My name is Rich and I talk about technology and other nerdy things. Husband, Father, Tech Guy, CCIE 49450. #CiscoChampion
United States
Joined January 2012
- Tweets1.6K
- Following503
- Followers359
- Likes3.2K
Pinned Tweet
A short clip from my IP subnetting video talking about how 16 million IP addresses were allocated.
See the full video here: youtu.be/7hIbzlxbebc
Fake OpenAI/SpaceX/Anthropic event invites are being used with PhaaS kits to steal Microsoft and Google credentials and sessions. Treat unsolicited “exclusive event” mail as hostile until verified. bleepingcomputer.com/news/se… #infosec
Barracuda ESG: CVE-2026-116606 + CVE-2026-111560 chain to root without login when the admin UI is reachable. Patch ESG to 9.4.0.030+; lock down admin interfaces on related appliances. thehackernews.com/2026/11/ex… #cybersecurity
D-Link warns of multiple unpatched flaws in DGS-3130 switches (DDP-related). Until firmware ships: disable DDP, lock management plane, clean SNMP communities, monitor for config changes. bleepingcomputer.com/news/se… #cybersecurity
CVE-2026-123158 (*sshole): on musl OpenSSH without PAM, an oversized password can auth to * shadow accounts (key-only/locked). Patch to 10.6p2 / Alpine fixed packages and restart sshd. Not a glibc/PAM issue. bleepingcomputer.com/news/se… #infosec
CISA/FBI joint fact sheet: actors are hitting industrial refrigeration & cold-chain controllers via internet exposure, defaults, and unpatched flaws—heat/defrost abuse risking inventory and safety. Pull panels off the public net; patch; change defaults. cisa.gov/news-events/news/ci… #cybersecurity #ICS
Chrome 157 is out: 213 security fixes, 7 critical. Keep enterprise browser fleets on the current channel-n-day chains still rely on lag. securityweek.com/chrome-157-…
Second wave of supermarket refrigeration hacks across Europe (Nov 2): remote setpoint/defrost changes spoil inventory. Same pattern as October France incidents—internet-exposed cooling controllers. OT remote access and default creds still the weak link. thehackernews.com/2026/11/se… #OT #cybersecurity
CVE-2026-98432 (CVSS 9.8): Linux IPv4 TCP use-after-free enables unauth remote RCE via crafted connection options. RHEL 8/9/10 kernels available (reboot). Ubuntu fixes still in -proposed only. Prioritize internet-facing listeners. thehackernews.com/2026/11/re… #Linux #infosec
Cursor marketplace briefly served malicious Claude Code extension builds that tried SSH key plant + reverse tunnel. ~5k potential installs; Anthropic official channels clean. Audit Cursor extensions and run vendor IoCs. securityweek.com/malicious-c… #SupplyChain
Over 1,000 internet-exposed GitLab servers remain unpatched for CVE-2026-97229 (max-severity RCE, now on CISA KEV). Self-managed CE/EE: inventory and upgrade immediately. bleepingcomputer.com/news/se… #cybersecurity
Synology: C3RB3R ransomware is hitting NAS running outdated DSM via a flaw patched Dec 2024. Update DSM now, turn on auto-updates, and pull management interfaces off the public internet. bleepingcomputer.com/news/se… #ransomware #infosec
Confirmed: PHP2Shell chained with Fragnesia against internet-exposed PAN-OS mgmt—~25 rooted devices, US gov-affiliated pivot reported. Unit 42 verified tooling. Mgmt plane must not face the internet; patch + hunt.
infosecurity-magazine.com/ne…
#cybersecurity #networksecurity
Cursor: malicious Claude Code ext 2.1.313 (~11h window) planted SSH keys + persistence on up to ~5k machines. Not an Anthropic build. Update to 2.1.314; treat 2.1.313 hosts as compromised. Dev tooling is production access.
cursor.com/blog/claude-code-…
#infosec #supplychain
Shocked: First Walter Koenig, and now Patrick Stewart -- RIP
In lieu of flowers, memorial contributions may be made to:
Johns Hopkins Alzheimer’s Disease Research Center Fund
alzresearch.org/giving/
Alzheimer’s Foundation of America Caregiver Resources
alzfdn.org/donate/
Photo Credit: Tommy Garcia
NebuSec: Telegram for Android 8.6.2–12.10.3 could run attacker code after the victim answered a normal voice call—no link or file. Fixed in 12.10.4. Confirm mobile fleets are current. thehackernews.com/2026/10/te… #cybersecurity
Talos: UAT-11473 used Cisco SD-WAN auth bypass (CVE-2026-20127) to plant KeyDrift—hooks control-plane processes and stages data-plane key material. Infra overlaps Volt Typhoon’s Silent Train (not same-group claim). Hunt + harden controllers. blog.talosintelligence.com/u… #infosec
Cisco confirms active exploitation of CVE-2026-76418: unauth DoS against ASA/FTD SSL VPN when secondary authentication is set on a tunnel group—device reloads, no VPN login required. Patch first; temporary mitigation only if you must. bleepingcomputer.com/news/se… #cybersecurity
PHP2Shell isn’t theory: China-linked ops chained it with a Linux kernel privesc (Fragnesia) to root vendor firewalls, then hit a US gov-affiliated env’s management plane and AD. Patch PHP edge gear and assume compromise until proven otherwise.
securityweek.com/china-linke…
#cybersecurity
RichTechGuy retweeted
IPv4 has a problem, we're out of addresses, and we have been for some time. IPv6 offers the solution to this problem, so why are we still using IPv4? Take a look at my video on YouTube explaining IPv6, including why we are still using IPv4. Linked in the thread below. ⬇️
CVE-2026-80097: Android Microsoft Authenticator could hand work tokens to a zero-permission app impersonating Teams/etc. Fixed in 6.2606.4246+. Enforce min version via MDM for work profiles. thehackernews.com/2026/10/mi… #identity
