Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.
Public Key
npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Profile Code
nprofile1qqs0dpc2ln0yfq8vs5y02qcysk0pffgnp8ljf2elp7rzc54acjhcw3cpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43q408pgy
Show more details
Published at
2026-08-17T14:36:30Z Event JSON
{
"id": "fe9e964cf3819d83c43ea4e16f7a7a2caf73d18fdbc4d5d06f8dd17f99d040cc" ,
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747" ,
"created_at": 1786977390 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://cyberplace.social/users/GossiTheDog",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"Kevin Beaumont\",\"about\":\"Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.\\n\\nI have Direct Messages disabled - you can send them, but I will never receive them.\",\"picture\":\"https://cyberplace.social/system/accounts/avatars/109/387/499/752/708/037/original/a4c1cd571bcb7c2f.jpeg\",\"banner\":\"https://cyberplace.social/system/accounts/headers/109/387/499/752/708/037/original/7acb89f4ac3231c3.jpg\",\"nip05\":\"[email protected] \",\"fields\":[[\"My website\",\"https://doublepulsar.com\"],[\"Github\",\"https://github.com/GossiTheDog\"],[\"Signal\",\"GossiTheDog.1337\"]]}" ,
"sig": "a7aee7be7bf39d1e0d7f115b64a8538c704db43150714484247741baec84d7c4c823d7778564e85f3e6ea02451831062b3f7a5b52d0871007305cf07a37ee721"
}
Last Notes npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The one and only time somebody asked me for a selfie, which is good since I wouldn’t know how to fame poses 🤣 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Massive leak of credentials and secrets at thousands of orgs where developers executed LiveLLM, terabytes of creds are circulating online now. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Somebody made a movie about how it’s only legal to have sex one a year - the Purge for sex basically - and then the director cut out the sex and the nudity from the movie over concerns about the audience being too prude, then the press are too worried to write about sex and nudity when quoting him. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Microsoft have introduced limits for its engineers AI tools usage npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Well done to the US government for running an AIDS conference, AI generating the slides, and presenting the slides with every country in Africa mislabelled by said AI https://www.theguardian.com/us-news/2026/jul/30/government-map-mislabels-african-countries npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Adform, a web advertising firm, have been hacked and have been serving a supply chain attack to steal crypto https://doublepulsar.com/adform-compromised-to-serve-crypto-stealer-via-supply-chain-attack-2f1ec024f33e npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Elon Musk, an immigrant, was interviewed recently by the editor of the Economist. He said a bunch of dumb shit - for example that money wouldn’t exist in 2036, and that everybody wouldn’t have to work any more as AI would do their job for them. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont if you want to read a reddit post that causes your brain to fall out npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont America has fallen npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Microsoft are telling customers there is no ETA to resolution and they may want to review their DR plans for their SaaS services. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont It's taken several hours but Microsoft finally put impacted services on the Azure status page, prior it was showing no impacted services. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont For anybody tracking the Microsoft outages... Azure West US is the cause: npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Microsoft 365 aka Microsoft Copilot aka Office 365 has jumped off a cliff. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont OpenAI are criminally negligent when it comes to cybersecurity, and are very good at viral marketing to executives via poor and uncritical media coverage. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont In an era where companies need to become more efficient and diverse they’ve basically picked the least efficient way to do it, with the biggest risks and highest costs - because everybody else is doing it. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont This isn’t, btw, a Kevin Doesn’t Use AI rant. I use GenAI extensively for various testing things. I had access to Mythos before almost everybody. I pay for Copilot Pro+. I pay for Gemini. I AI generate terrible songs. I vibecode security scanners. My personal spend exceeds £500 this month to date. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I’m really serious about this one btw. Companies have no measurable way of knowing what employees are doing with GenAI. They’re giving Claude Code out like it’s candy and just presuming everybody is an IT power user. They aren’t. They’re converting PDFs and vibe coding garden planning tools. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce. About 99% of people can’t align a table in Word. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont LinkedIn is about to cum as an AI security vendor has documented what it believes is an AI ransomware incident they've called JADEPUFFER. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont https://www.google.com/maps/place/55%C2%B055'18.5%22N+3%C2%B009'02.9%22W/@55.9217082,-3.1507973,18z/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Update https://checkfirst.network/roska-bridge-how-a-pro-russian-ims-exploits-vulnerabilities-of-decentralised-platforms-to-spread-propaganda/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Mastodon has automatic age verification built it, no scanning your face npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont sassed by mastodon npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont “Mistakenly, we thought that by just introducing artificial intelligence and ingesting the design requirements that we had, that that would produce a high-quality product.” npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Gizmodo's serving ClickFix malware to Mac users @nprofile…w6mj https://bsky.app/profile/juliametraux.bsky.social/post/3moomipmam22i npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont So there are definitely devices which weren't in the Belsen Group post back last year, in fact almost all of them weren't. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont It’s similar to the Belsen Group thing, although that was a smaller collection of devices - prior thread npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Data looks like this, appears they validated creds too. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont An ecrime group has somehow gained access to 75k Fortinet firewall devices - dubbed Fortibleed npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The US government has intervened in a lawsuit on the side of X, saying Grok is "critical for national security" https://www.wired.com/story/doj-lawyers-argue-xai-vital-national-security-naacp-lawsuit/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Was just talking to a friend at a US technology company, they’ve had their budget reduced by 50% as the company says it wants to announce “the largest layoffs in US corporate history” to prove GenAI can replace jobs. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont It looks like Microsoft's DevOps libraries for Azure Functions might have been compromised. No statement yet but Github is nuking Microsoft's own repos. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I set up my first gaming PC running Linux in 21 years today. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I went to a 60 minute meeting this week and AI was mentioned just over 300 times, I wrote it out roman numerals like a prisoner in a velvet cave. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont this lego thing is SO dumb npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I reinstalled Arma Reforger aka Mr Bean War Simulator 5 minutes ago. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont There's an AI company where you pay them and they'll get anything you want into GenAI results via Reddit. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont An internal Microsoft strategy document says that the plan for its just-announced “Scout” personal assistant AI is to “make people addicted” to the tool before rolling out additional functionality https://www.404media.co/microsoft-wants-to-make-people-addicted-to-scout-its-new-ai-assistant-internal-documents-reveal/ npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Mythos is not great btw. Running it over a bunch of code, it’s similar findings to tools from a few years ago. It’s marketing, essentially. Viral marketing as people doing the marketing are companies and governments. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I found out my employer doesn’t have access to Mythos. I do. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont How people hacked Meta accounts recently: npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Anybody can abuse this one btw, just post bullshit on Reddit about a company supporting Israel or whatever and Google recites it. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If anybody is wondering how this keeps happening, Google pull their AI output from Reddit. Somebody posted a Reddit thread saying days have fish in them, so now Google replies saying that. Google just blindly trusts any poster on Reddit (not a joke). npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont GenAI is going great (this is real) npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Do I think the finder was acting rationally? No. Do I think Microsoft gets to decide what is criminal activity around proof of concept exploits? No. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I’m deeply uncomfortable with Microsoft attempting to weaponise their extensive law enforcement contacts to arrest people who post zero days in the products. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Watching a bunch of people get very excited about the idea of replacing their staff, when they do not understand the job those staff do, is particularly eye opening. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Engineering without measurements, Cloudflare style. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont A reminder that Cloudflare’s CEO is a world class clown. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…p9u9 that looks like you're at a press conference after breaking the world record for eating bees or something npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…kgg0 separation agreement? Are you married to work? 😅 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont OpenAI has a negative 122% operating margin and growth of usage has stopped. https://www.theinformation.com/articles/openai-held-1-billion-revenue-lead-anthropic-first-quarter npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Also - if you think 'none of our users run VSCode', check your telemetry. They do. It doesn't even need local admin rights to install. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If you want on to Microsoft's internal network, CORPNET, publish or own an existing a VSCode extension. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The great thing about BlueSky is because it’s decentralised, it never goes offline. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont This is the dumbest fucking thing I’ve read since the last AI thing. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont A reminder that one of the reasons people love AI as you can ask it to justify any dipshit idea and it'll just write whole documents about it being a great idea, write the PowerPoint decks, the Capex requests etc. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…dzml you can't on personal accounts - it's an enterprise Entra ID feature. Also, not everybody is you - the MS personal account signup directs you to install the app. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…dzml it does in MS world :D as it sends a push prompt to the authenticator app regardless npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…xvaj most companies do npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The Metaverse stuff in Teams was such a waste of time. Trend chasing a trend which never existed in the first place. With my AI avatar I used to robot dance in meetings to piss people off. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont The consequence of going passswordless: npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Regarding CVE-2026-42945 in nginx - no modern (or even old) Linux distribution runs nginx without ASLR. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I will likely be one of the first people banging the drum to patch and mitigate if any of the recent AI vulns results in serious harm. Otherwise, keep calm and carry on patching as usual. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont CVE-2026-42945 - Nginx (otherwise branded Nginx Rift) npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont CVE-2026-34486 - Tomcat npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont There's serious panic being caused by AI discovered vulnerabilities behind the scenes, where those finding them are basically using them as marketing. Automated vulnerability hype train again, basically. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont So I’ve just had a quick play with this and yes, it works. Essentially BitLocker has a backdoor. https://github.com/Nightmare-Eclipse/YellowKey npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…mej2 @nprofile…c808 @nprofile…m4cn do you have cloud protection turned on? npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont i don't even know what a kumquat is, it sounds like a transformer npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont fuck i'm gonna have to buy a kumquat npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If you enjoy watching old people fail to read the room, watch somebody try to tell students that Generative AI is the next industrial revolution: npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Vodafone were being held to ransom by some organised crime clowns. Vodafone refused to pay, good on 'em, break the cycle of crime clowns. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I have a spare room or two in my house so I’m thinking of setting up a Which Will Last Longer, Keir Stamer Or This Kumquat twitch stream. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I’m half an hour into this game and I’ve laughed out loud 5 times and had actual tingles from memories of being a kid. I’m currently frenching a boy. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Fuck it, I’m in. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Mixtape is out now. It's the highest rated game by critics of the year so far. It's basically a John Hughes movie as a game. I'm diving in tomorrow. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Always good when your EDR provider gets hit by a ransomware group. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont If you want a fun threat hunt, look at what Claude et all are doing in your company. Spoiler: dumb shit. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont me tweet from last week about the world going to shit around the time Gamestop realised it could just pretend to be a functioning mega company, so have this video with the CEO trying to explain how they'll buy eBay instead. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…44dh they're being DDoS'ed npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Meta send smart glass recordings for manual human review. When workers at a company disclosed they were viewing people having sex and such, Meta terminated the contractor's contract, with just over 1k job losses. The devices still operate the same, they just swapped the contractor after receiving regulatory questions. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Here's a question - re the Microsoft Vibing thing. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I’ve updated my write up. https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont So @nprofile…ss8w asked Microsoft about Vibing - they’ve confirmed it is a Microsoft research project. They say “We have removed the application as we review its functionality and adherence to our policies. We remain committed to responsible AI and are taking appropriate steps as part of this review.” npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont @nprofile…qznj ? npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont An attempt to hide the MS link with Microsoft Vibing on GitHub - “This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.” - the commit hiding the compliance review has been redone today without Yaoyao’s name on it.# npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Did anybody happen to the screenshot or archive the Microsoft Vibing website ( https://vibingjustspeakit.github.io/Vibing/ ) and Github ( https://github.com/VibingJustSpeakIt/Vibing/ ) showing the compliance suspension messages before they were deleted? The changes are archived on GitHub, but I'd like to document what they looked like prior to removal. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont For those who can’t read between the lines, it appears the US wiped an oil company and disguised it as a ransomware attack. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Microsoft are now trying to hide the compliance review message, by removing the download links and removing the compliance review messages on Github. https://github.com/VibingJustSpeakIt/Vibing/commit/ab8e6302543754685f85cf02e02d1d0287d2f4f0 npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Vibing has removed from Microsoft Store: npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Tokenmaxxing. Tokenmaxxing 🤣 amazing stuff. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Vibing has been suspended and downloads removed pending a compliance review by Microsoft. https://github.com/VibingJustSpeakIt/Vibing npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I have a theory about when the business world went to shit. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I withheld a load of details from the blog on this so far btw, if you're a researcher and want a laugh pull the binaries and have a look at what the MS Research team were doing and poke the backend. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”. npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont This Vibing one is a fun blog btw as every page it gets to be a bigger version of this npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlw Kevin Beaumont I just want to give the analysts at Dragos credit here for how they framed this - it's really responsible.
