CISA’s mission is to defend against all cyber threats to U.S. Critical Infrastructure, including from Russia. There has been no change in our posture. Any reporting to the contrary is fake and undermines our national security.

3.14159265358979323846264338327950288419716939937510582097494459230781640628620899862803482534211706798214808651328230664709384460955058223172535940812848111745028410270193852110559644622948954930381964428810975665933446128475648233786783165271201909145648566923460348610454326648

Hey Lenovo can you please correctly sign your BIOS update tools so AV doesn’t block them? This crap has been going on for months w/ different models!

NASA’s Curiosity rover has found the longest chain carbon molecules yet on Mars arstechnica.com/science/2025/0…

CVE-2025-32993 issued for my latest finding: an SQL Injection in a widely used Help Desk & Live Chat platform. Full write-up with PoC: 🔗 nav1n.medium.com/sql-injection-… #BugBounty #Infosec #CVE #SQLi

Microsoft Defender Experts (DEX) has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that ultimately lead to information theft and data exfiltration. msft.it/6013q7L03

On my way to BSidesSF & RSAConference Ready for a busy week learning the latest trends & catching up w/ friend’s & colleagues. Stop by the Graylog booth & see the latest demos or just say hi!

⁦Graylog⁩ now offers cloud trials! Check out the latest features in version 6.2 released yesterday ⁦RSAConference⁩

Graylog Removes Barriers to SIEM to Deliver Uncompromised Security Operations finance.yahoo.com/news/graylog-r…

Graylog Security Spring 2025 Release is Now Available, Prioritizing True Cyberthreats - Database Trends and Applications ⁦Graylog⁩ dbta.com/Editorial/News…

60 Malicious npm Packages Leak Network and Host Data in Active Malware Campaign socket.dev/blog/60-malici…

Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization [CVE-2025-49113] fearsoff.org/research/round…

Bruteforcing the phone number of any Google user brutecat.com/articles/leaki…

#Intune environments with Windows ARM64 devices! Have you had an absolute nightmare with apps meant for x64 being installed? Rejoice! New Win32 Requirements allows you to specifically choose ARM64 as an architecture!

🚨 New Bluetooth Attack Puts Millions of Cars at Risk A critical vulnerability dubbed PerfektBlue targets the BlueSDK Bluetooth framework used in many vehicles, exposing millions of cars to remote code execution (RCE) via Bluetooth ⤵️

It’s happening! The BSides Las Vegas crew is here & getting ready for our extended event starting Monday thru Wednesday mid afternoon followed by a pool party that evening. Looking forward to seeing everyone there!

GPT-5 Jailbreak with Echo Chamber and Storytelling neuraltrust.ai/blog/gpt-5-jai…

Hey Microsoft what’s up with Defender updates for MacOS failing since late July? Seems your Tamper Protection is now blocking the updater from installing since it can’t shut down UI Helper. This was not an issue before. Don’t you test your releases? Only work around is audit