Conversation

Notices

1. Embed this notice
   Tim (Wadhwa-)Brown :donor: (timb_machine@infosec.exchange)'s status on Friday, 27-Sep-2024 03:59:00 JST Tim (Wadhwa-)Brown :donor:

   PSA: Wild speculation is the best speculation.

   #rumops

   • Embed this notice
     Graham Sutherland / Polynomial (gsuberland@chaos.social)'s status on Friday, 27-Sep-2024 03:58:58 JST Graham Sutherland / Polynomial

     in reply to

     @timb_machine please let there be two bugs in it so we can call it 2vulns1CUPS

   • Embed this notice
     Tim (Wadhwa-)Brown :donor: (timb_machine@infosec.exchange)'s status on Friday, 27-Sep-2024 03:58:59 JST Tim (Wadhwa-)Brown :donor:

     in reply to

     If you wanted to speculate on the upcoming CVE in Linux distros, correlating Popcon with those that have listening parts and CVE data might be one way to make a prediction:

     https://popcon.debian.org/

   • Embed this notice
     Tim (Wadhwa-)Brown :donor: (timb_machine@infosec.exchange)'s status on Friday, 27-Sep-2024 03:58:59 JST Tim (Wadhwa-)Brown :donor:

     in reply to

     Add in, runs as root and likely listens on the network.

   • Embed this notice
     Tim (Wadhwa-)Brown :donor: (timb_machine@infosec.exchange)'s status on Friday, 27-Sep-2024 03:58:59 JST Tim (Wadhwa-)Brown :donor:

     in reply to

     • watchTowr

     Rumours look to have been accurate, it looks like it's CUPS:

     https://www.linkedin.com/posts/benjamin-harris-sg_15-minutes-ago-our-monitoring-systems-went-activity-7245132773902983168-xZ0u?utm_source=share&utm_medium=member_android

     (Courtesy of an old friend at @watchtowrcyber)

     Ryan Castellucci :nonbinary_flag: repeated this.