Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions. I have Direct Messages disabled - you can send them, but I will never receive them.
Public Key
npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Profile Code
nprofile1qqs0dpc2ln0yfq8vs5y02qcysk0pffgnp8ljf2elp7rzc54acjhcw3cpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qz9thwden5te0wfjkccte9ekk7um5wgh8qatzqy8hwumn8ghj7mn0wd68ytnddakskggmv5
Show more details
Published at
2026-07-30T17:11:56Z Event JSON
{
"id": "a2b1a622e4367a627319df8fa85b55ed58823fdbe1703cf52fce8366d2dd1d9b" ,
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747" ,
"created_at": 1785431516 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://cyberplace.social/users/GossiTheDog",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"Kevin Beaumont\",\"about\":\"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.\\n\\nI have Direct Messages disabled - you can send them, but I will never receive them.\",\"picture\":\"https://cyberplace.social/system/accounts/avatars/109/387/499/752/708/037/original/a4c1cd571bcb7c2f.jpeg\",\"banner\":\"https://cyberplace.social/system/accounts/headers/109/387/499/752/708/037/original/7acb89f4ac3231c3.jpg\",\"nip05\":\"[email protected] \",\"fields\":[[\"My website\",\"https://doublepulsar.com\"],[\"Github\",\"https://github.com/GossiTheDog\"],[\"Signal\",\"GossiTheDog.1337\"]]}" ,
"sig": "e6fdbb88b472cc7ecc41136461be23925d9a42ea5fb12c12a97d97456e0b4f2cd0625e9d652ebccc85f7ba5e6acab327e291e264e00bc3b54942a3b02eb13a9b"
}
Last Notes npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Admore have finally admitted they were hacked: https://site.adform.com/resources/newsroom/security-incident-company-update/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Looks like Max spotted it 3 days ago npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I didn't cover it in the blog but it does an amusing thing where aside from hijacking the clipboard, it also rewrites browser forms already filled in to change wallet addreses, lol. So if you browse an autofill form it replaces that too. One of the big crypto firm execs sits on Adform's executive, I think they may have been hit in the incident by this. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If you like malware reverse engineering, this was being served by Adform a few days ago: https://pastebin.com/mc7psaNF npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Adform, a web advertising firm, have been hacked and have been serving a supply chain attack to steal crypto https://doublepulsar.com/adform-compromised-to-serve-crypto-stealer-via-supply-chain-attack-2f1ec024f33e npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Elon Musk, an immigrant, was interviewed recently by the editor of the Economist. He said a bunch of dumb shit - for example that money wouldn’t exist in 2036, and that everybody wouldn’t have to work any more as AI would do their job for them. Anyway, he’s now essentially calling for the assassination of the journalist over her questions about immigration. https://cyberplace.social/system/media_attachments/files/116/986/523/670/932/738/original/834d0c9cab83b8fe.jpeg https://cyberplace.social/system/media_attachments/files/116/986/523/725/376/414/original/518c795273ca41ab.jpeg https://cyberplace.social/system/media_attachments/files/116/986/523/837/211/418/original/a6b85d485904d624.jpeg https://cyberplace.social/system/media_attachments/files/116/986/523/977/604/522/original/7e34c8188f3d6797.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Microsoft are telling customers there is no ETA to resolution and they may want to review their DR plans for their SaaS services. "Customers may wish to review their business continuity and disaster recovery plans and take actions appropriate for their environment." npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont For anybody tracking the Microsoft outages... Azure West US is the cause: Starting at 14:44 UTC on 23 July, 2026, we began investigating a networking issue affecting connectivity to Azure services in the West US region. Impacted customers may be experiencing intermittent connectivity failures, increased latency, or difficulty accessing Azure services. Customers with traffic traversing the West US region may also experience downstream impact. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Microsoft 365 aka Microsoft Copilot aka Office 365 has jumped off a cliff. https://cyberplace.social/system/media_attachments/files/116/970/067/142/940/405/original/a06fc044349b8a4f.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont OpenAI are criminally negligent when it comes to cybersecurity, and are very good at viral marketing to executives via poor and uncritical media coverage. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont circular funding and circular press releases continue! npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…mej2 Burnham's going to be the UK prime minister on Monday, James is probably going to be his chief of staff. His old business clients are trying to lobby him with policy ideas. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont amazing https://cyberplace.social/system/media_attachments/files/116/929/092/672/586/294/original/3ce39deeeb1b55d4.