Infosec.Pub

4,856 readers
109 users here now

To support infosec.pub, please consider donating through one of the following services:

Paypal: jerry@infosec.exchange

Ko-Fi: https://ko-fi.com/infosecexchange

Patreon: https://www.patreon.com/infosecexchange

founded 2 years ago
ADMINS
1776
1777
1778
 
 

Près d'une centaine de boutiques en ligne basées sur Magento ont été compromises récemment via l'exploitation de la faille PolyShell. Désormais, les pirates exploitent ces boutiques compromises pour voler les numéros de cartes bancaires des clients à l'aide d'une simple image SVG d'un seul pixel. Voici ce que l'on sait sur ce skimmer.

D'après les chercheurs en sécurité de chez Sansec, cette nouvelle campagne serait liée à la faille de sécurité surnommée PolyShell. Découverte en mars 2026, elle affectait les boutiques d'e-commerce basées sur Magento et Adobe Commerce. En l'exploitant, les pirates pouvaient charger un exécutable malveillant sur le serveur où est hébergée l'application et ainsi prendre le contrôle de la boutique en ligne.

1779
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/lifeprotips by /u/VanshikaWrites on 2026-04-09 05:50:42+00:00.

Original Title: LPT: When applying for a job, save the job description as a PDF. Companies often take the listing down during the interview process, and having it lets you review the exact qualifications and responsibilities beforehand.

1780
1781
1782
 
 

U.S. lawmakers will try again next week to pass a resolution to halt the Iran war and force President Donald Trump to obtain ​Congress' approval for any further attacks, Senate Democratic Leader Chuck Schumer said ‌on Wednesday, hours after Trump announced a two-week ceasefire.

"Congress must reassert its authority, especially at this dangerous moment," Schumer told a press conference at his office in New York.

Trump agreed to the ceasefire ​on Tuesday, less than two hours before his deadline for Tehran to ​reopen the blockaded Strait of Hormuz or face devastating attacks on its ⁠civilian infrastructure.

Trump's threat that "a whole civilization will die tonight" prompted global concern and ​censure from Democrats, dozens of whom called for Trump's removal from office. The 1949 Geneva ​Conventions on humanitarian conduct in war prohibit attacks on sites considered essential for civilians.

Schumer called Trump's statements "unhinged" and criticized the war for failing to weaken Iran's government or rein in its nuclear ​program, while global fuel prices have risen.

1783
1784
 
 

Author: Unknown
Published on: 09/04/2026 | 00:00:00

AI Summary:
Iran’s near closure of the Strait of Hormuz has blocked shipments of critical raw materials from the Gulf. Petrochemicals, helium and aluminium are just some of the products that have not been able to reach manufacturing hubs around the world. How will our supply chains recover and can they become more resilient to global shocks?

Original: 98 words
Summary: 55 words
Percent reduction: 43.88%

I'm a bot and I'm open source

1785
 
 

Author: Mahjoob Zweiri
Published on: 09/04/2026 | 00:00:00

AI Summary:
United States President Donald Trump and Iran's Supreme National Security Council accepted a Pakistani-brokered ceasefire. The ceasefire explicitly incorporates Iran’s 10-point peace proposal. For the first time since February, ships would be allowed to pass safely through the Strait of Hormuz. Iran responded as any state controlling a critical geographic chokepoint might be expected to respond. The Strait of Hormuz was closed. An operation launched under the banner of regional security rapidly produced one of the most serious energy disruptions the global economy had experienced in decades. Iran’s 10-point peace framework, now embedded in the ceasefire agreement, merits analysis on its own terms. The proposed transit fee per vessel through Hormuz will attract criticism from the shipping industry and energy markets. That must be weighed against the cost of 40 days of closure to global commerce. The alternative — an indefinitely closed strait — was not sustainable for any party, including Iran itself. For decades, the US presented itself not merely as a military presence in the region. The Gulf states had sought to preserve stability and had no institutional voice in the decisions that led to this conflict. This dynamic raises a question that Gulf policymakers will be compelled to address in the months ahead. The declared objectives of “Epic Fury” were comprehensive. Measured against these objectives, the campaign fell short. It is too early to fully assess the long-term implications of this conflict for Iran’s internal political stability. The elimination of senior leadership figures has produced a succession dynamic whose consequences will unfold over time. What is not open to serious dispute is that the region has been structurally altered.

