Back when I was important, I saw the common trend of incidents being reported on Fridays or right before holiday breaks. I started asking the reporters (while thanking them) "why did you report it when you did?" and the response was consistent: "I knew this was important and I didn't want it to sit over the weekend/holiday without anyone knowing about it".
I suspect there may be a similar situation with discovered vulnerabilities.
My support roles always saw a spike in tickets just before lunchtime, and just before close of business. I always thought people had a list of things to get done before noon, and another list to get done before they leave for the day.
I had a long discussion with a (MD of psychology) friend years ago about the "last chance" urgency effect on our brains. Essentially the same phenomenon that is believed to cause a squirrel to think "AHHH, RUN NOW" at the worst possible moment when a car is approaching.
I wonder if some of the same basal survival instinct wiring is responsible for this phenomenon. 😛
@phreakmonkey perhaps. though I gather that these people thought they were actually being helpful and not doing it out of self preservation. Maybe that is there at some level, though, and the layers of cognition just build a cover story
@phreakmonkey Well it seems plausible, and it’s a good answer... They (the reporter/s) get hold of the story, they try to dig deeper, work on verifying… this of course being the workng week. By the end of the week, if they feel it is important enough, they - being known to be so altruistic - don’t want to “sit” on it... or much more likely, they are worried someone else might scoop them.
So I'm batting .200, it was Ironport on the Cisco side, and then also Sonicwall Management. But it's only hump day, we still got some time till push to prod day.
An automated campaign is targeting multiple VPN platforms, with credential-based attacks being observed on Palo Alto Networks GlobalProtect and Cisco SSL VPN.
https://www.bleepingcomputer.
Internet security watchdog Shadowserver has found over 25,000 Fortinet devices exposed online with FortiCloud SSO enabled, amid ongoing attacks targeting a critical authentication bypass vulnerability.
https://www.bleepingcomputer.
CVE ID: CVE-2025-14733
Vendor: WatchGuard
Product: Firebox
Date Added: 2025-12-19
Notes: Check for signs of potential compromise on all internet accessible instances after applying mitigations. For more information please see: https://www.watchguard.
Simon Zerafa (Status: 😊)
in reply to Jerry 🦙💝🦙 • • •ZeroDay Bae
in reply to Jerry 🦙💝🦙 • • •Dave Wilburn
in reply to Jerry 🦙💝🦙 • • •Why?
Why would you put this out into the universe, Jerry?
Jerry 🦙💝🦙
in reply to Dave Wilburn • • •Jerry 🦙💝🦙
in reply to Jerry 🦙💝🦙 • • •RE: infosec.exchange/@jerry/115735…
Back when I was important, I saw the common trend of incidents being reported on Fridays or right before holiday breaks. I started asking the reporters (while thanking them) "why did you report it when you did?" and the response was consistent: "I knew this was important and I didn't want it to sit over the weekend/holiday without anyone knowing about it".
I suspect there may be a similar situation with discovered vulnerabilities.
Jerry 🦙💝🦙
2025-12-17 15:01:51
royal
in reply to Jerry 🦙💝🦙 • • •K.C. Budd
in reply to Jerry 🦙💝🦙 • • •I had a long discussion with a (MD of psychology) friend years ago about the "last chance" urgency effect on our brains. Essentially the same phenomenon that is believed to cause a squirrel to think "AHHH, RUN NOW" at the worst possible moment when a car is approaching.
I wonder if some of the same basal survival instinct wiring is responsible for this phenomenon. 😛
Jerry 🦙💝🦙
in reply to K.C. Budd • • •Daniel Blake
in reply to Jerry 🦙💝🦙 • • •Pauliehedron ✅
in reply to Jerry 🦙💝🦙 • • •Pauliehedron ✅
in reply to Pauliehedron ✅ • • •Jerry 🦙💝🦙
in reply to Pauliehedron ✅ • • •Pauliehedron ✅
in reply to Jerry 🦙💝🦙 • • •We're getting there! Something this way comes...
infosec.exchange/@BleepingComp…
BleepingComputer (@BleepingComputer@infosec.exchange)
BleepingComputer (Infosec Exchange)Pauliehedron ✅
in reply to Pauliehedron ✅ • • •Son of a biscuit
infosec.exchange/@BleepingComp…
BleepingComputer (@BleepingComputer@infosec.exchange)
BleepingComputer (Infosec Exchange)Jerry 🦙💝🦙
in reply to Pauliehedron ✅ • • •Pauliehedron ✅
in reply to Jerry 🦙💝🦙 • • •We have a new contender!
mastodon.social/@cisakevtracke…
CISA KEV Tracker (@cisakevtracker@mastodon.social)
CISA KEV Tracker (Mastodon)kwayk42
in reply to Jerry 🦙💝🦙 • • •Cloudflare : *stands in the corner looking nervous*
Also Cloudflare : We... We don't count as a firewall, right?
#FuckCloudflare
Jerry 🦙💝🦙
Unknown parent • • •B'ad Samurai 🐐🇺🇦
in reply to Jerry 🦙💝🦙 • • •What is a chimney but path traversal.
#pathtraversalmemes
corq
in reply to Jerry 🦙💝🦙 • • •considerate
in reply to Jerry 🦙💝🦙 • • •Kluthulhu' XOR 1=1--
in reply to Jerry 🦙💝🦙 • • •Tobias Fiebig
in reply to Jerry 🦙💝🦙 • • •