Happy Supply Chain Attack Friday!

tldr if you updated Kali Linux recently you're pwned with malware

https://twitter.com/kalilinux/status/1773786266074513523

The more we read about the xz supply chain attack the more we realize that everyone needs to move to Windows XP.

This wouldn't have happened on Windows XP

women are scary

Lockbit has clarified this is not to intimidate potential victims of ransomware. Lockbit administrative staff claim they were recently robbed and need to get their money back.

meemaw shows nerds how to use ffmpeg, uses a 2 character password, uses neofetch, and complains about bloat on her 4gb linux box

based and linux pilled

https://www.youtube.com/watch?v=YVI6SCtVu4c

The xz situation is absolutely insane and almost certainly state sponsored.

This is an excellent example of a widely used software being maintained by basically one person.

Read this web article and then frown and become sad.

https://boehs.org/node/everything-i-know-about-the-xz-backdoor

😭😭😭 which one of you nerds did this

Times like this we need a reminder that only one person can protect us from OSS supply chain attacks

meemaw. She would know immediately

Microsoft engineer: 500ms lag in liblzma? Something's up.

Also Microsoft engineer: 45 minute lag in Microsoft Teams? Perfect.

JiaT75 on GitHub pretending to be an OSS enthusiast and 100% NOT a state-sponsored Threat Actor

We made a post congratulating and praising Andres Freund for his discovery of the xz backdoor

Dorks immediately started freaking out

>i WouLd hAvE cAuGhT ThiS
>i dO bEnChMarkS liKe tHiS tOO

How about you be happy for someone? Not everything is an attack on your ego 😤😤

Most difficult things to do:

- Climbing Mt. Everest
- Mastering a second language
- Overcoming addiction
- Syncing Outlook

Hello, how are you?

It is Sunday. Today is a day to rest. We hope everyone had a good week. We hope all of you have a good weekend.

PandaBuy has been breached by Threat Actors operating under the names "Sanggiero" and "IntelBroker". Exfiltrated data includes:

- UserId
- First name
- Last name
- Phone number
- Email
- Login Ip
- Full address
- Order information

Breach patrons are relatively excited

We have no April Fool's day joke planned this year. Please accept this image of a cat instead.

Discord has announced they will begin displaying ads to boost revenue

We've uploaded 85,000+ malware samples to vx-underground.

Download it.

Today we learned RecordedFuture's Insikt group is pronounced 'In-sikt' and NOT 'in sync'. No idea where we got the 'N' from – but we did. For several years we thought the organization was named after Justin Timberlake's hit 90's boy band