CarbonFox

Cyber Threat Intelligence - Interested in data security and risk analysis matters.

[CarbonFox @Hazard_F0x]

@ChiefEngineerCE I think it depends heavily on the company culture which, thanks to overbearing HR departments, has forced many people to walk on eggshells when in office. Open office setups make things just alittle bit worse.

[CarbonFox @Hazard_F0x]

@KirscheVerstahl Finding an electable candidate should have been more than easy for the Ohio GOP but this shows again just how disconnected the leadership is from the grassroots base.

[Nostalgic Gamer @16bitnostalgia]

In honour of Sam Neill

Just in case you never saw the ending to Jurassic Park…

[CarbonFox @Hazard_F0x]

Happy Independence Day. Have a safe 4th.

[CarbonFox @Hazard_F0x]

@ChiefEngineerCE Unfortunately, adopting a 'mercenary' mindset seems to be the best way to navigate the current business culture. Especially if you're a tech worker.

[Garbageman (desert arc ☀️🔥) @GarbageDumpM81]

God it was so good 😭

[CarbonFox @Hazard_F0x]

@Aviation_Intel An interesting air defense concept but I'm pretty skeptical of this one.

[IT Guy @T3chFalcon]

AMD removed memory encryption from consumer Ryzen processors via a BIOS update.

Nobody announced it. AMD hasn't explained it. Users found out when they updated their firmware, and the feature was gone.

The feature is called TSME. Transparent Secure Memory Encryption. It encrypts everything stored in RAM automatically. No configuration needed. if someone physically pulls your RAM sticks or freezes them to extract data, they get encrypted garbage instead of your files, passwords, and keys.

it's still available on Ryzen Pro and EPYC chips. the business and server versions. just not consumer.

so AMD built the hardware capable of protecting your data. shipped it to consumers. then silently removed the protection via a firmware update while keeping it active for enterprise customers.

there are a few possible reasons. none of them have been officially confirmed:

— compatibility issues with certain software or games
— performance overhead AMD didn't want to explain
— enterprise differentiation, give businesses a reason to pay more
— pressure from someone who didn't want consumer RAM encrypted

AMD has not said which one.

the hardware still supports it. the capability didn't go away. it was turned off.

for you. not for them.

without telling you.

[CarbonFox @Hazard_F0x]

@chancy_luck In my experience, it didn't feel like hiring really began showing improvement until around 2015.

[CarbonFox @Hazard_F0x]

@RazorFist In the end, I think Trump got nervous about the optics of the war dragging on, gas prices and the mid-terms. Trump also avoided hitting the infrastructure keeping the regime largely stable and able to pay its militia and revolutionary guard.

[Faytuks Network @FaytuksNetwork]

Belfast skyline amid protests over the attempted beheading of a man

[International Cyber Digest @IntCyberDigest]

‼️🚨 A new npm supply-chain attack compromised 57 packages across over 286 malicious versions in under 2 hours. The attackers used self-replicating malware, a new version of the Miasma worm, which also used evasion techniques to stay under the radar.

The payload targets CI/CD and developer credentials, including GitHub Actions secrets, cloud credentials, Vault tokens, SSH keys, npm and GitHub tokens, and password-manager stores. This variant also injects AI coding assistant config files at `.claude`, `.cursor`, `.gemini`, and `.vscode` paths, a separate persistence and repo-poisoning angle.

[CarbonFox @Hazard_F0x]

@RazorFist

[Theo - t3.gg @theo]

Security things from the last few days:
- CopyFail (linux pwn'd)
- CopyFail 2/Dirty Frag
- 13 advisories in Next.js
- Over 70 CVEs addressed in MacOS 26.5
- ~50 CVEs addressed in iOS 26.5
- YellowKey (Windows Bitlocker pwn'd entirely)
- GreenPlasma (Windows privilege escalation)
- CVE-2026-21510 and CVE-2026-21513 confirmed to be used by Russia for Windows RCE
- CVE-2026-32202 separately confirmed to be used by Russia for sensitive document access
- Mini-Shai Hulud (over 300 JS and Python packages compromised via GitHub Action cache poisoning)
- Google confirms they have identified AI-powered exploitation of zero days in an unidentified "open-source, web-based system administration too"
- Canvas (popular LMS used in most schools) pwn'd entirely
- PAN-OS (palo alto networks) pwn'd with a 9.3 severity CVE-2026-0300

Are you scared yet?

[OSINTtechnical @Osinttechnical]

The Maverick Act just passed the Senate, allowing the US Navy to transfer a trio of retired F-14D Tomcats and necessary spare parts to the U.S. Space and Rocket Center.

The F-14s have also been authorized to potentially be restored to flying condition.

[CarbonFox @Hazard_F0x]

@KirscheVerstahl It's still hard to believe the Ohio GOP couldn't find anyone else.

[Dark Web Informer @DarkWebInformer]

CVE-2026-41940: WebPros cPanel and WHM Authentication Bypass via Login Flow PoC

https://t.co/ucRunA19d0

[Open Source Intel @Osint613]

CENTCOM Adm. Brad Cooper:

“The cruise missiles were going after both US Navy ships, but mostly after commercial shipping. We defended both ourselves and consistent with our commitment, we defended all the commercial ships. We’ve had, drone launches against, commercial ships, all of which were defended against, consistent with our commitment. And then the small boats were all going against commercial ships, and all were sunk by Apaches and Seahawk helicopters.”

[J_Humbo @BoHumbo]

🤖🐱
#PRAGMATA

[Vaxen #DailyYuuko ☀️ @YuukoEnjoyer]

A good computer technician always takes and keeps useful notes around.