Normal view

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB drives and SD cards. The flaws matter because FatFs is nearly everywhere. It ships inside the firmware that runs security cameras, drones, industrial controllers, hardware crypto wallets, and other devices built on

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and Android, and a fix is out. Bad Epoll sits in the same small stretch of kernel code where Anthropic's most powerful AI model, Mythos, recently found a different bug. The AI caught one flaw and missed

the private google sheet is still the real CRM at most small companies

i keep seeing the same pattern. the company has a CRM. the company also has a google sheet that everyone actually uses.

not because people are bad at using tools but because the sheet does three things really well: it’s fast, it’s flexible, and it doesn’t require a login.

the problem is that it doesn’t remind you to follow up. it doesn’t surface who you haven’t spoken to in two weeks. it doesn’t give you a reason to open it every morning.

so deals slip. not dramatically. just quietly.

curious whether others have actually solved this or whether the google sheet is still winning in your company too. and if you moved away from it, what actually made the difference?

submitted by /u/ForeignBunch1017
[link] [comments]

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access, recovery disruption, and ransomware execution, bringing together diverse functions under one

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the legitimate "rollup-plugin-polyfill-node" project, down to the description, repository metadata, and

Software Engineer newly HubSpot Certified coming from Zoho & GoHighLevel and looking for hands-on experience

Hey r/hubspot,

​I'm a software engineer looking to dive head-first into the HubSpot ecosystem. I recently got my HubSpot certifications, but I know that certificates only mean so much without actual hands-on experience. I'm looking for freelance, contract, or entry-level roles where I can get some real reps in.

​For a little context, my background is heavy on the systems admin and automation side. I’ve spent the last couple of years working deep in Zoho CRM (and Zoho One) as well as GoHighLevel. Because of that, I'm already super comfortable with CRM architecture, data pipelines, and automation logic—I just need to translate those skills over to HubSpot.

​To give you an idea of the technical stuff I’ve been building, here are a few recent projects and areas of focus:

​GoHighLevel & Zoho Deployments: I handled an enterprise-level deployment of Zoho One, migrating data from GoHighLevel over to Zoho and translating the automation workflows. On the GHL side, I’ve built automated customer retention and re-sign campaigns, setting up custom call dispositions that automatically trigger downstream workflows to route calls and speed up lead processing by 90%.

​AI Voice & VoIP Integrations: I love messing with telephony. I’ve built a secure, custom VoIP network using Asterisk and FreePBX on a Debian 12 Google Cloud VPS. One of my favorite setups was connecting a local Grandstream PBX system to a Vapi AI receptionist for 24/7 automated call answering, routing contact logs straight into the CRM.

​Custom APIs & Webhooks: I developed a custom Node.js - Express API on Google Cloud to fully automate order fulfillment. I also have experience working with Twilio and the WhatsApp Business API to build out automated messaging pipelines.

​Cross-Platform Data Pipelines: I used n8n workflows and custom Google Apps Script to extract data from PerfexCRM straight into a Google Looker Studio KPI dashboard. I also built a secure API integration to sync expense data in real-time between Zoho Expense and ERPNext CRM.

​Backend Scripting & Servers: I wrote custom backend logic using Zoho Deluge script to calculate contractor revenue and salaries. I’ve also programmed Bash/PHP scripts on Linux CentOS 7 to scan, detect, and automatically purge malicious code from compromised servers.

​Industry Experience:

I’ve built these types of systems across a bunch of different verticals, so I understand the specific business logic for industries like Solar/Renewable Energy, Home Services, Logistics, E-commerce, and the Peptides industry.

​Basically, I love the backend, data plumbing, and API architecture side of things. Since I'm newer to HubSpot specifically, does anyone have advice on the best places to look for agencies or partners who might need a technical guy for custom integrations or Operations Hub work?

​I'd really appreciate any tips or pointers!

submitted by /u/donmatalon876
[link] [comments]

Hubspot will sell your contacts base

Hubspot wants to monetize 'enrichment' feature by selling data you have collected to other companies. A massive red flag for me. I know enrichment tools get their base from somewhere, but the audacity... It is a no go for me, and we are moving elsewhere. Your thoughts?

