Tootfinder

RE: https://fosstodon.org/@php/117479282535299381
Buenos 👋 quienes administramos servidores web que corren aplicaciones web escritas con PHP tenemos que aplicar actualizaciones de seguridad urgentes.
Estamos en medio de 2 vulnerabilidades grandes: la de la…

¿Has leído algo de unas vulnerabilidades críticas? Pues resulta que no es una sino 2 vulnerabilidades al mismo tiempo, ambas terribles, pero el cuidado que hay que una de ellas requiere acción por parte de todas las personas y la segunda solo de personas que administran servidores web:
- Vulnerabilidad 1: Afecta a todos los dispositivos conectados a internet, incluyendo celulares y laptops, todas las personas deben verificar con instrucciones sencillas si estšn vulnerables o ya tienen …

Initial thoughts on my first experience with the new NSF Data Management Plan web form:
1. Releasing this before the directorates have had a chance to populate the fields makes it confusing (drop down menus with nothing to select) and makes it feel like it was released before it was ready
2. As a reviewer I'd much prefer a free-form 2 pages with required sections. That actually provides information about an applicants knowledge and ability to satisfy the plan
3. Figuring out how to put this information into the form is substantially more work (admin burden) than writing a 2-pager
4. The only reason I can see for this system is something about compliance, and I'd love to see more meaningful expectations of following through on Data Management Plans, but it seems like without explicit plans for enforcement that this more complex, less informative, form won't accomplish that

Don't miss today's packed Metacurity for the most crucial infosec developments you should know, including
--Hack attempt knocks FEC filings offline in campaign cash crunch,
--Israeli ad firm suspected of spying on Starlink users,
--Hackers hit three more S. Korean financial firms,
--Sony breach exposes 2.6m customer records,
--Overseas hackers force Ohio auditor’s web server offline,
--CISA orders urgent fixes for exploited PHP2Shell flaws,
--Cyberattack hits Kingdom Come developer Warhorse,
--US disrupts Madagascar NFT scam that stole $517k,
--SETTRA threatens to leak Israeli auto importer’s customer data,
--Card skimmers hijack Convertr checkout analytics,
--GMO offers $1m bounty to identify hackers,
--Data leaks trigger scam calls to nearly 2k Hong Kong customers,
--US and Japan pledge closer cyber cooperation,
--South Carolina pilots free cyber help for rural hospitals,
--NIST finalizes post-quantum transition deadlines,
--Upwind raises $400m at $3.8B valuation,
--Infisical raises $40m at $600m valuation,
--Overwatch Data lands $15m for AI threat intelligence,
--Warren presses Anthropic on AI’s nightmare scenarios,
--ICE spying operation targets left-wing movements
https://www.metacurity.com/hack-attempt-knocks-fec-filings-offline-in-campaign-cash-crunch/