Lightnews — Scholar-powered news

The Dustin Childs @dustinchilds.bsky.social · 1d

I do call it out in my blog. I feel sorry for all the developers who are going to have to recompile/redeploy their apps. Nasty bug for sure.

1

Reposted by The Dustin Childs

Trend Zero Day Initiative @thezdi.bsky.social · 1d

It's #Microsoft's biggest monthly release ever with more than 170 CVEs addressed - including 3 0-days being exploited in the wild. #Adobe had a small release, with a few interesting items. Join Dustin Childs as he breaks down a spooky patch Tuesday www.zerodayinitiative.com/blog/2025/10...

Zero Day Initiative — The October 2025 Security Update Review

I’m currently in Cork, Ireland as we prepare for Pwn2Own Ireland, but that doesn’t stop patch Tuesday from coming. Take a break from your scheduled activities and let’s take a look at the latest secur...

www.zerodayinitiative.com

1 2

The Dustin Childs @dustinchilds.bsky.social · 1d

Come on @adobe.com - why are your security updates so late these days??!? I know I'm being impatient, but I gots blogs to publish and such! #PatchTuesday

1 1

The Dustin Childs @dustinchilds.bsky.social · 1d

There are over 170 CVEs in the #Microsoft patch Tuesday release - including three 0-days being exploited in the wild. Wow. I’ll have my full thoughts out shortly - and once Adobe posts their patches as well.

2 1 4

The Dustin Childs @dustinchilds.bsky.social · 4d

Ah Ireland - how I’ve missed ye

2

The Dustin Childs @dustinchilds.bsky.social · 14d

Hey #Wiz - congrats on starting your own contest (zeroday.cloud) but uh... did you have to cut/paste sections of the rules from @thezdi.bsky.social? Seems like you should at least run that through ChatGPT to reword it. I guess imitation is the sincerest form of plagiarism.

ZeroDay Cloud: Cloud Security Hacking Competition

Join the world's top researchers in a competition to find zero-day vulnerabilities in core open-source software powering the cloud. Put your skills to the test, win huge prizes from our $4.5M prize po...

zeroday.cloud

1 2

Reposted by The Dustin Childs

Nicholas Grossman @nicholasgrossman.bsky.social · Sep 10

Political violence is bad. It usually begets more political violence.

Celebrating political violence is bad. It usually encourages more political violence, against various targets.

Campus shootings are bad. They make everyone on campus less safe.

It's bad that what I wrote here is controversial.

520 1.8K 9.2K

Reposted by The Dustin Childs

Trend Zero Day Initiative @thezdi.bsky.social · Sep 9

No time to read the blog? Just like living walls and shrubbery? Check out the Patch Report for September 2025. @dustinchilds.bsky.social summarizes the Patch Tuesday release from the @TrendMicro Dallas office and points out the patches with extra flair. youtu.be/TIkwpdP2YAU

The Patch Report for September 2025

YouTube video by Trend Zero Day Initiative

youtu.be

2 2

Reposted by The Dustin Childs

Trend Zero Day Initiative @thezdi.bsky.social · Sep 9

It's a moderate release from both #Adobe and #Microsoft, but there's still lots to cover. Join @dustinchilds.bsky.social as he breaks down the September Patch Tuesday and highlights some fixes that require some extra attention. www.zerodayinitiative.com/blog/2025/9/...

Zero Day Initiative — The September 2025 Security Update Review

There’s a crispness in the air – at least here in North America – and with it comes the latest security patches from Adobe and Microsoft. Take a break from your scheduled activities and join us as we ...

www.zerodayinitiative.com

2 2

The Dustin Childs @dustinchilds.bsky.social · Sep 9

Microsoft patches are live. 80 CVEs with only 1 being publicly known. Still awaiting #Adobe patches....

1 2

The Dustin Childs @dustinchilds.bsky.social · Sep 3

Ralph speaks for all of us...

1

The Dustin Childs @dustinchilds.bsky.social · Sep 3

This really intrigues me. Does this inspire people to go for the $1 million prize at #Pwn2Own Ireland? Let's hope so.
---
WhatsApp, Apple warn of highly targeted attacks with zero-day vulnerability therecord.media/whatsapp-app...

WhatsApp, Apple warn of highly targeted attacks with zero-day vulnerability

WhatsApp believes the vulnerability could have been combined with a separate OS-level vulnerability on Apple devices to potentially launch sophisticated attacks against “specific targeted users."

therecord.media

1

The Dustin Childs @dustinchilds.bsky.social · Aug 22

I just realized Zed accurately predicted the #SharePoint exploits that came out of Pwn2Own Berlin. Who knew a puppet could be so president? The puppet knows things, man.... It knows... www.youtube.com/shorts/R_jo8...

Getting ready for Pwn2Own Berlin!

YouTube video by Trend Zero Day Initiative

www.youtube.com

2

The Dustin Childs @dustinchilds.bsky.social · Aug 21

Microsoft released 3 bulletins today documenting bugs they silently patched in May and June. I really wish they wouldn't do that. Anyway, check out msrc.microsoft.com/update-guide..., msrc.microsoft.com/update-guide..., and msrc.microsoft.com/update-guide...

Security Update Guide - Microsoft Security Response Center

msrc.microsoft.com

4 8

Reposted by The Dustin Childs

Trend Zero Day Initiative @thezdi.bsky.social · Aug 12

No time to read the patch blog? Just want to put it on double speed and hear @dustinchilds.bsky.social talk silly? The Patch Report for August 2025 is now available. youtu.be/agMv21gLZI8

The Patch Report for August 2025

YouTube video by Trend Zero Day Initiative

youtu.be

1 2

The Dustin Childs @dustinchilds.bsky.social · Aug 12

And just like that, Adobe drops 13 bulletins on me. Off to analyze!

1

The Dustin Childs @dustinchilds.bsky.social · Aug 12

Microsoft patches are out. 107 new CVEs, but nothing is listed as exploited in the wild. Still waiting on Adobe - again. Sigh. I'll have my full thoughts out soon. #PatchTuesday