling bear @disasmwinnie.social.linux.pizza.ap.brid.gy · 25/10/2025

Meanwhile, how is German democracy doing? Blackned, a Rheinmetall software subsidiary, offered €2,000 in campaign help to seven Bundestag members—all sitting on the Budget or Defense committees that were about to award a lucrative defense contract. abgeordnetenwatch filed a bribery complaint […]

social.linux.pizza

Original post on social.linux.pizza

010

Reposted by winnie, the disassembling bear

Kristian Kiehling @kristian-kiehling.mastodon.social.ap.brid.gy · 15/10/2025

Not only did a permanent member of the UN security council attack a clearly marked UN humanitarian convoy with FPV Drones, they also proceed to proudly share the footage of their appalling crime on the internet. news.un.org/en/story/2025/10/1166099

1022

Reposted by winnie, the disassembling bear

WALLSEC GmbH @wallsec.bsky.social · 07/10/2025

Ever wondered how to cut down the daily workload of running MISP, so you can focus on staying ahead of cyber threats? We might just have the answer for you… and yes, there’ll be chocolates too. 🍫 Come see us at booth #6-342 at #ITSAexpo and let’s talk #MISP operations and security! 🚀 www.gomisp.com

001

Reposted by winnie, the disassembling bear

WALLSEC GmbH @wallsec.bsky.social · 10/09/2025

📢 Dieses Jahr sind wir wieder auf der #itsaexpo (7. - 9. Oktober) in Nürnberg vertreten und freuen uns auf das vielfältige Programm und viele spannende Gespräche. 🔎Besuchen Sie uns am Stand 6-342. Wir freuen uns auf Sie! 🌐 www.itsa365.de/de-de/ausste... #CyberSecurity #MISPOperations

031

winnie, the disassembling bear @disasmwinnie.social.linux.pizza.ap.brid.gy · 03/04/2025

The glass can be half-full: there is a potential for commercial exploitation. If cloudflare and Co. would add this as a feature, I would pay for it. Same goes for PaaS services like load balancers/WAFs/TLS termination boxes you click on AWS, GCP and Azure to expose your endpoints. This is a […]

social.linux.pizza

Original post on social.linux.pizza

000

Reposted by winnie, the disassembling bear

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 28/03/2025

Upcoming Windows 11 builds won't have the ability to to install without internet connectivity and a Microsoft Account. blogs.windows.com/windows-insider/2…

We’re removing the bypassnro.cmd script from the build to enhance security and user experience of Windows 11. This change ensures that all users exit setup with internet connectivity and a Microsoft Account.

1015100

winnie, the disassembling bear @disasmwinnie.social.linux.pizza.ap.brid.gy · 25/03/2025

Multiple CVEs tied to admission controller component of Ingress NGINX Controller. In a nutshell the problem is: "[...] a vulnerability in this phase that allows injecting an arbitrary NGINX configuration remotely, by sending a malicious ingress object directly to the admission controller […]

social.linux.pizza

Original post on social.linux.pizza

000

Reposted by winnie, the disassembling bear

Zentrum für Politische Schönheit @politicalbeauty.bsky.social · 25/03/2025

BREAKING: Polizei stürmt friedliche Versammlung, weil sie ausgelacht wurde? 16:36 – Polizei: Alles ok. 16:39 – Rammbock, Schläge, keine Rückzugswege. Panik droht. Warum? Ein Polizist haut versehentlich einem Kollegen Kamera auf den Kopf – die Menge lacht. Danach: Tränengas & Gewalt! 👉 Strafaktion?

21446128