RE: https://infosec.exchange/@DarkWebInformer/117395107737662425

Upgrade your Ivanti Connect Secure boxes.

(truesec.com) The Evolving Threat Landscape: Geopolitics, AI, and the Persistence of Fundamental Cyber Risks

In brief - This article reviews the 2026 cybersecurity landscape, emphasizing that while AI dominates the conversation, the primary threats remain rooted in geopolitical tensions and traditional attack vectors.

Technically - This article highlights a "zero-day pandemic" characterized by a massive volume of CVEs (approximately 14,000 in September alone), which has overwhelmed traditional patch management workflows. It notes a tactical shift toward targeting software supply chains and CI/CD pipelines—exemplified by the Shai-Hulud campaign—to achieve scalable compromise via developer credentials. Despite the integration of AI to enhance social engineering and content creation, the author asserts that the core attack surface remains unchanged, relying heavily on infostealer-sourced credentials, edge device vulnerabilities, and traditional phishing/vishing techniques.

Source: https://www.truesec.com/hub/blog/2026-the-threats-that-matter

#Cybersecurity

So the free-to-play period of #ARCRaiders is over and it's really good to see that the average number of players online remains high!

It would seem players are generally quite happy with the recent Frozen Trails update, which has at least me engaged again.

Yesterday I decided to upgrade my current graphics card from a Radeon 6800 XT to a more recent 9070 XT. The old workhorse has kept me going for about 6 years now. It was about time. Frame rate in ARC Raiders dropped below 70 sometimes... and as you know, FPS is everything. And I refuse to lower settings to maintain stable FPS ;-)

#Linux #Radeon #Gaming #ARCRaiders

RE: https://techhub.social/@Techmeme/117430147242479675

Anthropic’s claims here have absolutely no basis in reality.

Claude.ai rightly points out that when reviewing code, we should focus on the code and not on its author.

Apologies for the slight spam on ORLYSEC, had a few posts in the waiting queue due to a bug in the current code. Released them and well, a bit of a flood.

❤️

“Anyone who, through betrayal, stupidity or for money, seeks to weaken Ukraine in its defense against Russian aggression is acting directly against their own people, their country’s security and its sovereignty,” Polish Prime Minister Donald Tusk said. #Ukraine

A few simple things added like Profile picture, images and better formatting of cards. Also possible to search. Some other things I also added was translations for languages not configured as visible. So if any other toots come in with a language I don't speak it's automatically translated for me.

Kinda nice honestly.

This new Firefox Nova UI is just straight ugly

Give me my normal tabs back. The new rounded corners make everything look crowded and smooshed together

about:config

browser.nova.enabled ----> false

I had this idea about how to improve my "consumption" of Mastodon toots. So I built this very simple experimental setup where I consume my own Home timeline, classify each toot into a topic. These are then streamed to a simple web-based UI to show me simple streams of toots as they related to a growing set of topics and categories.

I'm using a lightweight model for classification and currently NOT enforcing a strict set of topics / categories but rather allowing for dynamic sets.

I just like the idea of having a way to topically/categorically browse content and read based on what interests me. Like this:

#Experiment #Mastodon

It is somehow possible to create a Mastodon "Feed" in the advanced UI that is only showing boosts?

I'm happy with having one without boosts, but I would also like to have one which only shows boosts and not regular Toots.

But it seems only possible to have one Feed with, or without, boosted Toots.

I eftermiddag med start 14.00 så har vi ett online fika med tema Wikidata som vanligt på söndagar. Välkommen att titta in och säg hej, inga krav på förkunskaper eller prestation och man kan ploppa in när som helst, vi håller ofta på till 16.00, ibland längre. Vi brukar sitta och snacka och kanske redigera llite parallellt. https://www.wikidata.org/wiki/Event:Swedish_online_editathon_320
#wikidata

A 16 year old boy hacked an internal Microsoft system called TITAN with 17 trillion records as it didn’t validate JWT signatures at all, accepted ‘admin’ as authentication without a password and was internet facing.

They paid him $5000 and told nobody about it.

https://blog.faav.net/how-i-couldve-accessed-17-trillion-microsoft-records

Embark Studios and the latest Frozen Trail really shows how much can happen in 6 months, but also (and perhaps most importantly) how important it is to slow things down and do them properly.

A 6 month cadence may possibly be slightly too long, and perhaps they should aim for 4 months instead to allow for 3 releases per year. But still... if they can maintain this quality of releases for ARC Raiders it will be such a W for this game.

I have lately received several offerings about getting paid for talking to "a company" that wants to establish itself in the Nordics.

I don't understand the scam, because I'm assuming that's what it is... does anyone know what this is all about?

#Scam

(nattothoughts.com) AI-Powered Cyber Espionage: Analyzing the ZRON Leak and China’s Commercial Hacking Ecosystem

In brief - This article discusses a significant data leak from the Chinese cybersecurity firm Zhengzhou Zhirong Network Technology Company (ZRON), which allegedly reveals the use of AI to process stolen foreign government data. It introduces an upcoming three-part analysis by the Natto Team to examine ZRON's role within China's commercial hacking ecosystem.

Technically - This article describes a 10GB dataset leak containing internal chat logs, marketing materials, and stolen government data from nations including Russia, Pakistan, and the Philippines. The leak highlights ZRON's development of an information acquisition and processing pipeline that leverages AI-driven systems to organize and analyze exfiltrated data for espionage purposes. The Natto Team intends to analyze this by cross-referencing the leak with open-source intelligence (OSINT) and comparing the observed tactics, techniques, and procedures (TTPs) with previous leaks from other Chinese firms like i-SOON and Knownsec.

Source: https://www.nattothoughts.com/p/the-zron-leak-part-1-what-has-endured

#ThreatIntelligence #ThreatIntel #Cybersecurity #Infosec

https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/

The hype is real: https://www.youtube.com/watch?v=KjiJDylLdZA

ARC Raiders Frozen Trail gives me chillz. I can't wait for this :-)

#ARCRaiders

ARC Raiders is one of the coolest games I've played in along time, and these "behind the scenes" kind of videos are... amazing to watch:

https://www.youtube.com/watch?v=ki6rkrTSGm4

#ARCRaiders