Scott Vintinner
LightNews LightNews
banner
flakshack.bsky.social
Scott Vintinner
@flakshack.bsky.social
84 followers 180 following 220 posts
Your friendly neighborhood Cybersecurity DJ.

#netsec #sysadmin #cybersecurity #python #powershell #legal #it #technology #house #dj #f1

Latest DJ Mix (10/12): https://www.youtube.com/watch?v=4xidQ_SLUuQ
Posts Replies Media Videos
flakshack.bsky.social
New variation of the "FileFix" attack works by convincing end users to save a malware web page to disk and rename the extension.

www.bleepingcomputer.com/news/securit...
Screenshot of malware page where attacker asks victim to press CTRL-S to save the page and rename with .HTA extension.
July 2, 2025 at 4:54 PM
flakshack.bsky.social
Clip from my latest mix featuring: I Had To Go from The Freestylers & GreenFlamez and Dancefloor Shakedown from DJ-Pipes.

Really love these songs.

Listen now on YouTube
youtu.be/jL9X_QweGnw?...
May 16, 2025 at 3:02 PM
flakshack.bsky.social
via SecurityWriter (infosec.exchange/@SecurityWri...)
Graph showing security vulnerabilities (CVEs) listed by Pope.
April 25, 2025 at 2:43 PM
flakshack.bsky.social
New mix from 2025/04/19 out on YouTube 🎧🎶

youtu.be/DPDyL_d8Fq4

#house #progressivehouse #melodichouse
April 20, 2025 at 11:26 PM
flakshack.bsky.social
Reminder from Reddit that in 2025, simply allowing your users access to USB ports can be a recipe for compromise.
I ordered a $15 knock-off Razer Deathadder from AliExpress. It looked really good, even came in a legit looking Razer box but I knew it was a knockoff. I just wanted a cheap mouse with forward/back buttons for work. Long story short, my computer got isolated from the network by our local admin and my system re-imaged. He said that my computer was broadcasting data to an unknown third party, likely in China. Upon booting up the fresh install, it started doing it again and the admin realized that it was my mouse silently installing drivers/software on boot. Thankfully, he decided not to rat me out. Disconnected the mouse, re-imaged the computer again, and I agreed to never connect cheap devices from AliExpress to my work computer.
February 4, 2025 at 8:14 PM
flakshack.bsky.social
Just today, attacks from someone using the AWS infrastructure to launch the same attack on my company from around the world.
signature_hash 3.81.219.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # United States 3.107.96.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # Australia 3.134.109.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # United States 13.59.212.0/24 # 20250131 # Metabase Information Disclosure Vulnerability # United States 18.195.119.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # Germany 18.223.166.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # United States 35.92.32.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # United States 52.213.150.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # Ireland 98.83.113.0/24 # 20250130 # Metabase Information Disclosure Vulnerability # United States 109.199.110.0/24 # 20250130 # Apache HTTP Server Path Traversal Vulnerability # United States
January 31, 2025 at 7:33 PM