The Tweep Formally Known as Quagmire retweeted
Hey @X
I’m Doug, founder of Security Onion Solutions.
I build free and open tools like:
🛡️ Security Onion: enterprise security monitoring platform
📦 SO-CRATES: single container image for analyzing pcaps, logs, and other files
🐧 OhMyDebn: Linux desktop for power users on Debian, Ubuntu, Mint, and similar
Looking to connect with people who:
🤖 use or build with AI (especially for security, analysis, or desktop tools)
🔍 do SOC, detection, or network analysis work
🛠️ care about practical open security tools
💻 run Linux desktops (Omarchy, Debian-based, Cinnamon, etc.)
What are you working on or experimenting with right now?
Drop it below. Happy to trade notes!
The Microsoft outage is affecting online bond payments for individuals being held at the Arapahoe County Detention Facility. Because of the outage, jail officials are not receiving the email notifications needed to process online bond payments. Until Outlook email is restored, anyone needing to post bond for immediate release must do so in person at the jail. We apologize for the inconvenience and appreciate your patience. For questions or additional information, please call 720-874-3500.
19
Whoa! This is pretty bad! Happened close to Sri Lanka.. Maybe it's already happening there.. And I don't know why Sri Lankan banks only support SMS 2FA 😑😏
‼️ Hackers hijacked telecom networks across Asia to intercept SMS 2FA codes and spy on mobile users.
A newly uncovered espionage group, SilentAir, compromised telecom equipment in at least 6 countries, targeting users primarily in Taiwan.
Here's how they pulled it off: thehackernews.com/2026/11/si…
2
76
Seriously?? 😂😆
Russia’s demands for NATO to roll back its eastern presence test US and European negotiating resolve, Finnish Defense Minister Antti Häkkänen said bloomberg.com/news/articles/…
11
The Tweep Formally Known as Quagmire retweeted
"The last programmer has already been born" That was a hot take from @mikko when he came on The Secure Disclosure Podcast.
Honestly I've interviewed many people.... this is the one I was most nervous about. I tried my best to play it cool.
"When the volume of change outpaces the humans who understand each change, finding the culprit gets slow and rollbacks get messy. Automate the shipping faster than you automate the understanding, and this is the bill."
Lots of hot takes on the Microsoft 365 outage. Here's an engineering one.
To be clear: this is speculation. Microsoft hasn't confirmed a root cause. It's my read of their own updates, from 35 years of building and breaking systems.
What Microsoft has actually said:
• Traffic isn't up. Capacity is down. Servers are failing health checks and dropping out.
• A process that establishes secure connections gets overwhelmed, and servers stop processing requests.
• Servers they bring back fall over again as soon as traffic hits them.
• They're reverting a network config change that lines up with when it started. But changes aren't syncing, and some machines are stuck in a bad state.
• No indication of an attack.
My hypothesis: a metastable failure.
Whatever triggered it may be long gone. The outage is now keeping itself alive.
1. Reconnect storm. Every Outlook, Teams and mobile client on the planet is hammering for a fresh secure connection.
Full TLS handshakes are CPU-heavy, and a freshly rebooted server has a cold session cache.
A server comes up, eats a wall of handshakes, CPU pegs, it fails its health check and gets pulled, and its load lands on the next one. Dominoes.
2. The fix shares fate with the failure. If the rollback travels over the same secure channel that's melting, the cure can't reach the patient.
That's exactly what "changes aren't syncing" sounds like to me.
That's why they're throttling traffic types and rebuilding servers from an older config instead of flipping a switch.
You don't get out of this by finding the bug.
You get out by shedding load, restoring capacity in isolated cells, and letting traffic back in slowly.
Where AI fits (also speculation): not "an AI wrote the bad line". It's velocity. Microsoft flagged several recent config changes as suspects and took hours to find one that correlated.
When the volume of change outpaces the humans who understand each change, finding the culprit gets slow and rollbacks get messy. Automate the shipping faster than you automate the understanding, and this is the bill.
The takeaway for every business: your email, chat, files, identity and security tooling now share one failure domain. Today proved it. Have a way to talk to your team that doesn't live in the same tenant.
Happy to be proven wrong by the post-incident review. And I hope this post ages terribly.
29
The Tweep Formally Known as Quagmire retweeted
Time for @Microsoft to pay! Make sure that your IT/Accounting Department files the claim!
The Tweep Formally Known as Quagmire retweeted
As an IT Manager who is forced to give updates to the entire company when systems are down, I have mad respect for how empty these updates are. So often we have no clue what's going on but still have to push out an update. I'm definitely incorporating this into my future comms.
Replying to @MSFT365Status
We're engaged in multiple workstreams to alleviate impact, address our current blocker, and returning portions of service infrastructure back to a healthy state. A more comprehensive update can be found at MO1550821 in the Microsoft 365 admin center, as well as status.cloud.microsoft if the admin center is not available to you.
The Tweep Formally Known as Quagmire retweeted
#budget2027 allocates Rs 1 billion for the importation or 2,000 sheep for breeding. I am hopeful that this will mean we can enjoy locally made lamb biriyani soon 🐑
"You're in no position to lecture the public about anything, you know nothing about the real world." - Ricky Gervais
Actor Hemal Ranasinghe calls for peaceful resolution to Ruwanweli Maha Seya protest
Sri Lankan actor Hemal Ranasinghe has expressed concern over tensions surrounding the ongoing fast-unto-death protest at the Ruwanweli Maha Seya premises in Anuradhapura.
Identifying himself as a Sri Lankan Buddhist, Ranasinghe warned against fuelling religious and ethnic divisions and called for a peaceful and lawful resolution through the intervention of the judiciary, government and senior Buddhist monks.
He stressed the importance of protecting religious harmony, the dignity of sacred sites and the rights of local residents, urging all parties to uphold peace, coexistence and the rule of law.
26
This Microsoft outage is a good reminder to everyone that depending on one ecosystem for everything is not a good idea maybe. Specially the cybersecurity products..
1
179





