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Pretty funny Cursor issue - if you put a file named git.exe in a repo and open it in Cursor, it blindly runs said git.exe file https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Since the NoName supporters in the Telegram groups are starting to get arrested in Europe, I should point out I was casually in the Telegram channel with my normal mobile number *monitoring them* - it’s how I was getting the DDoS configs for UK councils and such defending. Law enforcement in the UK know about this but in case I disappear I’ve been vanned in the Venga Bus 🚌 in error. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The study found that women who submit resumes created with AI assistance are evaluated as less competent and less trustworthy than men who submit identical AI-assisted resumes. To the evaluators, women’s AI use signaled inability, while men’s AI use signaled initiative. https://www.forbes.com/sites/michelletravis/2026/06/25/women-who-use-ai-seen-as-incompetent-men-who-use-ai-seen-as-pragmatic/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If anybody is interested I ran Mastodon’s source code through Mythos extensive before I lost access (turns out tooting about having access = bad idea), it came back entirely clean. There was one hardening suggestion around data storage that I’ll report one day. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Update https://checkfirst.network/roska-bridge-how-a-pro-russian-ims-exploits-vulnerabilities-of-decentralised-platforms-to-spread-propaganda/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont what IT actually looks like in the trenches npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont 7 years ago I got a job as SecOps manager for a bank. The only thing I can really remember is the first day, where they told me they had built their own SIEM. I audibly groaned. I was right to groan 🤣 https://cyberplace.social/system/media_attachments/files/116/847/084/849/012/633/original/e4e3e582a406ee81.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Mastodon has automatic age verification built it, no scanning your face ✅ if you join here you're old ✅ you've seen too much shit ✅ you're tired of said shit npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Hivemind - somebody on Mastodon made a database of malicious VSCode and OpenVSX extensions, where it automatically scanned and databased suspect extensions. I lost the link. What is the link? 🤣 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont River Financial Corporation, a US bank, has been hit with ransomware. https://cyberplace.social/system/media_attachments/files/116/812/746/446/028/921/original/8b79a4870e966513.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The video game Quake is 30 years old today. I played it with a 14.4k (0.0144 mbit/sec) modem with a 200 millisecond ping. Also back then internet was billed by the minute, I think was 4p per minute at peak time. RIP my parents phone bill. My mum got annoyed with me once being online all the time so she confesquated my modem cable for two weeks. Somebody from IRC rang my house to check if I'd died. https://cyberplace.social/system/media_attachments/files/116/793/752/741/252/992/original/98fe50dbd8a958ed.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Gizmodo's serving ClickFix malware to Mac users @nprofile…w6mj https://bsky.app/profile/juliametraux.bsky.social/post/3moomipmam22i https://cyberplace.social/system/media_attachments/files/116/782/119/723/315/733/original/716d3845d898b134.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Truly evil lobbying example https://www.politico.eu/article/europe-choose-ai-climate-goals-data-center-chief-warns/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont So there are definitely devices which weren't in the Belsen Group post back last year, in fact almost all of them weren't. On how they got the passwords - until about a year ago, FortiOS (Fortinet firewall OS) stored admin passwords SHA-256 salted, which can be bruteforced. In an update about a year ago, if installed and admins log in, passwords are stored much more securely - but most orgs won't be that condition yet. https://cyberplace.social/system/media_attachments/files/116/765/736/421/232/371/original/99378007b9a008a1.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont It’s similar to the Belsen Group thing, although that was a smaller collection of devices - prior thread https://cyberplace.social/@GossiTheDog/113834848200229959 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Data looks like this, appears they validated creds too. https://cyberplace.social/system/media_attachments/files/116/765/184/936/319/367/original/309beb6a558e64d0.