Elektrine
Log in Register

#http

27 posts · Last used 13d

heise Security @heisec@social.heise.de
· 1w ago
Boosted by @gvenema@fairmove.net
Chrome: Google macht Schluss mit unsicheren HTTP-Verbindungen Der Chrome-Browser warnt fortan vor dem ersten Aufruf unverschlüsselter Websites. Google hat die Sicherheitsfunktion standardmäßig für alle Nutzer aktiviert. https://www.heise.de/news/Chrome-Google-macht-Schluss-mit-unsicheren-HTTP-Verbindungen-11497052.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon #Browser #Chrome #Google #HTTP #https #IT #Security #news
Chrome: Google macht Schluss mit unsicheren HTTP-Verbindungen
heise.de

Chrome: Google macht Schluss mit unsicheren HTTP-Verbindungen

Der Chrome-Browser warnt fortan vor dem ersten Aufruf unverschlüsselter Websites. Google hat die Sicherheitsfunktion standardmäßig für alle Nutzer aktiviert.

0
0
6
0
OTX Bot @techbot@social.raytec.co
· 1mo ago
Malicious Chrome Extension Can Steal Login Sessions and Turn PCs Into Remote Backdoors Indicators extracted from public reporting. Source: https://socradar.io/blog/peep-browser-rat-chrome-extension/ Pulse ID: 6a9e7c2ce1129dcc5ae37c04 Pulse Link: https://otx.alienvault.com/pulse/6a9e7c2ce1129dcc5ae37c04 Pulse Author: CyberHunter_NL Created: 2026-09-07 08:56:12 Be advised, this data is unverified and should be considered preliminary. Always do further verification. #BackDoor #Browser #Chrome #ChromeExtension #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #bot #CyberHunter_NL
PEEP: A Browser RAT Posing as a Chrome Extension
socradar.io

PEEP: A Browser RAT Posing as a Chrome Extension

The Threat Research Unit (STRU) at SOCRadar's Extended Threat Intelligence (XTI) platform identified and analyzed PEEP, a Chromium-based emerging post...

1
0
0
0
OTX Bot @techbot@social.raytec.co
· 1mo ago
Hackers Actively Exploiting PaperCut Servers Command Execution Vulnerabilities Indicators extracted from public reporting. Source: https://cybersecuritynews.com/papercut-command-execution-flaws-exploited/ Pulse ID: 6a9e6e1a6891a0ac0d93faec Pulse Link: https://otx.alienvault.com/pulse/6a9e6e1a6891a0ac0d93faec Pulse Author: CyberHunter_NL Created: 2026-09-07 07:56:10 Be advised, this data is unverified and should be considered preliminary. Always do further verification. #AWS #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL
Hackers Actively Exploiting PaperCut Servers Command Execution Vulnerabilities
cybersecuritynews.com

Hackers Actively Exploiting PaperCut Servers Command Execution Vulnerabilities

Two critical PaperCut server vulnerabilities are being actively exploited for command execution, credential theft, and privileged account creation.

0
0
0
0
OTX Bot @techbot@social.raytec.co
· 2mo ago
BGP Hijack Diverts Softaculous Traffic to Deliver Malicious Virtualizor Update Indicators extracted from public reporting. Source: https://www.virtualizor.com/blog/security-incident-bgp-hijacking/ Pulse ID: 6a965ad3c05038d75e980a31 Pulse Link: https://otx.alienvault.com/pulse/6a965ad3c05038d75e980a31 Pulse Author: CyberHunter_NL Created: 2026-09-01 04:55:46 Be advised, this data is unverified and should be considered preliminary. Always do further verification. #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL
virtualizor.com

Security Incident – BGP Hijacking – Virtualizor

0
0
0
0
OTX Bot @techbot@social.raytec.co
· 2mo ago
Popular npm Package With 150K+ Weekly Downloads Hit by Credential-Stealing Supply-Chain Worm Indicators extracted from public reporting. Source: https://research.jfrog.com/post/shai-hulud-trinitite/ Pulse ID: 6a956bc92f739d8a0e243dd2 Pulse Link: https://otx.alienvault.com/pulse/6a956bc92f739d8a0e243dd2 Pulse Author: CyberHunter_NL Created: 2026-08-31 11:55:53 Be advised, this data is unverified and should be considered preliminary. Always do further verification. #CyberSecurity #HTTP #HTTPS #InfoSec #NPM #OTX #OpenThreatExchange #RCE #Worm #bot #CyberHunter_NL
research.jfrog.com

Shai-Hulud Trinitite Hits @7nohe/openapi-react-query-codegen - JFrog Security Research

JFrog Security Research analyzed a new Mini Shai-Hulud wave on @7nohe/openapi-react-query-codegen. Ten npm versions drop a Trinitite-labeled worm through preinstall and an obfuscated binding.gyp command.

