Warpfeed

🌕✨ Lamine Yamal: “Last year, for me, Cubarsí was the best young player in the world”. “Either the Kopa award or the Ballon d'Or should go to him. There's no difference between us”. “When I won it, I told him that he would be next. If he doesn't win it for whatever reason, I https://t.co/EYifhNtR7x

Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.

​Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets. [...]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its K…

Good news: there's a patch. Bad news: both CISA and F5 warn that it's under active exploitation

Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest ru…

Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransom…

&nbsp;CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-5430</a

Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications

Marking two years of OpenAI Academy and bringing AI skills to even more communities.

New initiative partners with under-resourced organizations to uncover, remediate exploitable risk at scale.

TLDR: Runtime security built around detecting activity, correlating signals and then responding assumes there is enough time to act after something malicious happens.

AI agents are moving through three stages. They began on the endpoint: Claude Code or Cursor in a terminal on a developer's laptop, a local process with local credenti…

A growing vulnerability backlog is more than technical debt: it is an attack surface.

I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the new…

We already know AI can find vulnerabilities. James Kettle, PortSwigger's Director of Research, wanted to answer a harder question: can an autonomous system invent genu…

Generative AI is a distributed denial of service attack on the human brain.And it&#39;s coming for our children.(5/5)

I wonder how many ultra wealthy people there are out there whose wealth and power is FAR higher than their Forbes numbers, they just keep it quiet and do their evil shit through proxies and shell corps. Like what if even Elon had to dance to people's tunes because they could destroy Tesla with a phone call.

I think it's a friendly-feeling smile. I know like I'm not necessarily your friend or anything, but like, it feels friendly. Like I'd feel comfortable and invited to have conversation with you, but I guess that's self evidentin most other animals bared teeth are a threat display.

Here is a fun piece of Linux filesystem trivia that feels like dark magic the first time you see it: rm does not delete files.In POSIX, rm invokes the unlink() syscall. All it does is sever the directory entry (dentry) and decrement the inode&#39;s hard link counter by 1. The kernel will only actually deallocate the extents and free the disk blocks when two conditions are met, a.) the hard link count drops to 0 and b.) the open file descriptor (FD) reference count drops to 0.This is why you can rm a 200GB log file and watch df -h stubbornly stay at 100%. The daemon holding that file descriptor is still happily writing to unlinked disk blocks.That said if someone accidentally runs rm on an active, in-use database flatfile or massive dataset, maybe don&#39;t panic and don&#39;t kill the process. As long as that process is alive, the inode is fully intact. Find the PID and look into the virtual filesystem, ls -l /proc/&lt;PID&gt;/fd/You will likely spot the descriptor pointing to /path/to/file (deleted).You can then resurrect the entire file right out of the kernel&#39;s file table by dumping the descriptor back out, try cp /proc/&lt;PID&gt;/fd/4 /recovered_fileAnd if your disk is full because of an unlinked runaway log and you can&#39;t restart the daemon, don&#39;t restart it. Truncate the inode directly through its descriptor, /proc/&lt;PID&gt;/fd/4Zero downtime while the VFS does its job. Understanding inodes is a superpower that anyone can acquire.#linux #sysadmin #filesystem #kernel #storage #unix #devops #bash #programming

A fire at a Starlink ground station in central Poland on Wednesday night is being treated as deliberate sabotage. The station is state-owned and carries internet traffic onwards to Ukraine, including for its army. It stayed operational.Denmark&#39;s intelligence service warned the same week of destructive cyberattacks and sabotage against Nato states in the coming months. Germany has blamed Russia for an attempted drone attack on Leipzig/Halle airport. France has ordered a protection plan for critical infrastructure sites.The practitioner point is not geopolitical. Connectivity to a war zone ran through one commercial satellite provider and one physical building. The same question applies at every scale: where does your traffic go, and what burns down.https://www.bbc.com/news/articles/cmp30r1klk37o#CyberSecurity #CriticalInfrastructure #InfoSec #HybridThreats