#security

French supermarket chains say cyberattack forced refrigerator shutdown via @cesarsagaert@hachyderm.io https://lobste.rs/s/u4vlin #security https://www.afp.com/en/french-supermarket-chains-say-cyberattack-forced-refrigerator-shutdown

AI did not create the FFmpeg MagicYUV bug. But it did create the patch race: faster discovery, faster reports, faster releases, and the same old human bottleneck of verifying what is actually running. Mastodon 4.6.2 was basically a one-line FFmpeg Dockerfile update. That tiny change says a lot. https://s.ee/5b6J #OpenSource #Security #Mastodon #AI

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇 #Apple #privacy #infosec #security #macOS https://youtu.be/0bOC8S3NQxI

Innovation Labs by Identity Digital Convenes Infrastructure, Security, and Finance Leaders to Help Shape Accountability Framework for AI Agents https://www.globenewswire.com/news-release/2026/06/30/3319580/0/en/innovation-labs-by-identity-digital-convenes-infrastructure-security-and-finance-leaders-to-help-shape-accountability-framework-for-ai-agents.html ― Developing response to growing challenge in AI: establishing persistent ownership and accountability for agents operating across platforms, organizations, and environments ― David Conrad, Charles Ryan, Paul Sagan, Teresa Shea and Corey Thomas among founding members of Advisory Council following the launch of DNSid #AI #DNSid #accountability #Internet #infrastructure #agent #security #finance

I audited #OpenReception, a recently released open-source appointment booking platform. Found and reported 16 vulnerabilities, now 16 CVEs assigned.

4 critical:

• WebAuthn passkey injection → account takeover
• tenant admin self-promotes to GLOBAL_ADMIN
• unauth GLOBAL_ADMIN account creation
• staff crypto poisoning breaks the E2E recipient directory

rest: info disclosure, stored XSS, auth and IDOR bugs, all patched before public disclosure.

https://moltenbit.net/disclosures/

#infosec #security #CVE

Reporting vulnerabilities to Estonian companies via @hugoarnal@mastodon.social https://lobste.rs/s/roij3t #video #security https://www.youtube.com/watch?v=4gcSlBORoTI

Hacking the Eufy Doorbell and Base Station https://lobste.rs/s/e84scc #hardware #security https://adepts.of0x.cc/Eufy-DoorBell-hacking/

Kundendaten bei Dienstleister abgeflossen: Datenschutzvorfall beim Lidl-Shop Unbekannte konnten auf eine Datei mit Kundendaten zugreifen und stahlen persönliche Kundendaten. Lidl hat reagiert und betroffene Kunden angeschrieben. https://www.heise.de/news/Kundendaten-bei-Dienstleister-abgeflossen-Datenschutzvorfall-beim-Lidl-Shop-11361337.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon #Datenbanken #IT #Security #news

#America's Secret #Database #FISA #Privacy #Security #Surveillance #MassSurveillance #NaomiBrockwellTV #ythttps://youtu.be/1nKGNcj32L8

Another Unbound security release is now available, addressing a large set of multi-vendor vulnerabilities. In total, Unbound 1.25.2 fixes 24 CVEs. Many thanks to the security researchers who responsibly reported these issues. Release details: https://community.nlnetlabs.nl/t/unbound-1-25-2-released/3430 #DNS #DNSSEC #Security

1-click MMI execution in Android https://lobste.rs/s/txa6dj #android #security https://karansaini.com/mmi-android/

A Practical Guide to “Plug&Pwn” for Pentesters and Defenders https://lobste.rs/s/yrcmjj #security https://blog.scrt.ch/2026/10/06/a-practical-guide-to-plugpwn-for-pentesters-and-defenders/

1. Incommunicado detention

"In normal times, a person who is targeted by the Israeli Security Agency, is arrested by the military, then taken into interrogation in a specific location operated by the I.S.A. […] "But those are the cases that we would learn about only months from now because all of them are still denied counsel. The I.S.A. does not allow visitors, and we’re unable to reach them."

#secrecy #services #secretAgents #security #counterTerrorism #israel #israelPalestine #warCrimes

Telegram Desktop: one-click account takeover via IPC injection https://lobste.rs/s/vq6ly4 #security https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/

NEW: Records show Texas Attorney General Ken Paxton has taken nearly 1,000 trips during his tenure, costing $3.3 million in security. We could only connect 138 of those trips and $553,000 in security costs to state business. https://www.propublica.org/article/ken-paxton-travel-security-costs?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post#News #KenPaxton #Texas #TX #USPolitics #Security #Travel #Money #Ethics

The best possible #security for @FirefoxOfficial@mastodon.social -based, #chromium -based and @torproject@mastodon.social#browsers 🚫🧅. Thank you @OpenTechFund@mastodon.social for funding this independent @noscript@mastodon.social audit ❤️ https://www.opentech.fund/security-safety-audits/noscript-security-suite/

en-html.org is a Scam Site via @edwintorok@discuss.systems https://lobste.rs/s/85k8am #security #web https://etbe.coker.com.au/2026/10/09/en-html-org-scam-site/

Hello, my name is Orca via @goldstein@im-in.space https://lobste.rs/s/ffn6sm #a11y #linux #security https://linnemanlabs.com/posts/hello-my-name-is-orca/

TIL: KeePassXC has built-in support for TOTP code generation. How have I never discovered this in all the years I have been using KeePassXC?? cc: @keepassxc@fosstodon.org#security #software #keepassxc #totp #mfa #2fa

🔴 Explosion | 8/10 🇮🇷 Explosions in Bandar Abbas (Iran) Explosions were reported to have been heard near the city of Bandar Abbas (Iran). #OSINT #NewsGroup #Iran #Explosion #Security