Archive

General * An interesting side-effect of multi-tenant cloud architecture - Microsoft Teams security features are tied to the tenant hosting the conversation, not the participants. * https://www.ontinue.com/resource/blog-microsoft-chat-with-anyone-understanding-phishing-risk/ * [EU] German and Swiss authorities shutdown a bitcoin mixer service imaginatively named 'Cryptomixer'. Authorities obtain 12TiB of data

General * A nice little beginners OpSec guide from Wired. If you want more depth, try looking at Michael Bazzell's books. * https://www.wired.com/story/digital-opsec-for-teens/ * https://inteltechniques.com/books.html * It appears that GitLab Cloud was a fertile hunting ground for secrets in Git repositories. US$770

General * Running something based upon Next.js? Make sure it's patched... memory-consumption based Denial-of-Service in pre 13OCT2025 versions (patched in 15.5.5), due to an unbounded memory copy. * https://www.harmonyintelligence.com/taking-down-next-js-servers * ZenDesk typo-squatting - the next Scattered Lapsus$ Hunters target? identified Zendesk-related domains, including more

General * Scattered Lapsus$ Hunters, meet Brian Krebs the tables seem to have turned somewhat for “Rey,” the moniker chosen by the technical operator and public face of the hacker group: Earlier this week, Rey confirmed his real life identity and agreed to an interview after KrebsOnSecurity tracked him down and

General * Windows 11 Administrator Protection quietly reverted, till some unspecified later time. Administrator protection will be available on Windows 11 devices soon. The feature previously listed in the October 2025 non-security update (KB5067036) has been reverted and will roll out at a later date. * https://learn.microsoft.com/en-us/windows/

General * An effort to fight bad security advice - Hacklore. See The Letter, for a list of the names behind the project. Hacklore is a blend of hacking and folklore—modern urban legends about digital safety ... But like most folklore, it isn’t grounded in reality, no matter how plausible

General * There's a bug in Grafana, but only in the Enterprise version (not the Open Source version), and only when SCIM is enabled. * https://www.bleepingcomputer.com/news/security/grafana-warns-of-max-severity-admin-spoofing-vulnerability/ * Beware the insider - CrowdStrike terminated an insider after they shared screenshots of their system. Linked to Scattered

General * It took ten years from when they set up, but Samourai crypto-currency-mixer CEO (Rodriguez) and CTO (Hill) are both going to jail. They actively encouraged use of the service for cleaning dirty crypto-currency. a user asked about the most “secure methods to clean dirty BTC” to make it “untraceable,

General * AUKUS sanction "Media Land", a Russian Bulletproof Hosting Provider (BPH - ignore takedown notices), based in St. Petersburg. Also extends activity against "Aeza Group", sanctioned in July this year. * https://home.treasury.gov/news/press-releases/sb0319 * https://www.gov.uk/government/news/uk-smashes-russian-cybercrime-networks-responsible-for-attacks-on-uk-businesses * (A Krebs

General * Cloudflare Outage, lasting just under 6-hours end-to-end A Cloudflare spokesperson said the “root cause” of the outage was an automatically generated configuration file used to manage threat traffic that “grew beyond an expected size of entries,” which triggered a crash in the software system that handles traffic for several