Lightnews — Scholar-powered news

Bajiri @bajiri.bsky.social · 3h

Low-key a candle person. I love to have a candle going. Especially with fall scents.

Bajiri @bajiri.bsky.social · 3h

Why are my upstairs neighbors playing bocce ball in their apartment at midnight?

1

Bajiri @bajiri.bsky.social · 3h

Dang, sometimes I'm really the only roadblock on my own life.

1

Bajiri @bajiri.bsky.social · 3h

Great ideas. I will steal them. Thanks!

1

Bajiri @bajiri.bsky.social · 4h

If you ever find yourself in north loop, you should try out stormking. I'm a fruity drink kind of person, so the sours they make really tickle my fancy. The smoked beers are also really good.

1

Bajiri @bajiri.bsky.social · 4h

Born to be a Maldev, forced to be a soc analyst.

Reposted by Bajiri

Virginia Gewin @virginiagewin.bsky.social · 8h

Journalist here

I’m interested in talking to a federal agency scientist who was fired, then rehired. I can keep you anonymous. I’m on Signal ginnyg.04

Reposts are appreciated!

2 240 240

Reposted by Bajiri

Scott Hanselman 🌮 @scott.hanselman.com · 5h

Minor medical situation on the flight and it’s cool that my wife is able to jump up and help out when they ask for a licensed medical professional.

One day someone will need a regular expression so I stay ready.

29 20 440

Reposted by Bajiri

Keezy Young🌼 @keezyyoung.bsky.social · 6h

I only have 35/255 books I brought to NYCC left haha

21 5 180

Reposted by Bajiri

Bradley P. Moss @bradmossesq.bsky.social · 9h

I love this image.

290 3K 17K

Bajiri @bajiri.bsky.social · 5h

At a brewery, drunk, reading BOD 22-01 on my phone.

www.cisa.gov/news-events/...

BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities | CISA

This page contains a web-friendly version of the Cybersecurity and Infrastructure Security Agency’s Binding Operational Directive 22-01 - Reducing the

www.cisa.gov

Bajiri @bajiri.bsky.social · 5h

I should go back and do a comp sci program somewhere

Reposted by Bajiri

Markus @fl4re.bsky.social · 5h

If anyone likes algorithms and would like to either explain or point me to resources of how to do really basic sorts that would be great.

I have spent the last two days trying to implement a largest first sort in C and I am dying.

1 2

Bajiri @bajiri.bsky.social · 5h

Real

Bajiri @bajiri.bsky.social · 5h

Maybe my cej payload - it just plays cotton eye joe in the background forever lol

1

Bajiri @bajiri.bsky.social · 5h

Forgot I still own msedge.zip it would be very funny to drop some malware on that.

Alert Overload

msedge.zip

1

Bajiri @bajiri.bsky.social · 5h

Seeing the typos now 💀

Should read mp4s 💀 ☠️ 💀

Bajiri @bajiri.bsky.social · 5h

Granted, I'm a little drunk and could definitely be reading this wrong. But looking at the images, it def reminds me of some clickfix campaigns.

1 1

Bajiri @bajiri.bsky.social · 5h

When I see .mo4 files being executed like that, I think clickifix -> RAT chains. Pretty common to see TAs use polyglot or fake extensions to deliver RATs via ClickFix. ClickFix is the initial tech and the resulting command creates the shortcut and files. Usually pulls a script.

1 1

Bajiri @bajiri.bsky.social · 6h

Also added a very short post on node malware that's been a pain recently. Mostly iocs + the removal script I wrote for it. Keep in mind I wrote it in like 30 minutes while doing live testing lmao

alertoverload.com/posts/2025/1...

Node Malware / EvilAI

alertoverload.com

Bajiri @bajiri.bsky.social · 6h

I'll also need to upload the slides. Not sure if the talks will be recorded, but I'll at least drop the slides. They're actually fairly decent.

Bajiri @bajiri.bsky.social · 6h

After the cuts, I still have 42 slides to get through in 30 mins 💀

Might have to cut some more lol

Bajiri @bajiri.bsky.social · 6h

Oh shit. My talk is next week and I havent done the supporting blog post yet. I have to do that this weekend. There's a bunch of resources that had to be cut for time that I want to make accessible.

2

Bajiri @bajiri.bsky.social · 7h

I could write malware too. That always goes over well. The people like to see actually technical briefs more than info dump ones.

Writing malware and showing off interesting technical capabilities usually works out pretty well. Especially if it bypasses our tools 🤣

Bajiri @bajiri.bsky.social · 7h

I still need to come up with at least 4 engaging topics for daily briefs next week. Thinking a phishing kit breakdown for a recent incident, a filefix breakdown, a primer on office malware, and something else.

Maybe a co brief with threat intel on a threat actor profile? Something relevant to us.

2