Zak
@rist138.c2.z4.fyi
I write about security stuff...Hack the planet !!
This is a WILD find, local privilege escalation that allows unprivileged users to execute commands with SYSTEM level privileges on Windows : radar.offseq.com/threat/steam...
Steam vulnerability on Windows lets any normal user silently escalate to SYSTEM - Live Threat Intelligence - Threat Radar | OffSeq.com
Detailed information about Steam vulnerability on Windows lets any normal user silently escalate to SYSTEM. Get real-time updates, technical details, and mitiga
radar.offseq.com
September 15, 2026 at 6:37 PM
This is a WILD find, local privilege escalation that allows unprivileged users to execute commands with SYSTEM level privileges on Windows : radar.offseq.com/threat/steam...
Yet another major Telegram security issue. Switching to Signal is highly advised: thehackernews.com/2026/09/tele...
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
Telegram Desktop fixed a flaw that let bot messages embed JavaScript in HTML exports to read or alter messages; old exports remain affected.
thehackernews.com
September 14, 2026 at 8:08 PM
Yet another major Telegram security issue. Switching to Signal is highly advised: thehackernews.com/2026/09/tele...
Be advised: thehackernews.com/2026/09/gitl...
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
GitLab patched CVE-2026-85706, a CVSS 10 path traversal flaw enabling unauthenticated file reads, as in-the-wild probes began.
thehackernews.com
September 13, 2026 at 6:20 AM
Be advised: thehackernews.com/2026/09/gitl...
What a wonderful timeline we're living in: www.darkreading.com/cyberattacks...
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, thanks to AI.
www.darkreading.com
September 13, 2026 at 6:18 AM
What a wonderful timeline we're living in: www.darkreading.com/cyberattacks...
Reposted by Zak
"The idea that surveillance makes us safer keeps being used as an excuse," EFF’s Rindala Alajaji told BBC, as tech is "used to criminalise people for being bystanders, with stories of innocent people being pulled over and having guns drawn on them because a licence plate reader read a letter wrong.”
I went looking for surveillance cameras in my neighbourhood: I found so many more than I thought
In the trade-off between privacy and security, it helps to know the extent of your local surveillance infrastructure. There are now easy ways to find out.
www.bbc.com
September 4, 2026 at 8:13 PM
"The idea that surveillance makes us safer keeps being used as an excuse," EFF’s Rindala Alajaji told BBC, as tech is "used to criminalise people for being bystanders, with stories of innocent people being pulled over and having guns drawn on them because a licence plate reader read a letter wrong.”
Can't believe this isn't getting more coverage cybernews.com/security/ali...
Alibaba’s AliExpress leverages user audio systems for fingerprinting
The Chinese e-commerce giant isn’t actually recording users but instead playing a silent sound and measuring how specific devices processed it.
cybernews.com
September 1, 2026 at 12:38 AM
Can't believe this isn't getting more coverage cybernews.com/security/ali...
Root on a $20,000 humanoid robot from Bluetooth range is a phrase you don't hear every day. boschko.ca/g1-ble-rce/
UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range
Root on a $20,000 humanoid robot from Bluetooth range. One chain crossing Bluetooth, Unitree’s cloud, mobile, and the firmware running the G1 itself. Here’s the complete technical breakdown of the $6,...
boschko.ca
August 29, 2026 at 5:45 AM
Root on a $20,000 humanoid robot from Bluetooth range is a phrase you don't hear every day. boschko.ca/g1-ble-rce/
Remember to shred your expired cards ! thehackernews.com/2026/08/zomb...
Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments
Zombie Card rewrites Visa NFC expiry data in transit, reviving expired cards at one tested U.S. bank without breaking card cryptography.
thehackernews.com
August 27, 2026 at 11:10 AM
Remember to shred your expired cards ! thehackernews.com/2026/08/zomb...
Be advised and update to 1.27.1 immediately if you have not already: thehackernews.com/2026/08/crit...
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
CISA adds CVE-2026-60004 to KEV amid active Gitea RCE exploitation; a separate reported attack deployed a miner-like dropper.
thehackernews.com
August 27, 2026 at 12:08 AM
Be advised and update to 1.27.1 immediately if you have not already: thehackernews.com/2026/08/crit...
Reposted by Zak
Numerous studies, including from the FBI itself, show that invasive mass surveillance tech like Flock and Axon's automatic license plate readers don't help police fight crime.