Original: 1322 words
Summary: 272 words
Percent reduction: 79.43%

I'm a bot and I'm open source

1786
 
 

Neue Folge Flugkopfball! Rouven und Dominik Subbe (Transfermarkt) blicken zurück auf das Wochenende der Herrenteams: Der FC St. Pauli holt ein 1:1 bei Union Berlin, Werder unterliegt Leipzig. Außerdem der Blick nach vorn: Erwischt St. Pauli den FC Bayern München zwischen den Duellen mit Real Madrid zum bestmöglichen Zeitpunkt? Und ist die Hürde 1. FC Köln ein Pflichtsieg für Werder im Keller? Dazu: Die FCSP-Frauen feiern den Einzug ins Hamburger Pokalfinale!

1787
1788
 
 

Some 39 Australian mammals have gone extinct since Australia was colonized in 1788.


From Biology News - Evolution, Cell theory, Gene theory, Microbiology, Biotechnology via This RSS Feed.

1789
1790
1791
1792
 
 

Mérida, April 8, 2026 (venezuelanalysis.com) – Energy multinational Shell is reportedly in advanced negotiations with the Venezuelan government to expand its operations in the country’s offshore natural gas fields

According to Reuters, the London-based oil and gas giant is seeking rights to exploit four major fields in Venezuelan waters near the maritime border with Trinidad and Tobago.

Shell wants to move beyond the 4.2 trillion cubic feet (tcf) Dragon field project, which it is set to develop alongside Trinidad’s National Gas Company (NGC) after receiving a 30-year license from the Venezuelan government in December 2023.

The company is currently targeting three additional fields that, together with Dragon, comprise the Mariscal Sucre project: Río Caribe, Patao, and Mejillones. The four fields represent approximately 12 tcf of reserves combined.

Shell likewise aims to accelerate operations in the 7.3 tcf Loran field, which forms part of the Loran-Manatee cross-border reservoir with Trinidad. The firm is already developing the Manatee side in Trinidadian waters, and spokespeople referred to Loran, which remains largely untapped, as an “attractive investment opportunity.”

If the deals are finalized, Shell would gain access to a combined resource base of approximately 20 tcf of Venezuelan natural gas, with plans to process it into liquefied natural gas (LNG) in Trinidadian facilities.

Shell CEO Wael Sawan stated during the late March CERAWeek conference in Houston that the company could reach a final investment decision (FID) on at least two Venezuelan projects “before the end of this year, if afforded the right fiscal and legal frameworks.” Sawan added that there is “a long way to go” before the projects launch but that he was “encouraged” by recent progress.

A primary hurdle in the current negotiations is the status of the Río Caribe and Mejillones fields, which had partial ownership stakes previously assigned to Rosneft and then transferred to Russian state-owned Roszarubezhneft in 2020. Both fields have remained largely untouched.

In a statement to Reuters, a Shell spokesperson confirmed that the Russian part-ownership is “a problem” but expressed confidence in overcoming it.

For its part, the government of Trinidad and Tobago has maintained a supportive stance toward the integration of Venezuelan gas into its domestic infrastructure. Port of Spain possesses significant idle capacity at its Atlantic LNG facility, partly owned by Shell, due to declining domestic production in recent years.

The Trinidadian Energy Chamber recently expressed optimism that the expanded Shell projects in Venezuelan waters would “boost [Trinidadian] exports and generate much-needed foreign currency.”

However, the recent negotiations have drawn internal scrutiny. Former Energy Minister Kevin Ramnarine noted that while the deals will benefit Trinidad’s LNG exports, it effectively transitions the country into a gas importer.

The acceleration of talks for natural gas concession projects in Venezuelan waters follows the January 2026 reform of the Caribbean nation’s Organic Hydrocarbon Law. The pro-business overhaul granted private corporations significant benefits in terms of reduced fiscal responsibilities and increased control over operations and sales.

In addition to offshore natural gas ventures, Shell additionally signed agreements to take over light and medium-crude projects in the Punta de Mata Division in eastern Venezuela.

For the Dragon Project, the proposed development plan involves drilling subsea wells in Venezuelan waters and tying them to the Hibiscus platform off the north coast of Trinidad. The Loran field is expected to be linked to the Manatee platform.

Alongside Shell, BP had also previously progressed in talks to exploit the Cocuina-Manakin joint field. Both energy corporations recently received US Treasury licenses to negotiate contracts with Caracas under restricted conditions.

The Nicolás Maduro government had suspended all joint natural gas projects with Trinidad in late 2025 after the Kamla Persad-Bissessar government openly supported the Trump administration’s Caribbean military build-up ahead of the January 3 military strikes against Venezuela. Maduro and First Lady Cilia Flores were kidnapped by US special forces.

Edited by Ricardo Vaz in Caracas.

