#vulnerabilities

[astrogirlythings]

Inner child.

[d0nutzgg]

So here it is. A 3000$ bounty from a program I am part of. This marks a lot of important things for me. a) It ended my time on Disability whether I like it or not, at least temporarily, and b) was the single largest sum of money I have ever made in my life.

Honestly, I am terrified. I am terrified that I will not be able to make ends meet being off Disability (of course, most people probably feel that way when they transition back into the workforce), and I am scared that I will never make a bounty as good as this one again.

I want to fight through the fear though, I am going to spend some of that money investing into a new computer where I can do my bounty hunting easier and more efficiently, and I am also probably going to try for some sort of study program for my Pentest+ or CEH. If I manage to get another big bounty, I will invest it in the certification voucher. I need to work on finding a stable job though.. that's the first priority. It's not an option anymore.

Sincerely, A terrified / anxious bug hunter.

[evidently-endless]

i think we should remind musicians they can absolutely make up little stories for their songs btw. it doesn’t have to be about them at all. you can invent a guy and put him in situations to music. time honoured tradition in fact.

[goodoldbandit]

Secure Code, Secure Future: Uniting Dev and Security.

Sanjay Kumar Mohindroo Sanjay Kumar Mohindroo. skm.stayingalive.in Secure your code and protect your future by integrating security into every phase of development. Join the discussion on #DevSecOps and IT security. This post explains how to merge security into every phase of software creation. It shows why adding security to the development lifecycle helps build stronger applications and…

[bestwebdeveloperpenrith]

The Importance of WordPress Updates: Protecting Your Business from Cyber Threats

As a business owner, having a website is crucial for establishing an online presence and reaching out to potential customers. However, with the increasing number of cyber attacks, website security has become a top priority. WordPress, being one of the most popular Content Management Systems (CMS), is a frequent target for hackers. In this article, we will discuss the importance of WordPress updates, especially from a cybersecurity perspective, and why it's crucial to protect your business interests.

Why Hackers Target WordPress Websites

WordPress is a popular CMS, powering over 40% of the world's websites. Its widespread adoption makes it an attractive target for hackers. Moreover, the open-source nature of WordPress means that vulnerabilities can be easily discovered and exploited. When a security hole is found in WordPress, it quickly spreads to malicious actors, who then attempt to attack websites with known vulnerabilities. This is why keeping WordPress up to date is crucial in preventing cyber attacks.

The Risks of Outdated WordPress

Failing to update WordPress can lead to serious consequences, including:

Data breaches: Outdated WordPress versions can leave your website vulnerable to data breaches, compromising sensitive information and putting your customers at risk.

Malware infections: Hackers can inject malware into your website, leading to blacklisting by search engines and damaging your online reputation.

Financial losses: A hacked website can result in financial losses, either through stolen customer data or by disrupting your online business operations.

The Importance of WordPress Updates

Updating WordPress is essential in preventing cyber attacks. New releases of WordPress often include security patches and fixes for known vulnerabilities. By keeping your WordPress version up to date, you significantly reduce the risk of your website being compromised. Additionally, updating WordPress ensures that your website continues to function smoothly, without breaking due to compatibility issues with themes and plugins.

Amity IT's WordPress Updates Service

At Amity IT, we understand the importance of keeping your WordPress website up to date. Our WordPress Updates service is designed to ensure that your website remains secure and functions optimally. Our team of experts will perform regular updates on a schedule that suits your business needs, whether it's monthly or quarterly. Our service includes:

Updates of WordPress core

Updates of plugins compatible with the latest version of WordPress

Rollback of updates if functionality is compromised

By choosing Amity IT's WordPress Updates service, you can rest assured that your website is protected from cyber threats. Our team is based in Penrith and serves the Western Sydney area, providing local support and expertise.

Conclusion

In conclusion, keeping your WordPress website up to date is crucial in protecting your business from cyber threats. By understanding the risks associated with outdated WordPress and the importance of updates, you can take proactive steps to secure your online presence. Amity IT's WordPress Updates service is designed to provide you with peace of mind, knowing that your website is secure and functioning optimally. Visit our WordPress Updates page today to learn more about our service and how we can help protect your business interests: https://www.amityit.com.au/services/websites/wordpress-updates.

[glitter-stained]

Random goon: Hey boss, were you the one to pick that name as an alias? And why this one?

Red Hood : I used to have another name, before... A long time ago. But that person is dead now. I get to choose for myself now, they can't take that from me. I won't let them.

Goon: Huh.

***

Random Goon: Say boss, why do you never take off your shirt in front of us?

