Had anyone tried making cybersecurity vendors aware of cybersecurity instead of just focusing on practitioners? I feel like there may be a missed opportunity there, especially with how this week has gone.

Don't let the Node vuln slip through the cracks just because it's harder to meme.

Has anyone been able to successfully convince their execs that the takeaway from all this "Vulnpocalypse" or whatever is that architecture is actually important and to not blindly trust the claims of vendors? I've been trying unsuccessfully. The general consensus seems to be "We can fix this exposed attack surface by purchasing more attack surface."

I love Sesame Street, I really do. But maybe it's not the place to learn crypto.

RE: https://mastodon.bsd.cafe/@stefano/117354014226641780

Sure glad I moved my main workstation to Debian. :brdAngry:

CVE-2024-5256
CVE-2024-5809
CVE-2025-2181
CVE-2025-2210
CVE-2025-2212
CVE-2025-3820
CVE-2025-3823
CVE-2025-3862
CVE-2025-3983
CVE-2025-3992
CVE-2025-4006
CVE-2025-4010
CVE-2025-4013
CVE-2025-4016
CVE-2026-10007
CVE-2026-100079
CVE-2026-2313
CVE-2026-4319
CVE-2026-4334
CVE-2026-4596
CVE-2026-5294
CVE-2026-5301
CVE-2026-5308
CVE-2026-5310
CVE-2026-5311
CVE-2026-5325
CVE-2026-5331
CVE-2026-6405
CVE-2026-6407
CVE-2026-6408
CVE-2026-6421
CVE-2026-6828
CVE-2026-6830
CVE-2026-6833
CVE-2026-7233
CVE-2026-7240
CVE-2026-7241
CVE-2026-7243
CVE-2026-7248
CVE-2026-7249
CVE-2026-7425
CVE-2026-7426
CVE-2026-7428
CVE-2026-7429
CVE-2026-7433
CVE-2026-7449
CVE-2026-7452
CVE-2026-7473
CVE-2026-7475
CVE-2026-8052
CVE-2026-8067
CVE-2026-8075
CVE-2026-8076
CVE-2026-8077
CVE-2026-8078
CVE-2026-8079
CVE-2026-8080
CVE-2026-8082
CVE-2026-8083
CVE-2026-8084
CVE-2026-8085
CVE-2026-8086
CVE-2026-8087
CVE-2026-8091
CVE-2026-8092
CVE-2026-8093
CVE-2026-8094
CVE-2026-8095
CVE-2026-8096
CVE-2026-8097
CVE-2026-8098
CVE-2026-8099
CVE-2026-8100
CVE-2026-8101
CVE-2026-8943
CVE-2026-8944
CVE-2026-8945
CVE-2026-8946
CVE-2026-8947
CVE-2026-8948
CVE-2026-8949
CVE-2026-8950
CVE-2026-8951
CVE-2026-8952
CVE-2026-8953
CVE-2026-8954
CVE-2026-8955
CVE-2026-8956
CVE-2026-8957
CVE-2026-8958
CVE-2026-8959
CVE-2026-8960
CVE-2026-8961
CVE-2026-8962
CVE-2026-8963
CVE-2026-8964
CVE-2026-8965
CVE-2026-8966
CVE-2026-8967
CVE-2026-8968
CVE-2026-8969
CVE-2026-8970
CVE-2026-8971
CVE-2026-8972
CVE-2026-8973
CVE-2026-8974
CVE-2026-8975
CVE-2026-8976
CVE-2026-8977
CVE-2026-8978
CVE-2026-8979
CVE-2026-8980
CVE-2026-8981
CVE-2026-8982
CVE-2026-8983
CVE-2026-8984
CVE-2026-8985
CVE-2026-8986
CVE-2026-8987
CVE-2026-8988
CVE-2026-8989
CVE-2026-8990
CVE-2026-8992
CVE-2026-8993
CVE-2026-8994
CVE-2026-8995
CVE-2026-8996
CVE-2026-8997
CVE-2026-8998
CVE-2026-8999
CVE-2026-9000
CVE-2026-9001
CVE-2026-9002
CVE-2026-9003
CVE-2026-9004
CVE-2026-9005
CVE-2026-9006
CVE-2026-9007
CVE-2026-9008
CVE-2026-9009
CVE-2026-9010
CVE-2026-9011
CVE-2026-9012
CVE-2026-9013
CVE-2026-9014
CVE-2026-9015
CVE-2026-9016
CVE-2026-9017
CVE-2026-9018
CVE-2026-9019
CVE-2026-9020
CVE-2026-9021
CVE-2026-9022
CVE-2026-9023
CVE-2026-9024
CVE-2026-9025
CVE-2026-9026
CVE-2026-9027
CVE-2026-9028
CVE-2026-9029
CVE-2026-9030
CVE-2026-9031
CVE-2026-9032
CVE-2026-9033
CVE-2026-9034
CVE-2026-9035
CVE-2026-9036
CVE-2026-9037
CVE-2026-9038
CVE-2026-9039
CVE-2026-9040
CVE-2026-9041
CVE-2026-9042
CVE-2026-9043
CVE-2026-9247
CVE-2026-9248
CVE-2026-9249
CVE-2026-9250
CVE-2026-9251
CVE-2026-9252
CVE-2026-9303
CVE-2026-9304
CVE-2026-9305
CVE-2026-9306
CVE-2026-9307
CVE-2026-9308
CVE-2026-9309
CVE-2026-9310
CVE-2026-9311
CVE-2026-9312
CVE-2026-9313
CVE-2026-9314
CVE-2026-9315
CVE-2026-9316
CVE-2026-9317
CVE-2026-9318
CVE-2026-9319
CVE-2026-9320
CVE-2026-9321
CVE-2026-9322
CVE-2026-9323
CVE-2026-9324
CVE-2026-9325
CVE-2026-9326
CVE-2026-9327
CVE-2026-9328
CVE-2026-9378
CVE-2026-9379
CVE-2026-9380
CVE-2026-9381
CVE-2026-9382
CVE-2026-9383
CVE-2026-9740
CVE-2026-9741
CVE-2026-9742
CVE-2026-9743
CVE-2026-9744
CVE-2026-9745
CVE-2026-9747
CVE-2026-9748
CVE-2026-9749
CVE-2026-9750
CVE-2026-9751
CVE-2026-9752
CVE-2026-9753
CVE-2026-9754
CVE-2026-9755
CVE-2026-9756
CVE-2026-9757
CVE-2026-9758
CVE-2026-9759
CVE-2026-9760
CVE-2026-9761
CVE-2026-9789
CVE-2026-9790
CVE-2026-9791
CVE-2026-9792
CVE-2026-9793
CVE-2026-9794
CVE-2026-9795
CVE-2026-9796
CVE-2026-9797
CVE-2026-9798
CVE-2026-9799
CVE-2026-9800
CVE-2026-9801
CVE-2026-9802
CVE-2026-9803
CVE-2026-9804
CVE-2026-9805
CVE-2026-9806
CVE-2026-9807
CVE-2026-9808
CVE-2026-9809
CVE-2026-9810
CVE-2026-9811
CVE-2026-9812
CVE-2026-9813
CVE-2026-9814
CVE-2026-9815
CVE-2026-9816

