Tootfinder

"Alright, what kind of GUI do you want for your new SCADA system?"
"I want it look like Hollywood designed it for a disaster movie."
"What?"
"Also, don't add any security and put it directly on the internet."
"Wha...
#infosec

Weird #InfoSec behavior..
Saturday I logged into FB for the first time in maybe a year or more. Saw that they now support passkeys. Between their bad UI/UX design, incompatibility with StrongBox, GMail filter idiocy, and my fumble in manual credential management ended up needing to reset all credentials.
This morning I woke up to an email from FaceBook telling me that I am required to e…

Any #PortlandME fedi people involved with #DNS, #BGP, #infosec, or

PSA: Critical unauthenticated account takeover vulnerability in #Keycloak - allows resetting arbitrary users‘ passwords. Update to 26.7.2 immediately or disable password reset. Tracked as CVE-2026-18963. #infosec

⚠️ If your web apps are built on top of #NodeJS , be sure to upgrade your NodeJS instances this next Monday 27 #infosec

#Shitpost #Shitposting #ShamelesslyStolenFromSomeWhereElseOnTheInternetSeriouslyICantKeepTrackOfThisStuffAnymore #InfosecMemes

No, really, creating a login role account so multiple people can have access to support a system is very bad.
— How I make developers look at me incredulously.
#InfoSec #Sysadminnery

Arthur C. Clarke: "Any sufficiently advanced technology is indistinguishable from magic."
Me: "Therefore, any sufficiently complicated technical problem is indistinguishable from a curse."
#infosec #sysadmin

any #cybersecurity people interested in getting into a webserver in order to rescue a dying website?
boosts appreciated :P
#cybersec #infosec

any #cybersecurity people interested in getting into a webserver in order to rescue a dying website?
boosts appreciated :P
#cybersec #infosec

RE: https://ioc.exchange/@percepticon/116925102016933601
Note the hygiene recommendations at the end of that article. Quite basic. Quite simple. PLEASE PLEASE PLEASE just follow them. You all know that you should.

I’ve said it before and I will likely say it again:
If you value your secrets, you don’t use a 3rd-party "cloud" password manager.
Go ahead, keep doing it, but understand that you will be subject to other people's failures. Which WILL occur.
#InfoSec @…

This is being actively exploited. CVE-2026-20349. Patch now. Like right now. #infosec #vpn #cisco #cve
https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/

If you are developing in #Rustlang then you should check this post: #cybersecurity #infosec #supplychain #supplychainattack