“The Gospel takes away our right forever, to discriminate between the deserving and the undeserving poor.”
-Dorothy Day, born #OTD in 1897

Icon: @KLICONS

30 years ago today, Phrack 49 published Aleph One’s “Smashing the Stack for Fun and Profit”.

A legendary paper that inspired generations of hackers and helped shape modern exploit development.

Still an essential reading.

phrack.org/issues/49/smas…

Phrack 73 is coming soon!

Having Brunch with my good friend Trevor. Talking about what to expect from @qc_con this year. Great keynotes including @HackingDave and @c3rkah, killer talks, and free with badge intensive labs. github.com/QueenCityCon/2…

⚠️ We issued 1 updated public #ICS Advisory. This advisory provides info about current security issues, vulnerabilities, & exploits surrounding ICS. More at go.dhs.gov/iEv

Internet-exposed or unpatched refrigeration controllers can be exploited to alter temperatures, trigger heating or defrost cycles & disrupt cold chain operations. Read our joint Fact Sheet with federal partners for mitigations. 👉 go.dhs.gov/59J

Students Think Everyone Else Is Using AI to Cheat. That May Be the Bigger Problem substack.com/home/post/p-22…

Clocks fell back last night, so you've got an extra hour. Spend 10 minutes of it on security: update your devices, turn on MFA where it's off, and check that your backups actually restore. #SecureWV #InfoSec #FallBack

The Solemnity of All Saints, which we celebrate today, invites us to share in the joy of that countless family of men and women who, following the Lord Jesus, have made their lives a gift to God and to their neighbors.

Missed the SecureWV 17 CTF, or want a rematch? Directive Zero is now on GitHub, so you can play it at home. 💻

Congrats again to our winners:
🥇 CN Solo
🥈 Transportation Gurus
🥉 PHP 5.2.4 is secure right

github.com/bkarnes/Secure…
#SecureWV #CTF

One week ago, lawyers at Canada’s top firms received urgent calls from their IT departments about a critical software update or an expired password. The agents were happy to stay on the phone and help.

Even to a skeptic, the calls could seem legitimate. They were often placed , appearing to come from internal IT employees, or they were phone calls from the IT department’s number.

The reality: Hackers were on the other end, spamming Canadian lawyers en masse.

The tactic the hackers used is called vishing, short for voice phishing – and it worked. At least four companies were broken into, all among the country’s most prestigious law firms: McCarthy Tétrault LLP, Davies Ward Phillips & Vineberg LLP, Bennett Jones LLP and Borden Ladner Gervais LLP.

The extent of the damage is still being assessed, but the fallout is already immense. Law firms market themselves as trusted advisers, and the nature of their work means they store sensitive files on their servers. These include non-public corporate information, communication between client and counsel, and their clients’ tax, financial or health records.

theglobeandmail.com/business/artic…

Happy Halloween. For something properly scary, Lillian Warner’s SecureWV 16 talk last year asks: “Is your Printer Haunted and your Laptop Possessed?” youtube.com/watch?v=mFNoBe… #SecureWV #InfoSec #Halloween

At the @MarshallSOJMC 100th anniversary and Hall of Fame induction ceremony, where @BradMcElhinny is one of several being inducted.

Now @BradMcElhinny is leading us in song or something.

The future of #ArtificialIntelligence is not pre-determined. As a technology developed by human beings, its future depends on the choices we make. We therefore have the responsibility to guide, change and, when necessary, reject its applications. A reliable system that serves the human person is of greater value than one that is exceptionally powerful but whose consequences cannot be adequately foreseen or controlled.

FOURTH-TIER FLEETWOOD TOWN ELIMINATE 2025-2026 PREMIER LEAGUE CHAMPIONS ARSENAL FROM THE CARABAO CUP 😱😱😱

BIGGEST UPSET IN ENGLISH FOOTBALL HISTORY 😤

Hackers absolutely compromised New Mexico hospital system.

Surgeries cancelled. Ambulances diverted.

Hackers demands broadcast over the sound system.

Arsenal just lost to Fleetwood Town in the EFL Cup.

Arsenal’s roster: $1.5 BILLION
Fleetwood Town’s roster: $3 million

Fleetwood is currently 18th in the 4th level of English soccer.

Possibly the biggest upset in English soccer history.

AI has really reduced the friction for novices to create a lot more work for experts. This php2shell event is just a widescale example of it.

The SecureWV 17 CTF results are in! 🏆

🥇 CN Solo
🥈 Transportation Gurus
🥉 PHP 5.2.4 is secure right

Congrats to our winners, and thanks to every team that took on Directive Zero. #SecureWV #CTF #InfoSec