Kyle retweeted
In lieu of flowers, memorial contributions may be made to:
Johns Hopkins Alzheimer’s Disease Research Center Fund
alzresearch.org/giving/
Alzheimer’s Foundation of America Caregiver Resources
alzfdn.org/donate/
Photo Credit: Tommy Garcia
Kyle retweeted
The way frontier labs have restricted access to cyber capabilities makes no sense. If you're considered a "defender" you're not allowed access to the "offensive" versions of the models (the ones that can do development/validation of malware and exploits).
So for example, if you want to build some sample malware to test a detection system, nope.
Or if there's a major crisis due to a critical vulnerability in PHP and you need to rapidly triage fake exploits to see if there are any real ones floating around so you can warn people, nope.
Want to build a remote code exploit to make sure the detection rules you plan on proposing to the clients actually work? Hard nope.
You gotta call your red team friend and wait for them to do your job for you, because "defender" are only allowed to play in the sandbox with the children.
Not an expert, but I think that the ability to triage in-the-wild exploits during a major crisis affecting 40 million systems is possible maybe important.
And then they want to ban abliterated open weight models, which half of the people are only using because frontier labs will only give them access to lobotomized models.
Kyle retweeted
Just found a zero day
If you right click on an executable on Windows, select run as administrator, it will run as administrator
I'm calling it Program2Shell
Kyle retweeted
CleanYourTV v2.7 is out 📺
What's new:
• 35 new TVs from 9 new brands
• Wallpapers that change with the time of day
• Two new themes
• Game controllers that just work
• Safer defaults that protect your TV
230 PRs merged from 122 contributors since the last release 🙏
CleanYourTV just crossed 20K stars on @github 🌟
Highlights of the last 3 releases (400+ PRs):
✨ v2.6: Add-ons, new looks, instant Home
✨ v2.5: Edit the dock, pick wallpapers
✨ v2.4: Settings, app reorder, quick settings
213 TV models, 63 brands, countless optimizations!
Kyle retweeted
It's one of those fun times when infosec people start saying stuff like "you should buy some devices that work without an Internet connection, like pistols, shotguns, and rifles."
Kyle retweeted
"Even Heaven had to go to war to protect its peace. Never apologize for drawing a line that kindness couldn't hold."
Kyle retweeted
Could Fortinet please have one of the latest LLMs review and unfuck the source code they ship? The tokens would probably cost less than one of their appliances. And every customer would benefit from the fixes.
Network edge devices can give threat actors a direct path into an organization.
In a campaign linked to threat actor #k0t, Group-IB and NyxLab observed large-scale targeting of internet-facing FortiGate, FortiWeb, and Palo Alto GlobalProtect systems, with more than 70,000 exposed credentials and related data identified.
The operators combined vulnerability exploitation and brute force activity to gain initial access, then moved deeper into victim environments using tools such as NetExec, Mimikatz, and Impacket, while MeshCentral and AdaptixC2 provided persistence and command-and-control. The investigation also observed data exfiltration through Rclone to Wasabi S3 and MEGA.
Overlaps with organizations later listed by #ransomware groups including #Qilin and #TheGentlemen raise the possibility that the operators may be acting as Initial Access Brokers, although the relationship remains unconfirmed.
Read the full technical analysis: link.group-ib.com/4yDaMQY
Kyle retweeted
So it turns out that Ukraine's issues with Starlink were caused by Ukraine.
Starlink terminals disconnected at speeds above 160 KPH, as determined by the Starlink terminals internal GPS.
To get around this, Ukraine hacked the Starlink terminals to think they were stationary regardless of speed.
SpaceX figured this out, and updated the system software to detect excessive speed by seeing how rapidly the terminal switched from on satellite to another. This broke Ukraine's hack, and Starlink would no longer work at high speeds.
Ukraine was using Starlink in a way that violated the terms of service.
Starlink figured it out and stopped it.
Kyle retweeted
Gamers celebrate the closures of these studios because we've already mourned them a decade ago when they really died.
You're crying over the zombie.
Kyle retweeted
having a gf is insane because it's like a critical security vulnerability that you let in your house
This is actually pretty damn amazing. I'm highly impressed.
introducing pwn.watch 👀 one place for following all the live security incidents
it serves rss + llms.txt so u can paste to your clankers
tell them to watch it on a schedule and sleep at night 😴
100% free but kitze.io/sponsors will appear on it ❤️
Kyle retweeted
BREAKING NEWS:
Texas GOP candidate Brandon Herrera once told a fellow Halo player on Xbox Live that he would, “…sleep with his mother and drink all of his juice boxes the next morning.”
More to come.
Texas GOP House Candidate Brandon Herrera Says Kittens Should Be Sent to Chinese Restaurants
Readers added context they thought people might want to know
The remark was a dark joke by Brandon Herrera during an Oct 2025 episode of The Josie Show podcast responding to the host's story about rescuing kittens from euthanasia.
sacurrent.com/news/texas-new…
yahoo.com/news/politics/…
open.spotify.com/episode/38JDXm…
Kyle retweeted
Welp, someone oopsied and posted two CVSS 9.0 Linux RCE vulns publicly, including exploit code. The hits just keep comin'.
phoronix.com/news/LKML-New-T…
Kyle retweeted
wow this is bad!
ENTIRETY of PingCap database used by linkedin, flipkart, airbnb etc. has been copied and stolen due to customer credentials being stored directly in support tickets (LOL)
Attackers ran exfiltration directly on their cloud (LOL) pipeline ran for 22 days, exfiltrating data every 6 hours and NO ONE noticed. Worse, PingCap denies all of it.
Average SRE salary is $300,000 at PingCap btw
Kyle retweeted
when the cybersecurity team finds out there are actual vulnerabilities and they have to do their jobs instead of trying to trick someone into clicking a phishing email
Kyle retweeted
Working RCE against PHP 8.5.12 (the 2026-10-21 security release that fixed CVE-2026-109618/109619).
Pure logic bug — no memory corruption,
ASAN-clean, orthogonal to the CVE-2026-109618/19 class.
Receipt: uid=33(www-data) over HTTP, one-shot
#infosec #php2shell #php
.... Dude the internet is cooked .... This can't be patched out 😈...
#CyberSecurity #infosec
Readers added context they thought people might want to know
The claimed RCE on fully-patched PHP 8.5.12 requires a custom lab app with a destructor gadget plus deliberate session.serialize_handler mismatch (php_serialize writes, legacy php reads) and non-default settings like cleanup=Off; this is an app flaw, not core PHP RCE.
github.com/rafalohaki/php…
php.net/manual/en/sess…

































