Notices by :brdRobe: (cr0w@infosec.exchange)

shut up and taste the rainbow

@mattly In that case, I would say your best bet is to look for a Netflow setting somewhere. I don't do much with home routers so there may not be one but it's worth a look.

@mattly Do you have root access on the router?

@soatok Not just Trump but yes.

RE: https://cyberplace.social/@GossiTheDog/116759868416707730

CSAM generation is now openly "critical for national security." So yeah, America is going about as expected.

@mattly Did you tell them that it wouldn't be as fun that way or what?

Like, have y'all tried just not being so vulnerable? Maybe try that and see if the breaches stop.

While it's fun making fun of AI failures, be sure to attribute the failures to the orgs and people responsible, especially when talking to people outside of this bubble. We can't let them keep getting away with blaming it all on AI growing pains and not the intentional business decisions that enabled the failures.

If you have any Palo Alto GlobalProtect portals, maybe take a look for successful authentications from AS215540, especially 92.118.112.230, 89.185.80.144, or 89.185.80.183.

#GAYINT

It's not arson, we're vibe hunting for dinner.

@GossiTheDog I already grabbed that but it's funny how quiet it's been since that listing was published. I'm still hammering it to try to get people to give a fuck about VS Code extensions but it isn't working.

That whole GitHub breach sure got quiet fast.

Reminder: Security companies exist to protect the wealthy. Community protects community.

@darfplatypus It's not. I'm a dummy and not blissful.

@tehfishman @darfplatypus Okay but also see

@christopherkunz @wdormann Here's a new one to take a look at. I haven't gone through it and can't vouch for its legitimacy, but y'all know what you're doing more than I do anyway: https://github.com/Vanquishermacdetach/CVE-2026-41089-509

RE: https://infosec.exchange/@cR0w/116682616422398554

I think what bugs me about this is:

• They don't care.
• It's clearly intentional.
• We all know nothing will change.

The amount of bluetooth shit being added to critical infrastructure systems in this the year of our cryptid 2026 is extremely concerning.

@nyanbinary Ask CatSalad. They figured it out.

EITW ../ in Trend Micro Apex One. :brdAlert:

https://success.trendmicro.com/en-US/solution/KA-0023430

CVE-2026-34926

TrendAI has released updates to Apex One (on-premise), Apex One as a Service and Vision One - Standard Endpoint Protection (SEP) to resolve multiple vulnerabilities.