James Szalay

Re CVE-2026-98432: if you have machines that have public IPs that don't need them, you are either lazy, cheap, and / or naive. Sorry. I've written a lot about this in the past. Yes, AI has discovered many new vulnerabilities at a rapid rate. However, it hasn't changed one of the most fundamental cybersecurity practices out there: Removing your host from the internet removes almost all possible outside exploits. Just do it. Blocking with firewall rules does not accomplish this (ie: RCEs). The machine should not be routable to the public Internet if it doesn't need to be. Most machines do not, and can NAT traffic out / have traffic proxied in. Clearly, this does not prevent all possible attacks, and many attacks involve threat actors compromising employees with privileged network access. That's a whole different discussion. That isn't an excuse however to just put every machine you have on the internet. Take your boxes off the internet. One of the most basic things you can do. Same applies to k8s clusters fwiw. Keep your API off the internet plz.

FRIDAY June 9, 2023 当園入口のニッコウキスゲが咲きました。2019年以来初めての開花です！是非お楽しみください。 Our day lilies called "Nikko Kisuge" in Japan bloom this morning 💐 Could you enjoy the flowers with our capybaras. #カピバラ #capybara

To help you take on Shadow Mewtwo, we’re giving away codes for Purified Gems if we reach 150k RT! To participate: Follow us on Twitter RT this post with #ShadowRaids Receive confirmation reply If we reach our target, we’ll send participants a code for Shadow Raid–themed items!