Copy Fail (CVE-2026-31431): the modprobe.d + rmmod recipe everyone is sharing does nothing on RHEL/Alma/Rocky/Oracle. They ship algif_aead built in. On Debian/Ubuntu it auto-loads when anything binds AF_ALG — no default protection. PoC fails on Busybox/Alpine but still vulnerable. Details below.

How to block CVE-2026-31431 (Copy Fail) - secwest.net - secure virtual engagement

How to block CVE-2026-31431 (Copy Fail) — the Linux kernel algif_aead local privilege escalation that poisons setuid binaries via the shared page cache. Fleet-scale module disable, RHEL built-in worka...

secwest.net

RuPaul just gave me the best birthday present ever: this movie. www.avclub.com/stop-that-tr...

RuPaul is the president in trailer for high-camp Speed riff Stop! That! Train!

RuPaul is the president in trailer for high-camp Speed riff Stop! That! Train!

avclub.com

www.thestack.technology/mckinsey-ai-...

McKinsey's AI agent "Lilli" hacked - by another AI agent

$20 in tokens and two hours to expose 46 million chat logs, 728,000 private files and proprietary RAG documentation

thestack.technology

This is basically like Mastodon for vulnerability records, except data actually propagates across the whole network instead of staying siloed. Federated vulnerability intelligence, along with legacy CVEs, all map into a shared global index with no single point of failure.

Socket@socket.dev · 5mo ago

🪲 CIRCL's GCVE initiative launched its decentralized publishing ecosystem today alongside Vulnerability-Lookup 4.1.0. Any CNA, CSIRT, or vendor with a disclosure policy can now publish vulnerability data without routing through a central authority. socket.dev/blog/gcve-la...

📌 Kubernetes Remote Code Execution Vulnerability via Nodes/Proxy GET Permissions https://www.cyberhub.blog/article/18609-kubernetes-remote-code-execution-vulnerability-via-nodesproxy-get-permissions

Kubernetes Remote Code Execution Vulnerability via Nodes/Proxy GET Permissions

This Reddit post shares a link to a blog article hosted on grahamhelton.com discussing a remote code execution (RCE) vulnerability in Kubernetes. The vulnerability is related to GET permissions on nodes/proxy.

cyberhub.blog

Thanks @ycabreraoc.bsky.social I love this series and youre such a fantastic speaker. Its like a fountain of knowledge.

Yvette Cendes@whereisyvette.bsky.social · 9mo ago

Astronomer here! Want to learn more about what caused the big northern lights display this week? Check out this free lecture on Earth’s magnetosphere from my class on the solar system! 🔭🧪🎢 youtu.be/zRfr1mPjml4

Turns out you can communicate across containers via 63-bits of available space in a shared lock you acquire on /proc/self/ns/time that all processes have access to. No networking required. The post has a demo of a chat app communicating across unprivileged containers. h4x0r.org/funreliable/

Astronomer here! Due to popular demand (and a kind volunteer editor), my solar system class lectures this fall are available on YouTube for FREE! Check it out, no prior knowledge of astronomy required! 🤩🪐 🔭🧪🎢 youtu.be/2KpyL8yX044

Solar System Lecture- Tracking Motion in the Sky

YouTube video by Astronomer here!

youtu.be

So interesting, the start of how we change the way we allow ourselves to be governed? Listen to us or youre out.

Anime News Network@animenewsnetwork.com · 11mo ago

The Straw Hat Pirates' Jolly Roger flag has become a symbol for protests in countries around the world:

Illinois Gov. JB Pritzker railed against President Donald Trump for suggesting he would deploy federal forces to Chicago, accusing the administration of “searching for ways to lay the groundwork to circumvent our democracy, militarize our cities and end elections.”

Pritzker tells Trump to stay out of Chicago: ‘You are neither wanted here nor needed here’ | CNN Politics

Illinois Gov. JB. Pritzker on Monday railed against President Donald Trump for suggesting he would deploy federal forces to Chicago, accusing the administration of “searching for ways to lay the groun...

cnn.com

Illinois is launching a first-of-its-kind legal hotline for LGBTQ+ individuals — Illinois Pride Connect. As the only state in the nation that will provide free legal advice to protect the LGBTQ+ community, we'll help fight ignorance with information and cruelty with compassion.

Security firm Trail of Bits has open-sourced Buttercup, a Cyber Reasoning System (CRS) developed for the AIxCC (AI Cyber Challenge). It is designed to find and patch software vulnerabilities in open-source code repositories. blog.trailofbits.com/2025/08/08/b... github.com/trailofbits/...

Buttercup is now open-source!

Now that DARPA’s AI Cyber Challenge (AIxCC) has officially ended, we can finally make Buttercup, our CRS (Cyber Reasoning System), open source!

blog.trailofbits.com

There's so many changes, so if you are keen, have a look at the repo github.com/OWASP/ASVS/t...

ASVS/5.0/en at master · OWASP/ASVS

Application Security Verification Standard. Contribute to OWASP/ASVS development by creating an account on GitHub.

github.com

How academics imagine their lives would look like if they decide to work in tech

New episode! 🚨 Ep 156: Kill List Take my hand. We're going into the darknet. Special extra episode this month because I❤️u.

darknetdiaries.com

Senator Chris Murphy took to the Senate floor on Friday to break down the corruption flowing from the WH. He connects the dots, and makes a clear argument regarding who what where and why Shitler and Muskrat are destroying our govt!! This needs to be shared far and wide!! youtu.be/hycoCYenXls

Murphy: Six Weeks In, This White House Is On Its Way To Being The Most Corrupt In U.S. History

YouTube video by Senator Chris Murphy

youtu.be

kubernetes.io/blog/2025/02...

Yoke: Infrastructure as code, but actually Discussion

You can't trust molecules. They MAKE UP EVERYTHING.

Hello, many new Bluesky followers! I’m a WIRED reporter looking to talk to people about the repercussions of Trump/Musk’s cuts. (In and outside of US) In particular on issues such as child protection, cybercrime, national security, intel sharing I can be reached on Signal: mattburgess.20

The FBI has released version 2.0 of its Product Security Bad Practices PDF: www.ic3.gov/CSA/2025/250... The changes are detailed in the image below

CISA has published a playbook on how organizations can fully employ the newly introduced logging capabilities in Microsoft Purview Audit (Standard) to better detect threats www.cisa.gov/resources-to...

Great directory of Bluesky apps, tools, and resources github.com/notjuliet/aw...

GitHub - notjuliet/awesome-bluesky: A list of tools and clients available for the Bluesky platform

A list of tools and clients available for the Bluesky platform - notjuliet/awesome-bluesky

github.com