Kicking some web exploitation CTFs around, just to keep my skills sharp. Right now just working on whatever picoCTF gives me. If anyone has another source they like, I'd love to hear about them!

#ctf #infosec #cybersec

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 5. Apr. *

5. Apr. *

thereisnoanderson @thereisnoanderson@infosec.exchange

NEW -

DCG real-ucode

Actually provides the latest CPU microcode for AMD and Intel

Version: 2025-04-25
Release: 1

updated ucode for amd and intel with that one !

https://github.com/divestedcg/real-ucode/

#divested
#DivestedComputingGroup

#fsf #FUTO #Fedora #alpinelinux #hardening #linuxtech #cybersec #cybersecurity #infosec #foss
#hackernews #opensource #android #skynet #linuxsecurity #ucode #vulnerabilities #vulnerability #freeyourmind

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 5. Apr. *

5. Apr. *

thereisnoanderson @thereisnoanderson@infosec.exchange

NEW -

DCG rpm-hardened_malloc available

pkgver = 2025/04/04
pkgrel = 1

Release Note = more coverage

Compatibility:
- Fedora 39/40/etc.
- Arch Linux

Hardened allocator designed for modern systems

https://codeberg.org/divested/rpm-hardened_malloc

#divested #DivestedComputingGroup

#DCG

#fsf #FUTO #Fedora #codeberg #hardening #hardened_malloc #hardenedmalloc #linuxtech #cybersec #cybersecurity #antivirus #hackernews
#opensource #android #linuxsecurity #vulnerabilities #vulnerability #alpinelinux #router #skynet #hardening #foss #infosec #freeyourmind

Codeberg.orgrpm-hardened_mallocUnofficial micro-architecture optimized hardened_malloc package || https://github.com/GrapheneOS/hardened_malloc

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 4. Apr. *

4. Apr. *

thereisnoanderson @thereisnoanderson@infosec.exchange

NEW -

DCG Brace Build 2025/04/04 - 1

Release Note: Fix bluetooth on F42

Toolkit compatible with multiple Linux distros that allows for installation of handpicked applications, along with corresponding configs that have been tuned for reasonable privacy and security.

Compatibility:
Arch Linux
CentOS 9/Stream
Debian 12
Fedora 39/40/41 (preferred)
openSUSE Tumbleweed

https://codeberg.org/divested/brace

#divested
#DivestedComputingGroup

#fsf #FUTO #Fedora #codeberg #hardening #linuxtech #cybersec #cybersecurity #infosec #antivirus
#opensource #linuxsecurity #vulnerabilities #vulnerability #alpinelinux #skynet #foss #freeyourmind

**HiramFromTheChi** @hiramfromthechi@mastodon.social · 3. Apr.

3. Apr.

HiramFromTheChi @hiramfromthechi@mastodon.social

Helping a friend with a job search, and I'm (still) shocked by how many places ask for other people's phone numbers.

Asking for references is reasonable, but email should suffice. Should they want to speak to references over the phone, it's up to the reference to give that out.

But at no point should you be handing out other people's phone numbers.

Even handing yours out to a system that lives who-knows-where is iffy.

#privacy #security #infosec

**Joaquim Homrighausen** @joho@mastodon.online · 3. Apr. *

3. Apr. *

Joaquim Homrighausen @joho@mastodon.online

It's not 2FA, MFA, nor passkeys, but it'll let you (and everyone else) create better passwords

"Random Password Generator. No cookies, no trackers. Just passwords."

https://password.oppetmoln.se

Free to use, free to self-host.

#infosec #passwords #cybersec #cybersecurity #devops #security #opensource #oss #foss #privacy

@oppetmoln

POMjsPOMjs - Random Password GeneratorPlain vanilla javascript random password generator

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 1. Apr.

1. Apr.

thereisnoanderson @thereisnoanderson@infosec.exchange

NEW -

DCG Domain Blocklist available - last updated 2025/04/01

1688453 - Domains blocked with that build !

Supercharging your content blocker to increase privacy and security.

All available lists:
- uBlockOrigin
- Hosts format & Hosts format with wildcards
- dnsmasq with wildcards

Ready to use lists combined from many permissively licensed sources.

https://divested.dev/pages/dnsbl

#divested #DivestedComputingGroup

#DCG

divested.devDnsbl - Divested Computing

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 31. März *

31. März *

thereisnoanderson @thereisnoanderson@infosec.exchange

NEW -

DCG rpm-hardened_malloc available

last updated:
2025/03/24

pkgver = 2025/01/27
pkgrel = 19

Compatibility:
- Fedora 39/40/etc.
- Arch Linux

Hardened allocator designed for modern systems

https://codeberg.org/divested/rpm-hardened_malloc

#divested #DivestedComputingGroup

#DCG

Codeberg.orgrpm-hardened_mallocUnofficial micro-architecture optimized hardened_malloc package || https://github.com/GrapheneOS/hardened_malloc

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 30. März *

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 27. März *

27. März *

thereisnoanderson @thereisnoanderson@infosec.exchange

NEW -

DCG Domain Blocklist available - last updated 2025/03/26

1692751 - Domains blocked with that build !