Surveillance is not safety.
Surveillance is not safety.
Flock Surveillance Cameras Are Actually Horrible for Fighting Crime, FBI Data Shows
New FBI data shows case closure rates for the Atlanta Police Department have not improved despite thousands of ALPRs installed since 2021.
futurism.com
August 26, 2026 at 5:12 PM
Numerous studies, including from the FBI itself, show that invasive mass surveillance tech like Flock and Axon's automatic license plate readers don't help police fight crime.
Surveillance is not safety.
Surveillance is not safety.
Knowing how PE firms have a habit of spending as little as possible on security and aggressively offshoring, I can't say I'm too surprised : cyberpress.org/apollo-globa...
Apollo Global Data Breach Exposes Names, Addresses and Social Security Numbers
Apollo Global Management has disclosed a July cyber incident in which attackers gained unauthorized access to cloud platforms and potentially obtained highly sensitive personal information.
cyberpress.org
August 23, 2026 at 10:22 PM
Knowing how PE firms have a habit of spending as little as possible on security and aggressively offshoring, I can't say I'm too surprised : cyberpress.org/apollo-globa...
Reposted by Zak
Want to see your name on the #GNU #CopyrightAssignment list? Contribute to #GNU and assign your copyright to the #FSF today: u.fsf.org/xe
August 23, 2026 at 12:30 AM
Want to see your name on the #GNU #CopyrightAssignment list? Contribute to #GNU and assign your copyright to the #FSF today: u.fsf.org/xe
Reposted by Zak
Cutting out DRM-saddled digital goods is possible, and we have a few ideas to get you started: https://www.defectivebydesign.org/guide #DRM #DefectiveByDesign
August 23, 2026 at 5:00 AM
Cutting out DRM-saddled digital goods is possible, and we have a few ideas to get you started: https://www.defectivebydesign.org/guide #DRM #DefectiveByDesign
Reposted by Zak
Age Verification schemes come with a wealth of privacy, security, and access issues. ZKP’s aren’t going to solve any of them, they just kick the problem down the road. www.eff.org/deeplinks/2...
Zero-Knowledge Proofs Aren’t Age Verification Silver Bullets
Age verification (laws and regulations requiring platforms and websites to assure or estimate that a user seeking to use an online service is of a certain age) is everywhere. At the time of writing,
www.eff.org
August 20, 2026 at 9:01 PM
Age Verification schemes come with a wealth of privacy, security, and access issues. ZKP’s aren’t going to solve any of them, they just kick the problem down the road. www.eff.org/deeplinks/2...
What an absolute legend ! I'm sad I didn't get to attend this year (I DID get to go to HOPE in NYC and had a blast, don't feel too bad for me). I'll see you next year @defcon.bsky.social
For your weekend:
The first early release talk from DEF CON 34 has made it to our YouTube channel. Please enjoy national treasure Cliff Stoll updating his 'Stalking the Wily Hacker'.
If you haven't read 'The Cuckoo's Egg', this is your sign.
youtu.be/656058JxTM0
#defcon #defcon34
The first early release talk from DEF CON 34 has made it to our YouTube channel. Please enjoy national treasure Cliff Stoll updating his 'Stalking the Wily Hacker'.
If you haven't read 'The Cuckoo's Egg', this is your sign.
youtu.be/656058JxTM0
#defcon #defcon34
DefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll
YouTube video by DEFCONConference
youtu.be
August 22, 2026 at 2:28 AM
What an absolute legend ! I'm sad I didn't get to attend this year (I DID get to go to HOPE in NYC and had a blast, don't feel too bad for me). I'll see you next year @defcon.bsky.social
Reposted by Zak
There’s never been a more important time to teach young people about civil rights.
Know Your Rights University explores:
🧢 Student free speech rights
📚 Book bans
🏛️ The 3 branches of government
🤝 Civic activism
Check it out today.
Know Your Rights University explores:
🧢 Student free speech rights
📚 Book bans
🏛️ The 3 branches of government
🤝 Civic activism
Check it out today.
Know Your Rights University - YouTube
Two curious students at Eastman-Baldwin Junior High learn fun and important lessons about civics and the power of our rights and freedoms from their knowledg...
www.youtube.com
August 21, 2026 at 9:49 PM
There’s never been a more important time to teach young people about civil rights.
