Mastodon Digest
for the past
scorer
threshold
Posts

I'm in the process of updating the threat surface sources (forums, darknet markets, crypto, services, etc). The only thing I haven't decided on is whether to consolidate everything onto one page or keep the separate pages I have now. This isn't the final look, but it's getting close.

Regardless of the direction... it's more automated meaning no real delays on adding anything that is new.

Mi-lune et nuages rouges sur l'Obiou ce soir

Milune

Update: I am being told "pound town" is not a euphemism for "the doghouse"

🚨🇫🇷 Biocoop breach allegedly exposes 2.76 GB of internal retail and store data

Biocoop is a French cooperative network of organic food retailers operating stores across France.

A forum actor using the handle "Venus1337" claims to have breached Biocoop's extranet and released approximately 2.76 GB of internal data.

Claimed exposed material includes:

• Retail data: full store assortment, pricing and product information
• Financial data: store revenue and pricing-positioning information
• Store data: contact details and other location-related information
• Infrastructure data: SQL records and files accessible through MinIO object storage

The actor claims initial access was obtained through a Local File Inclusion vulnerability that provided access to an Adminer SQL environment, followed by access to the company's MinIO storage.

The actor also claims store contact information could be harvested at scale due to insufficient rate limiting.

This claim is currently unverified.

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Boosts

I’m setting up a new NAS.

Last week, I set up #Immich. It’s an amazing Google Photos replacement. I would even say it’s better.

This week, I set up #paperlessngx. After scanning the whole weekend, I finally got all my physical docs backed up.

Next week, I plan on setting up #jellyfin (maybe via Nixflix) and some boring home folders via SMB.

After that, I’ll try to tackle #homeassistant.

This is my stack: #nixos, #zfs, and #restic. Backup to the old NAS and cloud.

Love it!