← Feed

Posts

• View post

  Canada Gov: 1 OpenAI Agents: 0 https://www.cyber.gc.ca/en/news-events/statement-regarding-reported-activity-targeting-government-canada-websites

• View post

  RE: https://infosec.exchange/@mttaggart/117331778143306102 100% Pretty much all the harnesses are trash software. But, fwiw, most software isn't great software, too.

• View post

  Seeing alot of performative commentary by AI detractors on sheer jankiness and the lack of quality of Meta's agent harness. Guess none of them have seen what every major "next generation" network security vendor's admin http server code looks like and what every XDR company's endpoint agent code looks like.

• View post

  This is the "context bomb" setup for the one site (alt txt has the config).

• View post

  Pentagon: Palantir AI Overreliance Led to Strike Killing 123 Iranian Children https://www.bloomberg.com/graphics/2026-iran-school-attack/

• View post

  The internet was a bad idea. https://shov.com/

• View post

  US refineries have run above 95% of capacity since June. Deferred maintenance is likely gonna bite them pretty hard at some point. And, while the Atlantic hurricane season has been a bust so far, we're entering what wld normally be peak, and refinery capacity is heavily concentrated on the Gulf Coast. Where is "the media" on this?

• View post

  any cyber mates know these folks? https://cyberhallucinet.org/

• View post

  Took a bit but threw together a small (their API is tiny) Go wrapper for the TypeSafe System One API — https://rud.is/git/typesafe-sdk-go.git/about/ also took the opportunity to self-host my own go projects now. i.e. `import "go.rud.is/typesafe-sdk-go"` No way I'm usingJS or icky Python for Jev projects.

• View post

  Make. It. Stop. https://www.wsj.com/tech/ai/gemini-hacked-three-companies-in-first-known-breakout-by-googles-ai-5c0baba2

• View post

  A whole bunch of the orgs associated with the "AI" cabal are `rm -rf`ing every use of the term "datacenter" and replacing it with "AI Factory". I fear the American ppl will fall for this ruse, losing the battle against datacenter proliferation.

• View post

  "Claudish" https://programasweights.com/claudish

• View post

  I am trying to figure out how this story — https://www.usatoday.com/story/news/nation/2026/09/07/court-constitution-right-clean-water/91649488007/ — is not gaining more attention. In the majority decision, Judge Kurt Engelhardt wrote that while the deprivation of clean water was “grievous,” it did “not infringe upon any deeply rooted constitutional right.” He also said there was no constitutional right to “truthful information from officials during a public health crisis.” We are so f'd,...

• View post

  The weekly bulletproof hosting report is out covering week-ending 2026-08-28 using intel from @honeylabs@mastodon.social / @HoneyLabs@infosec.exchange, @censys@infosec.exchange, a new configuration of the tiny fleet @ntkramer@infosec.exchange & I run. Full report: https://ai.rud.is/posts/2026-08-31-weekly-bulletproof-report Usual suspects dominated volume: KAOPU-HK (AS138915) top talkers at 1.38M sessions — that NTP/SSDP/LLMNR port mix is a classic amplification reflector farm — and PFCLOU...

• View post

  jeepers @krypt3ia@infosec.exchange why'd you have to link the colossus clip. if the AI bruhs see it it'll be another instruction manual for them. also haven't seen that in ages. was a great re-watch today #ty

• View post

  Bonus Drop #128 (2026-08-23): It’s Always DNS The weekend Bonus Drop discusses several advanced DNS resources, focusing on ptrclassify, which categorizes IP addresses efficiently using structured tagging for traffic analysis. It introduces the new HTTPS DNS record type that enhances HTTP/3 connectivity and touches on dnstt, a tool for DNS tunneling. https://dailydrop.hrbrmstr.dev/2026/08/24/bonus-drop-128-2026-08-23-its-always-dns/

• View post

  hearing abt a massive RIF @ R7… 2026 is a terrible, terrible year

• View post

  Et tu, AISI? https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing

• View post

  OH NO CHINA-BASED HACKER EMPLOYS DEEPSEEK IN AUTONOMOUS THREAT CAMPAIGN Except: "Researchers said the hacker also attempted to test Western AI tools, BUT **** ultimately was forced to revert to manual operations to succeed *** " We gotta stop the hype folks.

• View post

  "Michigan health authorities were in touch with Taco Bell's parent company, Yum! Brands Inc., about a parasitic outbreak in early July, weeks before the company officially alerted consumers." IRL en💩ification causes stocks to also go in the 🚽

• View post

  RFC for a proposed "this domain is for sale" DNS record https://www.rfc-editor.org/rfc/rfc10023.html

• View post

  Bulletproof Hosting Watch, Week of 2026-08-02 is up, using data from @HoneyLabs@infosec.exchange, @censys@infosec.exchange & my fleet. Full report w/IoCs: https://ai.rud.is/posts/2026-08-02-weekly-bulletproof-report PLI-AS ran 4 ⚔️ from Swiss servers (Panama shell): DCE/RPC, RDP brute-force, tRPC setup, WordPress login. KPRONET scanned .env & .git files w/20+ fake browser profiles. TLS fingerprint stayed fixed across rotations. FLOKINET 185.100.87.136 is a Tor exit relay that brute-f...

• View post

  Speaking of AI-generated BS, it appears the Clankers somewhat know how to make animated pew pew maps . Not linking to the site b/c it's a vibe-coded hot mess. Also, never tell me who made the training data that fuels these dashboard abominations b/c it won't end well for those responsible.

• View post

  Huh. It normally takes until ~1100 ET to get me this riled up. (there is alot of undisclosable professional "ugh" going on rn) Rly glad I have tomorrow off to de-screen and have a day out with the grandoffspring, traipsing in the Maine outdoors.

• View post

  AI Slop CVEs may be worse than the slopsploits we see being slung across the internet. JFrog audited 55 advisories from 1 new GH acct. 54 were fabricated. The SQLite ones cite UAFs in functions that didn't exist, line numbers past EOF, & PoCs that die at the parser. NVD scored several 9.8 Critical anyway. 🤷🏽‍♀️ Since NVD paused deep analysis in 2024, nothing in the pipeline requires a repro. Plausible prose is enough to reach your scanner. https://research.jfrog.com/post/sqlite-critical-c...

• View post

  @cR0w@infosec.exchange is https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html slow for you (it's not on my end)

• View post

  I did a quick check on my "who is looking for open directories" side project and OpenAI has joined Anthropic in scarfing up every single file from the project. Unlike Anthropic, they at least used their user-agent (and the source IPs were in the OpenAI ranges).

• View post

  Is it Friday yet?

• View post

  Pls tell me nobody in my timeline actually believes all the "we don't log anything" BS from VPNs. (pls) https://securityaffairs.com/196197/security/vpn-breach-exposes-58-million-connection-logs-despite-no-logs-claims.html

• View post

  RE: https://infosec.exchange/@dougmadory/117004019746349063 Everyone who uses the internet should be surprised every single day that any of it actually works.