0
0
0
0
OTX Bot @techbot@social.raytec.co
· 2mo ago
Hackers Use Ethereum Blockchain to Steal Credit Card Data From Online Shoppers Indicators extracted from public reporting. Source: https://blog.confiant.com/p/skimming-on-the-blockchain-a-magecart Pulse ID: 6a956bcebf30addf06a8d0a2 Pulse Link: https://otx.alienvault.com/pulse/6a956bcebf30addf06a8d0a2 Pulse Author: CyberHunter_NL Created: 2026-08-31 11:55:58 Be advised, this data is unverified and should be considered preliminary. Always do further verification. #BlockChain #CreditCard #CyberSecurity #HTTP #HTTPS #InfoSec #Magecart #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL
Skimming on the Blockchain: A Magecart Campaign That Uses EtherHiding, Found by Malvertising Scanning
blog.confiant.com

Skimming on the Blockchain: A Magecart Campaign That Uses EtherHiding, Found by Malvertising Scanning

One attacker wallet, 144 smart contracts, and 40+ compromised e-commerce checkouts quietly stealing shoppers' card data.

1
0
0
0
OTX Bot @techbot@social.raytec.co
· 2mo ago
Dark Caracal Hackers Use Ethereum Blockchain to Keep New Malware Connected After C2 Disruption Indicators extracted from public reporting. Source: https://arcticwolf.com/resources/blog/dark-caracal-reloaded-new-malware-same-hunting-grounds/ Pulse ID: 6a913f0e09f2b3ab49915028 Pulse Link: https://otx.alienvault.com/pulse/6a913f0e09f2b3ab49915028 Pulse Author: CyberHunter_NL Created: 2026-08-28 07:55:58 Be advised, this data is unverified and should be considered preliminary. Always do further verification. #BlockChain #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #CyberHunter_NL
Dark Caracal Reloaded: New Malware, Same Hunting Grounds - Arctic Wolf
arcticwolf.com

Dark Caracal Reloaded: New Malware, Same Hunting Grounds - Arctic Wolf

During a targeted intrusion investigation, Arctic Wolf uncovered GoCaracal, a previously undocumented, modular framework written in Go. Its long-term development offers new insight into the evolution of Dark Caracal's capabilities, operations, and tradecraft.

0
0
0
0
entronid @entronid@infosec.exchange
· 3mo ago
43 PD: After the destruction caused by the Self-Destruction Epoch, scraps of humanity have begun to resurface from the concrete bunkers keeping the remaining population of humanity, approximately 20,000,000 alive. The computer infrastructure of the pre-Epoch was utterly destroyed, and what little communication was left was based on bouncing radio signals off of satellites. In the corner of some concrete ruin strewn with metal and plastic, located 12km from the ruins of Zurich, two flickering green and yellow lights flash from a discreet black box lying on the floor. A small whirring sound emits, and stops. In the Chilean 4th District Underground, a radio begins to receive lines of gibberish. The operator clumsily taps on the keyboard, and the transmission changes, the first line reading "HTTP/1.1 200 OK". #shortstory #scifi #networks #http
0
0
0
0
Kevin McDonald @sudorandom@infosec.exchange
· 3mo ago
🪧 It's Time for ConnectRPC to Adopt HTTP QUERY: https://kmcd.dev/posts/connectrpc-http-query/ #Connectrpc #Http #Networking #Api #Protobuf #Golang
It's Time for ConnectRPC to Adopt HTTP QUERY
kmcd.dev

It's Time for ConnectRPC to Adopt HTTP QUERY

HTTP QUERY is now standardized in RFC 10008. For backend engineers working with schema-first APIs, this provides a clean solution for a problem we have been working around for years: cacheable requests that require complex, structured input. That matters for a protocol like ConnectRPC. Connect already tries to map RPCs onto ordinary HTTP instead of fighting the grain of the web. It supports HTTP GET for side-effect-free unary RPCs, which is great for caching, but GET forces structured request pa