Red Hood: Well uh, I actually have that really fucked scar on my chest and I'm not comfortable with...

Random Goon: Don't worry boss, we get it, you don't have to explain yourself to us.

***

Red Hood, high on some toxin: God, I wish my family...

Random Goon (on boss-sitting duty): why not try reaching out to them?

Red Hood: They would never accept me as I am now... They wouldn't agree with my so-called "life choices". Besides, they don't miss me, they miss the person they think I used to be... I wasn't even a man when I last saw them.

Random Goon: Damn boss, that sucks.

***

And then the goons throw the Red Hood a party on trans visibility day and Jason is so confused he straight up cries.

[cybersecuritycue]

Russian RomCom Hackers Exploit Firefox and Windows Zero-Day Vulnerabilities

Background on RomCom Threat Actor For those unfamiliar, RomCom is a Russia-aligned threat actor known for conducting sophisticated cybercrime and espionage operations since at least 2022. This group, also referred to as Storm-0978, Tropical Scorpius, and others, has built a reputation for exploiting vulnerabilities in widely used software to deploy malware and backdoors, including the notorious…

[avandelay20]

Under the bloc’s approach, there are four broad risk levels: (1) Minimal risk (e.g., email spam filters) will face no regulatory oversight; (2) limited risk, which includes customer service chatbots, will have a light-touch regulatory oversight; (3) high risk — AI for healthcare recommendations is one example — will face heavy regulatory oversight; and (4) unacceptable risk applications — the focus of this month’s compliance requirements — will be prohibited entirely.

Some of the unacceptable activities include:

AI used for social scoring (e.g., building risk profiles based on a person’s behavior).

AI that manipulates a person’s decisions subliminally or deceptively.

AI that exploits vulnerabilities like age, disability, or socioeconomic status.

AI that attempts to predict people committing crimes based on their appearance.

AI that uses biometrics to infer a person’s characteristics, like their sexual orientation.

AI that collects “real time” biometric data in public places for the purposes of law enforcement.

AI that tries to infer people’s emotions at work or school.

AI that creates — or expands — facial recognition databases by scraping images online or from security cameras.

Companies that are found to be using any of the above AI applications in the EU will be subject to fines, regardless of where they are headquartered. They could be on the hook for up to €35 million (~$36 million), or 7% of their annual revenue from the prior fiscal year, whichever is greater.

[astorkes]

what if act2 but nobody gets better, they get worse instead🌚

[attritionorg]

Who Reads Mega-advisories? No one! (Almost)

Vulnerability disclosure analysts are long familiar with so-called “mega advisories”, ones that typically come from vendors and often for products that ship appliances using hundreds of libraries or products with an entire operating system included. Such advisories can literally represent over 500 vulnerabilities in one shot. I’ll try to make this a bit fun! Disclaimer: I am going to use one…

[assorted-aesthetics]

im unironically obsessed w the Dylan/Gretchen stuff. u love ur husband but ur whole marriage u've been waiting for him to get his shit together and u have 3 kids and ur exhausted all the time and he's another thing u have to Manage but it's just bc he's excitable and this aspect of ur relationship - that he's not a good partner to u and u have to Manage him - creates a separation. and it's not like he's not trying or like u don't love him ur just not very in love. u can't even remember the last time u were. then one day strange people come to ur house and ask u to meet ur husband's work self. the one that has dedicated his literal entire life to supporting your family. ur uncomfortable but you go. and there is ur husband but for the first time in years he's just focused on u. he thinks ur so cool and so beautiful. he's so excited about the fact that you have kids together. he gets worried about the idea that his outside self might not be a good partner to you. he's Certain that his outside self must be happy even if you can't see it bc he's so happy to be around u. he asks if he can hug u.

[leonardospoetry]

Feeling too much can hurt sometimes, but one day you grow and realize that your heart was never really broken. It was just wide open.

[cryptidmickle]

shadow milk finding pv when he was healer cookie is so interesting to me, and full of drama

[crowrelli]

soft and vulnerable zoroooo

[buttercups-revenge]

The (un-fucking-hinged) conversation that Snow had with Haymitch REALLY puts Peeta’s hijacking (SPECIFICALLY against Katniss) into perspective. Snow could have hijacked him to hate the rebellion, or district 12 or even himself. But no, that old loser just HAD to finally prove to one of those district 12 boys that their girl didn’t really love them, JUST like his didn’t really love him. Was it a smart move to potentially have Peeta attack Katniss on sight? Yes. But more importantly, it allowed Snow to control Peeta in a way that let him live out his own fantasies about being unloved and having power over his girl.