Ben

@ZephrFish not me sorry

Who's going to #SecuriTay2024 this year?

@omerlh @utam0k @CloudNativeFdn @awscloud @AWSSecurityInfo aws.amazon.com/security/secur…

@utam0k @CloudNativeFdn I don’t see anything yet posted by @awscloud cc @AWSSecurityInfo

🚨Container Breakout Vulnerability 🚨 A fix for the vuln(CVE-2024-21626) with the highest score in runc history has been released. As the maintainer of the OCI Runtime Spec, I strongly suggest you check the correspondence of the vendors you are interested in. container breakout through process.cwd trickery and leaked fds github.com/opencontainers… runc 1.1.12 -- "Now you're thinking with Portals™!" github.com/opencontainers… I'd like to thank the vuln reporter and the runc developers who quickly identified and fixed the exact extent of the impact.

@ZephrFish thanks Andy

What an incredible game of rugby, great job #NZL well played #IRE land

@ZephrFish thanks Mr Andy

FYI for anyone coming across from Android to iOS, the following Apps are fucked and will not allow OS -> OS transfer 👍🤨 Signal MS Authenticator Anything else I come across I'll append to this thread

@ZephrFish Appreciate the welcome

@benmcga You're welcome

A week tomorrow till the chaos errupts :)

@ZephrFish didn't know you liked the king that much

Pretty fucking exciting things happening this week 👀😅

@BushidoToken slough big tesco

OSINT challenge, where am I having a drink 🥃

@ZephrFish Alfred with PowerPack, it can do pretty much everything Reycast can (apart from AI stuff) and is more customisable imo.

Fellow macOS users, does anyone have a preference for Raycast vs Alfred as a replacement for spotlight?

@_mormaid theverge.com/2023/2/20/2360…

@alech hard mode speed run edition

I’m in but playing on “re:Invent season hard mode”

The job description of a Security Engineer is just going "what the fuck" and then doing something about it

There is a big storm coming! 🌩️ A brand new #HTB fortress, powered by @awscloud is here for you to conquer! ✅ #Cloud exploitation ✅ #Web app #pentesting ✅ #AD abuse Ready to attack? Find out more here: bit.ly/3nQD1J5 #HackTheBox #CloudHacking #CyberSecurity

@CalDigit I didn't install the "Intel Thunderbolt Software" before as I already had it, however I just re-installed it from the folder and ran the updater and it updated successfully :)

@benmcga 3. Even with the error message, did you bring your TS4 back to Mac and verify the firmware version there? It is possible that even with the error message, your TS4 was still updated to 39 successfully. If not, please let us know. This can be platform or driver issue.

@CalDigit Just tried the new TS4 firmware update on the website but appears to fail due to not being signed?

@dims @CloudNativeFdn @kubernetesio Looks like the links expired again :(

slack.cncf.io for getting an invite to CNCF slack should be working again. Please holler if you still see a problem @CloudNativeFdn @kubernetesio #kubecon - Please RT

@SU1PHR give it a year and the marketing dept will have a snazzier name

@benmcga Defender for liver

Is this a Microsoft product?

@sh4na @isometre They did a quiet acknowledgement... support.travis-ci.com/hc/en-us/artic…

@isometre yeah, good point, probably not 🪦

Well this is fun. How many days until a TravisCI “we’ve been breached” post shows up, are we taking bets?

@skwashd @travisci @okta "This issue is now closed" has to be one of the best ways to end a security notice.