mikemikemike

[Matthew McConaughey @McConaughey]

bets still on the table America, yet.

[The Redheaded libertarian @TRHLofficial]

For me, this has unseated ‘the young homeowners becoming their parents’ commercials as the best commercial on earth.

[Ubiquiti Inc @Ubiquiti]

Introducing: Enterprise Firewall Core

🔹 22,000 Active Devices
🔹 10M Concurrent Sessions
🔹 79 Gbps Threat Detection
🔹 61 Gbps SSL Inspection
🔹 5,000+ IPsec/WireGuard Tunnels

Enterprise security & performance — completely license free.

https://t.co/SsRg7TXCuz

[Microsoft Threat Intelligence @MsftSecIntel]

Compromised npm packages ([email protected], [email protected]) are abusing Hugging Face repos as exfiltration infrastructure. The packages deploy a remote access trojan (RAT) that captures keystrokes, screenshots, and crypto wallet credentials.

Indicators of compromise (IOCs):
- npm user: hexalpha10 / author: toskypi
- 195.201.194[.]107:8010 (WebSocket C2)
- c2-toskypi.onrender[.]com (HTTP C2)
- huggingface[.]co/api (exfiltration endpoint)
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MicrosoftSystem64 (persistence)
- MicrosoftSystem64.service (Linux systemd persistence)
- \MicrosoftSystem64 (Windows scheduled task)
- MicrosoftSystem64/payload.js (payload directory)

Defenders: treat unexpected huggingface[.]co/api calls from non-ML workloads as suspicious.

[Florian Roth ⚡️ @cyb3rops]

Anyone else seeing Microsoft #Defender flagging #DigiCert root certificate registry keys as malware?

We’ve seen reports that Defender signature update from April 30 added a detection called:

Trojan:Win32/Cerdigent.A!dha

In some environments, Defender apparently detected DigiCert Root CA certificate registry entries and removed them from the trust store.

The affected cert hashes mentioned so far:

0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
DDFB16CD4931C973A2037D3FC83A4D7D775D05E4

Example path:

HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

There’s also a Reddit comment suggesting Microsoft has started restoring the certs and that admins can check this via Advanced Hunting in Defender:

DeviceRegistryEvents
| where RegistryKey contains "0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43"
or RegistryKey contains "DDFB16CD4931C973A2037D3FC83A4D7D775D05E4"
| where ActionType == "RegistryKeyCreated"
| where Timestamp > datetime(2026-05-03T04:00:00)
| project Timestamp, DeviceName, ActionType, InitiatingProcessFileName
| order by Timestamp desc

On an affected device, this can also be checked with:

certutil -store AuthRoot | findstr -i "digicert"

Could become an annoying day for admins if this spreads

https://t.co/VflLyFgssp

[Steven Lim @0x534c]

📚 𝗡𝗼𝘁𝗲𝗽𝗮𝗱++ 𝗛𝗶𝗷𝗮𝗰𝗸𝗲𝗱 𝗯𝘆 𝗦𝘁𝗮𝘁𝗲-𝗦𝗽𝗼𝗻𝘀𝗼𝗿𝗲𝗱 𝗧𝗵𝗿𝗲𝗮𝘁 𝗔𝗰𝘁𝗼𝗿

Heads up, defenders: a supply chain compromise targeting Notepad++ has been linked to state-sponsored activity. Here's a Sentinel KQL to help you hunt for potentially affected endpoints—filtering by DeviceName, suspicious version numbers, and outbound traffic to notepad-plus-plus[.]org. 🫡

https://t.co/q08v3Xnr8t

#CyberSecurity #ThreatHunting #NotepadPlusPlus #SupplyChainAttack #sentinel

[Autism Capital 🧩 @AutismCapital]

Severus Snape - ALWAYS (LIVE at Hogwarts) 🔥🔥🔥

This is a MASTERPIECE. The music, the imagery, the lyrics, the setting, the accuracy to the story, it's PERFECT. Chef's kiss. Peak AI.

📸: WickedAI (YT)

[Elon Musk @elonmusk]

Super good Starlink internet deal available in parts of the US that are not already at full capacity!

[Starlink @Starlink]

In response to Hurricane Melissa, the Starlink team has been working to provide vital connectivity to support relief and recovery efforts. Over 800 kits have been donated to local governments and humanitarian organizations, including over 600 in Jamaica, and free service has been enabled for customers in impacted areas.

During the last 24 hours, the Starlink team distributed kits to organizations that are working to restore connectivity in major hospitals, distributing food, water, sanitation supplies, basic household items, and children activity kits.

Direct to Cell capabilities were also activated via local partners, enabling mobile connectivity through apps and messaging for over 250,000 people in impacted areas.

The Starlink team will continue to support efforts on the ground and provide connectivity when it matters most.

[Wham Baam Teslacam @WhamBaamX]

FSD saves lives @Tesla

Was stopped at a red light with FSD engaged (12.2.6 on HW3), when the light turned green FSD proceeded into the intersection when suddenly the forward collision warning sound went off and the car slammed on the brakes to avoid a person riding one of those electric mopeds. Luckily nobody was hurt as he braked in time to avoid the car to my right. The light was green for at least 5 seconds, and I was looking to my right for oncoming traffic incase anyone else was trying to make that left turn. Luckily the car was paying attention, because I didn't see the rider until after the car hit the brakes.

[EZ @IAMERICAbooted]

If you want to always have a job in IT, read the documentation. Every day. Make it a lifelong habit.

It's astonishing to me how many people dont. Even people at Microsoft.

I have hands on experience with a lot of vendor products now and the first thing I do is read the documentation. Some vendor documentation is terrible. Other vendor documentation expands far beyond technical capabilities.

I read at least 2 (sometimes much more) hours a day.