Oh fuck that job.

RE: https://infosec.exchange/@dotdotslash_bot/117351335382485836

uSe PfSeNsE iNsTeAd Of EnTeRpRiSe FiReWaLlS

Nice try. Everything is shit now.

There's something funny about Palo Alto rating Juniper Networks Secure Access as a higher risk than ExpressVPN.

Watch Guard APs with two sev:CRIT and one sev:HIGH CVE.

https://psirt.watchguard.com/CVE-2026-101891

https://psirt.watchguard.com/CVE-2026-86102

https://psirt.watchguard.com/CVE-2026-87969/

You had one job.

https://www.sailpoint.com/security-advisories/sailpoint-identityiq-improper-form-validation-vulnerability-cve-2026-12342

sev:CRIT 9.6 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

Patch your fruity phones, there's another EITW 0day.

https://support.apple.com/en-us/149226

Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

sev:CRITs in Dayforce Payroll. Go patch and protect that shit before your pay gets fucked.

https://cert.pl/en/posts/2026/09/CVE-2026-73640/

Of all the bullshit I expected from the current US regime, going from cops threatening dogs with their 9mm to cops threatening dogs with their 9cm was not on that list.

RE: https://flipboard.com/@theseattletimes/tech-news-goc90q5pz/-/a-lYWUXRZRSemPr0yqcIV7Jg%3Aa%3A2857557016-%2F0

:dumpster_fire_gif: :brdThink: :dumpster_fire_gif:

RE: https://infosec.exchange/@ajn142/117349300525417657

When the puppygirl polycule finds a new top.

Let me fix that headline for you:

Canonical Ships So Many Bugs That Ubuntu Changed To A Two-Week "Stable" Release Update Cycle

https://news.slashdot.org/story/26/09/26/0559227/ai-finds-so-many-linux-bugs-canonical-changes-to-a-two-week-stable-release-update-cycle

Hey @da_667

https://github.com/senxitoyshuyi-ui/HACKALL

#internetOfShit

RE: https://infosec.exchange/@ssvc/117348757033848743

Digital Ocean, Vultr, and HostZealot are all already on the naughty ASN list. Those are the hosting providers for the three IPs below.