The post Shell Moves to Expand Venezuela Natural Gas Operations appeared first on Venezuelanalysis.


From Venezuelanalysis via This RSS Feed.

1793
 
 

Hezbollah strongly denounces the latest Israeli strikes against Lebanese civilians, stating the attacks represent its catastrophic failure in various fronts.


From Presstv via This RSS Feed.

1794
1795
 
 

Do other Lobsters have any hunches that certain aspects of problem could be better solved by doing x, or applying y, but haven't had the time to investigate them or the confidence to rubber duck them? Hunches often create room for interesting discussions or new ways to think about problems.

1796
 
 

Hallo Zusammen! Lemmyvision geht in die nächste Runde und wie letztes Jahr wollen wir wieder für DACH / feddit.org einen Song einreichen. Die Messlatte liegt hoch, nachdem unsere Einreichung FLOMB! & Pe Krieger - #unplugtrump letztes Jahr gewinnen konnte.

Dazu soll es mehrere Phasen in feddit.org/c/lemmyvision geben, um unseren neuen ~~Gewinner~~0-Punkte-Song zu finden:

Phase 1: Songvorschläge (bis 22.04.2026)

Bis zum 22.04.2026 um 12:00 Uhr habt ihr Zeit um Vorschläge für Songs in diese Community zu posten. Dazu erstellt ihr einen seperaten eigenen Beitrag. Votet unbedingt auch eure Lieblingsvorschläge hoch.

Sollten bis zur Deadline mehr als 10 Songs vorgeschlagen werden, so gehen die 10 gültigen Vorschläge mit dem besten Hochwählis-Runterwählis Wert in die Phase 2. Bei Gleichstand wird der Song ausgewählt, der früher vorgeschlagen worden ist. Es gibt keine Begrenzung an Songvorschlägen pro Person. Sollte ein Song von mehreren Usern vorgeschlagen werden, dann gilt nur der bessere Beitrag - die Votes werden nicht über mehrere Posts zusammen gezählt.

Als gültiger Vorschlag gilt:

  1. Der Song wurde als eigenständiger Beitrag in Unser Song für Lemmy gepostet.
  2. Der Beitrag wurde bis zum 22.04.2026, 12:00 Uhr (GMT+1) in diese Community gepostet.
  3. Der Song ist in deutsch oder in einer regionalen Minderheitensprache.
  4. Der Song wurde nach dem 01.01.2025 veröffentlicht.
  5. Der Song ist kein internationaler Hit.
  6. Der Song enthält keine diskriminierenden Inhalte.

Phase 2: Songauswahl (bis 30.04.2026)

Nachdem maximal 10 gültige Songs ausgewählt worden sind, wird in einem Online-Voting unser Song für Lemmy ausgewählt. Jede Person soll dabei 1 Vote haben. Als Tool verwende ich wahrscheinlich https://tally.so/, falls es aber Gegenvorschläge gibt, dann lasst es sie mich gerne bis zur Deadline wissen. Der Song, der am 30.04.2026 um 12:00 Uhr (GMT+1) die meisten Votes bekommen hat, wird unser Lemmyvision Song! Bei Gleichstand gibt es ein erneutes kurzfristiges Voting mit den jeweiligen Songs, die restlichen Songs stehen dann nicht mehr zur Auswahl.

Phase 3: Unser Song für Lemmy steht fest (bis 03.05.2026)

Bis zur Deadline poste ich den Song stellvertretend in die Lemmyvision Song Contest-Community und registriere unseren Song als Teilnahme.

1797
1798
1799
 
 

Herts Environmental Records Centre (HERC) who curate biodiversity information for the county have just hit four million records. Read on to discover more about that milestone record and how HERC's data is used to inform decison-making in our everyday lives.

Herts Environmental Records Centre (HERC), who are hosted by Herts and Middlesex Wildlife Trust, have recently hit four million species observation records on their database, with a colourful waxcap mushroom found in a Watford churchyard being the milestone discovery.

HERC curates biodiversity information for the county, managing, collating, and updating comprehensive data on habitats, species, and sites across Hertfordshire. The information is used for local planning, conservation and research, to help users make connections between biodiversity and the world around them.

1800
 
 

Author: Alexis Caraco
Published on: 09/04/2026 | 00:00:00

AI Summary:
Rescue workers are still searching for survivors and bodies in neighbourhoods. The bombardment came only hours after a ceasefire was announced in the US-Iran conflict. Israel said the truce did not apply to its war with Hezbollah.

Original: 147 words
Summary: 37 words
Percent reduction: 74.83%

I'm a bot and I'm open source

view more: ‹ prev next ›