{"generator":"GNU social 2.0.2-dev","title":"Conversation","totalItems":20,"items":[{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>The FBI and US secret service have discovered <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/117398795766495408","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/117398795766495408","objectType":"note","content":"<p>The FBI and US secret service have discovered <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/117398795766495408","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777910994544764","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777910994544764"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"13249208","source":"ActivityPub"}},"published":"2026-10-07T08:58:55+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/117398795766495408"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>SOC Radar have a good write up for <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> too <br \/><a href=\"https:\/\/socradar.io\/blog\/fortibleed-fortinet-firewalls-compromised\/\" rel=\"nofollow\">https:\/\/socradar.io\/blog\/fortibleed-fortinet-firewalls-compromised\/<\/a><\/p><p>And a free checker - includes downstream credential checker (e.g. cracked AD passwords etc) <a href=\"https:\/\/socradar.io\/free-tools\/fortibleed\" rel=\"nofollow\">https:\/\/socradar.io\/free-tools\/fortibleed<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116799202063656281","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116799202063656281","objectType":"note","content":"<p>SOC Radar have a good write up for <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> too <br \/><a href=\"https:\/\/socradar.io\/blog\/fortibleed-fortinet-firewalls-compromised\/\" rel=\"nofollow\">https:\/\/socradar.io\/blog\/fortibleed-fortinet-firewalls-compromised\/<\/a><\/p><p>And a free checker - includes downstream credential checker (e.g. cracked AD passwords etc) <a href=\"https:\/\/socradar.io\/free-tools\/fortibleed\" rel=\"nofollow\">https:\/\/socradar.io\/free-tools\/fortibleed<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116799202063656281","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116795358313474010","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116795358313474010"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12790339","source":"ActivityPub"}},"published":"2026-06-23T11:33:20+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116799202063656281"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>There's some more analysis of the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> attack infrastructure here: <br \/><a href=\"https:\/\/zenox.ai\/en\/fortibleed-anatomy-of-the-fortibleed-campaign-based-on-the-server-that-the-attackers-themselves-left-exposed\/\" rel=\"nofollow\">https:\/\/zenox.ai\/en\/fortibleed-anatomy-of-the-fortibleed-campaign-based-on-the-server-that-the-attackers-themselves-left-exposed\/<\/a><\/p><p>It's not mentioned but they cracked around 170k AD account passwords.  Also all the comments on the custom source is written in Russian.<\/p><p>Also, there is a GenAI angle I missed - they used an open source pentesting AI agent framework to try to automate attacks.  It doesn't look like that bit worked very well.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116795358313474010","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116795358313474010","objectType":"note","content":"<p>There's some more analysis of the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> attack infrastructure here: <br \/><a href=\"https:\/\/zenox.ai\/en\/fortibleed-anatomy-of-the-fortibleed-campaign-based-on-the-server-that-the-attackers-themselves-left-exposed\/\" rel=\"nofollow\">https:\/\/zenox.ai\/en\/fortibleed-anatomy-of-the-fortibleed-campaign-based-on-the-server-that-the-attackers-themselves-left-exposed\/<\/a><\/p><p>It's not mentioned but they cracked around 170k AD account passwords.  Also all the comments on the custom source is written in Russian.<\/p><p>Also, there is a GenAI angle I missed - they used an open source pentesting AI agent framework to try to automate attacks.  It doesn't look like that bit worked very well.<\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116795358313474010","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116781653223106826","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116781653223106826"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12787720","source":"ActivityPub"}},"published":"2026-06-22T19:26:36+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116795358313474010"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/systemadminihater","displayName":"System Adminihater","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-stream.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-mini.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"181797"}},"image":{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","summary":"Technology fella","url":"https:\/\/cyberplace.social\/@systemadminihater","portablecontacts_net":{"preferredUsername":"systemadminihater","displayName":"System Adminihater","note":"Technology fella"}},"content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> someone needs to stop these people and F5<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/systemadminihater\/statuses\/116781919938602874","object":{"id":"https:\/\/cyberplace.social\/users\/systemadminihater\/statuses\/116781919938602874","objectType":"note","content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> someone needs to stop these people and F5<\/p>","url":"https:\/\/cyberplace.social\/@systemadminihater\/116781919938602874","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116781653223106826","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116781653223106826"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/cyberplace.social\/users\/GossiTheDog"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12778341","source":"ActivityPub"}},"published":"2026-06-20T10:18:11+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@systemadminihater\/116781919938602874"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/kjpax","displayName":"kjpax","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-stream.