Friday Squid Blogging: Squid Loyalty Cards

Squid is a loyalty card platform in Ireland. Blog moderation policy...

Friday Squid Blogging: The Colossal Squid

Long article on the colossal squid. Blog moderation policy...

CVE-2025-24024

Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration components if enabled. Version 1.9.1 reverts the feature tha...

CVE-2022-39303

Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds...

Friday Squid Blogging: On Squid Brains

Interesting. Blog moderation policy...

go1.24-1.24rc2-1.1 on GA media (moderate)

go1.24-1.24rc2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14693-1 Rating: moderate Cross-References: CVE-2024-45336 CVE-2024-45340 CVE-2024-45341 CVE-2025-22865 CVSS scores: CVE-2024-45340 SUSE : 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L CVE-2025-22865 SUSE : 7.5...

CVE-2025-24024

Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration components if enabled. Version 1.9.1 reverts the feature tha...

CVE-2025-24024 Mjolnir v1.9.0 accepts commands from any room

Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration components if enabled. Version 1.9.1 reverts the feature tha...

MAL-2025-239 Malicious code in sendbird-moderation-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9be644a0fd9fb186a5e62cc024cf4fc725c0f9a3dd25aab1e25cd138dc454297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendbird-moderation-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9be644a0fd9fb186a5e62cc024cf4fc725c0f9a3dd25aab1e25cd138dc454297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Friday Squid Blogging: Anniversary Post

I made my first squid post nineteen years ago this week. Between then and now, I posted something about squid every week with maybe only a few exceptions. There is a lot out there about squid, even more if you count the other meanings of the word. Blog moderation policy...

Friday Squid Blogging: Biology and Ecology of the Colossal Squid

Good survey paper. Blog moderation policy...

MAL-2024-11452 Malicious code in sendbird-moderation-dashboard-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sendbird-moderation-dashboard-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Friday Squid Blogging: Transcriptome Analysis of the Indian Squid

Lots of details that are beyond me. Blog moderation policy...

Friday Squid Blogging: Squid Sculpture in Massachusetts Building

Great blow-up sculpture. Blog moderation policy. The post Friday Squid Blogging: Squid Sculpture in Massachusetts Building appeared first on Schneier on Security...

Azure AI Vulnerabilities Allowed Attacks to Bypass Moderation Safeguards

Mindgard researchers uncovered critical vulnerabilities in Microsoft's Azure AI Content Safety service, allowing attackers to bypass its safeguards…...

Friday Squid Blogging: Squid Scarf

Cute squid scarf. Blog moderation policy...

Squid Fishing in Japan

Fishermen are catching more squid as other fish are depleted. Blog moderation policy...

Telegram will hand over user details to law enforcement

Last month we reported how Telegram CEO Pavel Durov was indicted on charges of complicity in the distribution of child sex abuse images, aiding organized crime, drug trafficking, fraud, and refusing lawful orders to give information to law enforcement. Now, in a potentially related development,...