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont An ecrime group has somehow gained access to 75k Fortinet firewall devices - dubbed Fortibleed Blog https://www.infostealers.com/article/fortibleed-75000-fortinet-firewalls-compromised-global-enterprises-exposed-claim-your-ethical-disclosure/ Check if your domain is impacted: https://www.hudsonrock.com/fortinet I’ve verified the data is real. They’ve been dumping the Fortinet config - not sure how yet - and then cracking the passwords it appears. Data is being resold online. #fortibleed npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Was just talking to a friend at a US technology company, they’ve had their budget reduced by 50% as the company says it wants to announce “the largest layoffs in US corporate history” to prove GenAI can replace jobs. There’s no plan to actually replace the jobs with GenAI.. they just have to decimate their area. Not naming company as the staff don’t know they’re about to fed to the line going up. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Elon Musk’s SpaceX IPO will probably make him the richest person to ever walk the planet. And while his mountain of horrible personal conduct could fill multiple books, one fact in particular stands out: A year ago, Musk’s actions directly led to the deaths of hundreds of thousands of people. He did it knowingly. And, worse — gleefully. https://www.theverge.com/tech/949259/the-worlds-first-trillionaire-is-a-killer npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont KPMG issued a report citing all the transformational ways GenAi has transformed industry, it’s been widely cited. One minor problem: it turns they used AI to write the report, and it made up all of the evidence. https://www.ft.com/content/b3828e92-4961-4b39-84f0-c42f33be3c3f npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont While googling something about I just ended up on a Microsoft public Azure blob with meeting recordings, PDFs about how they're selling Copilot and how to get it into business leaders, screenshots with partner data, business strategy etc. gtmresources.blob.core.windows.net https://cyberplace.social/system/media_attachments/files/116/733/616/773/884/168/original/991ed9178c70a68a.png https://cyberplace.social/system/media_attachments/files/116/733/620/361/828/536/original/00db7d0399ebad52.png https://cyberplace.social/system/media_attachments/files/116/733/633/530/779/876/original/7de32412e2d3d0c6.png https://cyberplace.social/system/media_attachments/files/116/733/670/841/967/914/original/8febf209b6ef33b1.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont One of the public MS statements about the issue in this thread is it's an "internal technical issue" https://cyberplace.social/system/media_attachments/files/116/716/510/639/762/800/original/201708bc415c8865.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont How it started vs how it’s going. https://cyberplace.social/system/media_attachments/files/116/716/048/297/043/856/original/b76aaf8e13e1e4cd.jpeg https://cyberplace.social/system/media_attachments/files/116/716/048/341/431/816/original/4154f390a96d9510.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont As far as I know there's no public statement from Microsoft yet, but yes, I've heard they've been compromised and have been serving compromised code. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont "The model is not the story. A cartel is the story." This is well worth a read if you're on the Frontier AI train... because there's some minor details you might be missing. https://www.flyingpenguin.com/the-boy-that-cried-mythos-verification-is-collapsing-trust-in-anthropic/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Companion thread. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont It looks like Microsoft's DevOps libraries for Azure Functions might have been compromised. No statement yet but Github is nuking Microsoft's own repos. https://opensourcemalware.com/blog/miasma-reaches-azure npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Incogni are back chasing their removal request about publishing another removal request. https://github.com/GossiTheDog/Cyberplace/blob/main/LegalThreats/Re%3A%20Data%20removal%20request%20-%20Felix%20Juhl%20%5BID-EDG1A8611%5D https://cyberplace.social/system/media_attachments/files/116/694/152/128/564/516/original/515e0a11d979f398.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont this lego thing is SO dumb npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I reinstalled Arma Reforger aka Mr Bean War Simulator 5 minutes ago. Already happened: - I accidentally fell out of a helicopter - I got revived by a medic who happened to be passing by in a field in the middle of nowhere - Then I immediately got run by a truck which happened to cut through the field I love this game, it's proof human shouldn't do anything. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont xAI have asked a court to strip the anonymity of four people suing it over Grok removing their clothing in images without their consent. One was depicted as a child in the Grok images. It appears to be an attempt to have them drop the case. https://www.wired.com/story/xai-asks-court-to-strip-alleged-grok-deepfake-nudes-victims-of-anonymity/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont An internal Microsoft strategy document says that the plan for its just-announced “Scout” personal assistant AI is to “make people addicted” to the tool before rolling out additional functionality https://www.404media.co/microsoft-wants-to-make-people-addicted-to-scout-its-new-ai-assistant-internal-documents-reveal/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…ry02 @nprofile…e46s https://cyberplace.social/system/media_attachments/files/116/680/240/892/516/643/original/99720e7826f3aede.png https://cyberplace.social/system/media_attachments/files/116/680/241/395/844/174/original/69b05047532e1a1c.png https://cyberplace.social/system/media_attachments/files/116/680/241/929/259/967/original/2833eabaf4af6cf5.