Tootfinder

Investigation: three US Treasury hacks in the past five years were due to a failure to deploy basic security measures, as DOGE cuts further weaken the agency (Bloomberg)
https://www.bloomberg.com/news/features/20

NCSC verwacht snel grootschalige hacks via nieuw Citrix NetScaler-lek
https://tweakers.net/nieuws/238460/ncsc-verwacht-snel-grootschalige-hacks-via-nieuw-citrix-netscaler-lek.html

NCSC verwacht snel grootschalige hacks via nieuw Citrix NetScaler-lek
Het Nederlandse NCSC waarschuwt voor grootschalig misbruik van drie nieuwe kwetsbaarheden in Citrix NetScaler. De kwetsbare configuratie komt veel voor, blijkt uit onderzoek van het NCSC. Aanvallen op de kritiekste kwetsbaarheid zijn al waargenomen door Citrix.

Iran-linked group hacks Trump aides' emails: Officials slam "smear campaign"
https://www.axios.com/2025/07/01/iran-trump-aides-email-hack-threat

https://www.bloomberg.com/news/articles/2025-06-25/british-man-charged-by-us-in-intelbroker-company-data-hacks
British Man Charged by US in ‘IntelBroker’ Company Data Hacks

The SharePoint hacks increase pressure on Microsoft's Secure Future Initiative, which the company calls an ambitious effort expected to take years to complete (Andrew Martin/Bloomberg)

SharePoint Hacks Turn Up the Heat on Microsoft's Cyber Overhaul

Well put, the “averaging effect of #AI.”
What’s the equivalent for writing? That’s what’s on my mind recently. Sure, keep your style. But do we need smth else? Add more styles, punctuation hacks, whatnot?
https://www.…

A lot happened in the cybersecurity world over the weekend, so don't miss today's Metacurity for the most critical developments you should know, including
--Aeroflot grounded by 'crippling cyberattack' as Silent Crow takes credit,
--Microsoft probes early alert system leak tied to SharePoint hacks,
--Women’s Tea app hit with photo leak,
--Allianz Life confirms major data breach,
--Hackers claim Naval Group breach,
--US senator urges Musk to …

Aeroflot grounded by 'crippling cyberattack' as Silent Crow takes credit
Microsoft probes early alert system leak tied to SharePoint hacks, Women’s Tea app hit with photo leak, Allianz Life confirms major data breach, Hackers claim Naval Group breach, US senator urges Musk to block SpaceX cyberscammers, much more.

I also finally got around to setting up a local Wallabag instance running in a FreeBSD jail on the home server, and applying the requisite hacks to my Kobo to replace its now-gone Pocket support (shakes fist at Mozilla)
https://jqno.nl/post/2025/06/04/reading-b…

Reading blogs on my Kobo e-reader via Wallabag
In which I compare two options for reading blog posts on my e-reader, using the Wallabag read-it-later service.

I have to use #Gitlab CI at $work, and I'm surprised how clunky it is.
CI Components are not real components, they just dump YAML into a global namespace, needing hacks to customize them.
There's no reusability at the granularity of Github Actions (other than concatenation of bash scripts).
I keep running into dead ends. I check Gitlab's own bug tracker to see if an…

Scattered Spider has successfully breached the computer networks of multiple airlines in the United States and Canada this month according to the FBI and experts.
https://www.cnn.com/2025/06/28/business/cyberattacks-airlines-fbi-criminal-group

Rampant cybercriminal group targets US airlines
A notorious cybercriminal group has shifted its attention to the aviation industry, successfully breaching the computer networks of multiple airlines in the United States and Canada this month, according to the FBI and private experts responding to the hacks.

https://cointelegraph.com/news/crypto-hacks-2025-cybersecurity-war-human-behavior
CertiK predicts ‘endless war’ with crypto hackers after $2.5B stolen

For quick roasted veggies, preheat the oven with the baking sheet inside. That way, the baking sheet is already hot when you add the vegetables. Veggies cook faster, get crispier, and you don't even have to flip them mid-way. #Cooking #Hacks

@tripplehelix@polymaths.social I'm also trying out Vivaldi—there's a whole bunch of hacks from folks who want to make it look like Arc, but… so much work 😩

»16 Milliarden Zugangsdaten – Kein neuer Leak, viele alte Daten:
Eine Meldung eines angeblichen Datenlecks von 16 Milliarden Zugangsdaten macht derzeit die Runde. Vieles davon ist jedoch alt.«
Auch die alten Daten können zur Unsicherheit führen, da nicht überall alles aktualisiert wird - weshalb auch immer. Trotz all dem sollte mensch die Aufmerksamkeitspanik im Sommerloch skeptisch nachgehen und nicht jegliches als Zero-Day Hacks wahrnehmen.
🤫

16 Milliarden Zugangsdaten: Kein neuer Leak, viele alte Daten
Eine Meldung eines angeblichen Datenlecks von 16 Milliarden Zugangsdaten macht derzeit die Runde. Vieles davon ist jedoch alt.

