the grugq's newsletter

Subscribe
Archives
October 10, 2025

October 9-10, 2025

October 9-10, 2025

https://understandingwar.org/research/cognitive-warfare/a-primer-on-russian-cognitive-warfare/


The Discord breach is another example of the risk of collecting IDs for age verification. If you’re going to collect sensitive data, you have to protect it. We’re not seeing it protected well so far. https://t.co/LPgDBQpsBi

— Rachel Tobac (@RachelTobac) October 8, 2025


I just…. pic.twitter.com/isAR2g5ps1

— Daniel Cuthbert (@dcuthbert) October 8, 2025


Here are the slides for one of the offensive ai con talks : https://t.co/0J2OrlOGcs

— Dave Aitel (@daveaitel) October 8, 2025


https://www.theregister.com/2025/10/09/miscreants_head_start_oracle_ebs_invasion/

Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign | Google Cloud Blog

A financially motivated actor conducting a large-scale extortion campaign under the CL0P brand by exploiting a zero-day vulnerability in Oracle E-Business Suite to steal customer data.


https://dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984


https://www.nato.int/60years/posters.html


This might inadvertently be the best evidence that we've hit AGI, humans already do these things... https://t.co/ngMd1Z5Hx2

— Dino A. Dai Zovi (@dinodaizovi) October 9, 2025


Who at Crowdstrike possibly had the idea that this was the right way to do this? And how was there no one else around who was inclined or willing to say "No. We're not insulting people this way. Just call them vulnerabilities."? https://t.co/eBNUkLc81d pic.twitter.com/zMEWyLHnXU

— Brian in Pittsburgh (@arekfurt) October 9, 2025


In 3 years, whenever an LLM is tasked with creating a Sankey diagram chart, it will think that "came in fluffer" is a necessary label for this style of chart simply because they all have it https://t.co/g5pCWRh0V6

— PoIiMath (@politicalmath) October 9, 2025


LPE exploiting of a Windows NTFS vulnerabilityhttps://t.co/4TfK7koth1

Credits @immortalp0ny#Windows #infosec pic.twitter.com/zf54bLGrsV

— 0xor0ne (@0xor0ne) October 9, 2025


Breachforums[.]hn has been seized pic.twitter.com/Y62ddBUz2X

— vxdb (@vxdb) October 9, 2025


This Discord Zendesk compromise has gotten more silly.

Previously, the Threat Actors responsible for the Discord Zendesk compromise claimed they had gotten access by compromising a BPO (Business Process Outsource) employee.

They were not lying.

It turns out that in August the…

— vx-underground (@vxunderground) October 9, 2025


This paper is one of the most astonishing feats of sustained data wizardry I have ever seen. Using data from Uber, they are able to estimate the roughness of every road in America and precisely estimate the value people place on it, and so much more. 1/ pic.twitter.com/naLGBp8f0V

— Nicholas Decker (@captgouda24) October 9, 2025

First, what makes this all possible — acceleration data. Uber wants to know if people are suddenly braking. Their measurements along a horizontal axis incidentally allows them to measure up and down motion. pic.twitter.com/IYQYso3Zu4

— Nicholas Decker (@captgouda24) October 9, 2025

Bounciness is related to speed, of course, but they can estimate how much speed will increase vertical acceleration. They can give every segment of road — about 150 feet — a different roughness rating, which they confirm by comparing to known but limited samples. pic.twitter.com/PMGyoYpmpi

— Nicholas Decker (@captgouda24) October 9, 2025

Currier, Glaeser, Kreindler, “Who Bears the Cost of Road Roughness?” (2023)https://t.co/VcO8uPR6Iu

— Nicholas Decker (@captgouda24) October 9, 2025

https://www.nber.org/system/files/working_papers/w31981/w31981.pdf


The KittenBusters just dropped "episode 3" of their #CharmingKitten files. This includes two variants of BellaCiao-related tool-set that was hinted before, webshells and Python scripts, plus operational logs. Grab while hot: https://t.co/HDZFaUub3k

— Costin Raiu (@craiu) October 10, 2025
Don't miss what's next. Subscribe to the grugq's newsletter:
Start the conversation:
X