Microsoft has more than 5 lifetimes of documentation. You will never be able to read it all. Between Windows, Active Directory, techncial specifications, Exchange, Office, and Microsoft Cloud, I think it's fair to say I have read 100k pages or more of documentation just with Microsoft in the past 7 years.

Other vendors where I have read the documentation (and most of them, all of it):

Okta
Proofpoint
Global Protect/Prisma Accesa
Tanium (x2 for 3 different architectures)
Crowdstrike

Most organizations have these. Some (i.e. Crowdstrike, Tanium Threat Response), the documentation is only available if you are licensed.

You cannot learn IT security by just reading. However, your skills become so much more rich if you spend the time reading. You must build too. But if there's any piece of advice I'd give, I would suggest not skipping on the documentation.

[Akhilesh Mishra @livingdevops]

The Only Linux Command List You'll Need to Bookmark:

Daily Heroes:
• ps aux | grep {process} - Find that sneaky process
• lsof -i :{port} - Who's hogging that port?
• df -h - The classic "we're out of space" checker
• netstat -tulpn - Network connection detective
• kubectl get pods | grep -i error - K8s trouble finder

Log Warriors:
• tail -f /var/log/* - Real-time log watcher
• journalctl -fu service-name - SystemD log stalker
• grep -r "error" . - The error hunter
• zcat access.log.gz | grep "500" - Compressed log ninja
• less +F - The better tail command

Container Whisperers:
• docker ps --format '{{.Names}} {{.Status}}' - Clean status check
• docker stats --no-stream - Quick resource check
• crictl logs {container} - Raw container stories
• docker exec -it - The container backdoor
• podman top - Process peek inside containers

System Detectives:
• htop - System resource storyteller
• iostat -xz 1 - Disk performance poet
• free -h - Memory mystery solver
• vmstat 1 - System vital signs
• dmesg -T | tail - Kernel's recent gossip

Network Ninjas:
• curl -v - HTTP conversation debugger
• dig +short - Quick DNS lookup
• ss -tunlp - Socket statistics simplified
• iptables -L - Firewall rule reader
• traceroute - Path finder

File Jugglers:
• find . -name "*.yaml" -type f - YAML hunter
• rsync -avz - Better file copier
• tar -xvf - The unzipper (yes, we all google this)
• ln -s - Symlink wizard
• chmod +x - Make it executable

Performance Profilers:
• strace -p {pid} - System call spy
• tcpdump -i any - Network packet sniffer
• sar -n DEV 1 - Network stats watch
• uptime - Load average at a glance
• top -c - Classic process viewer

Git Essentials:
• git log --oneline - History simplified
• git reset --hard HEAD^ - The "oops" eraser
• git stash - The work hider
• git diff --cached - What's staged?
• git blame - The "who did this?" resolver

Quick Fixes:
• sudo !! - Run last command with sudo
• ctrl+r - Command history search
• history | grep - Command time machine
• alias - Command shortcut maker
• watch - Command repeater

[mRr3b00t @UK_Daniel_Card]

Cyber myth: VPNs don’t log.

Cyber reality: everything logs 🪵 somewhere

(This is a client side log, but even if an vpn provider doesn’t store logs it doesn’t mean logs aren’t in other places! Netflow, dns, web server logs, device logs/evidence are a thing)

#Cyber #Reality

[EZ @IAMERICAbooted]

6 places I check when I'm reviewing a company's external footprint and tech stack to get a basic understanding of the architecture:

1. https://t.co/0H3ZocJnEN
2. https://t.co/HoNqZWEgof
3. https://t.co/MVRMrrcRad
4. https://t.co/Ilbp5OCAhc
5. LinkedIn
6. Careers

Go check these things to see what others look at. It usually takes me less than 1 hour.

[Greg Price @greg_price11]

Lol this is hilarious.

The Phillies had a kiss cam and had the Phillie Phanatic re-enact the Coldplay affair😂

[Ethan Hays @ethanhays]

Cloudflare CEO @eastdakota is having the most honest conversations I've come across about the current & future of content creation

"6 months ago, 75% of queries to Google get answered on Google. Which means if you're an original content creator, your content is getting summarized & sold (they still put ads there), but you don't get that traffic.

And that's the good news. It used to be that for every 2 pages G scraped, you would expect 1 visitor. 6 months ago that deteriorated to 6 pages scraped to get 1 visitor.

Today the traffic ratio is: for every 18 pages Google scrapes, you get 1 visitor. What changed? AI Overviews

If the business model of the web has been search, fundamentally, for the last 35 years. You get value by subscriptions, ads, or fame. All 3 of those things are going away, and they are going away fast.

And that's STILL the good news. What's the ration for OpenAI? 6 months ago it was 250:1. Today it's 1,500:1. What's changed? People trust the AI more, so they're not reading original content.

People aren't following the footnotes. So if you believe the business model of original content creation is driving people to that content... I just have a really bad story for you.

The future of the web is going to be people reading the summaries of content, not the original. What I'm worried about is - if you can't sell subscriptions or monetize ads or get the ego boost from people reading your stuff, why anyone is going to create content?"

[Jen Gentleman 🌺 @JenMsft]

I'm really happy to have this option back in Windows 11 😊

Just started rolling out in Dev & Beta

https://t.co/N3Jz6BC4Z6
#WindowsInsiders

[James Spann @spann]

SMOKY SUNRISE: Smoke from Canadian wildfires has been transported down into Tennessee and the northern half of Alabama… which is the reason for the vibrant and reddish sunrise this morning.

Smoke particles in the atmosphere scatter sunlight, enhancing the longer wavelengths like red and orange. When the sun is low on the horizon during sunrise and sunset, this effect is most noticeable.

[spencer @techspence]

How to prevent users from syncing personal OneDrive accounts