Know Your Rights University explores:
🧢 Student free speech rights
📚 Book bans
🏛️ The 3 branches of government
🤝 Civic activism
Check it out today.
Know Your Rights University explores:
🧢 Student free speech rights
📚 Book bans
🏛️ The 3 branches of government
🤝 Civic activism
Check it out today.
Reposted by Zak
From pushing for newly gerrymandered maps and national anti-voter bills to attacking mail-in voting, President Trump has shown he will do whatever it takes to make it harder to cast a ballot.
The fight to protect our democracy is as important as ever.
The fight to protect our democracy is as important as ever.
Opinion | Trump’s Election Interference Is Eroding American Democracy
The president is prioritizing his own interests over the national interest.
www.nytimes.com
August 20, 2026 at 11:42 PM
From pushing for newly gerrymandered maps and national anti-voter bills to attacking mail-in voting, President Trump has shown he will do whatever it takes to make it harder to cast a ballot.
The fight to protect our democracy is as important as ever.
The fight to protect our democracy is as important as ever.
This is amazing news!
American drug companies Merck and Moderna have created a vaccine that has stopped skin cancer returning in patients during a trial. Each vaccine is created specifically for an individual patient by sequencing DNA from patient's tumor and using mRNA to create the vaccine.
Vaccine breakthrough stops cancer returning in trial
A new jab extended the length of time patients were cancer free, but it is unclear for how long.
www.bbc.com
August 20, 2026 at 1:06 AM
This is amazing news!
Reposted by Zak
A full third of registered voters failed a freakin open book test because THEY ARE FUNCTIONAL ILLITERATES and TREASONOUS IDIOTS
August 19, 2026 at 4:52 AM
A full third of registered voters failed a freakin open book test because THEY ARE FUNCTIONAL ILLITERATES and TREASONOUS IDIOTS
Reposted by Zak
Republicans are begging AI companies to start creating positive PR about datacenters because they are at risk of losing elections because the GOP is now the pro-datacenter party.
Who would have guessed there’d be negative repercussions from bragging about all the job loss AI would create?
Who would have guessed there’d be negative repercussions from bragging about all the job loss AI would create?
Exclusive: GOP warns AI companies that data centers are politically radioactive
"This has become a sleeper issue for the entire election cycle," Senate Republicans' committee says.
www.axios.com
August 19, 2026 at 7:53 PM
Republicans are begging AI companies to start creating positive PR about datacenters because they are at risk of losing elections because the GOP is now the pro-datacenter party.
Who would have guessed there’d be negative repercussions from bragging about all the job loss AI would create?
Who would have guessed there’d be negative repercussions from bragging about all the job loss AI would create?
Reposted by Zak
Do you know how to spot covert automated license plate readers (ALPRs)? Here's what to look out for if you're on the U.S.-Mexico border.
www.eff.org/deeplinks/2...
www.eff.org/deeplinks/2...
August 19, 2026 at 9:28 PM
Do you know how to spot covert automated license plate readers (ALPRs)? Here's what to look out for if you're on the U.S.-Mexico border.
www.eff.org/deeplinks/2...
www.eff.org/deeplinks/2...
Reposted by Zak
Flock cameras are springing up in communities across our country, endangering our privacy.
Tell your member of Congress: Enough is enough. Get these creepy cameras off our street.
Tell your member of Congress: Enough is enough. Get these creepy cameras off our street.
Get the Flock Out
Flock and other automatic license plate readers (ALPRs) are taking over our neighborhoods, tracking our movements, and building detailed databases about us. Tell Congress to rein in this mass surveillance tool: No Flock. No ALPRs. No exceptions.
action.aclu.org
August 19, 2026 at 10:09 PM
Flock cameras are springing up in communities across our country, endangering our privacy.
Tell your member of Congress: Enough is enough. Get these creepy cameras off our street.
Tell your member of Congress: Enough is enough. Get these creepy cameras off our street.
This one is scary, update ASAP.
JetBrains Datalore 2026.2.3 Remote Code Execution https://packetstorm.news/files/228937 #exploit
August 19, 2026 at 12:44 AM
This one is scary, update ASAP.
I'm really hoping to make it next year. I got to do HOPE in NYC for the past few years. Next year the plan is to do both !
August 19, 2026 at 12:44 AM
I'm really hoping to make it next year. I got to do HOPE in NYC for the past few years. Next year the plan is to do both !