Tootfinder

Wow! Using Valinet ExplorerPatcher to change the Windows 11 File Explorer back to the Windows 10 style UI makes it SO MUCH FASTER! https://github.com/valinet/ExplorerPatcher/

Horizontal and vertical exoplanet thermal structure from a JWST spectroscopic eclipse map: #exoplanets into focus: https://news.cornell.edu/stories/2025/10/now-3d-maps-begin-bring-exoplanets-focus

Explosion at Kyiv postal office injures five people: https://benborges.xyz/2025/10/30/explosion-at-kyiv-postal-office.html

Brash: Chromium Browser DoS Attack via document.title Exploitation
Brash is a critical vulnerability in Blink, the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM operations are managed.
😬 https://brash.run

Brash: Chromium Browser DoS Attack via document.title Exploitation
Brash is a PoC exposing a critical Chromium vulnerability that enables a browser DoS attack by exploiting the total absence of rate limiting on document.title updates.

Peter Williams, the former general manager at defense contractor L3Harris,
has pleaded guilty to selling surveillance technology to a Russian broker that buys “cyber tools,”
the U.S. Department of Justice confirmed Wednesday. 
“The material, stolen over a three-year period from the U.S. defense contractor where he worked,
was comprised of national-security focused software that included at least eight sensitive and protected cyber-exploit components,”
read the D…

Former L3Harris Trenchant boss pleads guilty to selling zero-day exploits to Russian broker | TechCrunch
Prosecutors confirmed Peter Williams, the former Trenchant boss, sold eight exploits to a Russian buyer. TechCrunch exclusively reported that the Trenchant division was investigating a leak of its hacking tools, after another employee was accused of involvement.

I hope no-one minds the occasional moment of self-promotion. We've all gotta pay the bills.
@… https://mstdn.business/@ecoflap/115633011344656890

Ecoflap Home Draughtproofing (@ecoflap@mstdn.business)
Attached: 4 images Hi #caturday folk. If you're looking for a #draughtproof catflap and would like to buy from a small, family-owned business in the UK then may we suggest our Petflap? It's available in three - soon to be four - standard trunking lenths from 35-70mm (90mm coming soon), bespoke models with long trunking are available and we ship to most countries. You can find us at https://www.thepetflap.com/ Enquiries always welcome. #catsofmastodon

Don't get whipsawed by the overwhelming amount of cybersecurity news. Check out today's Metacurity for a concise rundown of the critical infosec developments you should know, including
--Former defense firm GM pleads guilty to selling cyber exploits to Russia,
--Nation-state hackers breached key US telecom services firm Ribbon Communications for nearly a year,
--US government agencies back bid to ban TP-Link routers,
--Hacktivists breached Canadian critical inf…

Former defense firm GM pleads guilty to selling cyber exploits to Russian broker
Nation-state hackers breached key US telecom services firm Ribbon Communications for nearly a year, US government agencies back bid to ban TP-Link routers, Hacktivists breached Canadian critical infrastructure, Python Foundation rejected US grants that required DEI deletions, much more

Explosions reportedly rock Russia's Khanskaya military airfield: https://benborges.xyz/2025/12/29/explosions-reportedly-rock-russias-khanskaya.html

»Exploit-Code verfügbar — DNS-Einträge unzähliger Bind-Server manipulierbar:
Angreifer können via Cache-Poisoning Datenverkehr auf eigene Domains umleiten. Allein in Deutschland sind laut BSI rund 40.000 DNS-Server anfällig.«
Mist aber auch, dem muss ich wohl nun nachgehen ob ich und/oder Kunden davon ebenfalls betroffen sind und wie behebt mensch das?
🔓

Exploit-Code verfügbar: DNS-Einträge unzähliger Bind-Server manipulierbar - Golem.de
Angreifer können via Cache-Poisoning Datenverkehr auf eigene Domains umleiten. Allein in Deutschland sind laut BSI rund 40.000 DNS-Server anfällig.

The White House pressed U.S. Navy officials to launch 2,000-pound live bombs instead of dummy explosives during an elaborate military demonstration for the service’s 250th anniversary celebration that Donald Trump attended,
Original planning for what the Navy dubbed the Titans of the Sea Presidential Review called for military personnel to use dummies and not live bombs
One person familiar with the planning said White House officials insisted to Navy planners that Trump “needed t…

Why the White House wanted live bombs, not dummies, for Navy celebration
The White House pressed Navy officials to launch 2,000-pound live bombs instead of dummy explosives during a recent military demonstration for the service’s 250th anniversary celebration that President Donald Trump attended. That's according to two people familiar with planning for the event. One of the people familiar with the planning said White House officials insisted to Navy planners that Trump “needed to see explosions” instead of just a “big splash.” This comes as the administr…