Apple fixes an iPhone zero-day used in Paragon spyware hacks after a Citizen Lab report found two European journalists had their iPhones hacked with the spyware (Lorenzo Franceschi-Bicchierai/TechCrunch)
https://techcrunch.com/2025/06/12/appl

Apple fixes new iPhone zero-day bug used in Paragon spyware hacks | TechCrunch
The iPhone maker quietly updated a February security advisory to publicize a flaw that was used to hack at least two journalists in Europe.

Ukraine's military intelligence agency (HUR) has gained access to sensitive data of Russia's strategic aircraft manufacturer Tupolev
Tupolev, a Soviet-era aerospace firm now fully integrated into Russia's defense-industrial complex, has been under international sanctions since 2022 for its role in Russia's war against Ukraine.
Its bombers have been widely used to launch long-range cruise missiles against Ukrainian cities and infrastructure.
According to the so…

'There is nothing secret left' — Ukraine hacks Russia's Tupolev aircraft manufacturer, source claims
HUR's cyber corps accessed over 4.4 gigabytes (GB) of internal data, including official correspondence, personnel files, home addresses, resumes, purchase records, and closed meeting minutes, a source claimed.

It's impressive how much crypto theft can be automated using ChatGPT to monitor wallets and then automatically pluck out currency.
North Korean hackers automate crypto crime with ChatGPT
https://cointelegraph.com/magazine/chatgp…

What a beautiful game, I will surely play it again, I beat this game on real hardware in monochrome back in the day but this ROM hack is so good. The image bring me a lot of nostalgia :'). Kudos for the author \o/
https://www.romhacking.net/hacks/3784/

Chainalysis: $2.17 billion in crypto stolen in first half of 2025, driven by North Korean hacks https://therecord.media/chainalysis-crypto-stolen-billions

Habe gerade die Änderungen von macOS am Ausgangs-Unix als "Hacks" bezeichnet und hoffe jetzt drückt niemand in Cupertino auf den großen roten Nuke-Button.

US prosecutors charge Kai West, who is known as IntelBroker and was arrested in February in France, with conspiring to steal data from dozens of companies (Chris Dolmetsch/Bloomberg)
https://www.bloomberg.com/news/articles/20

'Nothing secret left' — Ukraine hacks Russia's Tupolev bomber producer, source claims
https://kyivindependent.com/there-is-nothing-secret-left-ukraine-hacks-russias-tupolev-aircraft-manufacturer-source-claims/

Systemic change > Life hacks

Focus and Context and LLMs | Taras' Blog on AI, Perf, Hacks
#AI

i've upgraded the Ethernet controller applet for #GlasgowInterfaceExplorer
this is the main loop of the applet working in bridge mode (acting as a network card for your PC). no weird optimizations, no hacks, just a loop that forwards packets in normal boring Python
on a 100BASE-T link, i get ~95.5 Mbps [saturated link] of upload bandwidth and ~70 Mbps of downlo…

A US judge sentences Noah Urban, a member of Scattered Spider, to 10 years in prison in connection with a string of major hacks and cryptocurrency thefts (Margi Murphy/Bloomberg)
https://www.bloomberg.com/news/articles/2025-…

"We're becoming the soft, floating people from Wall-E. Ordering everything to our doorstep, swiping instead of talking, letting AI write our emails and create our art. Convenience is stealing everything from us if we let it. The friction is where the growth happens. The resistance is where we build strength. Work, real work, will give us fulfillment in ways we never expected, in ways that all the optimization hacks and life shortcuts never could."

why are we lying to young people about work?
hard work isn't the tax you pay for living, it's the tuition for a life worth having -your fav gen z philosopher x

Scattered Spider Member Sentenced to 10 Years in String of Hacks
https://www.bloomberg.com/news/articles/2025-08-20/scattered-s…

