Goupil

Mar 01 9:41 AM PST We want to provide some additional information on the power issue in a single Availability Zone in the ME-CENTRAL-1 Region. At around 4:30 AM PST, one of our Availability Zones (mec1-az2) was impacted by objects that struck the data center, creating sparks and fire.

June 2023: a Google data center in France floods and they call it a “water intrusion event”

February 2026: an Amazon data center in the Middle East is literally struck by a fucking ballistic missile in a hot war and they call it “impacted by objects”

https://health.aws.amazon.com/health/status

MBSE - NoLimitSecu Episode #533 consacré à la cybersécurité appliquée à la modélisation des systèmes, ou Model-Based Systems Engineering (MBSE) Avec Alice Santin

#Podcast #Cybersécurité

Épisode #533 consacré à l'ingénierie système basée sur les modèles, ou Model-Based Systems Engineering (MBSE), avec Alice Santin

www.nolimitsecu.fr/mbse/

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-009/

North Korea’s APT37 Expands Toolkit to Breach Air-Gapped Networks The security researchers from Zscaler ThreatLabz have also discovered five new tools deployed by the North Korean hacking group

North Korea’s APT37 Expands Toolkit to Breach Air-Gapped Networks - Infosecurity Magazine www.infosecurity-magazine.com/news/north-k...

⚠️ Alerte CERT-FR ⚠️

Mise à jour de l'alerte CERTFR-2026-ALE-002 concernant Cisco Catalyst SD-WAN.
Le CERT-FR recommande des actions d'investigation.

www.cert.ssi.gouv.fr/alerte/CERTF...

⚠️ Vulnérabilité Cisco Catalyst SD-WAN.

📢 Le CERT-FR a publié un bulletin d'alerte concernant la vulnérabilité activement exploitée CVE-2026-20127, affectant Cisco Catalyst SD-WAN.

➡️ + d'infos sur le site du CERT-FR : www.cert.ssi.gouv.fr/alerte/CERTF...

Depuis les années 90 l'atlas de la CIA(le World Factbook) était accessible sur le web. L'actuelle administration US l'a supprimé. Ce beau projet en restaure l'historique et met les données brutes à disposition
github.com/MilkMp/CIA-W...

Exclusive: US orders diplomats to fight data sovereignty initiatives President Donald Trump's administration has ordered U.S. diplomats to lobby against attempts to regulate U.S. tech companies' handling of foreigners' data, saying in an internal diplomatic cable seen ...

www.reuters.com/sustainabili...

GitLab Threat Intelligence Team reveals North Korean tradecraft Gain threat intelligence about North Korea’s Contagious Interview and fake IT worker campaigns and learn how GitLab disrupted their operations.

GitLab's security team has published a "year in review" report on how North Korean hackers abused its services for Contagious Interview campaigns

about.gitlab.com/blog/gitlab-...

Bonjour,
L'audience de l'examen de l'affaire dite de l'IMSI catcher va bientôt reprendre au tribunal judiciaire de Paris. Thread👇.

Matrix messaging gaining ground in government IT FOSDEM 2026: One-to-one and group messaging, encrypted VoIP calls, video conferencing – the open protocol handles them all

www.theregister.com/2026/02/09/m...

ce qui conduit souvent à la sécurité totale, par l'absence de système informatique fonctionnel

Le procès de l'affaire de l'IMSI Catcher va bientôt débuter devant le tribunal judiciaire de Paris, vous pourrez suivre une partie des débats dans ce live-skeet.

Western Digital has recently announced that it sold all of the year's hard-drive inventory to AI companies.

In other words, prepare for huge SSD price surges.

wccftech.com/western-digi...

Babylon 5 Is Now Free to Watch On YouTube | Cord Cutters News In a move that has delighted fans of classic science fiction, Warner Bros. Discovery has begun uploading full episodes of the iconic series Babylon 5 to YouTube, providing free access to the show just...

cordcuttersnews.com/babylon-5-is...
If you have not seen Babylon 5, you should.

