cat dad, blue teamer, detection engineering
:blobcat:
he/him/his
:tardis:
#CyberSecurity | #InfoSec | #BlueTeam | #StarTrek | #DoctorWho | #Cats | #Linux | #Guitar | #Autoimmune | #Sjögrens | #FoD | #fedi22
Just a heads up - Microsoft Defender for Cloud Apps is incorrectly blocking multiple legitimate domains, certs, and cloud apps. Microsoft's issue ID is DZ1231199 (https://admin.cloud.microsoft/#/servicehealth/:/alerts/DZ1231199).
More discussion on r/sysadmin subreddit here:
https://www.reddit.com/r/sysadmin/comments/1r30bz8/get_it_together_microsoft/
Whoops, seems like someone forgot to renew the Logitech code-signing certificate. I’m guessing macOS won’t let the Logi Options+ services run with an expired cert.
My mouse wasn’t working properly earlier and it turns out Logitech Options was down. The app that runs my mouse was down.
What a stupid world.
In case any other Mac users have a broken Logitech Options+ app right now, it's not just you. Seems to be happening to everyone. This breaks acceleration and other custom settings.
#Logitech #Options+ #macOS #OptionsPlus #Broken
https://www.reddit.com/r/logitech/comments/1q5vjyn/options_just_spins_and_spins_mac/
I kept this quiet for 15 years, but have finally gone public with how I massively disrupted one of the most dangerous cybercriminal organizations in the world (Evil Corp) from the inside out:
https://www.bbc.co.uk/programmes/w3ct89y8
THIS is my passion and I will not stop until these guys are held to account.
Today's AWS outage is a good reminder of how over-reliant we have become to a single major cloud provider where it can take down so many web services we rely on when it suffers an outage.
#awsoutage #outage #cloud #aws
Man.... It's almost like having a sizable chunk of the Internet running on the back of a single service isn't the best course of action.... #AWS #AWSOutage
Now I've thought of this I can't un-think it
theory: 'Deep work' is just what we called normal cognitive function before we broke our brains with notification systems designed by teams of PhDs whose literal job is to make the casino irresistible
If your board is concerned about the EU ransomware thing - there is no need to be concerned. It is not a wider issue.
It wouldn't surprise me if the person arrested turns out to be an employee trying to do incident response or some such (I'm not saying they're guilty, at all).
It's an extremely unusual incident and essentially involves lax cybersecurity and confused response.
Lady Margaret Catcher (Margo), ~2006 - September 23, 2025
Saying goodbye is never easy, but Margo is no longer suffering or in pain. Her kidneys were failing and her body was shutting down. It was time to help her cross the rainbow bridge. Today was that day.
Margo came into our lives in summer 2019. We had lost our senior ragdoll cat earlier in the year to kidney disease and decided to adopt another senior shelter kitty. Margo (formerly Sheba) had been at a local shelter for nearly a year. We don’t know her exact birthday, but she was at least 13 when she entered the shelter. At 13+ years old, scared, and shy, she didn’t get much interest from potential adopters. After having been out on the adoption floor for months, she was placed into a foster home who specialized in hospice care, not because she was sick or dying but because she was taking up valuable adoption space and hope for her getting adopted was dwindling.
When I came across her shelter posting, something that caught my eye was a mention of stealing chairs. That reminded me of our previous cat - a notorious chair thief. We went to go meet her and within short order decided to bring her home with us. Her first night with us she caught a mouse that we didn’t know we had. This naturally led to her earning her full name, Lady Margaret Catcher.
Margo was initially very shy, but gradually came out of her shell and let it be know that she had strong thoughts and opinions. Both of her vets described her as “spunky.” She loved to drink water out of any faucet. She loved Temptations and Chicken Littles cat treats. She loved basking in the sun. She loved draping herself across my lap and sleeping on my side at night. She loved to grab a toy feather in her mouth, run down the stairs yowling all the way with it, and drop it at my feet in a big display of gift giving. We called it her baby. She loved to go out on the porch and roll around on the cement. She loved to sit at the very top of her cat tree, stare out through the window at the neighbors, and silently judge them. She loved to lick my fingers and without warning bite them (she had all of her teeth, even at the end). Some of that earned her the nickname for her alter ego, “spicy marg.”
Most of all though, Margo loved. And like everything, she did it on her own terms.
Endings are hard, but we are better off for having had her in our lives. There’s never enough time with our beloved pets. We had just over 6 years, and I wish we could’ve had 6 more.
I’ll miss our sweet little Margo, Margie, Marigold, Marginald, Margarita, Spicy Marg, Margolio, our Lady Margaret Catcher. 🌈
#Datastar #Hypermedia Framework - combining #HTMX + #AlpineJS functionality!
Breaking, new, by me:
Self-replicating "Shai-Hulud" worm hits 180+ Software Packages
At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub, experts warn. The malware, which briefly infected multiple code packages from the security vendor CrowdStrike, steals and publishes even more credentials every time an infected package is installed.
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
That NodeJS supply chain hack incident is amazing because the threat actor(tm) got RCE access to like a billion devices and ran the world’s shittest Etherum dumper.
Imagine if they had done reverse shells instead, or automated lateral movement to ransomware deployment NotPetya style.
The thing that saved companies here was the threat actor was incompetent crypto boy, nothing more.
Malicious javascript compromise on npmjs.com
These packages, about a billion downloads prior
supports-hyperlinks
chalk-template
simple-swizzle
slice-ansi
error-ex
is-arrayish
wrap-ansi
backslash
color-string
color-convert
color
color-name
Thread follows.
do time travelers have to pay taxes