Max Peal

Sicherheitsforscher: IoT-Hersteller machen es Bugjägern unnötig schwer heise.de/security/meldu… #Sicherheitslücken #InternetderDinge

I want to specially thank the @vercel team for working around the clock to keep customers safe and available. In fact, I was sleeping, it was 2am~ ish, and I was alerted about this issue because my internet mattress (which I love, shoutout to @eightsleep) was warm 😅, which led me to opening the app… I notice there's an ongoing AWS outage. I open HN and it's there too. I go to our incidents channel. A dozen incidents had been automatically filed by our systems, later merged, and failover and service restoration was well underway by on-call teams. us-east-1 is not fully back. There are lingering networking issues and throttled creation of resources (e.g.: EC2). These incidents take a lot of work to recover from, which the Vercel team is taking care of right now. I'm extremely thankful to them and our partners at AWS.

Delayed but massively improved.💥 Our automatic tool changer is evolving fast and deeper than planned. Meet us at Formnext 2025 to see the INDX in action. Read the article to know why the INDX will be stronger, smarter, and ready to change everything. Link here: bondtech.se/2025/09/26/goo…

Seit fünf Uhr ist die #Evakuierung von den mehreren tausend betroffenen Anwohnerinnen und Anwohnern im Bereich der Fischerinsel abgeschlossen. Über 800 von ihnen wurden in den Notunterkünften in Sicherheit gebracht. Unsere #Taucher und Spezialisten der Kriminaltechnik bereiten zur Stunde die Entschärfung der Bombe vor. ^tsm

A story of a new Nozzle. orbiterprojects.com/stories/a-twis…

Just when you thought we were done for the day... 🎬 Introducing Vortek – the multi-color solution you've been waiting for. Up to 7 materials, zero purge waste, wireless reliability. Finally, multi-color printing that actually makes sense. Coming Q4 2025! ✨ #Bambulab #Vortek #MultiColor3DPrinting #ZeroWaste #3dprinting #Innovation

In the past days I've been observing a malware campaign using X verified accounts affiliated to account @KindleBookVerse (I see +140 accounts, consider each one malicious) running malicious X ads redirecting users to a fake AI website delivering malware. While the ads redirect to /alli-app.gitbook.io/alli-app-docs On this Gitbook, users are redirected to known malicious website alli-ai[.]us where malware is download. The threat actors behind this campaign, while remain unidentified for me, are spending thousands of $$$ in this campaign on the traffic methods (shown here using verified accounts) and also on their malware builds, with a continuous abuse of EV certs for their binaries. The malware builds are pretty unique, and they were seen being spread in other landings impersonating other apps such as TradingView or other NSFW fake games. On CertCentral by @SquiblydooBlog, this malware family EV certificate abuse is being tracked as UNK-50 (See here: certcentral.org/lookup?detail_…). So far, these threat actors got 18 certificates abused identified and now revoked in the last 2 months this summer. The NSFW malware campaign is being tracked separately as FakeNSFW (certcentral.org/lookup?detail_…) The malware consists of a very highly obfuscated Electron-based application which performs badly on sandboxes, so further analysis was still not done (shown on image 4) Samples from this landing: 0ce0ca357b8ad53ef08fb8fb16906299f07306d184551e7afd64fc56af2396a7 10417a0e33ad5a13e0304386cfb63a37b971cfa7f13e4bed3074cd7084c46e06 108bbfcb777f011d0150aee982184736afb0ee54571fca9dd84951c90406e26f 3ff2a50bd7bbadbf474ecea6d6094321ec0dbd0db7446b2c6d2042edb2203b16 67d324e238d5b72987bae72afce4adf3a92d0e05bfbffed914f315cd7bfe13d1 7cb5a9d0d9fb6433639ad786db00bbb6782f43b4a9e4714072610eb138fa9517 7e05b76b877e2cf8d191877c490daee1030c75d8fc1bb1428f78e8880890e046 83db121492b9df5dfb359c830d0adb7deb9107fbf0101ba7ae4c0a863b0bd723 83db121492b9df5dfb359c830d0adb7deb9107fbf0101ba7ae4c0a863b0bd723 83db121492b9df5dfb359c830d0adb7deb9107fbf0101ba7ae4c0a863b0bd723 db5cc6b8d0384176adc1349733e516cd17bbd4d29de8cb96f7ccfa5cd6a5199f e5143d0a774d7f320d09448daea0c76bb2d9b180bbb70dcbfa6136419ad434e5 faa594896f81f2748e2646aa2cf32203bf79f5d3f74008abfbfd8c2dea450c6f