ComoDoS - Exploiting a Remote Kernel Zero-Day Vulnerability in Comodo Internet Security

How an IP parsing vulnerability makes it possible to remotely crash systems with a single TCP/IP packet

malwaretech.com/2026/06/exploi…

Our new threat research report is a comprehensive overview of TA4922, a newly designated Chinese-speaking, financially motivated threat actor.

We consider it one of the most unique actors we track. 👀

Why? Because it currently conducts more unique campaigns than any other cybercriminal in our telemetry, using a wide variety of lure themes, targeting, and objectives. You’ll see examples in our blog.

Read it now: proofpoint.com/us/blog/threat-…

Campaigns mostly target organizations in Japan, but it’s been expanding globally. 🗺️

This actor blends malicious activity with legitimate tools, trusted software, and cloud hosting services—making its campaigns challenging to detect and defend against.

See our blog for all the details on TA4922, the new payloads it distributes, our defense recommendations, IOCs, and more.

Missed your chance to attend? No worries, we're live!

Track 1: youtube.com/live/TBVbumqrfrE

Track 2: youtube.com/live/6mgbJFVOt-s

NPR laid off about 4 percent of its content division, including 10 journalists and some veteran reporters.

""People love science," NPR Science Correspondent Nell Greenfieldboyce, who was laid off Wednesday, said in an interview for this story. "It's such a break from the political and economic and often grim news to have something more inspiring and curiosity driven. I thought it was a great blessing to have the opportunity to give that to people."

npr.org/2026/05/27/nx-s1-58366…

#media #layoffs #journalism

📺 Risky Business Weekly (840): Microsoft walks back researcher threats

risky.biz/video/risky-business…

Meow meow mrrrp meow meeoww "meow mew meow meow MEOW meow mreow meow".

Meow. Meow mmeow meow. Meow meow!

This post is about cats.

PostHog says it's currently experiencing a security incident. The analytics company said it's "rotating keys after a security research team was able to confirm an exploit in one of our AWS environments," referring to Amazon Web Services.

Incident page: posthogstatus.com/incidents/01…

The amount of fuckery going on when you put something online is absolutely mindboggling to me.

Internet, truly, is a rather hostile place.

One reason that Microsoft might be issuing such harshly worded language here to describe the researcher may be that, according to Nightmare Eclipse, they until recently worked as a security researcher at Microsoft.

Scroll back far enough through their Xitter account (to June 2020) and you will see they claimed CVE-2019-1385 was theirs.

On July 1, 2021, Nightmare Eclipse complained that Microsoft failed to fix one of the weaknesses they reported in CVE-2021-24084. Microsoft credits both of these flaws to the same researcher, whose LinkedIn account says they are in Germany and worked full time at Microsoft from Sept. 2022 to June 2025.

For the record, I think @GossiTheDog called it that this person was a former MS employee.

x.com/ChaoticEclipse0/with_rep…

Chuck Darwin

2026-05-30 00:47:56

After a security researcher published a series of unpatched bugs in Microsoft products, along with code to exploit them,
the company is now threatening to take legal action and call the cops on them.

Microsoft’s threat reignites a long-running argument over what responsibility, if any, security researchers have to disclose vulnerabilities affecting large and wealthy tech giants.

On Wednesday, Microsoft published a blog post criticizing the researcher, who goes by the handle
“Nightmare Eclipse,”
for publicly disclosing a series of bugs, including BlueHammer, RedSun, UnDefend, and YellowKey.

The flaws affected products such as the Windows built-in antivirus engine Defender and the disk-encryption tool BitLocker.

Katie Moussouris warned that the consequences of security researchers losing trust with Microsoft could result in a chilling effect of fewer people coming forward to report bugs,
“making it less safe for all of us.”

Security researcher and former Microsoft employee Kevin Beaumont also called out Microsoft in a blog post,
describing the company’s position a “dumpster fire of its own making.”

“Proof of concept exploit creation and distribution for zero days is ‘criminal activity’ now?”
wrote Beaumont.

“Responsible disclosure quite often is framed to protect the product owner, not the customer
— using it to try to criminally prosecute people is a new low.”
techcrunch.com/2026/05/29/micr…

Microsoft under fire for threatening security researcher with criminal investigation | TechCrunch

A public spat between Microsoft and an independent security researcher reopens a long-running debate over who is responsible for securing software.

^{Lorenzo Franceschi-Bicchierai (TechCrunch)}

This Week in Package Management: 30 May 2026

nesbitt.io/2026/05/30/this-wee…

SentinelOne's stock closes down 8% after the company announced plans to lay off 8% of its workforce and forecasted Q2 and FY revenue guidance below estimates (Samantha Subin/CNBC)

cnbc.com/2026/05/29/sentinelon…
techmeme.com/260529/p31#a26052…

📰 Risky Bulletin: Dutch police take down giant botnet of 17 million devices

risky.biz/risky-bulletin-dutch…

Microsoft, who banned Nightmare-Eclipse from their GitHub platform, conveys their displeasure with said individual

Along with a threat:

Our Digital Crimes Unit will continue bringing cases against these actors and those that enable their criminal activity – coordinating as needed with law enforcement around the world.

Also manages to sprinkle in a few references to not using CVD as being not "responsible". (Microsoft was a big proponent of the term "responsible disclosure", which has gone by the wayside because it tends to favor vendor-centric perspective in a subjective and moralizing way.)