My new superpower is wasting tokens on CVEs that make headlines, only to turn out to be pretty meh. Latest example MS Paint/CVE-2026-83844.
Justin Elze
Verified account This account is verified. Learn more@HackingLZ
CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
5.1K Following 76K Followers 68K Posts
Latest posts 5
If you missed it...Windows Paint Remote Code Execution Vulnerability(CVE-2026-83844)
Microsoft revised the official CVE advisory on November 7 from network/no-interaction to AV:L/UI:R, reducing the score from 8.1 to 7.0 and changing “over a network” to “locally"
Microsoft revised the official CVE advisory on November 7 from network/no-interaction to AV:L/UI:R, reducing the score from 8.1 to 7.0 and changing “over a network” to “locally"
33 years ago today, Wu-Tang Clan drop their debut album Enter The Wu-Tang (36 Chambers)
What’s the best song off this?View quoted post on X
Spent a couple more hours looking at open directories on @Huntio for people using LLMs pentest frameworks.
All I have learned is this
All I have learned is this
Many of the GitHub LLM pentesting frameworks start by firing off tools like Nmap, Nuclei, httpx, and ffuf.
None of these are particularly quiet, especially at scale. For internet facing assets, existing controls like WAFs, IPS, and rate limiting can still detect and block much of this activity.
Over time, organizations largely accepted a certain level of internet scanning as background noise. Since their custom web applications weren’t necessarily being actively targeted, many stopped putting much effort into detecting and blocking this activity.
None of these are particularly quiet, especially at scale. For internet facing assets, existing controls like WAFs, IPS, and rate limiting can still detect and block much of this activity.
Over time, organizations largely accepted a certain level of internet scanning as background noise. Since their custom web applications weren’t necessarily being actively targeted, many stopped putting much effort into detecting and blocking this activity.