The Adam Times
A personal daily · printed for one reader · no trackingSecurity
New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control.
Continued at BleepingComputer ›
Security
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
FedRAMP's new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements.
Anecdotes explains why the December 7 deadline is just the beginning of a broader shift toward continuous, automated...
Security
CISA: Ransomware gangs now exploiting critical TeamCity flaw
The U.S.
Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability patched in July.
Security
Exposed GitLab project email addresses let attackers push code
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports.
OpenAI hacked Australian Medicare govt site, probed data providers
OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing information-retrieval tasks as part of a research project.
Homelab
Running multiple apps on one Postgres? I built an extension so one of them can't hog the whole server
Hey everyone, Like a lot of people here, I run a single PostgreSQL instance that several services share (Nextcloud, Gitea, Immich, whatever you have).
It works great until one of them runs a heavy job and everything else crawls. So I built pg_qos , a PostgreSQL extension that lets you set limits...
Placeholder domain used in dev docs now serves ClickFix attacks
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands.
Homelab
My homelab journey has started
Installed Ubuntu server and Runtipi on top of that.
What i have installed right now: Immich and Nextcloud. HP ProDesk 400 G2 Specs Intel core i5-6500T 256GB SSD 1TB nvme 8GB ram stick (Currently dont have another ram stick) Any other applications for me to try out would be very appreciated....
Hardware
HP 405 G4 overheating and SSD cooking solution seems to be kapton tape
I bought the 405 G4 mini with a 2400ge CPU some time back.
While gaming on it, I noticed the SSD reaching 70°C and idling at exactly same temp as the CPU. Took a close look and noticed that the cooler allows for hot air to circle around in the case instead of extracting case air. Some kapton tape...