• About WordPress
    • WordPress.org
    • Documentation
    • Learn WordPress
    • Support
    • Feedback
  • Log In
  • Register

AnonymousMedia.org

  • Home
  • Headline News
  • Videos
  • History
  • File Manager
  • Activity
  • Forums
  • Scans Targeting Hospitality Applications – SANS ISC

    Scans Targeting Hospitality Applications – SANS ISC


    Earlier today, I noted an odd request showing up in our “First Seen” report:

    
    GET /PIAF-HMS/ HTTP/1.1
    Host: [redacted]
    User-Agent: Farez-Sorter/1.0
    Accept-Encoding: gzip

    This request is linked to a rather old application, a “PBX in a Flash Hospitality Management System” [1]. The last update, the addition of a license file, happened 10 years ago, and I would consider the project abandoned. However, I also noted a new vulnerability reported a couple of months ago: An SQL injection issue. A quick scan of the code shows many more, and the author does not believe in input validation at all. I am also not seeing any authentication and access control, but I have a suspicion that this code may never have been used, and may be intended more as a lab/experiment to test some Asterix PBX integration. With that, I was about to move on.

    However, looking at the somewhat odd user agent, I found a few other similar requests:

    /admin/

    /admin/config.php

    /ucp/

    /hms/

    /hotel/

    The scans started yesterday and have been continuing today. The only source IP for the scans is 94.102.49.125. This IP address is associated with IP Volume ( AS202425), which is often considered a bulletproof hoster. Hotels are often “soft targets” for attackers seeking to steal valuable personal data. In some cases, they have been compromised to launch MitM attacks against guests. The focus on PBX systems is interesting, and maybe there are some tricks that could be played on guests if an attacker can appear to call from “inside” the property.

    Please let me know if you have some insight as to what is going on here.

    [1] https://github.com/claudiopizzillo/PIAF-HMS

    —

    Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu

    Twitter|



    Source link

    09/16/2026
  • Watchdog Finds Iran War Damage to US Bases Far More Extensive Than Pentagon Says

    Watchdog Finds Iran War Damage to US Bases Far More Extensive Than Pentagon Says


    By Sharon Zhang

    This article was originally published by Truthout

    Iran has damaged or destroyed hundreds of buildings at US bases, CENTCOM has quietly admitted.

    The Pentagon has quietly admitted that Iran has struck hundreds of buildings and structures at U.S. bases across the Middle East in the six months since the U.S. and Israel launched war against the country — damage that is far more extensive than previously acknowledged by Trump administration officials.

    According to the Department of Defense Inspector General’s first report on the Iran war released on Tuesday, U.S. Central Command (CENTCOM) “reported that Iranian strikes damaged and destroyed hundreds of buildings and structures at U.S. bases in Kuwait, Bahrain, Qatar, UAE, Saudi Arabia, Iraq, Oman, and Jordan during the conflict.” CENTCOM provided this information in response to a query by the inspector general’s office.

    The military command also reported that “dozens of U.S. aircraft were destroyed or damaged” during the conflict. The report covers the period of the war up until June 30, meaning that more damage may have been done since President Donald Trump unilaterally restarted the war and ended the ceasefire agreement in July.

    In July, Secretary of Defense Pete Hegseth estimated that the war had cost $37.5 billion thus far — far lower than leaked internal estimates reportedly suggested. 

    Indeed, the Pentagon watchdog’s report acknowledges that Hegseth’s figure does not encompass costs incurred by the extensive damage done to U.S. bases. Previous reports have said that the losses to U.S. buildings and assets amount to tens of billions of dollars — potentially multiplying the cost of the war if incorporated.

    Meanwhile, as of June, the State Department reports that U.S. diplomatic facilities in Iraq, Kuwait, Saudi Arabia, and the United Arab Emirates have been struck by Iran, incurring $184 million in damages. Further, the department reports that the war has incurred $113 million largely in relation to evacuation-related expenses.

    The inspector general also reported that the U.S. approved $25.3 billion worth of weapons exports to Israel, Jordan, Kuwait, Qatar, Saudi Arabia, and the UAE in relation to emergency declarations made by Secretary of State Marco Rubio since the beginning of the year. 

