Adform quietly put out an updated statement and regulatory filing saying the attack only worked over sites served with http, rather than https.
Does anybody understand _why_ they think this? The script itself was served over https via their endpoint, I can't see any browser controls that stop it when embedded on https:// urls
https://site.adform.com/resources/newsroom/security-incident-company-update/
Boston Scientific has filed an updated 8-K with the SEC saying their ransomware incident is likely to have a material impact on the company's financials https://www.sec.gov/ix?doc=/Archives/edgar/data/885725/000088572526000059/bsx-20260907.htm
Sometimes I feel like I've got magical powers when I go to plug in a USB-A cord and get it right on the first try.
If losing it would devastate you... BACK IT UP.
Photos. Videos. Documents. Work.
If you only have one copy, you don't have a backup.
For all the crying about the "AI vulnerability apocalypse" - it's just business as usual in the trenches amongst orgs doing the doing.
Almost every CVE was never actually exploited, and that pattern continues.
CVEs are bundled up in patches by vendors, so you just apply the patches each month as usual.
A lot of people have, and continue to, cry wolf.
The repository has been updated.
‼️ Security researcher Nightmare Eclipse has created a new GitHub repository called ShieldCrash, which is described as a Windows Defender zero-day vulnerability.
Currently, the repository is empty.
The other day, I wanted to see if alcohol-free port existed. The top search link went to a page of the 20 best alcohol-free ports! Except none of them were port, they were all spirits (not even other fortified wines). The ‘AI’ summary described a fictional process for removing alcohol from port and had two citations, neither of which supported the claim. The next 30 pages were all LLM slop that talked about what port is for a long time before saying that there’s no alcohol-free version.
I have been using the web since the mid ‘90s and it has never been this bad. Anyone advocating for ‘AI’ is advocating for a future where this damage is spread to all facets of life.
I regret to inform everyone that my copy of QBittorrent escaped its sandbox last night and downloaded a whole bunch of content owned by major corporations, and then my copy of Jellyfin broke containment and added those unfortunately-downloaded media files to its various libraries. I'm conducting an internal investigation to figure out how this happened, which will involve consuming these media files until the answers become apparent. Thank you for your cooperation during this trying time.
