A North Korean ‘APT’ infected their machine with an infostealer, feel free to dig through their data here: https://www.hudsonrock.com/northkorean
Mastodon Digest
Posts
Fantasy: North Korea has a cyber army using advanced GenAI cyber weapons to hack the west.
Reality: North Korea has some teenagers using Windows 10, who are all monitored by Microsoft using telemetry btw, who are using the most basic techniques to steal billions from the west, as nobody can be arsed to do foundational security.
I've got a Mastoduh question: If you hover over the follow button on someone's profile and see that it includes a "do not" circle that disallows following, does that mean they've blocked you, or that they have just turned off new followers? Or maybe something else? Thanks!
Microsoft have lowered its sales targets for its generative AI products, as it isn’t seeing customer demand.
There is an unauthenticated remote code execution vulnerability in React Server Components.
Even if your app does not implement any React Server Function endpoints it may still be vulnerable if your app supports React Server Components.
If your app’s React code does not use a server, your app is not affected by this vulnerability.
CVE-2025-55182
Mastodon server not impacted btw.
https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
Boosts
The next time someone says "Privacy doesn't matter to me, I've got nothing to hide", show them this video.
You haven't truly lived the life of a #sysadmin until you're googling around to figure out some issue and find a post about it where someone's asking the exact same question and... it's you. You, asking the exact same question ten years ago. And nobody answers.
Idiots: "The arts have no purpose"
Me:
