"Although we do not believe Gemini was used, based on the structure and content of these exploits, we have high confidence that the actor likely leveraged an AI model to support the discovery and weaponization of this vulnerability. For example, the script contains an abundance of educational docstrings, including a hallucinated CVSS score, and uses a structured, textbook Pythonic format highly characteristic of LLMs training data (e.g., detailed help menus and the clean _C ANSI color class) "
I'd set that up the second it becomes available if it were a standard protocol.
Just went through setting up internal certs on my switches -- it was a chore to say the least!
With a Cert Template on our internal CA (windows), at least we can automate things well enough!
Custom firmware and USB hubs? Valid threat. I would allow reputable vendors though.
I help define the policies at my current workplace and we block anything that isn't an hid device or purely charging (headsets, phones are blocked from mounting storage) . Also no non-computing related accessories, so no usb flash drives, mug warmers, or deskfans-sorry.
4-10 yeah, easily. Most of the markup is on senior engineer and architect time to setup a solution, which I guess is being measured against the hourly rate of a 1st/2nd line engineer in this story...
Only because of the amount of abuse performed using it...
I have fond memories rewriting sendmail.cf and mc files on BSD. Ran servers on pc hardware and mirrored hdd drives; they pushed mail like nobody's business.
If the Exchange box fell over at the weekend, sendmail would sit there patiently waiting (screaming DEFERRED silently to log) with tens of thousands of mails until it came alive again, and push them out in minutes, faster than Exchange could receive (I remember spamming #sendmail -q and you could watch the disk activity freak out on exchange ) .
Confident sendmail is best mta ever. Do the big players use something else these days?
--
Edit to add an ai poem for my favourite mta -
Sendmail is not a simple mail app
It's a mighty mail transfer agent that can adapt
It can process SMTP commands and deliver mails
To any destination that it can access
Sendmail is flexible and extendable
It can be modified to fit any goal or role
It can sort, redirect, transform, and control mails
With its intricate rulesets and macro code
Sendmail is better than MS exchange
It's more secure, dependable, and swift
It's the default MTA for many Linux systems
And it's free and open source, unlike its rival's gift