"As we continue to improve our product and services, we’re making updates to our enrichment features and the choices you can make about your data. You are receiving this email because you have used HubSpot’s enrichment features.

On August 4, 2026, HubSpot is expanding its data discovery and intelligence features to bring more robust and reliable data to our customers. To power these tools, enrichment data such as business contact details, employer information, and email deliverability signals, may be shared with other customers."

submitted by /u/Admirable_Comedian_2
[link] [comments]

La gran estafa del “Emprendimiento” en Panamá: Una guillotina automática que nadie quiere aceptar.

2 July 2026 at 11:52

Hablemos transparente y sin señalar. Realidad pura.

Como muchos panameños antes de pandemia podíamos tener otros ingresos de manera informal pero exitoso, nos iba bien, ganábamos dinero extra y te manejabas tranquilo.

Pero llegó la pandemia y todo cambió porque por la necesidad de generar ingresos y sobrevivir a la falta de empleo hizo que estos servicios que te generaban ingresos extras se multiplicaran y todos terminamos haciendo lo mismo.

Los resultados no fueron para todos y bueno al final pasó lo clásico de la vida, el fuerte sobrevivió y el débil fracasó, haciendo que hoy en día esos ingresos favorables ahora sean más difíciles de generar e incluso hasta para buscar un empleo.

Este post no es para atacar a nadie es simplemente para poner sobre la mesa el clásico estereotipo del emprendimiento en Panamá, ese que ahora con el tema de Ampyme te piden legalizar, que hagas tu aviso de operación, contrates contador, pagues impuestos y demás, incluso sin tener ingresos reales, terminas pagando multas interminables por el desconocimiento e ilusión.

Si ilusión porque eso es el emprendimiento real en Panamá, un mundo de fieras de gente queriendo comerse a todo aquel que pueda, otros diciendo copia mi modelo de éxito y otros incluso queriendo obstruir el poco crecimiento que tiene alguien.

Nos llenamos la boca diciendo que somos el país con mayor emprendimientos del mundo pero la realidad es que más del 90% no sobrevive a 3 años. Emprender no siempre es ganancia, es agotador y terminas gastando más que invirtiendo mientras las comunidades de ayuda y los coaches solo sirven para enriquecerse ellos vendiéndote un libro o una asesoría que no te mueve del mismo lugar.

Los emprendimientos no pueden comprarse entre emprendimientos porque esto sería un desnivel muy propio, hay personas que venden a tres pero esa persona solo le compra a una de las tres, las ventas reales se mueven por contactos, recomendaciones y reseñas.

¿Qué opinan ustedes?

Los leo.

submitted by /u/Deep_Yard9070
[link] [comments]

Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan. "Armored Likho blends financially motivated campaigns targeting private individuals with targeted cyber espionage aimed at organizations," Kaspersky said in a technical analysis published today. "

European Parliament Member Investigating Spyware Was Hacked With Pegasus

A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the abuse of such commercial surveillance tools in the bloc. "Through forensic analysis of his device, we found that the attackers could have had

Best instantly alternative before my agency's sender rep completely tanks? Need something that handles Linkedln too

Running about 50k emails per week across client accounts. Instantly's warmup is fine but I'm hitting API limits trying to build custom reports, amd their A/B testing is basically useless support takes days to respond.

Tried Smartlead for the subsequences and webhooks. UI felt clunky and deliverability dropped even with proper warmup. Not sure if it's the tool or my setup.

Also juggling Apollo for data(bounce rates is killing me) and separate Linkedln tool. Too many moving parts.

Someone mentioned warmySender for the peer-to-peer warmup and built-in verification. $15/mo with Linkedln seats as add-ons. Haven't pulled the trigger yet.

What's your stack look like at this volume? Especially if you're managing multiple clientvdomains and need Linkedln running alongside email.

submitted by /u/Munenematters
[link] [comments]

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legitimate open-source clipboard manager. It has been codenamed PamStealer owing to its ability to

Hi guys , I am building a simple CRM , nothing complex , with a flat fee

tired of complexity of salesforce ? well I am building a simple crm where u track your customer , you manually enter and change the status , no fancy emailing or reminding you to call customer .

just a flat fee per user for 30 days

submitted by /u/Rare-Assignment-8474
[link] [comments]
❌