    This includes $7.8 billion worth of weapons sales to Israel between January and June of this year. Despite Israel having largely withdrawn from its active role in the war, reports on Tuesday found that the Trump administration has approved an additional $2.8 billion transfer of deadly 2,000-pound bombs to Israel. That transfer is being paid for by U.S. taxpayers. 

    The reports of the extensive damage to U.S. bases come despite the Trump administration repeatedly claiming dominance in the war — with Trump administration officials having said that the war has already been won dozens of times.

    On March 3, the fourth day of the war, President Donald Trump claimed that the U.S. and Israel had completely destroyed Iran’s air and naval capabilities in its initial round of strikes. “They have no navy — it’s been knocked out. They have no air force; it’s been knocked out. They have no air detection — that’s been knocked out,” Trump said. Later that week, he also said that the U.S. has destroyed “every plane” in Iran’s air force and depleted “most of their missiles.”

    These losses come on top of the casualties among the U.S. military of the war thus far. According to the report, 18 U.S. soldiers have been killed, while 417 have been injured. The Pentagon has faced accusations of covering up these casualties amid uneven and strange reporting practices by the military. The Trump administration has also outright downplayed the deaths; earlier this month, Trump said that the U.S. casualties are “small potatoes” in comparison to past wars.


    This article was originally published by Truthout and is licensed under Creative Commons (CC BY-NC-ND 4.0). Please maintain all links and credits in accordance with our republishing guidelines.





    Source link

    09/16/2026
  • Georgia’s Anti-Vulgarity Laws Target Opposition

    Georgia’s Anti-Vulgarity Laws Target Opposition


    Zurab Chitaia, a Georgian business owner, appeared before a judge in Tbilisi over a post on his personal Facebook page on Sept. 7. The post is a stream-of-consciousness complaint about domestic politics, mostly aimed at Georgia’s opposition, accusing its leaders of weak planning and ineffectual action. A brief postscript directed “fuck their lot” at the ruling Georgian Dream party, collectively.

    Investigators from the interior ministry stepped in, despite the lack of a complaint from any injured party. Police monitors read his posts, wrote up charges, and decided that public order had been violated. The judge quickly found Chitaia guilty and fined him 3,000 Georgian lari, roughly $1,100, and warned Chitaia that a repeat offense could bring 20 days in administrative detention.

    Zurab Chitaia, a Georgian business owner, appeared before a judge in Tbilisi over a post on his personal Facebook page on Sept. 7. The post is a stream-of-consciousness complaint about domestic politics, mostly aimed at Georgia’s opposition, accusing its leaders of weak planning and ineffectual action. A brief postscript directed “fuck their lot” at the ruling Georgian Dream party, collectively.

    Investigators from the interior ministry stepped in, despite the lack of a complaint from any injured party. Police monitors read his posts, wrote up charges, and decided that public order had been violated. The judge quickly found Chitaia guilty and fined him 3,000 Georgian lari, roughly $1,100, and warned Chitaia that a repeat offense could bring 20 days in administrative detention.

    “The entire process is pure bureaucratic theater,” Chitaia said. “Is it simply not allowed to use curse words on Facebook? Did I insult anyone in particular, or what?”

    His summons is part of a national campaign that has turned Georgia’s courts into enforcers of speech control. In February, the Georgian parliament adopted amendments to Georgia’s Soviet-era Code of Administrative Offenses and added provisions punishing verbal insults, swearing, taunting, and other offensive acts directed at political officeholders, civil servants, and public employees. A first offense carries a fine of between 1,500 and 4,000 lari or up to 45 days in administrative detention. A repeat offense can bring a fine of up to 6,000 lari or between five and 60 days behind bars.

    In Georgia, the state-led campaign against insults and social media speech forms one layer of a larger democratic collapse. Since the disputed October 2024 parliamentary election and the government’s suspension of its drive toward European Union accession talks, tens of thousands of protesters have taken to the streets, and activists, journalists, and politicians have faced detention, fines, or prosecution.

    Dozens of protest participants have received prison sentences. Masked groups have attacked opposition politicians, activists, and journalists near homes and offices. Investigations have yielded little accountability. Major opposition leaders have been jailed, pushed into exile, or placed under criminal investigation. Georgian Dream has also moved toward banning its principal rival parties.

