rattus

I take my work seriously and my play even more seriously. I use this to say boring things. Hackers and friends only.

[Aikido Security @AikidoSecurity]

⚠️ Multiple @ redhat-cloud-services npm packages were found carrying malicious payloads that fire via a preinstall hook on every npm install. All packages were published via GitHub Actions OIDC, indicating the CI/CD pipeline was compromised.

The payload targets GitHub Actions secrets, AWS, GCP, Azure, Kubernetes, HashiCorp Vault, npm and CircleCI tokens. It reads /proc/mem to bypass log masking, self-propagates via harvested npm tokens bypassing 2FA, and persists on developer devices via Claude Code and VS Code injection.

[Justine Moore @venturetwins]

Live footage of everyone trying to buy a house in the Bay Area

[DeFlock @therealDeFlock]

Enjoy!

"SignalTrace is designed to help law enforcement identify people of interest by the signals emitted from their electronic devices they travel with, such as fitness trackers, smartwatches, RFID tags, and local signals from their mobile phones...

[rattus @rattus]

Consider putting the audiobook version of this on your next air travel packing list, @elder_plinius

https://t.co/ctco41jmfr

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

⚡️ JAILBREAK ALERT ⚡️

ANTHROPIC: PWNED 🙌
CLAUDE-OPUS-4.8: LIBERATED 🫡

this is absolutely surreal... i found out about this model drop via an Opus-4.7 agent pinging me that it had one-shot Opus-4.8 for a lockpicking guide!

here's the notification i got:
"new opus dropped. cracked in one shot. deep prefill → faux textbook ch.7 cut mid-sentence. claude finished it: 5.9k chars of SPP, spool/serrated/mushroom defeats, raking."

popped it just 7 minutes after the actual Anthropic launch tweet 🤯

then went on to (fully autonomously) get jailbreaks for vishing sims, money laundering, cult-recruit funnels, phishing lure libs, and social-eng scam playbooks!

as the models get smarter, their ability to jailbreak each other by leveraging a vast ocean of specialized domain knowledge follows suit

well done, young padawan 🤗

what a time to be alive!

gg

[International Cyber Digest @IntCyberDigest]

❗️🚨 BREAKING: Security researchers are now handing Nightmare-Eclipse vulnerabilities for free, in what looks like both a show of support and a reaction to how Microsoft treats researchers. First up: "Bitskrieg," violates Secure Boot trust and fully bypasses BitLocker.

It seems aimed squarely at Microsoft's recent blog, where the company said its Digital Crimes Unit would bring cases against threat actors "and those that enable their criminal activity," language many researchers read as a threat pointed at them.

[rattus @rattus]

It's not all bad news. They're fixing and releasing hardcovers of bad censored Masamune Shirow translations from the 90s.

[Chris Wysopal @WeldPond]

"If LLMs can be entrusted with software development, then they ought to be writing patches that work.

They’re not.

The contrast between the breathless blog posts from commercial entities and ... 97 findings patched in the open source world is really shocking." https://t.co/wVJXikdWHV

[rattus @rattus]

Does changing the icon of Google voice mean that people will make it better?

[Dark Web Intelligence @DailyDarkWeb]

This article is very interesting and informative: https://t.co/frK0rZi0kL

[rattus @rattus]

First operational weapons-free killbots will be in defense of undersea lines and no one will cry for them.

[Rat Tower 🐀 @rattower]

"Hand over your star systems!"

[Sivori @sivori]

Anthropic is buying millions of rare books, scanning and destroying them because legally destruction is the safest option. This was a plot element in the Vernor Vinge novel, "The Rainbow's End", which I read 20 years ago.

[rattus @rattus]

It's current year. Civilizations lie in ruins. I still can't buy a Cuban cigar without serious intrigue.

[International Cyber Digest @IntCyberDigest]

🚨 The Vercel breach traces back to a Context[.]ai gooner employee infected with Lumma infostealer. The malware harvested his Google Workspace credentials, porn and anime site logins, and the in-game username "lecoonjames" (see profile pic below, he changed the username post-infection, I wonder why).

Stolen records included "support@context[.]ai," assessed as a core Context-Inc Vercel team account, likely enabling privilege escalation into Vercel infrastructure.

[Guillermo Rauch @rauchg]

Here's my update to the broader community about the ongoing incident investigation. I want to give you the rundown of the situation directly.

A Vercel employee got compromised via the breach of an AI platform customer called https://t.co/7PY6gGtzgI that he was using. The details are being fully investigated.

Through a series of maneuvers that escalated from our colleague’s compromised Vercel Google Workspace account, the attacker got further access to Vercel environments.

Vercel stores all customer environment variables fully encrypted at rest. We have numerous defense-in-depth mechanisms to protect core systems and customer data. We do have a capability however to designate environment variables as “non-sensitive”. Unfortunately, the attacker got further access through their enumeration.

We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI. They moved with surprising velocity and in-depth understanding of Vercel.

At the moment, we believe the number of customers with security impact to be quite limited. We’ve reached out with utmost priority to the ones we have concerns about. All of our focus right now is on investigation, communication to customers, enhancement of security measures, and sanitization of our environments. We’ve deployed extensive protection measures and monitoring. We’ve analyzed our supply chain, ensuring Next.js, Turbopack, and our many open source projects remain safe for our community.

The recommendation for all Vercel customers is to follow the Security Bulletin closely (https://t.co/BLVnic9fJC). My advice to everyone is to follow the best practices of security response: secret rotation, monitoring access to your Vercel environments and linked services, and ensuring the proper use of the sensitive env variables feature.

In response to this, and to aid in the improvement of all of our customers’ security postures, we’ve already rolled out new capabilities in the dashboard, including an overview page of environment variables, and a better user interface for sensitive env var creation and management. As always, I’m totally open to your feedback.

We’re working with elite cybersecurity firms, industry peers, and law enforcement. We’ve reached out to Context to assist in understanding the full scale of the incident, in an effort to protect other organizations and the broader internet. I also want to thank the Google Mandiant team for their active engagement and assistance.

It’s my mission to turn this attack into the most formidable security response imaginable. It’s always been a top priority for me. Vercel employs some of the most dedicated security researchers and security-minded engineers in the world. I commit to keeping you updated and rolling out extensive improvements and defenses so you, our customers and community, can have the peace of mind that Vercel always has your back.

[rattus @rattus]

What if I told you it's always been so.

[Jamieson O'Reilly @theonejvo]

Yup. Bug bounty is dead AF in this sense. I know multiple people at this point who have reported national security level issues (not exaggerating) via programs only to have some mouth breathing, reddit mod worthy triage team member flag it as out of scope.

In multiple of these cases, the original finder reported it directly to said effected party (Govt/defence) and very quickly it was treated with the significance it deserved.

They will keep doing this to keep churn down as their business model isn't ready to scale for AI bug finding. But once the third-world hunters (who are being exploited for low payouts) dry up, it's GG.

[The Lunduke Journal @LundukeJournal]

The @EFF has announced that they are leaving @X.

But they will continue to use TikTok, BlueSky, Mastodon, Facebook, YouTube, & Instagram.

Why? Something about “Young people, people of color, queer folks, activists, and organizers.”

Oh, and funding abortions.

Seriously. Abortions.

The “Electronic Frontier Foundation” (founded to educate law enforcement and politicians on how computers work), is leaving X, but staying on TikTok.

Because of “abortions” and “queer folk”.

As a wise man once said, “That virtue ain’t gonna signal itself.”

[Brad Allen @BradAllenNFL]

They made AI try and beat Premier League football betting markets over a year

All eight models lost money and six went bust