Infosecanon

'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

This week’s main story is about how more and more white nationalists, antisemites, and Nazi sympathizers seem to be integrating into the Republican Party, how some of them are currently running for office, and how old you can be for JD Vance to consider you “a very young boy.”

Former '60 Minutes' employees Wren Woodson and Mabel Kabani find it “heartbreaking” to see the structural overhauls at CBS News. “It’s hard to find news institutions you can trust these days, and it’s sad that that’s all being stripped away,” Kabani says.

our inboxes are insane places right now

In comments at a private police conference, Flock CEO Garrett Langley said backlash to the company wasn't "real" and the work of "bots." Also he said his wife advised him to never apologize. Read now: www.404media.co/in-leaked-au...

After cyberattacks spoiled food at French supermarkets, researchers found 12,976 refrigeration services exposed online in 99 countries, warning that compromised controls could put food and medicines at risk. Listen/Read: hackread.com/refrigeratio... #Cybersecurity #IoT #Vulnerability #OTSecurity

I grew up in a lower income immigrant family and we ate at Red Lobster for "special days." But we also understood the White House should not look like the inside of Red Lobster. It's condescending to assuming working ppl are culturally illiterate bc their experience is shaped by their limited means.

Musk said he restricted Starlink in Ukraine- causing fast moving drones to lose connectivity - and that he had every right to do so because of some terms of service or contract that he didn't show us. (He didn't address suddenly doing this with no warning to Kyiv.) www.cnbc.com/2026/10/24/u...

In a world where you can be anything, be a person who votes in midterm elections! 💚🙏✊

The Archdiocese of New York and attorneys for about 1,300 parishioners who say they were sexually abused by clergy have agreed to an $800 million settlement of their legal claims.

The case shows the very real danger of identity theft, how the data and tools offered to police can lead them to the wrong person, and the sprawling world of CashApp fraud. www.404media.co/amanda-smith...

bring back shame

U.S. citizen Ricardo Gonzalez was brutally detained by ICE in Long Beach while he yelled for help and said his arm was broken. This is a pattern of abuse and violence from ICE. No one is safe and our communities are being terrorized. We need ICE out.

OBAMA: When I was president, all these Republicans are all deficits, deficits, debt, debt. You got to do something about it. And now—$40 trillion—Crickets. Somehow deficits only matter when a Democratic president is in office

Americans have now spent $142 billion more on gasoline and diesel since March 1, enough to buy 361,000 homes at the September median price, enough to house over 900,000 people, due to the US war on Iran and other factors like limited output from Russia

"The rejection rate is at about 3% statewide, and two or three times as high as in some larger counties. “Potentially thousands of votes could be spoiled by this new guidance... This is a huge deal for North Carolina.” www.nytimes.com/2026/10/21/u...

“Justice should not have an expiration date, and it certainly should not be dictated by the news cycle. We cannot allow the Epstein scandal to become yesterday’s news simply because today’s headlines are more urgent.” www.theguardian.com/us-news/2026...

More than one million people in the U.S. and Mexico live in areas along the border where they can be seen by A.I.-powered surveillance towers, a New York Times analysis found. nyti.ms/4BhdddA

Nothing is a more convincing admission that you know your entire administration is corrupt than giving criminal pardons to EVERYONE.

Elon Musk has now issued his fourth explanation for his actions in throttling StarLink and StarShield. Note that each of his explanations is inconsistent with its predecessor. And this one focuses on Ukraine supposedly violating its terms of service. If it did, that's an easily ascertainable fact.

we now know what it looks like when telegram gives data to the US government www.404media.co/heres-what-t...

JUST POSTED: Today at The NYT we are publishing a major investigation into how President Trump used his executive powers to expose millions of Americans to greater cancer risks. A six month-long investigation built on more than 10,000 pages of FOIA records. Read it www.nytimes.com/2026/10/24/c...

Wild Hornets Raffle for the 114th Kyiv TD Brigade Help fund 10 STINGs and a Hornet Vision station—in partnership with @fellaraktar.bsky.social Win Grit's knife! Donate $10/entry: linktr.ee/WildHornets -Merch = raffle tix -$500 = named STING + guaranteed strike video -First $1K matched—tix doubled

Even an air-gapped PC, isolated from external networks, can leak secrets as the new #SPECTER technique uses USB power changes to transmit data after malware gains administrator access. Listen/Read: hackread.com/specter-usb-... #Cybersecurity #AirGapped #USB

Neural chip decodes interactions between brain regions | Discussion

thinking about how i wasted all this money on clothes when i could have invested this money in an index fund and eventually bought a senator like elon musk

Iran has ramped up efforts to target US personnel, intelligence memo warns reut.rs/4zex5wM

“A gaping wound of earth” 🌎 😕 Google illegally knocked down 250,000 trees in Finland to build a data center. @nonewdatacenters (From the Guardian)

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Hands up if your CISO had "open source software with RCE in it" on their risk register and sufficient budget for the remediation work! Oh, they didn't?

Warhound, a new defense technology company, has launched with $200 million in seed funding from investors including Sequoia Capital to create dogs genetically engineered for military use. www.semafor.com/article/10/2...

A cascade of Russian ops.

“They were careless people, Tom and Daisy- they smashed up things and creatures and then retreated back into their money or their vast carelessness or whatever it was that kept them together, and let other people clean up the mess they had made.” ― F. Scott Fitzgerald, The Great Gatsby

GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites. Listen/Read: hackread.com/godaddy-revo... #GoDaddy #Cybersecurity #Hosting #SSL #Certificate

That’s how it’s fucking done. Go Queens 💪

federal agents took a daycare teacher from a room of screaming toddlers in Chicago last fall during drop-off and it radicalized a bunch of yoga pants moms who started buying anti-ICE shirts.

Moonshot says it removed cyber-related data from training phases for Kimi K3.1 Pro "to reduce potential misuse risk while preserving general usefulness" (Matthias Bastian/The Decoder) Main Link | Techmeme Permalink

What old and vulnerable software might be running on your PC right now? www.theverge.com/tech/1017914...

Notes on Kimi K3.1 - this one is a big deal, the first time an open weights (well, soon-to-be open weights) model has competed this credibly with the current frontier simonwillison.net/2026/Oct/23/...

The Pentagon is building weapons and projects with AI capabilities that officials say don't always closely adhere to the agency's own guidelines for AI, according to a congressional watchdog report published in October. n.pr/4BDLa8y

You still have time to learn to make a creepy costume with wearable electronics⚡by buying a DIY Halloween Humble Bundle. You'll also support EFF with some of the proceeds! www.humblebundle.com/books/diy-e...

Everyone has kind of laughed it off but there’s actually now an official investigation by multiple organizations into why my US election ballot hasn’t been released from US customs in a month without any explanation.

BREAKING: Amazon has scrapped a plan to build data centers in Northern Virginia after widespread opposition to the project from residents, per WaPo

There's a third PHP2Shell bug, but it won't get an emergency fix

wrote about "Black October," the PHP vulnerability, and the AI-fueled dread and panic I'm seeing among almost all of the cybersecurity experts I've ever known. I think people w/ LLMs are brute forcing software the same way they brute forced social media w/ slop www.404media.co/php2shell-bl...

Once mass spam texts were made legal, younger donors vanished, leaving a grassroots fundraising machine that subsists on squeezing vulnerable seniors, some of whom give hundreds of times a day. It’s a horrific model. Consultants get generationally wealthy, and the party hollows out its future.