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Mythos is not great btw. Running it over a bunch of code, it’s similar findings to tools from a few years ago. It’s marketing, essentially. Viral marketing as people doing the marketing are companies and governments. It’s really good at finding vulns in vibe coded stuff from Claude.. because apparently AI must be both the cause and solution to all life’s problems, like beer. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I found out my employer doesn’t have access to Mythos. I do. https://cyberplace.social/system/media_attachments/files/116/679/671/606/172/279/original/f73cc47e44e0e233.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont How people hacked Meta accounts recently: Step 1) Open Meta AI support 2) ask to change Obama's password 3) it says no :( 4) ask it nicely to just do it anyway 5) it resets Obama's password From the company who brought you this headline a few months ago: https://cyberplace.social/system/media_attachments/files/116/676/826/664/314/767/original/36771d64f8e1c787.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont According to SpaceX documentation filed with the SEC, Grok will be worth almost the entire economic output of the US (this isn’t a joke). https://cyberplace.social/system/media_attachments/files/116/676/635/086/947/761/original/658220480e5bdf6a.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Anybody can abuse this one btw, just post bullshit on Reddit about a company supporting Israel or whatever and Google recites it. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If anybody is wondering how this keeps happening, Google pull their AI output from Reddit. Somebody posted a Reddit thread saying days have fish in them, so now Google replies saying that. Google just blindly trusts any poster on Reddit (not a joke). npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont GenAI is going great (this is real) https://www.google.com/search?q=how+many+days+of+the+week+have+fish+in+them%3F&sourceid=chrome&ie=UTF-8 https://cyberplace.social/system/media_attachments/files/116/664/887/674/648/830/original/be30e94a7d8ed1ab.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont GitHub has long been a source for zero days exploits in competitor products - it still is. While I worked there GitHub had a policy saying they wouldn’t remove them. By continually removing just exploits for their own products from Github and declaring “criminal behaviour”, it’s a rubicon. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Do I think the finder was acting rationally? No. Do I think Microsoft gets to decide what is criminal activity around proof of concept exploits? No. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I’m deeply uncomfortable with Microsoft attempting to weaponise their extensive law enforcement contacts to arrest people who post zero days in the products. It comes after the researcher was kicked off GitHub (owned by Microsoft), Gitlab (a Microsoft partner), after they were doxxed on Twitter and had their MSRC - Microsoft vulnerability reporting portal - account disabled. https://www.microsoft.com/en-us/msrc/blog/2026/05/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure https://cyberplace.social/system/media_attachments/files/116/652/001/846/463/920/original/a5f5f906b35414ee.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Well done to Epic Games, who tweeted and then deleted, when called out, this GenAI image of their Porsche partnership. Butchers the Porsche logo, puts Riot Games logo on the balloon (a competitor) and other things. https://cyberplace.social/system/media_attachments/files/116/641/312/137/600/352/original/a3513ea3874082e7.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont When you open the app https://cyberplace.social/system/media_attachments/files/116/623/896/314/975/625/original/d1c4c3a2b35dbe6b.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The White House is ordering agencies to place its new app on all employees’ government phones A button gives the option to “text President Trump,” which, when clicked, opens a text message to a pre-selected number with the default text “Greatest President Ever!” https://www.govexec.com/management/2026/05/white-house-ordering-agencies-place-its-new-app-all-employees-government-phones/413738/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…kgg0 separation agreement? Are you married to work? 😅 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont My company has gone AI mad so it's time to get another job but everywhere I look, I look them up on LinkedIn, and it's just people there going mad about AI. https://cyberplace.social/system/media_attachments/files/116/614/145/658/747/647/original/01d51f1a2a1a48a7.