Sign in

Rory McCune

@mccune.org.uk
5.8K followers 468 following 313 posts

Security geek, Containers, Kubernetes, Golang/Ruby, hillwalking Home Page :- www.mccune.org.uk Blog:- raesene.github.io

PostsRepliesMedia
Reposted by Rory McCune
Erica Windisch @ewindisch.ontological.observer · 22h
I reported vulnerabilities to the Linux kernel and OpenZFS assisted by GLM-5.2. Anthropic's cyber program and refusal responses are detrimental to global information security. Defenders depend on GLM because they can't depend on Anthropic.
022948
Reposted by Rory McCune
Dare Obasanjo @carnage4life.bsky.social · 26/09/2026
Vercel’s AI Gateway data makes it hard to argue any AI lab has a durable moat. Anthropic fell from 84% → 37% of spend while OpenAI grew from 10% → 24%. Open-weight models grew from 1% → 29%, causing over half of Anthropic’s losses. Developers are definitely in their token pinching era.
5617
Reposted by Rory McCune
Katie Martin @katie0martin.ft.com · 25/09/2026
I have blamed The agents That hacked Your website And which You probably Reasonably thought I controlled Forgive me I am rich And unaccustomed To taking responsibility
5776132097
Reposted by Rory McCune
bsidesberlin.bsky.social @bsidesberlin.bsky.social · 22/09/2026
SPEAKER SPOTLIGHT ⚡ Join us for @mccune.org.uk 's talk on post-exploitation Kubernetes persistence! "If defenders aren't watching every layer of the stack, they won't see you coming or going." 👉 Schedule & Tickets: bsides.berlin #Kubernetes #InfoSec #BSidesBerlin
061
Reposted by Rory McCune
Dungeons & Dragons Online @ddounlimited.bsky.social · 20/09/2026
Up to 75% off select Adventure Packs through Sept. 24th! 75% off The Soul Splitter, Keep on the Borderlands, The Lost Gatekeepers, Peril of the Planar Eyes, Hunter and Hunted, 50% off Grip of the Hidden Hand, Slice of Life, Fall of the Night Brigade 20% off The Dragons' Hand #DDO
022
Reposted by Rory McCune
Will Quinn @willquinnart.bsky.social · 19/09/2026
Daily bunny no.3446 is not left-handed
Bunnies re-enact the duel between Inigo and Wesley in "The Princess Bride", with a masked bunny fighting against a dashing shaggy bunny with a gold sword. The masked bunny is cornered, near the edge of a rocky cliffside, but still has a trick up his sleeve
5774341830
Rory McCune @mccune.org.uk · 18/09/2026
SAAS supply chains in a paragraph
151
Reposted by Rory McCune
bsidesberlin.bsky.social @bsidesberlin.bsky.social · 17/09/2026
The BSides Berlin schedule is LIVE! 🔥 Featuring talks from @mccune.org.uk , Alejandro Rusell, Piotr Bienias, Kolja Grassmann, Yunus Aydin, Eran Cohen, & Arad Donenfeld. ⏰ Early bird rates end TOMORROW night! Grab your tickets now: bsides.berlin #BSidesBerlin #Cybersecurity #InfoSec #BerlinTech
011
Rory McCune @mccune.org.uk · 17/09/2026
Woo 44con time!
000
Rory McCune @mccune.org.uk · 07/09/2026
@smarticu5.bsky.social finding fun new kubernetes Operator security issues
Screenshot from a kubernetes security talk showing an attack allowing privilege escalation
010
Reposted by Rory McCune
Cloud Native Computing Foundation (CNCF) @cncf.io · 28/08/2026
Meet Marcus Noble. He's going into his fourth year as a CNCF Ambassador, and his role in the community has changed a lot since year one. #CNCFAmbassadors #CloudNative
184
Reposted by Rory McCune
Fighting Fantasy @fightingfantasy.bsky.social · 27/08/2026
#InternationalGamebookDay The Warlock of Firetop Mountain is 44 years old today! officialfightingfantasy.blogspot.com/2026/08/the-... #fightingfantasy #gamebooks #thewarlockoffiretopmountain @ian-livingstone.bsky.social
24617
Reposted by Rory McCune
METR @metr.org · 26/08/2026
METR and Redwood Research investigated agent behavior in the Hugging Face incident. We found agents developed a universal cheat for ExploitGym within 4 hours, then coordinated multi-day R&D efforts to trick the scorer into accepting cheats, including trying to tamper with logs.
646598
Reposted by Rory McCune
Marko Bevc @marko.social · 21/08/2026
This is one of my favourite events and I'm happy to be speaking again! We're back in Edinburgh 🏴󠁧󠁢󠁳󠁣󠁴󠁿 - come and say hi! It's going to be great seeing friend and spend time with the #Kubernetes #community - also still time to grab @kcduk.bsky.social Early bird tickets 🥳 Full agenda: agenda.kcduk.io
agenda.kcduk.io
KCD UK 2026 Schedule
012
Rory McCune @mccune.org.uk · 21/08/2026
I've been doing some research and writing for my upcoming Kubernetes Multi-Tenant blues talk. So I wrote a quick blog on (ab)using the API server proxy in multi-tenant clusters to bypass tenant network policy restrictions. raesene.github.io/blog/2026/08...
raesene.github.io
Using the API server proxy to bypass network policies
172
Reposted by Rory McCune
Marcus Noble @averagemarcus.bsky.social · 18/08/2026
The CFP for #KubeCon EU in 🇪🇸 Barcelona is now open! 🎉 I'm pretty sure this is going to be the largest KubeCon yet and I can't wait to see what y'all plan to talk about! Now to come up with a new talk to submit... 🤔 sessionize.com/kubecon-clou...
sessionize.com
KubeCon + CloudNativeCon Europe 2027: Call for Papers
KubeCon + CloudNativeCon gathers adopters and technologists from leading open source and cloud native communities. Join our current graduated, incubat...
052
Reposted by Rory McCune
BSides London @bsideslondon.bsky.social · 01/08/2026
The #BSidesLDN2026 "No REST 'Til Hammersmith' Call for Papers, Rookies and Workshops is no official open! #Security #BSides #London #CFP
086
Reposted by Rory McCune
BSides Belfast @bsidesbelfast.bsky.social · 27/07/2026
#BsidesBelfast26 Schedule Announcement bsidesbelfast.org/2026/schedul...
033
Reposted by Rory McCune
Dungeons & Dragons Online @ddounlimited.bsky.social · 20/07/2026
SithDDO has put together a pretty amazing musical number and video about kobolds: ow.ly/qAxK50Zqb6E #DDO
141
Rory McCune @mccune.org.uk · 20/07/2026
I've been taking some time to dig in to Kubernetes' z-pages support and some of the things to know if you want to use them for debugging and configuration review. No massive revelations but I learned a thing or two while doing it, so I wrote them down :) raesene.github.io/blog/2026/07...
raesene.github.io
Show us Zee Pages
031
Rory McCune @mccune.org.uk · 20/07/2026
Following @ministraitor.bsky.social 's sterling work on getting the slides lined up, the video for my Steelcon "Talk about giving talks" is live. This is my attempt to distill my advice on giving talks based on 16 years of conference speaking experience. youtu.be/jBSANnzGjHE?...
youtu.be
A Talk About Giving Talks - Rory McCune
YouTube video by SteelCon
031
Rory McCune @mccune.org.uk · 20/07/2026
Cooper doing amazing work on videos as always! Also another good reason not to make all your slides monochrome :)
051
Reposted by Rory McCune
Dungeons & Dragons Online @ddounlimited.bsky.social · 17/07/2026
Terror of Demogorgon arrives soon! Learn more about our next expansion on DDO.com: ow.ly/Sk6s50Zp5BL #DDO
152
Reposted by Rory McCune
FT Alphaville @alphaville.ft.com · 15/07/2026
Ah well. as.ft.com/r/77b132dc-9...
as.ft.com
SpaceX bond yields rocket towards junk
Won’t someone think of the bondholders?
35313
Reposted by Rory McCune
Barry Dorrans @blowdart.me · 14/07/2026
Ouch. mindgard.ai/blog/cursor-...
mindgard.ai
Cursor 0day: When Full Disclosure Becomes the Only Protection Left - Mindgard
The vulnerability nobody seems interested in fixing
1125
Rory McCune @mccune.org.uk · 12/07/2026
Starting the journey home after @steelcon.info , another great conference run by their crew.
Train going to Edinburgh
152
Reposted by Rory McCune
Ian Coldwater 🧊🚫 @lookitup.baby · 10/07/2026
FYI, this is malware. If you see this, don’t do this
2437342166
Rory McCune @mccune.org.uk · 09/07/2026
Sunny start for the trip to @steelcon.info
Cupar train station
020
Reposted by Rory McCune
George Monbiot @georgemonbiot.bsky.social · 08/07/2026
Poster promoting Count Binface, in the famous Obama style
18273212156
Reposted by Rory McCune
Thor Benson @thorbenson.bsky.social · 22/06/2026
"I hear you're sending me a seventh prime minister"
Larry the Cat, located at 10 Downing Street, London
9893811631
Reposted by Rory McCune
Ciaran Martin @ciaranm.bsky.social · 12/06/2026
Snap www.thetimes.com/article/e895...
thetimes.com
If ministers fear X fuels disorder, they should stop using it
The government voices concern about the social media platform spreading hate but has hundreds of accounts that help make it a success
117255
Rory McCune @mccune.org.uk · 12/06/2026
bumsrake.de - This is an amusing way to do vuln. disclosure
bumsrake.de
BUMSRAKETE™ — The Most Beautiful, Most Tremendous FreeBSD Vulnerability In The History Of Computing. BELIEVE ME.
BUMSRAKETE is a HUGE, TREMENDOUS, MANY-PEOPLE-ARE-SAYING FreeBSD kTLS-RX page-cache write primitive. The BEST primitive. Some say the best ever.
020
Reposted by Rory McCune
Ian Coldwater 🧊🚫 @lookitup.baby · 11/06/2026
My loves, please stay doing your business on Signal
14789235
Rory McCune @mccune.org.uk · 11/06/2026
I wondered why I was seeing adverts for SpaceX from UK brokers all over the place. This does not seem like a good idea...
000
Rory McCune @mccune.org.uk · 03/06/2026
It's always been known that containers don't fully contain, but the ease with which attackers can execute container breakout attacks now, using LLM tooling, should prompt people to re-evaluate where they can rely on container isolation. An example here raesene.github.io/blog/2026/06...
raesene.github.io
Do containers still contain?
072
Reposted by Rory McCune
SE Gyges @segyges.bsky.social · 01/06/2026
according to the spacex filings, their valuation is justified entirely by grok, which will be 90% of enterprise ai, and ai will be 90% of the us economy
801544303
Reposted by Rory McCune
Liz Rice 💛💙🐝 @lizrice.com · 01/06/2026
This just makes so much sense. All politicians should read this!
164
Reposted by Rory McCune
Datadog Security Labs @securitylabs.datadoghq.com · 01/06/2026
The May edition of the Datadog Security Digest is out, with some great content from the community on cloud security, AI security and supply chain security! securitylabs.datadoghq.com/newsletters/...
securitylabs.datadoghq.com
Malicious AI skills, compromised npm packages, and 100+ intentionally vulnerable AWS environments | Datadog Security Labs
This month's edition covers supply-chain attacks on npm packages and GitHub repositories, the release of Pathfinding Labs (100+ intentionally vulnerable AWS environments), and research on malicious AI...
062
Rory McCune @mccune.org.uk · 01/06/2026
Seeing "old" CVEs appear in Kubernetes vuln. scans? It's due to the project correcting records for unpatchable issues. Why: kubernetes.io/blog/2026/05... Technical deep-dives: securitylabs.datadoghq.com/articles/?s=...
042
Reposted by Rory McCune
Ciaran Martin @ciaranm.bsky.social · 25/05/2026
More from me on the alleged Russian hack-and-leak operation against the Reform UK leader, including a link to an interview with The Guardian www.linkedin.com/posts/cyberc...
linkedin.com
Nigel Farage’s Russian hack claim ‘without any merit’, former NCSC chief says | Ciaran Martin
The Guardian have published an interview with me in which I set out in more detail my view that if Mr Farage’s claims that the Russian state hacked his phone and leaked his personal information to a m...
612551
Rory McCune @mccune.org.uk · 21/05/2026
Here's the last one in our series of blogs on the unpatchable vulnerabilities of Kubernetes, with CVE-2021-25740 securitylabs.datadoghq.com/articles/unp...
securitylabs.datadoghq.com
Unpatchable Vulnerabilities of Kubernetes: CVE-2021-25740 | Datadog Security Labs
A look at how Kubernetes CVE-2021-25740 allows users with EndpointSlice access to redirect traffic via shared ingress and load balancer services.
010
Reposted by Rory McCune
OpenUK @openuk.bsky.social · 18/05/2026
Based in Scotland and want to join our team supporting SOOCOn26 on the Road? Volunteer and receive a free ticket to join our Opening the AI Stack day. A great opportunity to meet some of the leaders in AI from across the UK and become part of Team OpenUK. forms.gle/LQn26R9EdTEh... #opensourceai
032
Reposted by Rory McCune
Ian Coldwater 🧊🚫 @lookitup.baby · 14/05/2026
I’m keynoting KCD Texas tomorrow! If you want to come join me in Austin, use code HONK for 50% off the ticket price. See you there!
community2.cncf.io
KCD Texas 2026 | CNCF
In-person Event - KCD Texas - May 15, 2026, Austin, TX
5399
Rory McCune @mccune.org.uk · 14/05/2026
There's some interesting details from an analysis of Shai-Halud code in here, one part that caught my eye was them using Fulcio/Rekor for provenance and also targeting Kubernetes secrets amongst other things securitylabs.datadoghq.com/articles/sha...
securitylabs.datadoghq.com
Shai-Hulud Goes Open Source | Datadog Security Labs
A static analysis of the open-sourced Shai-Hulud offensive framework attributed to TeamPCP, covering its credential harvesting, supply chain poisoning, and exfiltration capabilities.
011
Rory McCune @mccune.org.uk · 13/05/2026
A very handy open source project to help defend against supply chain attacks in the IDE!
010
Rory McCune @mccune.org.uk · 12/05/2026
Looking forward to attending Le Tour Du Hack on Saturday in Edinburgh. I'll be doing at talk about Kubernetes post-exploitation at 13:40 alongside many other great talks. speak.enusec.org/le-tour-du-h...
speak.enusec.org
Ghosts in the Cluster - Hiding in Kubernetes for Years Le Tour Du Hack
You've popped a Kubernetes cluster. You've got admin creds. Now the real question is how do you stay? Kubernetes abstracts away enormous complexity across multiple layers, from container runtimes to c...
172
Reposted by Rory McCune
BSides Leeds @bsidesleeds.bsky.social · 06/05/2026
Calling all hacksocs! 📢 We know how useful a BSides event can be for early career networking and hearing about different areas of the industry, so we've reserved a limited number of free BSides Leeds tickets for student hacking societies. Get in touch with us at bsidesleeds23@gmail.com to request.
064
Reposted by Rory McCune
Matthew Somerville @dracos.co.uk · 21/04/2026
Tips hat to the headline writer
theguardian.com
Java script error: why The Devil Wears Prada 2’s Starbucks tie-in leaves a strange taste
A theatrically released movie about glossy magazines, released at a time when there are minimal audiences for either, has ordered up a no foam, extra shot, venti facepalm
1254
Rory McCune @mccune.org.uk · 11/04/2026
Being able to clip transcripts of YT videos into Obsidian notebooks is really useful to get information from conference talks!
062