Tootfinder

It was the flames talking... :nes_fire:⁠:elmo_fire:⁠:nes_fire:

Metacurity is back after our hiatus, and we're shaking things up. Check out today's issue for a special report and a recap of the top infosec developments of the past two weeks, including
--More on DOGE and that insecure database at SSA…,
--UK's age ID law pushes users to non-compliant sites,
--Noem fires FEMA workers for failing basic security protocols,
--UNC6395 stole mass of authentication tokens from Salesloft,
--A hacker used Anthropic's Cl…

More on DOGE and that insecure database at SSA…
UK's age ID law pushes users to non-compliant sites, Noem fires FEMA workers for failing basic security protocols, UNC6395 stole a mass of authentication tokens from Salesloft, A hacker used Anthropic's Claude in crime spree, Salt Typhoon struck at least 200 organizations and 80 countries, more

N.B.: I don’t know whether Wendy can play poker, but the one thing I KNOW about poker is that you NEVER play against someone who insists that they’re lousy. https://infosec.exchange/@wendynather/114955733770668316

Ever get the feeling you're being watched?
Me: I have cats. I'm always being watched.

Weekend Reads
* URI redirection patterns https://arxiv.org/abs/2507.22019
* AI and college grad jobs https://www.

Not Here, Go There: Analyzing Redirection Patterns on the Web
URI redirections are integral to web management, supporting structural changes, SEO optimization, and security. However, their complexities affect usability, SEO performance, and digital preservation. This study analyzed 11 million unique redirecting URIs, following redirections up to 10 hops per URI, to uncover patterns and implications of redirection practices. Our findings revealed that 50% of the URIs terminated successfully, while 50% resulted in errors, including 0.06% exceeding 10 hops. …

https://www.nextgov.com/people/2025/08/noem-terminates-24-fema-workers-failing-address-cyber-vulnerabilities/407807/
Noem terminates 24 FEMA workers for failing to address cyber vulnerabilities

Noem terminates 24 FEMA workers for failing to address cyber vulnerabilities
An internal FEMA email obtained by Nextgov/FCW ordered all agency employees to change their passwords “due to recent cybersecurity incidents and threats.”

https://www.wired.com/story/charles-borges-resignation-email-disappearance/
SSA Whistleblower’s Resignation Email Mysteriously Disappeared From Inboxes

SSA Whistleblower’s Resignation Email Mysteriously Disappeared From Inboxes
Less than 30 minutes after the Social Security Administration’s chief data officer resigned following a whistleblower complaint, recipients could no longer access the resignation email.

:crt_w_prompt:

CFDS - Cat Food Delivery System