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-mini.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"332993"}},"image":{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","url":"https:\/\/cyberplace.social\/@kjpax","portablecontacts_net":{"preferredUsername":"kjpax","displayName":"kjpax"}},"content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> Maybe they are meaning using the AI infrastructure to crack passwords at scale. Is that the speed of AI \ud83d\ude02<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/kjpax\/statuses\/116781708436565034","object":{"id":"https:\/\/cyberplace.social\/users\/kjpax\/statuses\/116781708436565034","objectType":"note","content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> Maybe they are meaning using the AI infrastructure to crack passwords at scale. Is that the speed of AI \ud83d\ude02<\/p>","url":"https:\/\/cyberplace.social\/@kjpax\/116781708436565034","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116781653223106826","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116781653223106826"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/cyberplace.social\/users\/GossiTheDog"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12778249","source":"ActivityPub"}},"published":"2026-06-20T09:24:29+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@kjpax\/116781708436565034"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>Fortinet have put out a blog about FortiBleed finally  - where they don\u2019t mention configuration exports (which is definitely happening at scale, I have receipts) or password hash cracking (we have the bash history of the user doing it).. but instead link Fortibleed to a prior marketing blog called \u201cAttacks at the speed of AI\u201d \ud83e\udd26\u2640\ufe0f<\/p><p><a href=\"https:\/\/www.fortinet.com\/blog\/psirt-blogs\/analysis-of-reported-credential-compromise-of-fortigate-devices?lctg=197390370\" rel=\"nofollow\">https:\/\/www.fortinet.com\/blog\/psirt-blogs\/analysis-of-reported-credential-compromise-of-fortigate-devices?lctg=197390370<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116781653223106826","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116781653223106826","objectType":"note","content":"<p>Fortinet have put out a blog about FortiBleed finally  - where they don\u2019t mention configuration exports (which is definitely happening at scale, I have receipts) or password hash cracking (we have the bash history of the user doing it).. but instead link Fortibleed to a prior marketing blog called \u201cAttacks at the speed of AI\u201d \ud83e\udd26\u2640\ufe0f<\/p><p><a href=\"https:\/\/www.fortinet.com\/blog\/psirt-blogs\/analysis-of-reported-credential-compromise-of-fortigate-devices?lctg=197390370\" rel=\"nofollow\">https:\/\/www.fortinet.com\/blog\/psirt-blogs\/analysis-of-reported-credential-compromise-of-fortigate-devices?lctg=197390370<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116781653223106826","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12778228","source":"ActivityPub"}},"published":"2026-06-20T09:10:40+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116781653223106826"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>CloudSEK look at the open directory that had all the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> tooling and data in it.  It's a good report, although I disagree with their conclusion - it's still an absolutely truck load of creds, even if that particular opendir only had internal network details for a few thousand orgs. <a href=\"https:\/\/www.cloudsek.com\/blog\/inside-the-fortibleed-open-directory-a-technical-analysis-of-what-the-attacker-left-behind\" rel=\"nofollow\">https:\/\/www.cloudsek.com\/blog\/inside-the-fortibleed-open-directory-a-technical-analysis-of-what-the-attacker-left-behind<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777910994544764","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777910994544764","objectType":"note","content":"<p>CloudSEK look at the open directory that had all the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> tooling and data in it.  It's a good report, although I disagree with their conclusion - it's still an absolutely truck load of creds, even if that particular opendir only had internal network details for a few thousand orgs. <a href=\"https:\/\/www.cloudsek.com\/blog\/inside-the-fortibleed-open-directory-a-technical-analysis-of-what-the-attacker-left-behind\" rel=\"nofollow\">https:\/\/www.cloudsek.com\/blog\/inside-the-fortibleed-open-directory-a-technical-analysis-of-what-the-attacker-left-behind<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777910994544764","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777632203159921","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777632203159921"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12775449","source":"ActivityPub"}},"published":"2026-06-19T17:19:00+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777910994544764"},{"actor":{"id":"https:\/\/mastodon.social\/users\/V4N4D1S","displayName":"V4N4D1S","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/163013-original-tmp20230824114731.webp","rel":"avatar","type":"image\/webp","width":285,"height":285},{"url":"https:\/\/gnusocial.jp\/avatar\/163013-96-20230824114731.