hrbrmstr 🇺🇦 🇬🇱 🇨🇦

The team had a wicked cool idea to track the IPs crawling for Markdown (.md) files on the internets. Shortly after it went live, the hits came rolling in. Def make sure you aren't `rsync`-ing stuff you shouldn't be. The ne'er-do-wells seem to know where this stuff is hiding.

GreyNoise Visualizer | GreyNoise Visualizer

Whenever I do my 2x/year CMU lecture on “data-driven security" one set of slides are headline screencaps of followed by a bullet-list of rly terrible vulns/events that were caused by garbage enterprise security tech. This is just the "highlights” from this year.

"Soft And Chewy Gingerbread Latte Cookies" #nom Recipe:

Soft And Chewy Gingerbread Latte Cookies

🚨 With folks (rightfully) abandoning GitHub for other pastures, some are turning to self-hosting. One option is Gogs, and the epic team at Wiz says you gotta patch since there's an 0-day in the wild (pls RT for reach and someone pls post on the stupid fosstodon server b/c the folks there are likely to be doing this)

wiz.io

Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited | Wiz Blog

Wiz Research discovered a Gogs zero-day (CVE-2025-8110) that bypasses a previous RCE fix via symlinks, leading to file overwrite and remote code ex...