Jim Becher

“You recognize that seeking approval is a game you can never win, because even when you get it, it’s never quite enough, and it can be withdrawn at any moment.”
- Alan Watts

"I know of no better life purpose than to perish in attempting the great and impossible. … Where would the courage and greatness be if success was certain and there was no risk? The only true failure is shrinking away from life's challenges."
- Nietzsche

Kindness comes from strength; niceness comes from fear, self-sacrifice. Niceness is the currency of control. -Alan Watts (paraphrasing)

The downside to attending a conference and watching a bunch of talks is that now I am starting a bunch of more side projects… /me looks at the pile of EXISTING side projects that are not 100% completed.

CEO-to-worker pay ratio in 1965: 20-1

CEO-to-worker pay ratio in 1990: 75-1

CEO-to-worker pay ratio today: 280-to-1

Trickle-down economics was always a sham.

Nothing has ever trickled down.

So we have solved redundancy for the Mitre CVE program for when the USG in their infinite stupidity decides to cut/remove funding…? Right? RIGHT?!

I may be cynical, but I am rarely disappointed.

How hard can it be?

They can do it…

Only on foot, the slowest and hardest way to move, can you hope to make contact with the finest parts of this landscape. — Kevin Fedarko

2️⃣ goals, 1️⃣ assist? Just another week for this guy. 😌👌

Congrats to YOUR USL League One Player of the Week, Ryan Becher!

#OneMeansAll

Germany gets 60% of its power from renewables and is shutting down its coal plants. No blackouts. No high bills. Every right wing lie about renewables has been proven false.

83' - HE'S ONLY GONE AND DONE IT AGAIN!

Ryan Becher leaves the keeper rooted to the spot with his shot, and we're back on level terms late!

#OneMeansAll | 1-1 | #OMAvWES

Advisories cover the following CVEs:

CVE-2025-54765
CVE-2025-54766
CVE-2025-54767
CVE-2025-54768
CVE-2025-54769

5 more advisories were released today for the Xorux XorMon Original and XorMon-NG virtual appliances. Advisories are based on vulnerability research that I have been doing on virtual appliances. The advisories are located on the @korelogic.bsky.social advisories page at korelogic.com/advisories.h...

Critical Vulnerabilities in Schneider Electric EcoStruxure DCE Platform: What You Need to Know Cybersecurity Alert for Data Center Operators Schneider Electric has raised the alarm with a critical security advisory issued on July 8, 2025, targeting its popular EcoStruxure™ IT Data Center Expert (DCE) platform. This alert reveals the discovery of multiple severe vulnerabilities affecting versions 8.3 and earlier. These flaws could allow cybercriminals to gain unauthorized access, escalate privileges, or even execute remote code, putting countless data center infrastructures at serious risk.

Critical Vulnerabilities in Schneider Electric EcoStruxure DCE Platform: What You Need to Know

Cybersecurity Alert for Data Center Operators Schneider Electric has raised the alarm with a critical security advisory issued on July 8, 2025, targeting its popular EcoStruxure™ IT Data Center Expert…

“Travel is fatal to prejudice, bigotry, and narrow-mindedness, and many of our people need it sorely on these accounts.” -Mark Twain

The advisories cover: CVE-2025-6438, CVE-2025-50121, CVE-2025-50122, CVE-2025-50123, CVE-2025-50124, and CVE-2025-50125.

Six advisories were released today for the Schneider Electric Data Center Expert virtual appliance. Advisories are based on research Jaggar Henry and I did in the 2nd half of last year (and one from like January 2025). Details are on the KoreLogic advisories page at korelogic.com/advisories.h...

I spent entirely too much time tonight fighting to make systemd-resolve and dnsmasq play nicely together.

“Most men die at 25, but are not buried until they are 75.”

- Benjamin Franklin

CMIYC (contest.korelogic.com) will not make it to DEF CON this year. passwordvillage.org will be there! We intend to do a contest later this year.

Complex npm attack uses 7-plus layers of obfuscation to spread Pulsar RAT The package uses Japanese Unicode characters, hex encoding, Base64 and more to hide its actions.

Are you reviewing your NPM dependancies for malicious code? #devsecops #appsec #npm
www.scworld.com/news/complex...

The hacker in a hoodie is a cliche that needs to be dialed down. Seriously, it’s 2025.

I leave a “trail of partially done side research projects” in my wake. Everything is going fine and then…. SQUIRREL!

THREE BIG POINTS FOR STL 🙌

New KoreLogic advisory:
KL-001-2025-005: Mobile Dynamix PrinterShare Mobile Print Double-Free Memory Write
CVE-2025-5100
korelogic.com/Resources/Ad...

New KoreLogic advisory:
KL-001-2025-004: Mobile Dynamix PrinterShare Mobile Print Out-of-bounds Write
CVE-2025-5099
korelogic.com/Resources/Ad...

New KoreLogic advisory:
KL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure
CVE-2025-5098
korelogic.com/Resources/Ad...

Freedom is a road seldom traveled by the multitudes….

SIMON IS HERE TO STAY! 👊

We have officially signed forward Simon Becher on a permanent transfer from Danish First Division side AC Horsens.

🗞️ www.stlcitysc.com/news/st-loui...