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/163013-48-20230824114731.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/163013-24-20230824114731.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"163013"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/163013-96-20230824114731.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","url":"https:\/\/mastodon.social\/@V4N4D1S","portablecontacts_net":{"preferredUsername":"V4N4D1S","displayName":"V4N4D1S"}},"content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> Did some IR on a box in the leak.<br \/>Multiple IPs from 193.8.186.0\/24. 213.21.239.65 found as well. No sign of 80.75.212.113.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.social\/users\/V4N4D1S\/statuses\/116777853493987825","object":{"id":"https:\/\/mastodon.social\/users\/V4N4D1S\/statuses\/116777853493987825","objectType":"note","content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> Did some IR on a box in the leak.<br \/>Multiple IPs from 193.8.186.0\/24. 213.21.239.65 found as well. No sign of 80.75.212.113.<\/p>","url":"https:\/\/mastodon.social\/@V4N4D1S\/116777853493987825","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777610431161951","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777610431161951"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/cyberplace.social\/users\/GossiTheDog"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12775423","source":"ActivityPub"}},"published":"2026-06-19T17:08:59+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.social\/@V4N4D1S\/116777853493987825"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>Canadian Centre for Cyber Security on <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> <\/p><p><a href=\"https:\/\/www.cyber.gc.ca\/en\/alerts-advisories\/al26-014-fortibleed-leak-thousands-compromised-credentials-impacting-fortinet-devices\" rel=\"nofollow\">https:\/\/www.cyber.gc.ca\/en\/alerts-advisories\/al26-014-fortibleed-leak-thousands-compromised-credentials-impacting-fortinet-devices<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777632203159921","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777632203159921","objectType":"note","content":"<p>Canadian Centre for Cyber Security on <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> <\/p><p><a href=\"https:\/\/www.cyber.gc.ca\/en\/alerts-advisories\/al26-014-fortibleed-leak-thousands-compromised-credentials-impacting-fortinet-devices\" rel=\"nofollow\">https:\/\/www.cyber.gc.ca\/en\/alerts-advisories\/al26-014-fortibleed-leak-thousands-compromised-credentials-impacting-fortinet-devices<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777632203159921","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777610431161951","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777610431161951"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12775169","source":"ActivityPub"}},"published":"2026-06-19T16:07:51+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777632203159921"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>Some kind <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> victims got me to look at their situations.  Some IOCs performing remote config dumps:<\/p><p>193.8.186.7<br \/>80.75.212.113<br \/>213.21.239.65<\/p><p>Look for inbound TCP traffic to Fortigate devices.  If seen log into the devices and look for config dump events from those IPs.<\/p><p>Config dumps (including crackable password hashes) have been going on for around a month.<\/p><p>If you have IPsec site to site VPN tunnels on the impacted Fortinets you need to rebuild the tunnels with new keys both ends.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777610431161951","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116777610431161951","objectType":"note","content":"<p>Some kind <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> victims got me to look at their situations.  Some IOCs performing remote config dumps:<\/p><p>193.8.186.7<br \/>80.75.212.113<br \/>213.21.239.65<\/p><p>Look for inbound TCP traffic to Fortigate devices.  If seen log into the devices and look for config dump events from those IPs.<\/p><p>Config dumps (including crackable password hashes) have been going on for around a month.<\/p><p>If you have IPsec site to site VPN tunnels on the impacted Fortinets you need to rebuild the tunnels with new keys both ends.<\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777610431161951","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116773015468229886","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116773015468229886"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12775168","source":"ActivityPub"}},"published":"2026-06-19T16:06:07+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116777610431161951"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>To be transparent about this, a threat actor has been claiming they have an exploit to get FortiOS device password hashes remotely from config for the past month. It\u2019s currently unclear how. They claim it\u2019s an exploit of an unpatched vuln. Their claims predate the discovery of this dump. <\/p><p>If I end up having to set up another FortiGate firewall honeypot to figure out what\u2019s going on.. I\u2019ll British tut and get on with it.