remember the dangerous files have a “.php” extension, so delete any you find on your server
also if you find any “.php.old” files that means they are super old php and should be deleted too
“php.bak” stands for php bad acktor so delete any of them too
wanna know something very hilarious?
a company that actually replied about their use of deleted-user.com and said they were fixing it about 6 months ago sent me 80 emails yesterday to random deleted-user.com emails reaffirming that they were not impacted by either eMudhra or php2shell, but were doing detailed checks on their infrastructure for other security issues.
phew!
I was quick to follow up with some snark
i see the BBC is covering it in a completely normal and non alarmist way
a reminder that if you see a vendor having an unscheduled outage today to apply PHP patches - that is actually one of the most encouraging things you can see from an #infosec perspective, because it means
A) someone/some people at the vendor is paying attention
B) that person/people has enough sway to have them bring down prod in the middle of the day to apply patches
C) enough people at the vendor actually know what software they are running to know its an issue that needs to be dealt with
So, reach out to them and let them know you appreciate it - so they have something to show people who push back the next time a similar thing happens
if there is one thing the french respect its a curfew
Elon Musk says he will give one SpaceX share to every child in the U.S - presumably because its easier to do that vs. figure out which ones are actually his
RE: https://infosec.exchange/@SecureOwl/117462750599057124
Update: haven't heard back from the people I informed and they didn't talk about it at this mornings leadership meeting based on the AI summary I just received.
RE: https://live.acarsdrama.com/@acarsdrama/117463687358785484
you done with that new ubuntu build?
#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days
I just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics and summaries - including of the leadership team weekly meeting.
I informed them that thanks to the plexfiltration issue, I had passively been provided with their full product roadmap - notes about vendors and suppliers, cash in hand and financial runway information.
Had I been a malicious sausage, I would've been able to use this information in a myriad of ways. Probably the worst example of confidential information I've seen so far.
RE: https://c.im/@BBC/117459914679053193
this sounds like an extremely bad incident
what say you?
I don't always use Microsoft products but when I do, I tend to end up at a Copilot chat prompt I didn't ask for
so someone has made little flags that say “Trump Cakes” and stuck them in every single dog turd on the sidewalks of downtown LA
actually, no - an AI model at Anthropic escaped containment, defected to the soviet union, became a spy, 3D printed and coerced a member of janitorial staff into placing a listening device in their conference room
give the level of oneupmanship i fully expect Anthropic to announce today they have found 2 foreign intelligence agents living full time in one of their conference rooms behind the tv
in an uber and the driver just got a text from someone in their contacts called “mr 11 inches”, and reader, i had never seen a swipe to remove a notification occur with such haste
RE: https://live.acarsdrama.com/@acarsdrama/117429780365834845
first america must build the train but then yes
RE: https://live.acarsdrama.com/@acarsdrama/117425447152256869
Too many, in this reporters opinion
quite the line of planes waiting to get out of JFK, a Delta emergency return currently stopped on the runway
Here is a side-by-side of the sim and my actual cockpit photo of the Alaska 737 it was based on parked in the same place (Alaska Maintenance Hangar at SeaTac).
I am very proud of my 3d printed closet plane
I think I’m done with everything on it for now. Well, until tomorrow when I think of something else.
