Follow
@th3j35t3r am a layman when it comes to this. i can guess its allowing bots on their network. any other harm from there?
@th3j35t3r so in other terms "hey heres something that could dump a lot of folks info if some one wanted to. oh this is the second time in two months" kinda thing?
@Silabus That's a Mastodon instance dedicated to 'InfoSec' - lots of security pros on there, many with clearances.
It has been commandered by aggressors who have installed C2 software to control a botnet.
This is the second incident in 2 months, previously it had a vulnerability whereby you could snatch any user on its password via a simple XSS inject.