FuriouslyAdrift©️👊🇺🇸🔥

Systems Engineer, Fabulist, Pataphysicist, organ harvester for interdimensional Old Ones. I'll show you the life of the mind...

[FuriouslyAdrift©️👊🇺🇸🔥 @AdriftFuriously]

Infosec list I try to keep on topic
https://t.co/Yfpn6IS445

[FuriouslyAdrift©️👊🇺🇸🔥 @AdriftFuriously]

"So…what’s going on at HackerOne lately? It might be time for a wellness check."
https://t.co/u3necMwla2

[FuriouslyAdrift©️👊🇺🇸🔥 @AdriftFuriously]

"...reported this on January 28th, 2026. It is now July 2026. Six months later. The Firestore database is still wide open. The CTO never responded."
https://t.co/hIdbAgk8qJ

[Nicolas Krassas @Dinosn]

CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability https://t.co/9xLDphlQXp

[No Starch Press @nostarch]

last day of the con and our sale! if you couldn't make vegas, the discount is still yours on https://t.co/kkrArNnnYZ. and if we sold out of your book at the booth (sorry again), there's still time to shop before your devices go into airplane mode.

code DEFCON34, 34% off everything until 11:59 pm PT tonight.

[Daily CyberSecurity @Daily_CyberSec]

CVE-2026-63077, an unauthenticated RCE in JetBrains TeamCity, is exploited in the wild. PoC exploit code and full details are now public.
#CVE202663077 #TeamCity #JetBrains #RemoteCodeExecution #KEV #InfoSec
https://t.co/t8nKWs8q5q

[Daily CyberSecurity @Daily_CyberSec]

A Linux SCTP kernel use-after-free (CVE-2026-64564) enables local privilege escalation and full container-to-host escape.
#CVE202664564 #SCTPhantom #LinuxKernel #PrivilegeEscalation #ContainerEscape #InfoSec
https://t.co/OIR63zP06x

[Sami Laiho @samilaiho]

Multiple Vulnerabilities in HPE Aruba Networking Private 5G Core
URL: https://t.co/ykmfxRNhP4
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0

[Nicolas Krassas @Dinosn]

When terrible disclosure from the vendor results in zero days plus a fun dive in to bypassing full disk encryption https://t.co/L2e3MAls8E

[Nicolas Krassas @Dinosn]

U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data https://t.co/zdV3cL2zqg

[Daily CyberSecurity @Daily_CyberSec]

WordPress 7.0.3 fixes CVE-2026-64638, a pre-auth XSS on the login screen that can escalate to remote code execution. CVSS 8.9. Update now.
#WordPress #XSS #RCE #CVE #CyberSecurity
https://t.co/OknmckKbQJ

[Tarjei Mandt @kernelpool]

I've been looking at how to leverage frontier-sized open models for domain-specific use. Here's an attempt at creating a much smaller Kimi K3 code auditing model that fits on a Mac Studio (512GB) https://t.co/04jzP7PmVF

[Sami Laiho @samilaiho]

COLDCARD security audit phishing attack installs remote access tool
https://t.co/Iluyc1nyD1

[FuriouslyAdrift©️👊🇺🇸🔥 @AdriftFuriously]

Oh this is peak BMW...

"BMW Suddenly Blasts Its Cars’ Internal Screens With Aggressive Advertisements
"F*ck everything about this.""
https://t.co/7BPEGzLrH0

[Daily CyberSecurity @Daily_CyberSec]

Critical Jenkins vulnerability CVE-2026-70426 lets attackers bypass the JEP-200 filter and run code on the controller. Patch now.

#Jenkins #CVE202670426 #RCE #DevSecOps #Deserialization #CyberSecurity
https://t.co/ZXksrTGFDs

[NGA @NGA_GEOINT]

Mark your calendars! The Geo-Resolution conference is coming to @SLU_Official on Sept. 10.

This year focuses on securing the future with geospatial.

📅 Free to attend in person or virtual

🎯 Includes a career fair and expert panels

🔗 Register now: https://t.co/EeGf2J5pu4

[Daily CyberSecurity @Daily_CyberSec]

TeamCity vulnerability CVE-2026-63077 enables unauthenticated remote code execution. CISA added it to the KEV catalog amid active exploitation.

#TeamCity #CVE202663077 #RCE #CISA #KEV #cybersecuritytips
https://t.co/WFTihsTY2e

[Nicolas Krassas @Dinosn]

Borrowing Windows Hello keys for authentication and persistence https://t.co/R2ZCOge26O

[Sami Laiho @samilaiho]

Red Hat - Multicluster-operators-subscription:
multicluster-operators-subscription: namespace edit user can deploy
cluster-scoped clusterrolebinding and become cluster-admin via application
subscription
URL: https://t.co/UOs6VRjsdp
Classification: Critical, CVSSv3.1: 9.9

[Sami Laiho @samilaiho]

Critical vulnerability in SUSE Rancher
URL: https://t.co/K4HhGz3obi
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1

[Sami Laiho @samilaiho]

Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted
Authentication Header
URL: https://t.co/HkkOx7SGv9
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4