Darren Banfi

Head of IT Security person

[Darren Banfi @DarrenBanfi]

Well one of them has to be correct 😂

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card Love it ❤️

[Darren Banfi @DarrenBanfi]

@techspence Sent my vulnerability report out this morning. Asking how I can get more Pokémon cards collected due to evil legacy 🤣 some day I’ll catch them - oh wait there’s more ….

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card My 2014 Volvo BlackBerry based OS full of them hacks for your phones

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card If the laptop is in Tether/EXO5 , with bootlock and bitlocker synced. It’s an incident 😆 lf it comes back on with location it’s a police report. I hate stolen / missing laptop incidents, take care of your devices please

[Darren Banfi @DarrenBanfi]

Fable 5 first test, watched it for 5 minutes trying to connect to my GitHub and fail / got to use them credits up somewhere. Ended up stopping it and got a patch file.

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card I’ve only had one coffee at the moment … still too early for this

[mRr3b00t @UK_Daniel_Card]

Trains and WiFi…. Oh my

[Darren Banfi @DarrenBanfi]

@infosec_fox Still setup - just got a OSSC and a nice scart multiswitcher to get it as lag free as possible

[Darren Banfi @DarrenBanfi]

@techspence I love auto patching. We use Ncentral from NAble. It works so well. Since deploying it 7 years ago, we have had only about 7 issues caused by patching. Not been that much of an issue. We patch 7 days after release. Virtuals : workaround get it first, hosts get is second.

[Darren Banfi @DarrenBanfi]

@rekdt Fine I’ll put it in my to-do list…

[Darren Banfi @DarrenBanfi]

@KiPos_info @UK_Daniel_Card Yeah inside WindowsRE partition - seems to be a test flag that the yellow key files enable. Unlocking the drive for the recovery environment session.

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card Love a bit of DPAPI, beats text files 😆

[Dark Web Informer @DarkWebInformer]

‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017.

Website: https://t.co/f5G6KnEv35

Write-up: https://t.co/W86Pz2PC6C

GitHub: https://t.co/zAMTC6nTRk

It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su.

Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise.

Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card Maybe it’s reverse psychology- don’t connect as the admin has left the SMB shares public on the WiFi and we don’t know how to stop it

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card I have that one. It’s good. My son usually steals it so I’m on budget juice most of time 🤣

[Darren Banfi @DarrenBanfi]

@UK_Daniel_Card I like Ransomware Live. Good to use as examples of what’s going on.

[Darren Banfi @DarrenBanfi]

@hetmehtaa BSOD

[Darren Banfi @DarrenBanfi]

@asha_shar I cancelled it when it went up, as I had to pay for mine and my sons and tbh never used it that much to justify- Any plans for a family plan in the UK?