James Atack

the world could just move on if there was some magic code machine that would spit out an exact functional clone of Excel

💡

"Every gun that is made, every warship launched, every rocket fired signifies, in the final sense, a theft from those who hunger and are not fed, those who are cold and are not clothed."

-Dwight D. Eisenhower, 1953

🇪🇺LAGARDE MAY EXIT ECB EARLY Christine Lagarde is reportedly considering stepping down as president of the European Central Bank before her term ends in October 2027, according to the Financial Times. The report says she may leave before France’s presidential election next

So many questions

youtu.be/UKQluqz3N3M?...

Cisco is Proud to Champion the UK's Software Security Code of Practice Cisco champions the UK’s Software Security Code of Practice in support of secure software supply chains and strengthening trust in digital services.

Irony

blogs.cisco.com/security/cis...

And let me guess, Fortinet will be sponsoring Cyber Week 2026 for SMBs?

Like a hammer determines how hard it should hit the nail?

And why are we handing over our moral and social responsibilities to a hammer anyway?

It is amazing, but I don’t see beauty. Built first on slavery, then on oil., all while becoming indebted to our environment.

I wonder what’s the full price of year-round blueberries

<epic movie trailer voice>

First they came for Birmingham City Council.

Now they're back. And they want ... EVERYTHING

Tomorrow we are going to have USA and Iran each telling the other to stop shooting citizens who protest.

For those keeping score, Bellingcat, The New York Times Visual Investigation Team, & Washington Post's Visual Forensic team have all published analysis showing the ICE shooter wasn't in the path of Renee Nicole Good’s vehicle when he shot her, contradicting statements by the President & his cronies

Hi El Reg, I expect you to bite the hand that prevents sysadmins from reading file systems in the first place.

We shouldn’t accept this crap from “security appliance” vendors

Arbitrary file read for administrators

This is only a threat fo Cisco management

Check Steam status IsDown monitors the status of Steam and other 4600+ services. Check the page for updates.

Is Steam down for you? Users are reporting problems with Steam. Repost if you are having issues. #steamdown

“Reimage” you say?

Wowzers, another perfect 10 from Cisco on Secure Email Gateway, Secure Mail, and Web Manager. This one has:

- RCE
- No patch
- No workaround
- No public IoCs

Recommendation is to reimage to a known-good config. Whatever that is, without indicators.

Good luck I guess??

UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager Cisco Talos is tracking the active targeting of Cisco AsyncOS Software for Cisco Secure Email Gateway, formerly known as Cisco Email Security Appliance (ESA), and Cisco Secure Email and Web Manager, f...

Talos has IoCs, which for some reason are not in the advisory itself?? blog.talosintelligence.com/uat-9686/

Who needs reality when you can have virtual slop ?

Thousands of Exposed Secrets Found on Docker Hub - Flare In a month, we found Docker Hub images that contained leaked secrets (including live credentials to production systems) from over 100 companies.

Security firm Flare has scanned the Docker Hub portal and found secrets and tokens, including for production systems, in more than 10,000 images

flare.io/learn/resour...

RE: https://infosec.exchange/@ossir/115603757755275844

Rappel : la prochaine réunion de l'OSSIR, c'est demain (mardi) à 14h00 chez TotalEnergies Digital Factory (33 rue des Jeûneurs, 75002 Paris)

N'oubliez pas de vous inscrire gratuitement sur https://billetweb.fr/reunion-ossir-decembre-2025 […]

I read “Canadian” at first glance.

So soon… I thought

How to explain AI to your family this holiday season | CNN Business Politics, football and movies are among the many topics that tend to come up around Thanksgiving. In 2025, a new question may arise at the table: Why the heck is everyone talking about AI, and what sh...

"Imagine you stole all of the intellectual property in the world. And you're using it to help people write middling emails and make revenge porn about women, and also children. And you're powering this plagiarism and non-consensual porn machine by eating up what's left of humanity's carbon budget."

KEEPASSXC version 2.7.9 | ANSSI Acces rapide

Le gestionnaire de mots de passe open-source et multiplateforme KeePassXC (version 2.7.9) vient de recevoir sa certification CSPN (Certification de sécurité de premier niveau) délivrée par l'ANSSI #Infosec cyber.gouv.fr/produits-cer...

FortiArtifacts: l'outil DFIR pour extraire les journaux Fortinet lors d’une suspicion de compromission FortiArtifacts, the DFIR tool designed by OWN analysts to help you collect logs from Fortinet devices in case of suspected compromise, using native commands and without the need to perform a dump.

By total coincidence some friends have made this www.own.security/en/ressource...

“Having a Fortinet on your perimeter is the strongest correlation to getting owned that you can have” @metlstorm.risky.biz

Not hating, just campaigning for the “more engineering, less marketing” party

FortiArtifacts: l'outil DFIR pour extraire les journaux Fortinet lors d’une suspicion de compromission “FortiArtifacts”, l'outil DFIR conçu par les analystes de OWN pour vous aider à collecter les journaux depuis des équipements Fortinet en cas de suspicion de compromission, en utilisant des commandes ...

Just seen this, some friends made. Pure coincidence

www.own.security/ressources/b...

At the EU Summit on Digital Sovereignty, the US internet service Cloudflare is sponsoring today's side event "Digital Resilience: Between Aspiration and Reality." /s

Or living in France, for now.

Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth This kind of material economic impact from online crooks thought to be a UK-first The Bank of England (BoE) has cited the cyberattack on Jaguar Land Rover (JLR) as one of the reasons for the country's slower-than-expected GDP growth in its latest rates decision.…

Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth

Qualification PRIS : Prestataires de réponse aux incidents de sécurité

#VisaSécurité | ✅La gestion de crise d’origine cyber devient une activité à part entière du référentiel PRIS !

🔁 Avec cette mise à jour, le référentiel d’exigences applicables aux prestataires de réponse aux incidents de sécurité comprend ainsi 5 activités.

🔗 cyber.gouv.fr/actualites/p...