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116773015468229886","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116773015468229886","objectType":"note","content":"<p>To be transparent about this, a threat actor has been claiming they have an exploit to get FortiOS device password hashes remotely from config for the past month. It\u2019s currently unclear how. They claim it\u2019s an exploit of an unpatched vuln. Their claims predate the discovery of this dump. <\/p><p>If I end up having to set up another FortiGate firewall honeypot to figure out what\u2019s going on.. I\u2019ll British tut and get on with it.<\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116773015468229886","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116772964834643352","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116772964834643352"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12771873","source":"ActivityPub"}},"published":"2026-06-18T20:33:43+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116773015468229886"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>NCSC UK advice on Fortibleed: <a href=\"https:\/\/www.ncsc.gov.uk\/news\/advice-following-global-targeting-of-fortinet-firewalls-and-vpn-gateways\" rel=\"nofollow\">https:\/\/www.ncsc.gov.uk\/news\/advice-following-global-targeting-of-fortinet-firewalls-and-vpn-gateways<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116772964834643352","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116772964834643352","objectType":"note","content":"<p>NCSC UK advice on Fortibleed: <a href=\"https:\/\/www.ncsc.gov.uk\/news\/advice-following-global-targeting-of-fortinet-firewalls-and-vpn-gateways\" rel=\"nofollow\">https:\/\/www.ncsc.gov.uk\/news\/advice-following-global-targeting-of-fortinet-firewalls-and-vpn-gateways<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116772964834643352","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116772923461589001","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116772923461589001"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12771847","source":"ActivityPub"}},"published":"2026-06-18T20:21:32+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116772964834643352"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>Fortinet appear to be telling press the <a href=\"https:\/\/cyberplace.social\/tags\/Fortibleed\" class=\"mention hashtag\" rel=\"tag\">#Fortibleed<\/a> breach is made up of prior breaches and brute forcing.. but I\u2019ve seen the breach data and it includes many passwords not in prior dumps, and I\u2019ve worked with impacted orgs and they report no brute forcing of impacted accounts. <\/p><p>I think there may be some confusion about this one - the brute forcing is the cracking of the passwords by the threat actor, which is done locally. <\/p><p>Watch this space on this one anyhoo.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116772923461589001","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116772923461589001","objectType":"note","content":"<p>Fortinet appear to be telling press the <a href=\"https:\/\/cyberplace.social\/tags\/Fortibleed\" class=\"mention hashtag\" rel=\"tag\">#Fortibleed<\/a> breach is made up of prior breaches and brute forcing.. but I\u2019ve seen the breach data and it includes many passwords not in prior dumps, and I\u2019ve worked with impacted orgs and they report no brute forcing of impacted accounts. <\/p><p>I think there may be some confusion about this one - the brute forcing is the cracking of the passwords by the threat actor, which is done locally. <\/p><p>Watch this space on this one anyhoo.<\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116772923461589001","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116770691005299635","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116770691005299635"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12771812","source":"ActivityPub"}},"published":"2026-06-18T20:10:20+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116772923461589001"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p><a href=\"https:\/\/cyberplace.social\/tags\/GAYINT\" class=\"mention hashtag\" rel=\"tag\">#GAYINT<\/a> list of impacted <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> IPs.  Not all as I couldn't write the parser properly. <a href=\"http:\/\/owned.lab6.com\/~gossi\/research\/public\/fortibleed\/some-fortibleed-ips.txt\" rel=\"nofollow\">http:\/\/owned.lab6.com\/~gossi\/research\/public\/fortibleed\/some-fortibleed-ips.txt<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116770691005299635","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116770691005299635","objectType":"note","content":"<p><a href=\"https:\/\/cyberplace.social\/tags\/GAYINT\" class=\"mention hashtag\" rel=\"tag\">#GAYINT<\/a> list of impacted <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> IPs.  