braedach.com - Always Learning (Page 3)

braedach.com - Always Learning

Sign in Subscribe

Telstra Email Scam

Telstra Email Scam

Yikes - heads up The Telstra email scam has become one of the largest scams affecting Telstra customers. Since 2023, when Telstra switched to its latest email system, the spam filtering has been ineffective at blocking scam emails for well-known phishing scams, leading to many Telstra customers losing control of

Russian Connections

Russian Connections

When your wifes mobile starts running off and behaving in a manner that is not normal you tend to start asking questions - especially in this day and age. Basically it blew the network baseline right out of the water. Stuff like that gets my attention. Device immediately put in

PiHole breached by its WP Plugin

PiHole breached by its WP Plugin

Here we go again Pi-hole discloses data breach triggered by WordPress plugin flawPi-hole, a popular network-level ad-blocker, has disclosed that donor names and email addresses were exposed through a security vulnerability in the GiveWP WordPress donation plugin.BleepingComputerSergiu Gatlan Pi-hole, a popular network-level ad-blocker, has disclosed that donor names and

Ghost website - mirror

Ghost website - mirror

I'm still screwing around with this which is why there are basically two websites I rebuilt the server and decided to revisit the code, then there was the WAF, the Cloudflare tunneling, the setting up of the Zero Trust network, the implementation of policies (what's public,

Top hacker in the world - is an AI

Top hacker in the world - is an AI

A hacker named Xbow has topped a prestigious security industry US leaderboard that tracks who has found and reported the most vulnerabilities in software from large companies. Xbow isn’t a person – it’s an artificial intelligence tool developed by a company of the same name. Security researchers and hackers

The fight for the San Jose & billions

The fight for the San Jose & billions

I'm speechless. ‘Most valuable treasure’: $17 billion Spanish shipwreck from 1708 to be recoveredThe shipwreck’s deep-sea location, which remained a mystery until 2015, has been entangled in an international ownership debate.ABC NewsABC News Colombia, Spain, Bolivian Indigenous groups and an American salvage company have all attempted

MSP Sued by Client

MSP Sued by Client

Whoops Cognizant manages Clorox's internal networks, and employees who have issues with their passwords, multi-factor authentication (MFA) codes, and VPNs must coordinate with the IT provider to regain access to their system. However, Clorox alleges that the Cognizant Service Desk gave access passwords without verifying the identity of

Proxmox Mail Relay - Setup

Proxmox Mail Relay - Setup

I tried to create my own mail server I actually got it going but damn it was a problematic, and difficult thing to do. In the end after doing more research I gave up and put left the docker compose file in the development folder - it does actually work.

NPMplus + OpenAppsec

NPMplus + OpenAppsec

Finally settled on a WAF for my production and development applications Took a considerable amount of time and experimentation, something that I don't have a lot of lately after the new year but finally catching up on a lot of things and the hypervisor rebuild expedited a great

Qantas Gets Hacked

Qantas Gets Hacked

The game is afoot. Millions could be compensated over major Qantas data breachA national law firm has lodged a representative complaint against Qantas, seeking compensation on behalf of millions of customers whose personal data was compromised in the airline’s recent cyber attack.Lawyers WeeklyGrace Robbie The OAIC has confirmed

Proxmox Docker Projects

Proxmox Docker Projects

In between running around like a blue-arsed fly, I have managed to find some time to complete some docker projects Why - because it enhances my IT skills in docker, network and administration Had roughly 20 of these on my to-do list and I have put a serious dent in

Proxmox - IPv6 Configuration

Proxmox - IPv6 Configuration

I rebuilt my server. I don't do it often, but I increased my storage that required a trip back to the documentation and a rethink of how to best utilize the space This led to a rethink of the fixed IP address problem, related to the IPv6 address

NBN Australia - FTTP

NBN Australia - FTTP

I took advantage of the free upgrade to optic fiber as advised by my ISP Was it worth it - well I am still debating that one. I didn't change my plan although we had topped out our FTTN connection, we couldn't go any faster if

Superbase DNS - this is new

Superbase DNS - this is new

One major update and new signature alerts - off to the AI I do but go. Absolutely, Leon—no need to apologize at all. You're diving deep into network observability, and these alerts are gold for understanding what’s moving across your wire. Let’s unpack this one:

Ubiquiti Bumps its UDM Firmware

Ubiquiti Bumps its UDM Firmware

Woke up this morning to an email saying my UDM needs a firmware update, and it's a good update, although teething problems exist. Improvements: 1. Added support for CNAME DNS Records. 2. Added support for Cloudflare Content Filtering. 3. Added support for Alarm Manager. 4. Improved the Analytics

The Greatest Speech in History

The Greatest Speech in History

“If we look to the laws, they afford equal justice to all in their private differences…if a man is able to serve the state, he is not hindered by the obscurity of his condition. The freedom we enjoy in our government extends also to our ordinary life. There, far

GitHub Security Vulnerability via MCP

GitHub Security Vulnerability via MCP

GitHub may or does have a problem via MCP We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows While our experiments focused on

Port Alpha - Saronic Technologies

Port Alpha - Saronic Technologies

If you have been paying attention to what China has been achieving lately in relation to its ship building and the complications and problems of the American shipbuilding industry you would be aware that the west has a significant problem in matching China's efficiency - to say nothing

Robotics, AI & Freebie

Robotics, AI & Freebie

The freebie is probably already gone but I will be at work Now that I have got my coding out of the way, and a little time for play, I found this. Rather interesting - moving at a hell of a pace. Might need to start thinking about a new

Microsoft Group Policy

Microsoft Group Policy

I thought I better explain myself Microsoft Group policy is a way to enhance and harden your Windows systems. If you are not running Windows home edition it is already installed and available. However, it is not configured by default and requires a little knowledge. Normally group policy would be

Microsoft Defender for Business

Microsoft Defender for Business

A relatively cheap (depending on your pricing plan) extended solution Go beyond traditional antivirus with enterprise-grade protection and vulnerability management for your Windows, macOS, iOS, and Android™ devices. Microsoft Defender for Business | Microsoft SecurityLearn about Microsoft Defender for Business, an endpoint security solution built to help protect small businesses against

Jpeg: New Attack vector

Jpeg: New Attack vector

This really is becoming a pain in the butt. Not only can't you trust the ads been served up by Googles Ad servers but now you have to think twice about looking at images on or from the internet. Probably why a lot of website images are ditching

Pearson hit by cyberattack

Pearson hit by cyberattack

These people obviously don't read. There was even recently a number of articles in relation to the amount of credentials stored within services like GitHub, GitLab and others. There was also a staggering amount of information released on the use of AI in software development that contained sensitive

Security Tools Alone Don't Protect You — Control Effectiveness Does

Security Tools Alone Don't Protect You — Control Effectiveness Does

I so like the title to this article. Having spent a considerable amount of money on updating my cybersecurity skills and continuing to practice my red, blue and purple skills, I whole heartedly agree with this article. Security Tools Alone Don’t Protect You — Control Effectiveness Does61% of orgs suffered

Browser Extensions Pose Critical Security Risk

Browser Extensions Pose Critical Security Risk

Banned. Need to look at this again with group policy. Browser extensions have become deeply embedded in employees' daily workflows, aiding tasks from grammar checking to discount hunting. Yet, their extensive permissions create significant security risks, largely unnoticed by IT and security teams. A new 2025 Enterprise Browser Extension