Hacker Plants Computer 'Wiping' Commands in Amazon's AI Coding Agent

https://www.404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent/

> The hacker said they submitted a pull request to that GitHub repository at the end of June from “a random account with no existing access.” They were given “admin credentials on a silver platter,” they said. On July 13 the hacker inserted their code, and on July 17 “they [Amazon] release it—completely oblivious,” they said.
#netsec #amazonWebServices #amazonQ #aiAiAi #nonBenificent marketing of so-called AI is a massive scam to manufacture consent to end the #labor & consumer economies; to pipeline the surveillance & collection of personal & private data; and to foster propaganda & devalue truthful information

More than 240 Gigabyte motherboard models are vulnerable to a new malware. Gigabyte will not release any patches.

Cybersecurity researchers have discovered two security flaws that can enable local attackers to escalate their privileges to root on Linux machines.

Rogue IT worker gets seven months in prison after changing all of his company's passwords after getting suspended — causing over $200,000 in digital rampage.

Zoomer in der IT Security sind einfach anders wyld

Schreibt mir eine Fachperson aus der genannten Demografie:

"Fun Fact: Die Raumbuchung hat keinerlei Zeichenbeschränkung in der Beschreibung. Habe letzte Woche einen Raum mit dem kompletten Bee Movie Script gebucht."

IoT Security: Preventing a Possible Disaster

https://spectrum.ieee.org/iot-security-root-of-trust

#netsec
By default, your phone encodes your GPS location into any photos you take inside of the image’s EXIF metadata.

If you then share that image (on Mastodon for example), people will be able to tell where you were when you took that photo.

You can use websites like https://everestpipkin.github.io/image-scrubber/ to read and erase an image’s data – ctrl+f for “GPS” to see if your photo is storing it.

Permalink: https://www.ragman.net/notes/27

I’ve got to know a lot of tech by sort of accreting knowledge over time, so I often don’t have a good answer to “how do I learn about XYZ?” type questions

To wit, a friend just asked me how to get started learning about IP #networking and basic #networkSecurity and… I’m not sure? Anyone have a good suggestion?

ICMP is an part of the IPv4 protocol, so it cannot officially be carried by other protocols. Although the IP protocol can be carried on a different protocol than the ethernet protocol.

#netsec
Many network security devices block all ICMP messages for perceived security benefits, including the errors that are necessary for the proper operation of PMTUD. This can result in connections that complete the TCP three-way handshake correctly but then hang when attempting to transfer data. This state is referred to as a black hole connection.[7]
https://stackoverflow.com/questions/19552134/what-data-is-included-in-icmp-ping-request

Hey I am beginning to like #netsec , I know nearly nothing about it
But I don't see why cilum folks ll use slack?
https://github.com/cilium/cilium/security/advisories/GHSA-q7w8-72mr-vpgw

Leaking the email of any YouTube user for $10k

https://brutecat.com/articles/leaking-youtube-emails

Discussions: https://discu.eu/q/https://brutecat.com/articles/leaking-youtube-emails

Everyone knows your location: tracking myself down through in-app ads

https://timsh.org/tracking-myself-down-through-in-app-ads/

Discussions: https://discu.eu/q/https://timsh.org/tracking-myself-down-through-in-app-ads/

I am using different mail addresses for important services

For example: once my Gemini mail address started receiving spam I knew there must've been a data breach at Gemini

#netsec #infosec #databreach #data

#introductions #introduction

I'm Scott. I live in Louisville, Kentucky USA. My job is helping people deploy, manage, and use network detection and response tools. For the past 10 years I've been a part of the network security monitoring and network forensics community (design/engineering/management/support), and the 20+ years before that doing IT operations management and monitoring. I'm also a Papaw that enjoys sedentary Papaw hobbies like tabletop role-playing games, model railroads, and making the beep boops on synthesizers and sequencers.

#infosec #security #netsec
#zeek #suricata #pcap
#threathunting #blueteam #forensics

#Introduction #Introductions

Ok, this is quite difficult. About which bit would you like to know?

Work: #opensource advocate and engineer, #crypto, #infosec and #netsec interests. #Gamedev refugee.

Interests: Amateur #musician (#drummer), #baking, #realale, #exercise, #Audiophile (eclectic music tastes), have been known to play the odd game, more so now I don't make 'em. #Neurodiversity, #art, etc...

Politics: Broadly #socialist, pro #EU, not fond of what is happening to my country: #GTTO.