If you have, you know you have to watch it again.

Hitting the jackpot William Gibson's disturbingly plausible 21st-century slow disaster

doomsdaymachines.net/p/hitting-th...
A few thoughts about the jackpot and systemic disasters

Ransomware crews abuse bossware to blend into networks : As if snooping on your workers wasn't bad enough

Your supervisor may like using employee monitoring apps to keep tabs on you, but crims like the snooping software even more. Threat actors are now using legit bossware to blend into corporate networks and attempt ransomware deployment.

HT: @huntress.com security operations analyst Michael Tigges

Sleeper Shells: How Attackers Are Planting Dormant Backdoors in Ivanti EPMM A February 2026 campaign used a internal JSP path and in-memory Java class loaders to quietly seed persistent access across Ivanti EPMM deployments - then walked away. We break down the tradecraft.

Security firm Defused has spotted a coordinated campaign from an initial access broker that is targeting the recent Ivanti EPMM zero-days

defusedcyber.com/ivanti-epmm-...

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-006/

the strongest encryption is just noise Modern encryption standards really aren’t too bad to understand!

the strongest encryption is just noise

open.substack.com/pub/laurieki...

GrapheneOS releases Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.

GrapheneOS version 2026020600 released:

grapheneos.org/releases#202...

See the linked release notes for a summary of the improvements over the previous release.

Forum discussion thread:

discuss.grapheneos.org/d/31639-grap...

#GrapheneOS #privacy #security

We have started to report webshells (or other artifacts) found on Ivanti EPMM devices, likely compromised via CVE-2026-1281. 56 IPs found on 2026-02-06

Data in shadowserver.org/what-we-do/n...

Tree Map view: dashboard.shadowserver.org/statistics/c...

Thank you to the KSA NCA for the heads up!

Dutch data protection agency was hacked via the two recent Ivanti zero-days disclosed earlier this month

www.tweedekamer.nl/kamerstukken...

⚠️ Alerte CERT-FR ⚠️

Les vulnérabilités critiques CVE-2026-1281 et CVE-2026-1340 affectant Ivanti Endpoint Manager Mobile sont activement exploitées dans le cadre d'attaques ciblées.
www.cert.ssi.gouv.fr/alerte/CERTF...

C.I.A. World Factbook Ends Publication After 6 Decades The Factbook, a version of which dates to 1962, provided facts, figures, maps and more to generations of economists, professors, journalists and others.

The CIA’s World Factbook, a repository of facts on nations that for six decades provided detailed figures on birth and death rates and major exports, relied upon first by government agents and eventually researchers, educators, journalists and more, was shuttered without warning on Wednesday.

We take randomness for granted.


Early PRNGs were BAD.

Thousands of scientific papers used to rely on RANDU, created by IBM in the 1960s.

In 1D space, it looks ok!

Map in 3D…you start to see the issues. Now, there *was* a better solution...but it would cost you.

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-005/

Le CERT-FR partage aujourd’hui une synthèse de la menace relative aux systèmes d’IA générative.

cert.ssi.gouv.fr/cti/CERTFR-2...

FBI Couldn’t Get into WaPo Reporter’s iPhone Because It Had Lockdown Mode Enabled Lockdown Mode is a sometimes overlooked feature of Apple devices that broadly make them harder to hack. A court record indicates the feature might be effective at stopping third parties unlocking some...

The FBI can’t get into a Washington Post reporter’s phone, in part because it was set to Lockdown Mode. www.404media.co/fbi-couldnt-...

Sudo's maintainer needs resources to keep utility updated updated: Many vital open source resources rely on the devotion of a few individuals

We heard back from Sudo maintainer Todd C Miller after publication: "Without some form of assistance it is untenable," Miller said. "Maintainer burn-out is real." www.theregister.com/2026/02/03/s...