»IT-Security – Cyberangriff auf "Nius": Wohl Daten von 5700 Abonnenten geleakt.
Die Angreifer nutzten Sicherheitslücken, um Zugriff auf die Datenbank zu erhalten«
Einer der seltensten Hacks die ich mal nicht nur stillschweigend bejahend bin, sonder auch hier teile.
👉

Cyberangriff auf "Nius": Wohl Daten von 5700 Abonnenten geleakt
Die Angreifer nutzten Sicherheitslücken, um Zugriff auf die Datenbank zu erhalten

Senate panel passes Intelligence Authorization Act that takes aim at telecom hacks https://therecord.media/senate-panel-passes-intel-act-salt-typhoon-china

A Trio of US Treasury Hacks Exposes a Pattern Making Banks Nervous
https://www.bloomberg.com/news/features/2025-06-30/us-treasury-hacks-exposes-pattern-of-federal-security-missteps-report-finds

Percentages are reversible, so 6% of 50 is equal to 50% of 6; which is much easier to calculate. #Daily #Education #Hacks #LifeHack

French cybersecurity agency confirms government affected by Ivanti hacks https://therecord.media/france-anssi-report-ivanti-bugs-exploited

UK police arrest four people, a 20-year-old woman and three men age 17 to 19, in relation to the M&S and Co-op hacks, which started in April and caused havoc (Joe Tidy/BBC)
https://www.bbc.com/news/articles/cwykgrv374eo

Four arrested in connection with M&S and Co-op cyber attacks
Three men and one woman - aged between 17 and 20 - have been arrested in London and the midlands.

Cybersecurity Flaws Plagued EU Border Control System, Audit Shows
https://www.bloomberg.com/news/articles/2025-07-02/europe-s-schengen-border-software-vulnerable-to-hacks-audit-says

Experts say ransomware group DragonForce, which targeted M&S, Harrods, and the Co-op, started a turf war with rival RansomHub, potentially bringing more hacks (Kieran Smith/Financial Times)
https://www.ft.com/content/22cb54ef-1611-4aef-b671-16316280e3fb

Sources: Chinese hackers breached a US telecom company in the summer of 2023, a year before US officials and cybersecurity firms detected the Salt Typhoon hacks (Jake Bleiberg/Bloomberg)
https://www.bloomberg.com/news/articles/20

Qualcomm releases patches to fix a series of vulnerabilities in dozens of chips, including three zero-days that "may be under limited, targeted exploitation" (Lorenzo Franceschi-Bicchierai/TechCrunch)
https://techcrunch.com/2025/06/03/phon

Phone chipmaker Qualcomm fixes three zero-days exploited by hackers | TechCrunch
Google's Threat Analysis Group, which investigates government-backed hacks, was credited with the discovery of the zero-days.

SentinelOne researchers detail over 10 offensive cybersecurity patents filed by Shanghai Firetech, a company allegedly involved in Beijing's Silk Typhoon hacks (Jonathan Greig/The Record)
https://therecord.media/patents-silk-typhoon-company-beijing

Patents by Silk Typhoon-linked company shed light on Beijing’s offensive hacking capabilities
Researchers have discovered more than 10 patents for powerful offensive cybersecurity technologies filed by a prominent Chinese company allegedly involved in Beijing’s Silk Typhoon campaign.

As we head off to a brief publishing break, don't miss today's Metacurity for a string of blockbuster cybersecurity developments you should know, including
--Feds raid 29 North Korean laptop farms used to infiltrate US companies
--US feds re-up Iranian hacking warning,
--Europol busts $540m fraud ring,
--Iranian-linked Robert threatens to release Trump emails,
--ICC hit by 'sophisticated' cyberattack,
--Treasury Dept. hit by three big hacks…

Feds raid 29 North Korean laptop farms used to infiltrate US companies
US feds re-up Iranian hacking warning, Europol busts $540m fraud ring, Iranian-linked Robert threatens to release Trump emails, ICC hit by 'sophisticated' cyberattack, Treasury Dept. hit by three big hacks in past five years, Wyden says FBI fails to protect Capitol Hill mobiles, much more

Internal emails and audits warn the Schengen Information System II, the system used by EU border forces, is rife with software and security vulnerabilities (Bloomberg)
https://www.bloomberg.com/news/articles/2025-…