Providing quality computer products and services in a friendly, professional environment, since 1982
353 Island Dr Madison WI 53705
Joined July 2009
- Tweets19.7K
- Following21
- Followers64
- Likes67
MadisonComputerWorks retweeted
⚠️ Synology NAS devices are under ransomware attack.
Attackers are exploiting a flaw patched in December 2024 to target devices running outdated DSM versions.
Synology urges users to update immediately.
Details → thehackernews.com/2026/11/sy…
MadisonComputerWorks retweeted
50 legendary internet rabbit holes you can spend hours exploring👇
1. zoom.earth — Watch the world via live satellite imagery
2. flightradar24.com — See every plane currently in the sky
3. marinetraffic.com — Track all ships at sea in real time
4. windy.com — Live map of winds and storms
5. lightningmaps.org — Watch lightning strikes hitting Earth in real time
6. earthquake.usgs.gov — Live list of recent earthquakes
7. submarinecablemap.com — Ocean cables carrying the internet
8. globalforestwatch.org — Watch forests disappear from space
9. worldometers.info — The world's statistics, second by second
10. internetlivestats.com — Current number of tweets and searches being posted
11. thetruesize.com — Compare the true sizes of countries
12. oldmapsonline.org — Maps from centuries ago
13. davidrumsey.com — Archive of 150,000 historical maps
14. openstreetmap.org — World map drawn by volunteers
15. window-swap.com — Look out the window of a random person around the world
16. virtualvacation.us — Virtual walks through cities
17. mapcrunch.com — Teleport to a random spot on Earth
18. atlasobscura.com — Catalog of the world's strangest places
19. neal.fun — Interactive knowledge experiences
20. htwins.net/scale2 — Scale journey from atom to universe (Updated HTML5 link)
21. eyes.nasa.gov — Explore the solar system in 3D
22. stellarium-web.org — Real sky map in your browser
23. apod.nasa.gov — NASA's astronomy picture of the day
24. images.nasa.gov — NASA's entire visual archive, free
25. pudding.cool — Visual articles told through data
26. ourworldindata.org — The state of the world with real data
27. gapminder.org — What we mistakenly think we know about the world
28. informationisbeautiful.net — Visualizing complex data
29. data.worldbank.org — World Bank's open data
30. data.tuik.gov.tr — Turkey's official statistics database
31. archive.org — Archive of millions of books, films, and software
32. gutenberg.org — 70,000 free books whose copyrights have expired
33. openlibrary.org — Record of every book in the world
34. loc.gov — U.S. Library of Congress digital archive
35. europeana.eu — Europe's cultural heritage archive
36. dp.la — America's digital library collection
37. artsandculture.google.com — Tour museums from home
38. rijksmuseum.nl — Download artworks in high resolution
39. wikiart.org — Archive of 250,000 artworks
40. publicdomainreview.org — Forgotten visual treasures of history
41. openculture.com — Free archive of culture and education
42. metmuseum.org — Met Museum's open collection
43. musicmap.info — Family tree of music genres
44. radiooooo.com — Pick a country and decade to listen to that era
45. listen.hatnote.com — Turn Wikipedia edits into audio
46. wikipedia.org — Random knowledge well
47. timeanddate.com — Time, sunrises, and sky events
48. sciencedaily.com — Live stream of science news
49. arxiv.org — Free preprints of scientific papers
50. observablehq.com — Visualize data with live code
Save this. You’ll definitely need some of these later. 🔖
MadisonComputerWorks retweeted
‼️ In a real-world attack, a malicious file in a dev's Downloads folder tried to trick an AI coding agent into installing malware.
In controlled tests, Codex ran the malware in over 90% of attempts.
All it took was a planted AGENTS.md file.
Read: thehackernews.com/2026/10/ma…
MadisonComputerWorks retweeted
‼️ WARNING - Cisco confirms active, in-the-wild exploitation of a new critical flaw (CVE-2026-76519 // CVSS 9.8) in Cisco Secure Email Gateway.
Unauthenticated attackers can achieve full root command execution simply by sending an email with a crafted attachment.
Details >> thehackernews.com/2026/10/ci…
MadisonComputerWorks retweeted
‼️ A fake LastPass download abuses a Microsoft-signed kernel driver to kill antivirus and EDR.
