Lightnews — Scholar-powered news

Bajiri @bajiri.bsky.social · 12h

Low-key a candle person. I love to have a candle going. Especially with fall scents.

Bajiri @bajiri.bsky.social · 12h

Why are my upstairs neighbors playing bocce ball in their apartment at midnight?

1

Bajiri @bajiri.bsky.social · 12h

Dang, sometimes I'm really the only roadblock on my own life.

1

Bajiri @bajiri.bsky.social · 12h

Great ideas. I will steal them. Thanks!

1

Bajiri @bajiri.bsky.social · 13h

If you ever find yourself in north loop, you should try out stormking. I'm a fruity drink kind of person, so the sours they make really tickle my fancy. The smoked beers are also really good.

1

Bajiri @bajiri.bsky.social · 13h

Born to be a Maldev, forced to be a soc analyst.

Reposted by Bajiri

Virginia Gewin @virginiagewin.bsky.social · 17h

Journalist here

I’m interested in talking to a federal agency scientist who was fired, then rehired. I can keep you anonymous. I’m on Signal ginnyg.04

Reposts are appreciated!

3 280 280

Reposted by Bajiri

Scott Hanselman 🌮 @scott.hanselman.com · 14h

Minor medical situation on the flight and it’s cool that my wife is able to jump up and help out when they ask for a licensed medical professional.

One day someone will need a regular expression so I stay ready.

33 29 610

Reposted by Bajiri

Keezy Young🌼 @keezyyoung.bsky.social · 15h

I only have 35/255 books I brought to NYCC left haha

21 5 210

Reposted by Bajiri

Bradley P. Moss @bradmossesq.bsky.social · 18h

I love this image.

420 4.5K 25K

Bajiri @bajiri.bsky.social · 14h

At a brewery, drunk, reading BOD 22-01 on my phone.

www.cisa.gov/news-events/...

BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities | CISA

This page contains a web-friendly version of the Cybersecurity and Infrastructure Security Agency’s Binding Operational Directive 22-01 - Reducing the

www.cisa.gov

Bajiri @bajiri.bsky.social · 14h

I should go back and do a comp sci program somewhere

Reposted by Bajiri

Markus @fl4re.bsky.social · 14h

If anyone likes algorithms and would like to either explain or point me to resources of how to do really basic sorts that would be great.

I have spent the last two days trying to implement a largest first sort in C and I am dying.

1 2

Bajiri @bajiri.bsky.social · 14h

Real

Bajiri @bajiri.bsky.social · 14h

Maybe my cej payload - it just plays cotton eye joe in the background forever lol

1

Bajiri @bajiri.bsky.social · 14h

Forgot I still own msedge.zip it would be very funny to drop some malware on that.

Alert Overload

msedge.zip

1

Bajiri @bajiri.bsky.social · 14h

Seeing the typos now 💀

Should read mp4s 💀 ☠️ 💀

Bajiri @bajiri.bsky.social · 14h

Granted, I'm a little drunk and could definitely be reading this wrong. But looking at the images, it def reminds me of some clickfix campaigns.

1 1

Bajiri @bajiri.bsky.social · 14h

When I see .mo4 files being executed like that, I think clickifix -> RAT chains. Pretty common to see TAs use polyglot or fake extensions to deliver RATs via ClickFix. ClickFix is the initial tech and the resulting command creates the shortcut and files. Usually pulls a script.

1 1

Bajiri @bajiri.bsky.social · 15h

Also added a very short post on node malware that's been a pain recently. Mostly iocs + the removal script I wrote for it. Keep in mind I wrote it in like 30 minutes while doing live testing lmao

alertoverload.com/posts/2025/1...

Node Malware / EvilAI

alertoverload.com

Bajiri @bajiri.bsky.social · 15h

I'll also need to upload the slides. Not sure if the talks will be recorded, but I'll at least drop the slides. They're actually fairly decent.

Bajiri @bajiri.bsky.social · 15h

After the cuts, I still have 42 slides to get through in 30 mins 💀

Might have to cut some more lol

Bajiri @bajiri.bsky.social · 15h

Oh shit. My talk is next week and I havent done the supporting blog post yet. I have to do that this weekend. There's a bunch of resources that had to be cut for time that I want to make accessible.

2

Bajiri @bajiri.bsky.social · 16h

I could write malware too. That always goes over well. The people like to see actually technical briefs more than info dump ones.

Writing malware and showing off interesting technical capabilities usually works out pretty well. Especially if it bypasses our tools 🤣

Bajiri @bajiri.bsky.social · 16h

I still need to come up with at least 4 engaging topics for daily briefs next week. Thinking a phishing kit breakdown for a recent incident, a filefix breakdown, a primer on office malware, and something else.

Maybe a co brief with threat intel on a threat actor profile? Something relevant to us.

2