I have a few questions ⁉️
1.are there assumptions true
- Commands could be sent from orbit
- Patch delivery became invisible to domestic monitors
- Compromised devices could be triggered remotely
2.there have to be logs somewhere, where are they?
3. Did anyone capture the communication from the low earth satellites? If there was mass vote manipulation effort, there should be command and control information in that satellite communication.4.what am I missing?
Also what should be a
CVE-2025-34508: Another File Sharing Application, Another Path Traversal
Source: https://horizon3.ai/attack-research/attack-blogs/cve-2025-34508-another-file-sharing-application-another-path-traversal/
Is b For Backdoor? Pre-Auth RCE Chain In Sitecore Experience Platform - watchTowr Labs
Source: https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/
#
**\[Disclosure: I work at CyberArk and was involved in this research\]**
We've completed a security evaluation of the Model Context Protocol and discovered several concerning attack patterns relevant to ML practitioners integrating external tools with LLMs.
**Background:** MCP standardizes how AI applications access external resources - essentially creating a plugin ecosystem for LLMs. While this enables powerful agentic behaviors, it introduces novel security considerations.
**Technical
I wrote a blog [post](https://asherfalcon.com/blog/posts/2) discussing how I hid images inside DNS records, you can check out the web viewer at [https://dnsimg.asherfalcon.com](https://dnsimg.asherfalcon.com) with some domains I already added images to like [asherfalcon.com](http://asherfalcon.com) and [containerback.com](http://containerback.com)
I came across this article and in speaking with my friends in the netsec field I received lots of good input. Figured I’d push it here and see what the community thinks.there are links in the article and I checked them to see if they coincided with the articles points.i’,m not affiliated with this article but with the lawsuit in New York moving forward and the Dominion lawsuit in 2020 giving the hardware and software to the GOP. I had questions the community might be able to clarify
‘
Influencing LLM Output using logprobs and Token Distribution
Source: https://blog.sicuranext.com/influencing-llm-output-using-logprobs-and-token-distribution/
Hey all, started a blog series on Vulnerability Management.4 articles posted already the last one is about when open you open the flood gate of a code or cloud scanner and you start drowning in findings!
This leads to thousands of findings for an SMB, millions for a big org. But vulns can’t all be worth fixing, right? This article walks through a first, simple way to shorten the list. Which is to triage every vuln and confirm if the bug is reachable in your reality.
Let me know if you have an
