• Throughout mid-2025, X-Force observed several Toneshell and Pubload malware variants in weaponized archives mostly uploaded from Singapore and Thailand.
• One of the variants evading VirusTotal detections is the latest update "Toneshell9". It supports command and control (C2) communication through locally configured proxies to blend in with enterprise network traffic and facilitates two reverse shells in parallel.
• X-Force analyzed a new USB worm, SnakeDisk, which only executes on devices located in Thailand, based on their IP address. The worm displays code overlaps with Tonedisk and is able to detect new and existing USB devices, which it weaponizes as a means of propagation.
• The analyzed SnakeDisk sample drops the Yokai backdoor on infected devices, which sets up a reverse shell allowing operators to execute arbitrary commands. Yokai was previously tied to campaigns targeting Thai officials in December 2024.

Hive0154, aka Mustang Panda, drops updated Toneshell backdoor and novel SnakeDisk USB worm

Hive0154 wreaks havoc on Singapore and Thailand using a new Toneshell backdoor and SnakeDisk USB worm.

^{Golo Mühr (www.ibm.com)}

Hey there! So I'm currently studying CS & IT and I'd like to know more about how developers & computer nerds alike are reflecting the values of solarpunk into their work.

Are solarpunk values part of your thinking process when you decide which software you are going to be making (for personal projects for example), or which company you will be working at? Are they part of the production process (like which tools or technologies you're using)? How much? And, maybe in a broader sense, is hoping to work on projects aligned with solarpunk values realistic?

Oggi mi sono sentita un po' pazza, e ho così deciso, di punto in bianco, di fare un nuovo esperimento... Dare una seconda possibilità ad

stuff.octt.eu.org/2025/09/rico…

cross-posted from: mtgzone.com/post/2335149

In this edition:

• Through the Omenpaths Prepatch
• Through the Omenpaths Streamer Event
• Event Schedule

FYI -- Through the Omenpaths out tomorrow, September 16!

MTG Arena Announcements – September 15, 2025

Catch up with the latest info and events on MTG Arena.

^{John Schork (Magic: The Gathering)}

Albanese says Papua New Guinea is choosing ‘it’s own interest, going forward, and it’s sovereignty’

Archived version: archive.is/newest/independent.…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

Australia to ‘totally integrate’ armed forces with Papua New Guinea amid growing concerns over China

^{Arpan Rai (The Independent)}

The pair were sentenced to two years in prison after being found with charms, including a chameleon.

Archived version: archive.is/20250915143924/bbc.…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

Hakainde Hichilema: Two men sentenced in Zambia for attempting to bewitch and kill president

^{Kennedy Gondwe (BBC News)}

The proposal includes approximately €430 million for air defences, rocket artillery, combat vehicles and new warships

Archived version: archive.is/newest/euractiv.com…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

Cybercriminals steal details of potentially millions of people in attack on labels’ parent company Kering

Hackers steal private data of Gucci, Balenciaga and McQueen customers

^{Robert Booth (The Guardian)}

Revelation relating to then Northern Ireland home affairs correspondent, Vincent Kearney, a ‘matter of grave concern’

Archived version: archive.is/20250915174346/theg…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

MI5 concedes it ‘unlawfully’ obtained data from former BBC journalist

^{Michael Savage (The Guardian)}

Former MMA fighter Conor McGregor has withdrawn his bid to run in the upcoming Presidential Election.

Archived version: archive.is/20250915125003/rte.…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

McGregor withdraws bid to run in Presidential Election

Former MMA fighter Conor McGregor has announced he is withdrawing from the Presidential Election race.

^{Mícheál Lehane (RTÉ)}

After resisting the label for months, the U.S. president goes there.

Archived version: archive.is/20250915100014/poli…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

Trump finally calls Russia the ‘aggressor’ in war on Ukraine

^{Veronika Melkozerova (POLITICO)}

Poland’s foreign minister has suggested that NATO states should consider imposing a no-fly zone over Ukraine to protect the alliance’s territory and people from Russian drones.

Archived version: archive.is/newest/edition.cnn.…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

Russian military exercises near NATO borders follow the recent incursion of Russian drones into the airspace of Poland and Romania, further stoking tensions with the West.