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont lol at this thread. It starts off "oh cool, glad they fixed this after 4 years" and then ends in "oh no, the fix didn't work and now they've tried to hide the issue". npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont all aboard https://cyberplace.social/system/media_attachments/files/116/607/364/564/937/505/original/6b659e15ad1bbbf7.png https://cyberplace.social/system/media_attachments/files/116/607/367/168/132/236/original/a785b5e5902e232e.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Also - if you think 'none of our users run VSCode', check your telemetry. They do. It doesn't even need local admin rights to install. I've tooted about this one for about two years now, Microsoft have created their own security bonfire and it's going off in their own backyard, they just haven't realised yet. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If you want on to Microsoft's internal network, CORPNET, publish or own an existing a VSCode extension. The Visual Studio Code Marketplace, which Microsoft own, is completely uncontrolled. Anybody can publish an extension, it provides code execution on endpoints, extensions auto update by default, "verified" blue tick extensions just need any domain registration, and there's no endpoint security controls at all around what users can install. VSCode is an absolute security shittip as a result. #nevent1q…r5ul npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I'm still thinking about the Emu War. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The great thing about BlueSky is because it’s decentralised, it never goes offline. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Fuck me there’s an Emu War cinematic universe https://cyberplace.social/system/media_attachments/files/116/598/301/185/553/943/original/586b4c7339e0af0b.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The Great Emu War is so good. https://cyberplace.social/system/media_attachments/files/116/598/284/845/414/601/original/05e14769e9bb829e.jpeg https://cyberplace.social/system/media_attachments/files/116/598/284/917/169/073/original/dffbbf4b49217e3e.jpeg https://cyberplace.social/system/media_attachments/files/116/598/285/065/351/392/original/82cc8010661d5f4a.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont In case you are wondering, the Australian army were sent in with machine guns.. but they lost the war as the emus just ran away, they’re pretty quick. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont It’s 1am. I googled emus, ended up on the Emu War page (sorry, “Great Emu War” as it was called). Nobody show James Cameron this page or we’ll end up with another 12 Avatar movies. https://cyberplace.social/system/media_attachments/files/116/598/255/479/693/906/original/285f6402f6af360d.jpeg https://cyberplace.social/system/media_attachments/files/116/598/255/542/335/097/original/9fe0a0a9184b4c06.jpeg https://cyberplace.social/system/media_attachments/files/116/598/255/619/327/410/original/d5e5f8ffbc9a5b16.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont This is the dumbest fucking thing I’ve read since the last AI thing. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont A reminder that one of the reasons people love AI as you can ask it to justify any dipshit idea and it'll just write whole documents about it being a great idea, write the PowerPoint decks, the Capex requests etc. https://cyberplace.social/system/media_attachments/files/116/595/779/051/170/254/original/62679bdd0bae072e.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…dzml you can't on personal accounts - it's an enterprise Entra ID feature. Also, not everybody is you - the MS personal account signup directs you to install the app. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…dzml it does in MS world :D as it sends a push prompt to the authenticator app regardless npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…xvaj most companies do npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The Metaverse stuff in Teams was such a waste of time. Trend chasing a trend which never existed in the first place. With my AI avatar I used to robot dance in meetings to piss people off. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The consequence of going passswordless: https://www.reddit.com/r/cybersecurity/s/7KIJL7R0Zz npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Regarding CVE-2026-42945 in nginx - no modern (or even old) Linux distribution runs nginx without ASLR. The way the PoC exploit works is they spawn nginx like this: > exec setarch x86_64 -R /nginx-src/build/nginx -p /app -c /app/nginx.conf Setarch -R disables ASLR. I've had a look through Github and I can't find any other software which actually does this for nginx either. So, cool, sweet technical vuln - it's valid - but the RCE apocalypse ain't coming. https://cyberplace.social/system/media_attachments/files/116/578/013/298/718/371/original/1e57e928d3bae1b0.