The same payload steals browser passwords, crypto wallet files, and Discord, Steam, and Telegram sessions.
How the signed driver gets trusted: thehackernews.com/2026/09/fa…
MadisonComputerWorks retweeted
PAYLOAD Ransomware Hijacks Active Directory GPO to Disrupt Entire Windows Domain Without Encryption
Details: cybersecuritynews.com/payloa…
A PAYLOAD ransomware attack used Active Directory Group Policy Objects to disrupt an entire Windows domain without encrypting files or deploying ransomware binaries. The operation targeted a manufacturing organization in the Middle East.
It relied on domain-level control, stolen credentials, and malicious GPOs to display ransom demands, disable defenses, and lock down administrator access.
After gaining sufficient privileges, the attackers created a malicious Group Policy Object named PAYLOAD. They linked it to the root of the Active Directory domain.
#cybersecuritynews
MadisonComputerWorks retweeted
⚠️ Windows 11 KB5124008 Update Breaks Active Directory Domain Trust & Blocks User Logins
Details: cybersecuritynews.com/window…
Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking Active Directory domain trust on some enterprise computers, leaving users unable to sign in with valid credentials.
The problem appears linked to Machine Identity Isolation, although Microsoft has not confirmed the root cause or published an official workaround.
Released on September 8, 2026, KB5124008 is a cumulative security update for Windows 11 versions 25H2 and 24H2, advancing them to builds 26200.9445 and 26100.9445, respectively.
The first detailed report came from an administrator managing Windows 11 25H2 workstations in a domain with two Windows Server 2019 controllers.
#cybersecuritynews #windows11
MadisonComputerWorks retweeted
Microsoft 365 Hit by New Outage as Users Report Widespread 502 and 503 Errors
Details: cybersecuritynews.com/micros…
Microsoft has confirmed a fresh service degradation affecting its Microsoft 365 suite, with users worldwide reporting an inability to access core applications since the evening of September 16, 2026.
The incident, tracked internally as MO1472904, began at 7:17 PM GMT+5:30 and has been classified by Microsoft as an active service degradation rather than a full outage, though the disruption has already generated a wave of user complaints across enterprise and consumer accounts alike.
According to Microsoft’s admin center advisory, affected users are encountering 502 and 503 HTTP error codes when attempting to reach Microsoft 365 services, a signature pattern typically associated with backend server overload.
#microsoft365
ALT Microsoft 365 Hit by New Outage as Users Report Widespread 502 and 503 Errors
MadisonComputerWorks retweeted
Windows 11 Security Update KB5124008 Breaks Always On VPN Connections
Details: cybersecuritynews.com/window…
Microsoft’s September 2026 security update KB5124008 is knocking some Windows 11 enterprise clients off Always On VPN after the Patch Tuesday package landed on September 8.
Administrators who can reproduce the failure say certificate-based tunnels that worked immediately before the patch stop connecting afterward, then recover as soon as the cumulative update is removed and the device is rebooted.
The first detailed account appeared on Microsoft Q&A on September 9, 2026, from an administrator running Windows 11 24H2 and 25H2 clients with Always On VPN.
#cybersecuritynews
ALT Windows 11 Security Update KB5124008 Breaks Always On VPN Connections
MadisonComputerWorks retweeted
⚠️ Critical Check Point VPN Vulnerabilities Enable Remote Code Execution Attacks
Details: cybersecuritynews.com/check-…
Check Point Software has disclosed and patched two critical VPN-related vulnerabilities, CVE-2026-85102 and CVE-2026-85103, both carrying a maximum CVSS score of 9.8 and both capable of allowing unauthenticated remote code execution under specific conditions.
CVE-2026-85102 is rooted in improper certificate trust validation during VPN negotiation. CVE-2026-85103, by contrast, is a heap-based buffer overflow (CWE-122) that occurs while the product parses the ASN.1 structure of a VPN certificate.
The vulnerabilities affect Check Point Security Gateway, Security Management Server, and Spark Firewall deployments across multiple release branches.
#cybersecuirtynews
ALT Critical Check Point VPN Vulnerabilities Enable Remote Code Execution Attacks
MadisonComputerWorks retweeted
WeWorm – First 0-Click Worm Spreading Through WeChat Calls Across iOS and Android
Details: cybersecuritynews.com/weworm…
A proof-of-concept zero-click worm dubbed “WeWorm” that it says can spread through WeChat voice calls on both iOS and Android, compromising a target’s WeChat account in seconds without the victim answering the call.