Supercharging your content blocker to increase privacy and security.

All available lists:
- uBlockOrigin
- Hosts format & Hosts format with wildcards
- dnsmasq with wildcards

Ready to use lists combined from many permissively licensed sources.

https://divested.dev/pages/dnsbl

#divested #DivestedComputingGroup

#DCG

divested.devDnsbl - Divested Computing

**Pia** @cecallihelper.bsky.social@bsky.brid.gy · 26. März

26. März

Pia @cecallihelper.bsky.social@bsky.brid.gy

HPSCI Open Event: 2025 Annual Threat Assessment Hearing www.youtube.com/watch?v=Qfjz... #Signal #YemenGate #Mexico #Russia #China #Taiwan #Ukraine #Iran #foreignpoicy #cybersec House Intelligence Committee

youtube.com/watch?v=Qfjzf5...

www.youtube.com- YouTubeAuf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.

**Joaquim Homrighausen** @joho@mastodon.online · 26. März

26. März

Joaquim Homrighausen @joho@mastodon.online

Time to update Chrome

https://thehackernews.com/2025/03/zero-day-alert-google-releases-chrome.html

The Hacker NewsZero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage AttacksGoogle fixed Chrome zero-day CVE-2025-2783 on Mar 20 after attacks exploited a sandbox bypass flaw.

#chrome #browser #webbrowser

**Opalsec** @Opalsec@infosec.exchange · 25. März

25. März

Opalsec @Opalsec@infosec.exchange

Hey folks, ready for your daily dose of cyber intel? ️

Tuesday's update is out and it's packed with need-to-know updates:

Critical Next.js Flaw: Authorization bypass vulnerability (CVE-2025-29927) impacting versions before 15.2.3. Upgrade ASAP or block those 'x-middleware-subrequest' headers!

Weaver Ant's Long Game: Chinese hackers spied on a telco network for four years using compromised Zyxel routers and custom web shells. Talk about persistence!

VanHelsing RaaS Emerges: A new ransomware player targeting Windows, ARM, ESXi systems. Keep an eye on this one!

Oracle Cloud Breach Claims: Did they or didn't they? Oracle denies a breach, but a threat actor is claiming otherwise.

Ukrainian Railway Hit: Cyberattack disrupts online ticket sales amidst crucial transport operations. Resilience is key.

DrayTek Router Chaos: ISPs are scrambling as DrayTek routers enter reboot loops. Potential vulnerability or buggy update at play.

AI-Enhanced Cybercrime: Europol warns that organized crime is leveling up with AI, partnering with state-aligned entities.

Starlink Intercepted: Thai authorities seize Starlink transmitters headed for Myanmar scam centers. Criminals are finding ways around cut-offs.

Cybercrime Crackdown: 300+ suspects arrested in Africa for cyber scams. A win for international law enforcement!

23andMe's Bankruptcy Woes: Privacy advocates raise concerns about DNA data as 23andMe files for bankruptcy. What happens to all that genetic info?

Pennsylvania County Ransomware: Sensitive data stolen during a ransomware attack. Another reminder to shore up those defenses.

China Bans Facial Recognition: Consent is now required for facial recognition in China. But are there exceptions for government and AI training?

Dive into the full details here: https://opalsec.io/daily-news-update-tuesday-march-25-2025-australia-melbourne/

Stay vigilant, stay informed, and let's keep the digital world a little safer, one update at a time.

Opalsec · 25. MärzDaily News Update: Tuesday, March 25, 2025 (Australia/Melbourne)Audio Summary: Tuesday, March 25, 2025 (Australia/Melbourne)0:00/390.3121× Critical Flaw in Next.js Allows Authorization Bypass A critical severity vulnerability, tracked as CVE-2025-29927, has been discovered in the Next.js web development framework, potentially allowing attackers to bypass authorization checks. The flaw enables attackers to send

#Cyber #CyberSec #Cybersecurity

**thereisnoanderson** @thereisnoanderson@infosec.exchange · 24. März *

24. März *

thereisnoanderson @thereisnoanderson@infosec.exchange

NEW -

DCG real-ucode

Actually provides the latest CPU microcode for AMD and Intel

Version: 2025-03-24

updated ucode for amd and intel with that one !

https://github.com/divestedcg/real-ucode/

#divested
#DivestedComputingGroup

Frühere Suchanfragen

Suchoptionen

Verwaltet von:

Serverstatistik:

#cybersec