Goupil

Windows 10 isn't only Microsoft product at end of support : Windows 10 is the least of some people's problems

www.theregister.com/2025/10/16/w...
This is the end ...

GPU computing before CUDA was *weird*.


Memory primitives were graphics shaped, not computer science shaped.


Want to do math on an array? Store it as an RGBA texture.


Fragment Shader for processing. *Paint* the result in a big rectangle.

Les Assises 2025 - NoLimitSecu Episode #516 Les Assises 2025 Avec Maria Iacono

#Podcast #Cybersécurité #LA25 #LesAssises

Épisode #516 consacré aux Assises de la Cybersécurité 2025, avec Maria Iacono

www.nolimitsecu.fr/les-assises-...

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2025-ACT-043/

YouTube video by Devoxx Vibe coding your way into a security nightmare by Arjen Wiersma

youtu.be/AQqZUzeTFOc?...
If you want love from attackers: vibe code your applications

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2025-ACT-042/

And when strategic choices make the organisation fragile, it is not only IT which suffers but the whole organization and its partners.

The impact of a serious cyber attack is not about IT it is about business. And restoring full business function after an emergency interruption can be very, VERY, long.

Cyber-resilience is not just an IT problem, and it has to be dealt with as an organisation level strategy.

...Anybody who has been in the trenches of these incidents will tell you that two things happen: your business IT has a heart attack, and paying does not equal restoration. In almost every case, even with payment, restoration takes weeks to months[...]

[...]Many organisations think IT disaster recovery plans deal with ransomware. It doesn’t. [...]. I’ve talked to business after business after business whose real plan with ransomware is simply: the insurance covers it, we’d pay. ...

The Elephant in The Biz: outsourcing of critical IT and cybersecurity functions risks UK economic… Recently, there’s been three major UK ransomware and/or extortion incidents at three big UK companies — Co-op Group, Marks and Spencer and…

@doublepulsar.com on the impact of ransomware on business and society
doublepulsar.com/the-elephant...

Virtual Machines render fonts. It’s kind of insane.



TrueType has its own instruction set, memory stack, and function calls.



You can debug it like assembly. It’s also exploitable:

Sa très belle exposition avait été installée à Besançon. La Russie est un état terroriste.

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2025-ACT-041/

⚠️ Alerte CERT-FR ⚠️

Les vulnérabilités CVE-2025-20362 et CVE-2025-20333 sont activement exploitées sur Cisco ASA et FTD.
Un attaquant non authentifié peut exécuter du code arbitraire à distance.

www.cert.ssi.gouv.fr/alerte/CERTF...

Approche SSI pour l'Internet des objets industriels - NoLimitSecu Episode #514 Approche SSI pour l’Internet des objets industriels Avec Laëtitia C. Références :  https://cyber.gouv.fr/sites/default/files/document/approche_ssi_pour_l_internet_des_objets_industriels_2...

#Podcast #Cybersécurité #ANSSI #IOT

Épisode #514 consacré à la publication de @anssi-fr.bsky.social : "Approche SSI pour l'Internet des objets industriels", avec Laëtitia C.

www.nolimitsecu.fr/approche-ssi...

How Container Filesystem Works: Building a Docker-like Container From Scratch | iximiuz Labs Learn how Linux containers are built from the ground up. Starting with the mount namespace and a root filesystem, see why PID, cgroup, UTS, and network namespaces naturally follow - and how this…

How to assemble a tiny but realistic, Docker-like Container using only stock Linux tools: unshare, mount, and pivot_root - A very long article by Ivan Velichko #Docker #Linux labs.iximiuz.com/tutorials/co...

This processor doesn’t (officially) exist.



Pre-production Engineering Samples sometimes make it into the grey market.



Rarer still are Employee Loaner Chips.

Ghosts abandoned before ever becoming products:

Nearly 50,000 Cisco firewalls vulnerable to actively exploited flaws Roughly 48,800 Cisco Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) appliances exposed on the public web are vulnerable to two vulnerabilities actively leveraged by hackers.

Roughly 48,800 Cisco Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) appliances exposed on the public web are vulnerable to two vulnerabilities actively leveraged by hackers.

Enquête pour @numerama.com: comment Rohan Rane, fondateur de l'organisation CVLT incarcéré en France, a posé les bases méthodologiques et idéologiques d'une vague mondiale de cyber-sextortion sadique, qui a ciblé des centaines de mineures. Le fondateur de 764 a ainsi été "formé" au sein de CVLT.

YouTube video by Three Buddy Problem Cisco firewall zero-days and bootkits in the wild

The three buddies back together for a fresh problem. @craiu.bsky.social @jags.bsky.social

WATCH on YouTube youtu.be/yBrNMWvYQ6A?...

Warnings about Cisco vulns under active exploit are falling on deaf ears 50,000 firewall devices still exposed Nearly 50,000 Cisco ASA/FTD instances vulnerable to two bugs that are actively being exploited by "advanced" attackers remain exposed to the internet, according to Shadowserver data.…

Warnings about Cisco vulns under active exploit are falling on deaf ears

A good post by Bruce Schneier: digital threat modeling under authoritarianism www.schneier.com/blog/archive...

Russia has become the largest single-country buyer of Ecuadorian bananas, purchasing 1.5 million metric tons during 2024 and the first half of 2025.

How is it related to global diversification of cocaine trafficking routes? 🤔

SSDs are pretty reliable in a technical sense.


That is, unless you make a really, really bad mistake in firmware.


HP had a line of ~20 different Enterprise SSD models for datacenter use.


In exactly 3 years, 270 days and 8 hours, every one is irrecoverably bricked.

Mercator - NoLimitSecu Episode #513 consacré à Mercator Avec Didier Barzin

#Podcast #Cybersécurité

Épisode #513 consacré à l'outil de cartographie open source Mercator, avec son créateur Didier Barzin

www.nolimitsecu.fr/mercator/

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2025-ACT-040/

Seuls des rois de la cryptanalyse pouvaient percer le mystère des lettres codées d'une reine ✍️

How Russian-funded fake news network aims to disrupt European election - BBC investigation An undercover reporter discovers a network is offering to pay for social media posts undermining Moldova’s ruling party.

In-depth investigation from the BBC, which infiltrated a disinformation operation to interfere in the Moldovan elections.

This operation is coordinated remotely by pro-Russian actors through Telegram.
www.bbc.co.uk/news/article...

Ivanti EPMM holes let miscreants plant shady listeners, CISA says Unnamed org compromised with two malware sets An unknown attacker has abused a couple of flaws in Ivanti Endpoint Manager Mobile (EPMM) and deployed two sets of malware against an unnamed organization, according to the US Cybersecurity and Infrastructure Security Agency.…

Ivanti EPMM holes let miscreants plant shady listeners, CISA says