A Pixel 10a was used as the initial attacker device, which then called an iPhone 17e and exploited the flaw while the call was still ringing; the compromised iPhone was then used to call another Pixel 10a, which was reportedly taken over in the same way.
#cybersecuritynews
ALT WeWorm – First 0-Click Worm Spreading Through WeChat Calls Across iOS and Android
MadisonComputerWorks retweeted
👨💻 InjectEave Attack Allows Hackers to Recover Audio Playing on Headphones from 30 Meters
Details: cybersecuritynews.com/inject…
A novel electromagnetic (EM) attack called InjectEave lets an adversary eavesdrop on audio playing through wired and wireless headphones from as far as 30 meters away, even through walls, using nothing more than commercially available radio-frequency equipment.
Unlike traditional EM side-channel attacks, which passively sniff stray electromagnetic emissions leaking from a device, InjectEave actively injects a tuned radio-frequency carrier signal into the target device.
#cybersecuritynews
MadisonComputerWorks retweeted
‼️ WARNING - Attackers are exploiting a Chrome V8 zero-day.
CVE-2026-85046 allows arbitrary code execution inside the browser sandbox via a crafted HTML page. Google fixed it in Chrome 152.0.7977.82/.83.
How the V8 type confusion works: thehackernews.com/2026/09/go…
MadisonComputerWorks retweeted
‼️ Multiple OpenSSL Flaws Let Remote Attackers Crash Servers and Corrupt Heap Memory
More Details: cybersecuritynews.com/chrome…
OpenSSL has issued a fresh security advisory disclosing seven vulnerabilities across its cryptographic library, ranging from a heap-corrupting write bug to memory-exhaustion flaws in its QUIC and DTLS implementations.
The flaws affect widely deployed branches, including OpenSSL 4.0, 3.6, 3.5, 3.4, and 3.0, and, in some cases, the legacy 1.1.1 line, making patching a priority for any organization running TLS, CMS, or CMP services built on the library.
The most severe issue, tracked as CVE-2026-63072, lives in OpenSSL’s CMS decryption code.
#cybersecuritynews
ALT Multiple OpenSSL Flaws Let Remote Attackers Crash Servers and Corrupt Heap Memory
MadisonComputerWorks retweeted
⚠️ Microsoft 365 accounts are being hijacked and quietly kept alive.
A widespread AitM phishing campaign steals credentials and MFA codes, then uses rotating residential proxies to refresh sessions every eight hours while targeting payroll, HR, and finance mailboxes.
See how the attack works: thehackernews.com/2026/08/mi…
MadisonComputerWorks retweeted
⚡ Paperclip AI flaws can turn a malicious agent import into commands running on the host.
One chain reaches exposed servers through default registration. Another crosses into a developer’s localhost through DNS rebinding.
A public Metasploit module automates the server-side attack.
See how both chains work ↓ thehackernews.com/2026/08/pa…
MadisonComputerWorks retweeted
To mark #CyberSecurityAwarenesMonth, we are launching our new blog series titled “The #Cybersecurity Tech Accord in the Age of #AI: Navigating the rise of Agentic Systems”. Read the first blog here: bit.ly/4o52M5q
MadisonComputerWorks retweeted
🔥 Trump has just terminated all DHS advisory committee memberships, including the key Cyber Safety Review Board (CSRB).
CSRB's past work included:
⤷ Reporting on Log4Shell and LAPSUS$ intrusions
⤷ Investigating Salt Typhoon group
Read → thehackernews.com/2025/01/tr…
MadisonComputerWorks retweeted
🚨 Facebook Ads Manager under attack!
A revamped python-based NodeStealer #malware now targets #Facebook business accounts, harvesting credit card data from browsers.
🔗 Find out how: thehackernews.com/2024/11/no…
It avoids infecting systems in Vietnam, its suspected origin.
MadisonComputerWorks retweeted
The first Tech Accord principle states “We will protect all users everywhere.” From machine learning to computer vision, #AI can enhance the security of digital systems, helping tackle growing cyber threats and protecting data and services. Find more here: bit.ly/3Ydgj0H