Archived version: archive.is/newest/wired.com/st…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

A national poll from Jacobin, DSA Fund, and Data for Progress finds broad support for democratic socialist leaders and left-wing policies.

New Poll: Democratic Socialism Is Now Mainstream

^jacobin.com

The network icon in the system tray's context menu and the Wi-Fi quick settings page in Windows 11 are getting buttons to let you quickly run a network speed test. (Takes you to Bing to do the speed test.)

Source: phantomofearth

"Just kill 'em" said a Fox News host in the latest example of the right wing in the US cementing their status as despicable

Fox News host suggests putting down homeless people like dogs

^{Willem Moore (The Canary)}

"Threatening voters and cities over elections is what authoritarians do," said a progressive organizer after Trump threatened to withhold funding from NYC if Zohran Mamdani wins. Democrats refusing to support Mamdani are shooting their party in the foot.

After Hochul’s Mamdani Endorsement, Trump Threatens New York Federal Funding

"Donald Trump is threatening to withhold money from NYC if they elect Zohran Mamdani, who [is] standing up to his billionaire donor buddies, instead of his friend Andrew Cuomo who will roll over for them," said one organizer.

^{julia-conley (Common Dreams)}

The group has commissioned polling which shows widespread support for Starmer standing up to Trump and taxing big tech

The £5bn cost if Keir Starmer bows to Trump and big tech

^{Willem Moore (The Canary)}

ISGAP is attempting to shape policy in Washington, at a time when the Trump administration is looking to justify a broader crackdown on opposition to the war on Gaza.

Archived version: archive.is/newest/dropsitenews…

Disclaimer: The article linked is from a single source with a single perspective. Make sure to cross-check information against multiple sources to get a comprehensive view on the situation.

An Israel-Funded Campaign to Link Qatar to Campus Antisemitism

^{Nick Cleveland-Stout (Drop Site News)}

Research suggests increase in office snooping in trend that some managers claim undermines trust with staff

A third of UK firms using ‘bossware’ to monitor workers’ activity, survey reveals

^{Robert Booth (The Guardian)}

Welcome to the Third Edict edition of Build of the Week! In this series, we look at interesting builds from the Path of Exile 2 community that have caught our attention.

Today's episode features Sowza's Last Lament Lich build. This unique crossbow is surprisingly well-suited to the Lich, thanks to some cool interactions that let us bypass its downside.

Video: Path of Exile 2: Build of the Week - Sowza's Last Lament Lich

For more information on this build, check out Sowza's video guide .

See you next time!

Delocalizzazione Shein:

non un vero e proprio esubero, il colosso dell'ultra fast fashion si sposta da Stradella (PV) alla Polonia.

Non indolore: 311 licenziamenti

Acquisti da Shein? Conosci il suo modello di business?

Fonti:

🔗 Milanotoday

🔗Il Giorno

Shein chiude a Stradella e licenzia oltre 300 lavoratori: il colosso del fast fashion sposta la sede in Polonia

Il gigante cinese chiuderà il centro logistico nell'Oltrepò Pavese entro fine anno. Persi oltre 460 posti di lavoro (coi contratti a termine non rinnovati): previsti solo 60 ricollocamenti

^{Redazione Pavia (Il Giorno)}

Next month, Microsoft will begin automatically installing the Microsoft 365 Copilot app on Windows devices outside of the EEA region that have the Microsoft 365 desktop client apps.

https://www.bleepingcomputer.com/news/microsoft/microsoft-to-force-install-the-microsoft-365-copilot-app-in-october/

A federal judge in San Francisco found the Office of Personnel Management unlawfully directed agencies to fire probationary federal employees en masse.

U.S District Court Judge William Alsup ruled late Friday that OPM “exceeded its own powers,” and “directed agencies to fire under false pretense,” telling probationary employees that they were being terminated for poor performance.

The ruling doesn’t reinstate any of the 25,000 probationary federal employees fired around mid-February, but it does direct many agencies to update their personnel records to specify that these employees were not fired for poor performance or misconduct. Agencies must also send letters to impacted employees starting they were not fired for performance.

