Bernhard Jost

3-facher stolzer Papa, glücklich verheiratet. Wurzeln im Südburgenland.

[Bernhard Jost @berni70a]

@farman4x 144

[Bernhard Jost @berni70a]

@80s_channel Duran Duran

[🎸 Rock History 🎸 @historyrock_]

In 1991, despite his failing health, Freddie Mercury recorded his final masterpiece. Before the last verse, he whispered: I need a little rest. He walked out of the studio and never returned to finish it. Brian May sang the end.
Rock history lost its voice in absolute silence.

[Bernhard Jost @berni70a]

@ZZTop RIP

[Bernhard Jost @berni70a]

@AMAZlNGNATURE Great

[Michael Bauer @Bundesheerbauer]

Am 13. Juni 1803 wird Vinzenz von Morzin in Pilsen geboren; Oberst und Mäzen. Er diente im Ingenieurskorps und spendete sein gesamtes Vermögen der Stadt Wien zur Errichtung einer Stiftung für behinderte Kinder. Der Morzinplatz ist nach ihm benannt.

[Alexander Van der Bellen @vanderbellen]

Es waren Jugendliche, die ihr ganzes Leben vor sich hatten. Eine Lehrerin, die sie auf ihrem Weg begleitet hat.

Wir werden euch nicht vergessen.
Es bleibt unsere Aufgabe, alles zu tun, um die Hinterbliebenen zu unterstützen mit allem, was wir als Gemeinschaft haben. 1️⃣

[Alexander Van der Bellen @vanderbellen]

Toi Toi Toi an unsere Burschen. Österreich drückt die Daumen für eine erfolgreiche Fußball-WM!

[Lázaro 🌍🌎🌏 @Eurolazaro]

El ingenio de algunos para que el Teams no se ponga en amarillo ausente

[International Cyber Digest @IntCyberDigest]

‼️🚨 Microsoft has patched a critical Windows DNS Client remote code execution vulnerability that allows an unauthorized attacker to execute code over a network. All it takes is a malicious DNS response.

The vulnerability is tracked as CVE-2026-41096 with a CVSS score of 9.8. It is a heap-based buffer overflow in dnsapi.dll, the Windows component that processes DNS answers on every machine.

To trigger it, an attacker needs a position where they can influence DNS responses: a rogue DNS server, a poisoned resolver, a compromised router, hostile WiFi, or a man-in-the-middle placement.

That puts ordinary Windows DNS activity in the blast radius. Browsers, VPN clients, enterprise apps, update checks, and background services constantly ask DNS where to connect. The vulnerable processing sits in the Windows DNS Client path, not an edge-facing server product.

Microsoft assessed exploitation as "less likely," and Rapid7 lists the issue as not publicly disclosed and not known to be exploited at release.

On the contrary, a 9.8 unauthenticated network RCE in DNS client handling is exactly the kind of bug defenders should assume will be reverse-engineered quickly.

Defenders should:
- Deploy the May 2026 cumulative updates and confirm coverage across endpoints and servers
- Restrict DNS traffic to trusted resolvers where possible
- Monitor Dnscache and svchost.exe for abnormal child processes or unexpected outbound activity
- Treat public WiFi and untrusted resolver paths as higher-risk until patching is complete

[Het Mehta @hetmehtaa]

the YellowKey Bitlocker Bypass is genuinely one of the craziest Windows security concepts you'll seen in a while.

it basically turns normal Windows behaviour into malware.

no exploit.
no kernel bug.
no scary ransomware binary.

just trusted Windows components, signed binaries, and Defender assumptions being chained together into something extremely cursed.

modern EDRs are very good at detecting malware.

but they're much worse at detecting Windows itself becoming the attack.

[BleepingComputer @BleepinComputer]

🚨 Warning: Microsoft Defender is wrongly flagging some DigiCert certificates as Trojan:Win32/Cerdigent.A!dha, triggering widespread false positives on Windows systems.

Admins report certificates being removed from the Windows trust store after recent Defender signature updates.

What’s happening:

🔴 Two DigiCert root certificates flagged as malware
🔴 Some systems remove certs from the AuthRoot trust store
🔴 Detection added in April 30th Defender signature updates

Microsoft has released fixes in Security Intelligence updates version 1.449.430.0.

The issue comes shortly after a DigiCert breach where attackers gained access to support systems and code-signing certificates.

If you're seeing Trojan:Win32/Cerdigent.A!dha alerts, update Defender signatures immediately.

[Franz Branntwein™ 🍀 @FranzBranntwe10]

Wer heutzutage über langsames Internet meckert, hat keine Ahnung...

[Cyber Security News @The_Cyber_News]

🚨 New Windows 0-Click Vulnerability Exploited to Bypass Defender SmartScreen

Source: https://t.co/uBwWAxBYvJ

A critical zero-click authentication coercion vulnerability, tracked as CVE-2026-32202, stemming from an incomplete patch for a Windows Shell security feature bypass actively weaponized by the Russian APT28 threat group.

Microsoft confirmed active exploitation of the flaw and released a fix as part of its April 2026 Patch Tuesday update.

The attack's primary mechanism abuses the Windows Shell namespace parsing pipeline. APT28 embedded a malicious LinkTargetIDList structure inside the LNK file, a binary IDList that Windows Explorer parses and renders, similar to how Control Panel items are displayed.

#cybersecuritynews #vulnerability #microsoft

[Cyber Security News @The_Cyber_News]

⚠️ Microsoft Emergency .NET 10.0.7 Update to Patch Elevation of Privilege Vulnerability

Source: https://t.co/KMQhROpkV9

Microsoft has issued an emergency out-of-band (OOB) security update for .NET 10, releasing version 10.0.7 on April 21, 2026, to address a critical elevation of privilege vulnerability discovered in the Microsoft.AspNetCore.DataProtection NuGet package.

The out-of-band release was prompted after customers began reporting decryption failures in their ASP[.]NET Core applications following the standard Patch Tuesday .NET 10.0.6 update. These issues were tracked publicly in ASP.[]NET Core issue #66335, where affected developers flagged widespread decryption regressions.

#cybersecuritynews

[Bernhard Jost @berni70a]

@DireStraits77 Austria is missing. :-)

[Science girl @sciencegirl]

Polar bears and grizzlies are increasingly crossing paths, leading to interbreeding between the two species.

These hybrids can sometimes grow larger than typical grizzlies. For thousands of years, the two animals occupied separate regions, the Arctic ice for polar bears and more forested areas for grizzlies, so encounters were extremely rare. Recently, however, their territories have begun to overlap more frequently.

This has resulted in hybrids known as “pizzly” bears, first confirmed in the wild in 2006. They combine traits from both parents, such as the lighter fur and swimming ability of polar bears along with the strength and adaptability of grizzlies.

Studies show these hybrids are capable of reproducing, suggesting this is not just an isolated occurrence but an ongoing biological development. While it highlights the flexibility of species to adapt, scientists note the environmental transformation leading to this could have long-term implications for the survival of pure polar bear populations.

Source: National Geographic Society. (2021). “Pizzly” bears are appearing in the Arctic as climate change causes species to crossbreed. National Geographic.

[Bernhard Jost @berni70a]

@sciencegirl Wonderful

[BleepingComputer @BleepinComputer]

WordPress plugin suite hacked to push malware to thousands of sites
https://t.co/kzgiW91snD

https://t.co/kzgiW91snD

[Pope Leo XIV @Pontifex]

The future belongs to men and women of peace. Justice will always triumph over injustice in the end, just as violence will never have the last word, despite all appearances. #ApostolicJourney #Algeria https://t.co/Jp7UTUWUzj