Not all as I couldn't write the parser properly. <a href=\"http:\/\/owned.lab6.com\/~gossi\/research\/public\/fortibleed\/some-fortibleed-ips.txt\" rel=\"nofollow\">http:\/\/owned.lab6.com\/~gossi\/research\/public\/fortibleed\/some-fortibleed-ips.txt<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116770691005299635","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116770631095561641","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116770631095561641"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"},{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"gayint"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12770019","source":"ActivityPub"}},"published":"2026-06-18T10:44:40+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116770691005299635"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p><a href=\"https:\/\/cyberplace.social\/tags\/GAYINT\" class=\"mention hashtag\" rel=\"tag\">#GAYINT<\/a> list of impacted <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> domains (this is basically email addresses of admin accounts on the device btw) <a href=\"https:\/\/blog.gayint.org\/intel\/fortibleed.txt\" rel=\"nofollow\">https:\/\/blog.gayint.org\/intel\/fortibleed.txt<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116770631095561641","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116770631095561641","objectType":"note","content":"<p><a href=\"https:\/\/cyberplace.social\/tags\/GAYINT\" class=\"mention hashtag\" rel=\"tag\">#GAYINT<\/a> list of impacted <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> domains (this is basically email addresses of admin accounts on the device btw) <a href=\"https:\/\/blog.gayint.org\/intel\/fortibleed.txt\" rel=\"nofollow\">https:\/\/blog.gayint.org\/intel\/fortibleed.txt<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116770631095561641","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116766211577690326","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116766211577690326"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12770016","source":"ActivityPub"}},"published":"2026-06-18T10:42:37+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116770631095561641"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>Lol, the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> data was found in an opendir on a webserver \ud83e\udd23 truly GenAI is going to take over \ud83d\ude1c<\/p><p>\"They accidentally left an open directory with artefacts, connection strings, tooling, scripts and data online. Analytics obtained via their cron jobs, bash histories, logs etc,\"<\/p><p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices\/\" rel=\"nofollow\">https:\/\/www.bleepingcomputer.com\/news\/security\/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices\/<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116766211577690326","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116766211577690326","objectType":"note","content":"<p>Lol, the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> data was found in an opendir on a webserver \ud83e\udd23 truly GenAI is going to take over \ud83d\ude1c<\/p><p>\"They accidentally left an open directory with artefacts, connection strings, tooling, scripts and data online. Analytics obtained via their cron jobs, bash histories, logs etc,\"<\/p><p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices\/\" rel=\"nofollow\">https:\/\/www.bleepingcomputer.com\/news\/security\/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices\/<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116766211577690326","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765891433242971","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765891433242971"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12766403","source":"ActivityPub"}},"published":"2026-06-17T15:43:26+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116766211577690326"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>Wrote a blog about the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> situation <a href=\"https:\/\/doublepulsar.com\/fortibleed-75k-fortinet-firewalls-have-admin-passwords-cracked-60299faa65f8?postPublishedType=initial\" rel=\"nofollow\">https:\/\/doublepulsar.com\/fortibleed-75k-fortinet-firewalls-have-admin-passwords-cracked-60299faa65f8?postPublishedType=initial<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765891433242971","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765891433242971","objectType":"note","content":"<p>Wrote a blog about the <a href=\"https:\/\/cyberplace.social\/tags\/FortiBleed\" class=\"mention hashtag\" rel=\"tag\">#FortiBleed<\/a> situation <a href=\"https:\/\/doublepulsar.com\/fortibleed-75k-fortinet-firewalls-have-admin-passwords-cracked-60299faa65f8?postPublishedType=initial\" rel=\"nofollow\">https:\/\/doublepulsar.com\/fortibleed-75k-fortinet-firewalls-have-admin-passwords-cracked-60299faa65f8?postPublishedType=initial<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765891433242971","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765740917268730","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765740917268730"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"fortibleed"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12766166","source":"ActivityPub"}},"published":"2026-06-17T14:21:58+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765891433242971"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>So there are definitely devices which weren't in the Belsen Group post back last year, in fact almost all of them weren't.<\/p><p>On how they got the passwords - until about a year ago, FortiOS (Fortinet firewall OS) stored admin passwords SHA-256 salted, which can be bruteforced.<\/p><p>In an update about a year ago, if installed and admins log in, passwords are stored much more securely - but most orgs won't be that condition yet.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765740917268730","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765740917268730","objectType":"note","content":"<p>So there are definitely devices which weren't in the Belsen Group post back last year, in fact almost all of them weren't.<\/p><p>On how they got the passwords - until about a year ago, FortiOS (Fortinet firewall OS) stored admin passwords SHA-256 salted, which can be bruteforced.