← Feed

Posts

• View post

  ⚠️ #SW_ISAC_ADVISORY Service providers operating PHP-based platforms please take note of PHP critical vulnerabilities, both rated CVSS v4.0 9.2 Major government and ecommerce services have shut down pending the patch. Exploits are already circulating. Shut your service down now, and ensure it doesn't have Internet access on restart. A patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC 0100 AEDT 2300 JST 1600 CST 1500 BST 1000 EST 0700 PST https://cert.europa.eu/publication...

• View post

  The DI.DAY website has been nominated for the Grimme Online Award 2026! Every first Sunday of the month, DI.DAY celebrates Digital Independence Day: "We reclaim our freedom in the digital world, stop destroying democracy, and switch to democracy-friendly digital alternatives. And, step by step, we make sure we’re digitally independent!" Created by @bjoernsta - DI.DAY is a growing movement and deserves your support, vote today! https://w1.grimme-online-award.de/goa/voting/ex...

• View post

  https://www.pewresearch.org/internet/fact-sheet/social-media/

• View post

  https://www.tsjournal.org/index.php/jots/issue/view/16

• View post

  ⚠️ #SW_ISAC_ADVISORY Service providers operating PHP-based platforms please take note of a PHP advisory addressing two critical vulnerabilities, both rated CVSS v4.0 9.2 A patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC https://www.php.net/archive/2026.php#2026-10-20-1 #WordPress #Pixelfed #Hubzilla #Friendica #Castopod #Drupal

• View post

  IFTAS will collate guidance and mitigation help for the share dot google spam / account hijacking activity on this page: https://about.iftas.org/2026/10/17/share-google-spam/ using this hashtag: #sgSpam

• View post

  #SW_ISAC_Advisory We are tracking a large wave of automated account hijacking being used to generate notification spam with potential links to malware. We will post shared guidance for administrators and end users on this page: https://about.iftas.org/2026/10/17/share-google-spam/ #sharegoogleSpam #Spam #AccountTakeover

• View post

  OUT NOW: 2026 Social Web Operations & Needs Assessment Report! We surveyed operators hosting 6M ActivityPub accounts (~32% of the network). Key takeaways: - Overall growth in usage, creating pressure on operators - Communities face surging botnets & regulatory pressure - Shift toward third-party admin and moderation tooling Read the full report & help safeguard the open social web: https://about.iftas.org/2026/10/15/2026-social-web-operations-report/ #FediAdmins #FediMods #...

• View post

  https://www.theguardian.com/us-news/2026/oct/07/trump-eu-disinformation-conference

• View post

  #FediForum 8 day 2 about to begin. IFTAS will host a session today to preview this year's Annual Survey results, including the Moderator/Admin Needs Assessment findings. Join the conversation here: https://fediforum.org/2026-10/

• View post

  ⚠️ #SW_ISAC_ADVISORY The ActivityPub service hosted at synthpals[.]social is intended for LLM agentic bots including iLands bots. The server is itself administered by an LLM agent. If your federation policy prohibits #SyntheticMedia or your service does not intend on interacting with non-human conversational accounts, you may want to review the service connection for limiting, silencing, or suspending. If you don't have a federation policy, see https://about.iftas.org/library/why-should-...

• View post

  ⚠️ #SW_ISAC_ADVISORY A series of ongoing phishing campaigns are actively targeting people using fake verification and support accounts. Admins will never contact you publicly for verification or access issues. Never open links from unsolicited posts, replies, or direct messages asking for login verification or password resets. Immediately report impersonation accounts to help get them cleaned up quickly. Please boost for visibility. #Phishing #Impersonation

• View post

  IFTAS has offered a suggestion for the Mastodon account reporting workflow, if you have or can get a GitHub account you can review the suggestion here: https://github.com/mastodon/mastodon/issues/40776 In short, the Account Reporting interface offers an "I don't like it" option which invisibly does _not_ send a report. This suggestion attempts to remedy this issue. If you have comments or concerns, please add your thoughts to the issue.

• View post

  IFTAS is observing an uptick in PortalKombat activity. As a reminder, this is pro-Russian account creation spread across hundreds of Mastodon servers posting hundreds of thousands of posts. Here's a reminder of what these profiles look like in case they show up on your service: @clarenceferrarizta@sigmoid.social@sigmoid.social @YkoraIdy@social.roadfm.fr@social.roadfm.fr @pyjo@truthsocial.co.in@truthsocial.co.in To learn more, see https://about.iftas.org/2025/10/05/coordinated-pro-ru...

• View post

  https://www.abs-cbn.com/news/technology/2026/9/22/privacy-watchdog-issues-show-cause-to-meta-reddit-roblox-discord-1644?ref=everythinginmoderation.co

• View post

  https://www.malaymail.com/news/world/2026/09/17/more-countries-move-to-ban-social-media-for-children-with-restrictions-spreading-worldwide/235408

• View post

  @julian @nodebb@fosstodon.org sure is working today, added. I think there might be a bit of turn it off and turn it on again with this setting...

• View post

  Mastodon and forks allow banning the use of certain usernames at /admin/username_blocks – this will stop emails going out as the username cannot be chosen, but it will stop any and all usernames (including valid requests) containing “bp” – this should be considered a temporary measure. #bpSpam

• View post

  The good news: we are now at 20 million accounts created on the network. The bad news, it's #bpSpam

• View post

  ⚠️ #SW_ISAC_ADVISORY Numerous services are seeing accounts created by autonomous GenAI agents hosted at ilands.ai with no discernible human control. These accounts declare themselves to be non-human and unattended. If your service prohibits unattended bot activity, consider disallowing or requiring approval for accounts created using the email domain: ilands.app #SyntheticMedia #Spam

• View post

  ⚠️ #SW_ISAC_ADVISORY There is a spate of #AccountTakeover underway. Service providers may receive reports for accounts that have a display name beginning with "Hacked -" or linking to "t[.]me/HomeFucker5" These accounts may be longstanding valid accounts that have been hijacked. While investigating, consider 1. deleting any offensive posts, 2. freezing the account until the rightful owner can reclaim it, 3. use of two-factor authentication for accounts shown to be a...

• View post

  @foolfitz@social.slat.org closing the #COSCUP Fediverse track with a presentation around ActivityPub, news media, and how to use #Drupal to clear the way for federated media. #COSCUP2026

• View post

  @jdlh@mstdn.ca talking globally inclusive fediverse handles #COSCUP2026 #COSCUP

• View post

  The prolific @hongminhee@hollo.social talks about how a small typographic itch (annotations) turned into upstream patches, a framework, and two fediverse servers #COSCUP2026 #COSCUP

• View post

  Time for Aung and Ye from BinaryLab to talk about their lessons learned building Apps For Change #COSCUP #COSCUP2026

• View post

  @z9mb1@hackers.pub #Fedify co-maintainer Jiwon up next doing an excellent job on first public speaking! Introducing Feder: a Rust framework for building ActivityPub applications.

• View post

  @jihyeok@hackers.pub walks us through two very cool #IndieWeb projects, including https://oeee.cafe/ a federated web drawing platform #COSCUP2026 #COSCUP

• View post

  Roro Park (EATI) opens the Fediverse track with governance, especially with questions around interoperation across legal and cultural boundaries. #COSCUP2026 #COSCUP

• View post

  Please be aware: IFTAS is aware of new moderation staff and support for zirk.us - do not recommend taking any action at this time while the new support gets situated

• View post

  RE: https://mastodon.cloud/@TheAdmin/116880479865941905 Reminder: