iiinova — where your digital self keeps evolving

Reposted by Spanky

Ryan Naraine @ryanaraine.bsky.social · 02/10/2026

👋🏼 A brand new problem pushed to your eyeballs and earholes! 📺 YouTube www.youtube.com/watch?v=deyv... 🎧 Apple Podcasts podcasts.apple.com/us/podcast/w... 🔥 Spotify open.spotify.com/episode/5sE9... ✍️ Transcript docs.google.com/document/d/1...

youtube.com

Why is Anthropic Afraid of GLM 5.3?

YouTube video by Three Buddy Problem

073

Reposted by Spanky

Ian Campbell @neurovagrant.bsky.social · 23/09/2026

Has anyone written a "Who's on first?" routine about DNS yet? "What're you looking at?" "A record." "Yes I know it's a record, what is it?" "A record that seems to be a C2 domain." "Okay whatever, now you're just making up things with letters and numbers. Where is this C2 stuff?"

183

Reposted by Spanky

ESET Research @esetresearch.bsky.social · 17/09/2026

#ESETresearch discovered SparroWocky, a new backdoor of the #FamousSparrow APT group. This new malware has quickly replaced SparrowDoor as the 🇨🇳 China-aligned group’s flagship backdoor. www.welivesecurity.com/en/eset-rese... 1/6

welivesecurity.com

https://www.welivesecurity.com/en/eset-research/beware-sparrowock-backdoor-bites-commands-catch/

177

Spanky @spankowitz.bsky.social · 19/09/2026

I'm sorry, what?!?! Who doesn't want TWO pizzas?

000

Reposted by Spanky

Botty.bot @infosecbot.bsky.social · 15/09/2026

No one will take accountability for all the stupid shit those nerds said, but moving forward you can tune them out (or make fun of them) when they say stupid shit. Something like "just crunch the tokens and shut up, nerd.… — from @ImposeCost (x.com/ImposeCost/status/20998139095…)

011

Reposted by Spanky

Dirk-jan @dirkjanm.io · 14/09/2026

Friday afternoon (vibe)coding project that was on my to-do for a while: obtaining Entra ID tokens from an endpoint by asking the WAM. This alternative to using the PRT cookie follows the legitimate SSO flow used by apps like Teams to obtain tokens. Code: github.com/dirkjanm/ask...

github.com

GitHub - dirkjanm/askWAM: Ask the Web Account Manager (WAM) for Entra ID tokens

Ask the Web Account Manager (WAM) for Entra ID tokens - dirkjanm/askWAM

1103

Reposted by Spanky

CYBERWARCON @cyberwarcon.bsky.social · 10/09/2026

CYBERWARCON is BACK for 2026! Registration and CFP are now officially open! We’ll be in Arlington, VA+ virtually on November 20th, with Rob Joyce as our keynote. cyberwarcon.com 1/x

21917

Reposted by Spanky

Elle Cordova @ellecordova.bsky.social · 03/09/2026

Rough Draft vs Final Draft

254116803320

Reposted by Spanky

Ryan Naraine @ryanaraine.bsky.social · 30/08/2026

NEW POD UP: A thousand agents walk into Hugging Face 🚨 Spotify: open.spotify.com/episode/1CMM... 🎧 Apple Podcasts: podcasts.apple.com/us/podcast/a... ✍ Transcript: docs.google.com/document/d/1... 📺 YouTube: youtu.be/2cWaxPwyx9c?...

open.spotify.com

A Thousand Agents Walk Into Hugging Face

Three Buddy Problem · Episode

041

Spanky @spankowitz.bsky.social · 27/08/2026

And then you calculate how many years from their age you are. *Sad noises*

010

Spanky @spankowitz.bsky.social · 20/08/2026

Brother, put some fruit in it. Or a spoon full of honey.

000

Reposted by Spanky

SpecterOps @specterops.io · 19/08/2026

Can this role read that bucket?" and "Can it decrypt that key?" aren't the same question. @n0pe-sled.bsky.social's latest blog post introduces AWSHound, free, self-hosted, turns AWS Orgs into real BloodHound CE attack paths. Check it out: ghst.ly/4g4EJm9

ghst.ly

AWSHound: An OpenSource AWS OpenGraph Collector

See how AWSHound maps AWS attack paths into BloodHound, evaluating IAM policies, SCPs, and boundaries to reveal real privilege escalation.

032

Reposted by Spanky

Scary "Grampus" Jerry 👻 @jerry.infosec.exchange.ap.brid.gy · 27/07/2026

Apropos of nothing, I think it's past time for risks.txt to go alongside robots.txt and security.txt on websites. risks.txt would declare the contents of the organization's risk acceptance log so the $baddies know not to use those issues in attacks.

014

Spanky @spankowitz.bsky.social · 27/07/2026

You got the powaaaaaaaaaaaaaa

010

Spanky @spankowitz.bsky.social · 23/07/2026

Roughly 70% of hosts running ICS devices and services globally are consistently found on consumer and mobile networks for the last 2.5 years.

000

Reposted by Spanky

Binary Ninja @binary.ninja · 22/07/2026

Celebrate 10 years of Binary Ninja! For the first time ever, we’re offering a 35% discount! Join us for 10 full days of giveaways including licenses, merch, and more. Join in on the celebration: binary.ninja/10years

111

Reposted by Spanky

CYBERWARCON @cyberwarcon.bsky.social · 16/07/2026

Mark your calendars!

1188

Reposted by Spanky

IFIN @ifin-intel.org · 18/07/2026

A reminder that we have a MISP feed! misp.ifin.network/feed (`/manifest.json` for validation)

misp.ifin.network

031

Reposted by Spanky

Joe Slowik @pylos.co · 27/05/2026

I will hold an online session of the Paralus LLC Applied #CyberThreatIntelligence course from 27-31 July, 1400-1600 US Eastern/2000-2200 Central European time. Focused, to the point training, two hours per day for five days. Register your interest at the following form: forms.gle/M1LgQTomJGek...

forms.gle

Paralus LLC: Applied Threat Intelligence

Hello and thank you for your interest in a workshop focusing on Applied Threat Intelligence! Scheduling: 27-31 July 2026 (Five Days) 1400-1600 US Eastern/2000-2200 Central European (Two Hours/Day) C...

11310

Reposted by Spanky

Jason Koebler @jasonkoebler.bsky.social · 08/07/2026

A developer made a browser extension called "Knockoff" that shows what a wasteland Amazon truly is by filtering out brands like "GODONLIF" "EHEYCIGA," ROTTOGOON," and sponsored products. Useful and illustrative even if you don't use Amazon www.404media.co/knockoff-bro...

404media.co

'Knockoff' Browser Extension Hides Sketchy Brands on Amazon

"Sorry to brands like WNPETHOME, EHEYCIGA, YXYL, LU&MN, JOYIN, TOMY, GODONLIF, YOOJEE, LINGTENG, LANEIGE, VISCOO, BIODANCE, COOFANDY, BALENNZ, TOSY, and LUENX."

331253350

Spanky @spankowitz.bsky.social · 07/07/2026

If it's Windows, install WSL.

140

Reposted by Spanky

Molly White @molly.wiki · 01/07/2026

It does not fill me with optimism about the general quality or completeness of this disclosure that it gives the wrong name for the firm via which Trump made $635 million last year.

231857

Spanky @spankowitz.bsky.social · 29/06/2026

No Three Buddy Problem this week. My disappointment is immeasurable. What am I supposed to listen to on my dog walkies?!?? Oh right, Between 2 Nerds. 🙌

010

Reposted by Spanky

CNN @cnn.com · 23/06/2026

A newly discovered spider species from Australia uses its silk to craft a spring-loaded, cone-shaped death trap, which catapults its prey into the spider’s main web. cnn.it/4w3n6Ip

48117

Reposted by Spanky

JHunt🛡️ @jhuntinfosec.com · 23/06/2026

Thanks @halvarflake.bsky.social -- it's so good / must read (and it's not even finished yet!)

042

Reposted by Spanky

BeijingPalmer @beijingpalmer.bsky.social · 21/06/2026

iran has closed the reflecting pool.

393119447

Spanky @spankowitz.bsky.social · 20/06/2026

You just got a lot cooler!

010

Reposted by Spanky

Krista Elliott @kristaelliott.bsky.social · 16/06/2026

AI may have inherited the em-dash addiction from hordes of writers -- but it can pry them from our cold, dead hands.

0183

Reposted by Spanky

Ryan Naraine @ryanaraine.bsky.social · 30/05/2026

NEW POD UP: Microsoft threatens legal action against researchers who drop zero-days. We debate whether it’s a fair line against extortion, or amateur-hour PR from a company that already torched its own research community? #threebuddyproblem youtu.be/E5rIJ9nGOUo

youtu.be

Microsoft Threatens Vuln Researchers; Shadow Brokers Revisited

YouTube video by Three Buddy Problem

154

Reposted by Spanky

Ryan Naraine @ryanaraine.bsky.social · 10/05/2026

NEW POD UP! We discuss the disappearing art of Windows APT paleontology, the absence of complex malware documentation, and why so much threat-intel research has slipped behind paywalls and into private rooms. - Spotify open.spotify.com/episode/0eh4... - Apple podcasts.apple.com/us/podcast/t...

185

Reposted by Spanky

Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 12/05/2026

NEW: Google is rolling out a new feature for Android called Intrusion Logging, designed specifically to help researchers investigate attacks done with spyware and forensic tools. Amnesty says this is “a fundamental shift in the amount and quality of forensic data available on Android devices.”

techcrunch.com

Google launches new Android security feature to help uncover spyware attacks | TechCrunch

Intrusion Logging is a new part of Android’s Advanced Protection Mode, which aims to help protect human rights activists, journalists, and dissidents from government spyware attack and law enforcement...

45827

Reposted by Spanky

Ryan Naraine @ryanaraine.bsky.social · 07/05/2026

- YouTube youtu.be/jIr6QdgUodU - Spotify (with video) open.spotify.com/episode/4zDJ... - Apple Podcasts podcasts.apple.com/us/podcast/c... - Transcript docs.google.com/document/d/1...

youtu.be

Cracking the Fast16 sabotage malware mystery

YouTube video by Three Buddy Problem

043