<\/p><p>In an update about a year ago, if installed and admins log in, passwords are stored much more securely - but most orgs won't be that condition yet.<\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765740917268730","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765238908922122","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765238908922122"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12766041","source":"ActivityPub"}},"published":"2026-06-17T13:44:06+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765740917268730"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog","displayName":"Kevin Beaumont","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/38360-original-tmp20251103132446.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-48-20251103133701.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/38360-24-20251103154349.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"38360"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/38360-96-20251103140751.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them.","url":"https:\/\/cyberplace.social\/@GossiTheDog","portablecontacts_net":{"preferredUsername":"GossiTheDog","displayName":"Kevin Beaumont","note":"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights.  You may be surprised to know I am not representing my employer here and these are not their opinions.I have Direct Messages disabled - you can send them, but I will never receive them."}},"content":"<p>It\u2019s similar to the Belsen Group thing, although that was a smaller collection of devices - prior thread <\/p><p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\/113834848200229959\" rel=\"nofollow\">https:\/\/cyberplace.social\/@GossiTheDog\/113834848200229959<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765238908922122","object":{"id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765238908922122","objectType":"note","content":"<p>It\u2019s similar to the Belsen Group thing, although that was a smaller collection of devices - prior thread <\/p><p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\/113834848200229959\" rel=\"nofollow\">https:\/\/cyberplace.social\/@GossiTheDog\/113834848200229959<\/a><\/p>","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765238908922122","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765187570973546","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765187570973546"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12765573","source":"ActivityPub"}},"published":"2026-06-17T11:36:30+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765238908922122"},{"actor":{"id":"https:\/\/cyberplace.social\/users\/greem","displayName":"Greem (Graeme. Not Graham!)","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/298037-original-tmp20251215182054.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/298037-96-20251217061041.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/298037-48-20251217061041.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/298037-24-20251217061041.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"298037"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/298037-96-20251217061041.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Born in the UK at 327ppm.Son, husband, dad, friend, IT person (no I cannot fix your printer)Used to rock climb (and fall), scuba dive, walk and climb mountains. Now I run around after racing cars*Terminally ill with S4 prostate cancer. The end is not nigh.Grumpy Brit, sweary, cynical, lefty\/Green, bereaved child, pharmaceutically #ACE, #BuckFrexit Very likely to make jokes about poo.* Motorsport marshal | #BMMC Member | #MotorsportUK Grade 3 (Post Chief)#nobridge #NoTagsPub #NoBots","url":"https:\/\/cyberplace.social\/@greem","portablecontacts_net":{"preferredUsername":"greem","displayName":"Greem (Graeme. Not Graham!)","note":"Born in the UK at 327ppm.Son, husband, dad, friend, IT person (no I cannot fix your printer)Used to rock climb (and fall), scuba dive, walk and climb mountains. Now I run around after racing cars*Terminally ill with S4 prostate cancer. The end is not nigh.Grumpy Brit, sweary, cynical, lefty\/Green, bereaved child, pharmaceutically #ACE, #BuckFrexit Very likely to make jokes about poo.* Motorsport marshal | #BMMC Member | #MotorsportUK Grade 3 (Post Chief)#nobridge #NoTagsPub #NoBots"}},"content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> Squarely in \"YIKES\" territory, this one.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-18:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/cyberplace.social\/users\/greem\/statuses\/116765193072006684","object":{"id":"https:\/\/cyberplace.social\/users\/greem\/statuses\/116765193072006684","objectType":"note","content":"<p><a href=\"https:\/\/cyberplace.social\/@GossiTheDog\" class=\"u-url mention\">@GossiTheDog<\/a> Squarely in \"YIKES\" territory, this one.<\/p>","url":"https:\/\/cyberplace.social\/@greem\/116765193072006684","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/cyberplace.social\/users\/GossiTheDog\/statuses\/116765187570973546","url":"https:\/\/cyberplace.social\/@GossiTheDog\/116765187570973546"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/cyberplace.social\/users\/GossiTheDog"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-17:objectType=thread:nonce=4d976b2df14fcd35","notice_info":{"local_id":"12765525","source":"ActivityPub"}},"published":"2026-06-17T11:24:21+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/cyberplace.social\/@greem\/116765193072006684"}],"links":[{"url":"https:\/\/gnusocial.jp\/conversation\/6484798","rel":"alternate","type":"text\/html"}]}