The ruling, in a lawsuit led by federal employee unions, applies to the departments of Commerce, Defense, Health and Human Services, Labor, Treasury, Transportation and Agriculture. OPM, NASA, the State Department and the Office of Management and Budget are exempt from the ruling.

Court finds OPM unlawfully directed mass firings, tells agencies to update personnel files

The ruling directs many agencies to update their personnel records to specify that probationary employees were not fired for poor performance or misconduct.

^{Jory Heckman (Federal News Network)}

Siccome qui su NodeBB mi sembra di stare su un altro pianeta, stavo pensando se aprire una categoria dedicata al self-hosting casalingo, dove scrivere le mie esperienze. In casa ho già tre mini-pc collegati al modem ADSL.

Il mio modem/router adsl ha la porta DMZ (zona demilitarizzata) abilitata su un mini-pc che mi fa da Proxy. Lo so, probabilmente per alcuni i termini dmz e proxy suonano arabo. Non lo so, forse ho già spaventato qualcuno con quelle due terminologie. Al posto del DMZ si può usare il port forwarding del modem/router.

Ecco il port forwarding è un'altra terminologia tecnica da spaventapasseri. Quando parlo di queste cose con amici e familiari mi sento a disagio perché so già che tanti non capiscono la terminologia tecnica e me lo dicono in faccia già loro: parli difficile, non ti seguo. Sebbene in casa tutti abbiamo un modem/router se vogliamo essere collegati a Internet, basta aprire il manuale istruzioni di questi dispositivi o scaricarli da Internet per trovare la spiegazione dettagliata di queste terminologie.

Tuttavia alla maggioranza delle persone evidentemente non interessano i dettagli tecnici dei modem e dei router. Per loro basta che il modem funzioni, si agganci alla rete, fa tutto il DHCP (Dynamic Host Configuration Protocol) e via. Eppure se si vuole fare selfhosting casalingo è importante capire quella terminologia, altrimenti non si va da nessuna parte.

A developer repurposed discarded disposable vapes into functioning web servers by utilizing their built-in PUYA microcontrollers[^1]. The project runs on a 24MHz Cortex M0+ chip with 24KiB flash storage and 3KiB RAM, found inside modern rechargeable "disposable" vapes[^6].

The web server implementation uses uIP for TCP/IP networking and communicates via SLIP protocol through semihosting. After optimizing the data transfer with ring buffers, the server achieves 20ms ping times and 160ms page load speeds[^6].

The project demonstrates creative e-waste reuse at a time when disposable vapes face increasing restrictions, with recent bans enacted in Rhode Island[^13] and other jurisdictions. The developer notes the irony of "disposable" devices containing USB-C ports and rechargeable batteries[^6].

[^1]: Hosting a WebSite on a Disposable Vape | Lobsters

[^6]: Hosting a WebSite on a Disposable Vape

[^13]: New year, new laws: RI to put host of new laws on the books | ABC6

New year, new laws: RI to put host of new laws on the books | ABC6

The Rhode Island General Assembly is turning out a bevy of new laws for 2025.

^{Christopher Boardman (ABC6)}

Judge Britney Horton kept the Kilfoils’ lawyer from deposing a Citizens adjuster, siding with the company after it argued it had already made another employee available and produced “all non-privileged facts.” The ruling deprived them of a fair opportunity to investigate the denial, according to their attorney. On at least 20 other occasions, DOAH judges have issued similar rulings during a dispute’s fact-finding phase.

In addition, some DOAH judges have denied motions requesting that they disclose any potential conflicts they might have as arbitrators. Some plaintiff’s attorneys say that has made it difficult to trust in the impartiality of their decisions.

And the forum’s rules make it impossible for homeowners to drop their lawsuit without Citizens’ approval, unless they withdraw their claim, a move that can lead to court costs and attorney’s fees if not filed early in the process. Some have felt forced to go to final hearings where they lost and ended up owing thousands to Citizens.

Florida’s Citizens Property Insurance Wins Most of Its Claim Disputes in Mandatory Arbitration

State legislators and executives at Citizens Property Insurance touted mandatory arbitration as advantageous for both consumers and insurers. In practice, homeowners were left with few avenues for recourse when their claims were denied.

^ProPublica