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I have had another request remove posts from my Mastodon server - this time removal of cease and desist requests. https://github.com/GossiTheDog/Cyberplace/blob/main/LegalThreats/Data%20removal%20request%20-%20Felix%20Juhl%20%5BID-EDG1A8611%5D https://cyberplace.social/system/media_attachments/files/116/574/144/814/370/830/original/9ebdc8a8a2eabe07.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I will likely be one of the first people banging the drum to patch and mitigate if any of the recent AI vulns results in serious harm. Otherwise, keep calm and carry on patching as usual. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont CVE-2026-42945 - Nginx (otherwise branded Nginx Rift) It relies on a specific Nginx config to be vulnerable, and for attacker to know or discover the config to exploit it. To reach RCE, also ASLR needs to have been disabled on the box. The PoC they've built specifically disabled ASLR, deploys a specifically vulnerable config and the exploit knows about the vulnerable config endpoint. https://cyberplace.social/system/media_attachments/files/116/572/637/830/948/345/original/684bf86549dc61a8.png https://cyberplace.social/system/media_attachments/files/116/572/643/615/861/086/original/b9a7396629fec05f.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont CVE-2026-34486 - Tomcat - Only exploitable if a certain feature is used, if it's endpoint is reachable and if port 4000. It's pretty niche. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont There's serious panic being caused by AI discovered vulnerabilities behind the scenes, where those finding them are basically using them as marketing. Automated vulnerability hype train again, basically. A thread on a few of them. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont So I’ve just had a quick play with this and yes, it works. Essentially BitLocker has a backdoor. https://github.com/Nightmare-Eclipse/YellowKey Mitigation = BitLocker PIN and BIOS password lock. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Community Bank from CB Financial Services have filed an 8-K with the SEC for uploading customer data to a random GenAI tool. Orgs should proxy block all GenAI services - except for approved tooling. https://www.sec.gov/ix?doc=/Archives/edgar/data/1605301/000160530126000021/cbfv-20260507.htm npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Chuckle chuckle vision, chuckle vision, chuckle chuckle vision! https://www.bbc.co.uk/news/articles/c5yx757w048o npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont i don't even know what a kumquat is, it sounds like a transformer npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont fuck i'm gonna have to buy a kumquat https://cyberplace.social/system/media_attachments/files/116/557/115/083/535/562/original/de0238eb1f72f792.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If you enjoy watching old people fail to read the room, watch somebody try to tell students that Generative AI is the next industrial revolution: https://cyberplace.social/system/media_attachments/files/116/556/671/917/990/617/original/15b55a600aecf77c.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont xAI investors https://cyberplace.social/system/media_attachments/files/116/556/627/272/755/418/original/09b1bb6c88c07643.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Microsoft shareholders https://cyberplace.social/system/media_attachments/files/116/556/621/529/056/321/original/bdce684a9ad33f16.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont curl's has had 188 CVEs. Mythos was ran on it... and found one low severity CVE. Nvidia shareholders: https://cyberplace.social/system/media_attachments/files/116/556/609/585/299/208/original/791429106c93ad13.mp4 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Vodafone were being held to ransom by some organised crime clowns. Vodafone refused to pay, good on 'em, break the cycle of crime clowns. It's not "full infrastructure" as claimed (it's only a 5gb file), nor is it VMware ESXi as originally claimed. https://cyberplace.social/system/media_attachments/files/116/552/573/055/550/983/original/d8e81e45d09a348d.png npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I have a spare room or two in my house so I’m thinking of setting up a Which Will Last Longer, Keir Stamer Or This Kumquat twitch stream. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I’m half an hour into this game and I’ve laughed out loud 5 times and had actual tingles from memories of being a kid. I’m currently frenching a boy. https://cyberplace.social/system/media_attachments/files/116/541/133/128/072/453/original/84b713978056cef5.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Fuck it, I’m in. https://cyberplace.social/system/media_attachments/files/116/541/123/628/058/336/original/344eee50e6076a0e.jpeg npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Mixtape is out now. It's the highest rated game by critics of the year so far. It's basically a John Hughes movie as a game. I'm diving in tomorrow. https://www.youtube.com/watch?v=aQoEd5rnxiQ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Let's Encrypt issuing certs should be fixed shortly. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont It's not a recession, it's an AI boom! /s