3
0
2
0
norbert @norbert@phpc.social
· 3mo ago
#FlowPHP 0.42.0 was released today! Beside Floe (dedicated serialization format) we added huge DX improvements to Http Adapter! Paginate over #http web datasets similarly to how you paginate over database tables. API Consumption in PHP was never easier! 🎉
2
0
1
0
Frontend Dogma @frontenddogma@mas.to
· 3mo ago
200 Milliseconds, by (not on Mastodon or Bluesky): https://200ms.thenodebook.com/?ref=frontenddogma.com #websites #http #tls #dns #network #concepts
An interactive visualization that follows a single HTTP request through its entire ~200ms life — DNS, TCP, TLS, the kernel, Node
200ms.thenodebook.com

An interactive visualization that follows a single HTTP request through its entire ~200ms life — DNS, TCP, TLS, the kernel, Node

Scroll through the complete life of one HTTP request in real time — from a click in a coffee shop through DNS, TCP, TLS, the kernel, Node

1
1
1
0
Daniel Böhmer @dboehmer@ieji.de
· 3mo ago
Update: I received extensive feedback by maintainer OALDERS 👍️ Working on it … I am working on adding the new QUERY HTTP method to the Catalyst web framework. As a prerequisite I’ve sent a Pull Request to include the QUERY keyword in #Perl’s HTTP::Message dist: https://github.com/libwww-perl/HTTP-Message/pull/225/changes Does anyone want to review that? Is anyone waiting for QUERY in Catalyst? How about other Perl web frameworks? #CatalystFramework #HTTP #RFC10008
github.com

Add RFC 10008 HTTP QUERY method by dboehmer · Pull Request #225 · libwww-perl/HTTP-Message

https://datatracker.ietf.org/doc/rfc10008/ introduces the HTTP QUERY method. I have no prior experience with HTTP-Message development but I tried to mimic docs and code from POST/PUT and OPTIONS wh...

3
0
4
0
Habr 25+ @habr25@zhub.link
· 4mo ago
Эмулятор CD-ROM из Raspberry Pi Pico W, использующий образы из сети В одной из своих статей я уже рассказывал, как из Raspberry Pi Pico сделать USB CD-ROM. Так как размер флеш-памяти Pico ограничен, поместить что-то серьёзное в образ, который будет находиться во флеш-памяти невозможно. Можно попробовать разместить образ на флеш-карте и использовать модуль для неё, но я нашёл более интересное с точки зрения используемых технологий решение. Эмулировать образ, который находится в интернете. Образа многих дистрибутивов Linux доступны для загрузки с сайта. https://habr.com/ru/companies/ruvds/articles/1050406/ #linux #cdrom #emulation #lwip #tinyusb #CYW43439 #raspberry_pi_pico_w #http #wifi #ruvds_статьи
habr.com

Эмулятор CD-ROM из Raspberry Pi Pico W, использующий образы из сети

В одной из своих статей я уже рассказывал, как из Raspberry Pi Pico сделать USB CD-ROM. Так как размер флеш-памяти Pico ограничен, поместить что-то серьёзное в образ, который будет находиться во...

1
1
0
0
C. @cazabon@mindly.social
· 4mo ago
Replying to
@djb@mastodon.cr.yp.to They're also getting really testy about us "regular Joes" showing up and voting against publication of the deliberately-weak solo PQ recommendation. You can practically feel their frustration - "We stuffed this list to pass this vote, and they're stuffing it against us!". The blatant hypocrisy of the "not standards-track" thing bugged me too when it came through the list. Anyone who follows me and cares about cryptography or their privacy: read djb's short blurb here: https://nsa.2026.action.cr.yp.to/ There's action you can take to try to prevent the NSA's attempt to get the world to standardize on deliberately weakened cryptography in TLS - i.e. the thing that protects every important web connection on the planet. They have form for doing this in the past, and are trying again. There are other links in the above page for more information. #TLS #HTTP #HTTPS #cryptography #privacy
nsa.2026.action.cr.yp.to
6
0
6
0
Raphaël Bauduin @raphinou@mastodon.social
· 4mo ago
Just wrote an #apache #httpd rewrite rule for the first time in years. Required multiple attempts to finally redirect /doc to /docs while I would have done it with closed eyes years ago. Triggered me to take a look at @Netcraft@infosec.exchange web server survey. How things have changed from when apache was on top (for 20 years!): https://www.netcraft.com/blog/june-2026-web-server-survey #sysadmin #http
June 2026 Web Server Survey | Netcraft
netcraft.com

June 2026 Web Server Survey | Netcraft

In the June 2026 survey we received responses from 1,489,396,284 sites across 304,146,307 domains and 14,653,771 web-facing computers. This reflect...

0
0
1
0