📌 Kubernetes Remote Code Execution Vulnerability via Nodes/Proxy GET Permissions https://www.cyberhub.blog/article/18609-kubernetes-remote-code-execution-vulnerability-via-nodesproxy-get-permissions
Check learnkube.com lots of resource and info. Classes have a good hands-on mix to them.
Would not surprise me, if i did that, but no its the right one
Thanks @ycabreraoc.bsky.social I love this series and youre such a fantastic speaker. Its like a fountain of knowledge.
Turns out you can communicate across containers via 63-bits of available space in a shared lock you acquire on /proc/self/ns/time that all processes have access to.
No networking required. The post has a demo of a chat app communicating across unprivileged containers.
h4x0r.org/funreliable/
Wow, so happy didn't know theres another season, hopefully lands in auz soon. Loved Peaky Blinders too, soundtrack so good
Astronomer here! Due to popular demand (and a kind volunteer editor), my solar system class lectures this fall are available on YouTube for FREE! Check it out, no prior knowledge of astronomy required! 🤩🪐
🔭🧪🎢
youtu.be/2KpyL8yX044
Under the mountain 1981
Donald J. Trump @realDonald Trump + I can't believe ABC Fake News gave Jimmy Kimmel his job back. The White House was told by ABC that his Show was cancelled! Something happened between then and now because his audience is GONE, and his "talent" was never there. Why would they want someone back who does so poorly, who's not funny, and who puts the Network in jeopardy by playing 99% positive Democrat GARBAGE. He is yet another arm of the DNC and, to the best of my knowledge, that would be a major Illegal Campaign Contribution. I think we're going to test ABC out on this. Let's see how we do. Last time I went after them, they gave me $16 Million Dollars. This one sounds even more lucrative. A true bunch of losers! Let Jimmy Kimmel rot in his bad Ratings. 859 ReTruths 3.27k Likes 9/23/25, 9:35 PM
I don't care if you like Jimmy Kimmel or not. I don't care if you haven't forgiven him for the Man Show. I don't care if you think he's not funny or that he's crass or whatever.
I care about the United States—and if you do, too, please watch tonight, and help make record-breaking ratings. 🙏🏻📺
So interesting, the start of how we change the way we allow ourselves to be governed? Listen to us or youre out.
They are amazing, with what looks like limitless variety. Each year we wonder which ones are coming. We have experienced a variety measures in decibels as high as a chainsaw. australian.museum/learn/specie...
Illinois Gov. JB Pritzker railed against President Donald Trump for suggesting he would deploy federal forces to Chicago, accusing the administration of “searching for ways to lay the groundwork to circumvent our democracy, militarize our cities and end elections.”
Illinois is launching a first-of-its-kind legal hotline for LGBTQ+ individuals — Illinois Pride Connect.
As the only state in the nation that will provide free legal advice to protect the LGBTQ+ community, we'll help fight ignorance with information and cruelty with compassion.
Security firm Trail of Bits has open-sourced Buttercup, a Cyber Reasoning System (CRS) developed for the AIxCC (AI Cyber Challenge).
It is designed to find and patch software vulnerabilities in open-source code repositories.
blog.trailofbits.com/2025/08/08/b...
github.com/trailofbits/...
There's so many changes, so if you are keen, have a look at the repo github.com/OWASP/ASVS/t...
How academics imagine their lives would look like if they decide to work in tech
Yes, what a deranged band wagon. Just going to get worse with the Wiz news. Have you checked James Berthoty's blogs, etc.
New episode! 🚨
Ep 156: Kill List
Take my hand. We're going into the darknet.
Special extra episode this month because I❤️u.
Senator Chris Murphy took to the Senate floor on Friday to break down the corruption flowing from the WH. He connects the dots, and makes a clear argument regarding who what where and why Shitler and Muskrat are destroying our govt!! This needs to be shared far and wide!!
youtu.be/hycoCYenXls
You can't trust molecules. They MAKE UP EVERYTHING.
QR code for Signal, username: mattburgess.20
Hello, many new Bluesky followers!
I’m a WIRED reporter looking to talk to people about the repercussions of Trump/Musk’s cuts. (In and outside of US)
In particular on issues such as child protection, cybercrime, national security, intel sharing
I can be reached on Signal: mattburgess.20
1. Three new bad practices on use of known insecure or outdated cryptographic functions, hardcoded credentials, and product support periods. 2. Additional context added to the memory safety section. 3. Added additional examples of recommended actions to prevent SQL injection vulnerabilities. 4. Added additional examples of recommended actions to prevent command injection vulnerabilities. 5. Clarified timelines for patching Known Exploited Vulnerabilities (KEVs). 6. Added language for multi-factor authentication (MFA) specific to operational technology products. 7. Added that software manufacturers should support phishing-resistant MFA. 8. Other updates to phrasing throughout.
The FBI has released version 2.0 of its Product Security Bad Practices
PDF: www.ic3.gov/CSA/2025/250...
The changes are detailed in the image below
CISA has published a playbook on how organizations can fully employ the newly introduced logging capabilities in Microsoft Purview Audit (Standard) to better detect threats
www.cisa.gov/resources-to...
Look forward to it. Big shout out to the k8ssgpt community, thanks
Great directory of Bluesky apps, tools, and resources github.com/notjuliet/aw...
Hi Rory, please add me to the Web App Sec list. Thanks