    The government’s attempts to police online speech have occasionally produced the opposite effect. This month, the interior ministry brought an administrative case against blogger Tornike Razmadze after he swore at Kremlin propagandists Margarita Simonyan and Vladimir Solovyov. Razmadze faces a fine of up to 3,000 lari or 20 days in detention. In response, Georgians began posting insults against Simonyan across social media, daring the authorities to prosecute them all.

    The new policy is another part of an increasingly comprehensive authoritarian state, albeit one that still tries to maintain the appearance of democracy. Vulgarity alone can place a citizen before a judge. In June, the interior ministry added a new enforcement arm, a 10-person Division for Combating Hate Speech. Its mandate includes monitoring public statements and proactively identifying language that “insult[s] human dignity” or shows signs of an administrative offense.

    During its first month, the unit identified 170 alleged violations and sent 150 cases to court. Judges had issued decisions in 33 cases by July 1, producing 31 fines and two warnings. Officers now read social media accounts, collect screenshots, and bring citizens to court over heated language.

    Government officials justify the crackdown as an essential moral campaign to cleanse Georgia’s political environment of what they describe as toxic hostility. Prime Minister Irakli Kobakhidze has framed verbal abuse not as protected expression, but as a deliberate weapon used by political enemies to destabilize the country. He maintained that the state has an obligation to act “without double standards” and penalize all sides equally in order to “completely eradicate hate speech” from Georgian society.

    The strange logic resulted in one case in Zestaponi, a city in western Georgia, where a court held a hearing over an insult directed at Tamar Chergoleishvili, a leader of the opposition Federalists party. A local resident, Avtandil Chulukhadze, had posted a rude comment about her online.

    Chergoleishvili said she had no idea the comment existed and learned of the case when reporters sought her reaction. Regional authorities nevertheless brought Chulukhadze before a judge. He apologized and received an official warning.

    “We are living in an Orwellian dystopia,” Chergoleishvili said. “People unknown to me gathered in a regional court and were made to apologize to one another for insulting me, something I had never even heard about, much less complained about. It is good that the poor person was spared a fine and that repentance alone was deemed enough,” Chergoleishvili added. “But taxpayers’ money was still spent on this farce. Most importantly, this is fundamentally absurd and is being done solely to silence critics of the regime. That person, unknown to me, is merely collateral damage.”

    Chergoleishvili has experienced the same machinery as a defendant. Courts have fined Chergoleishvili a total of 11,500 lari, about $4,400, for posts insulting Georgian Dream officials and, in one case, a private citizen she said she did not know.

    Cases involving opposition figures allow Georgian Dream to claim evenhanded enforcement. Mikheil Zakareishvili, a lawyer representing eight defendants, said courts routinely ignore legal thresholds. Public-swearing charges require evidence that public order was disturbed, while insults against police or officials must relate to their official duties. “In none of the hearings were those elements established. They were not even discussed,” Zakareishvili said. He said the authorities pursuing people who insult opposition figures creates an appearance of balance. “Those defendants receive mild penalties, while our side, with very rare exceptions, receives the maximum fine or imprisonment,” he noted.

    In some cases, profane comments on social media have resulted in jail time. Giorgi Akhobadze received both a fine and a prison sentence within the same month. In early July, a court fined the physician and anti-government activist 3,000 lari for a profane Facebook comment aimed at members of a pro-government group advocating Georgian neutrality. Weeks later, authorities combined social media posts insulting the prime minister and other Georgian Dream officials with insults Akhobadze directed at police employees during telephone calls. On July 24, Judge Manuchar Tsatsua sentenced him to 25 days in administrative detention.

    “I expressed my anger verbally. That was it,” Akhobadze explained. “They watch my profile, but when people curse at me from their side, they have no reaction to that.”

    The government recently received unexpected help from an institution that many Georgians regard as their final protection against state abuse, the European Court of Human Rights. In December 2022, delivery courier Irakli Miladze posted a TikTok video about Tbilisi’s transport policy and the privileges enjoyed by government vehicles. Miladze cursed Tbilisi Mayor Kakha Kaladze, city hall employees, and police who failed to enforce traffic rules. The video attracted more than 100,000 views. Georgian courts fined Miladze 500 lari for disorderly conduct and claimed it constituted personal abuse.

    With support from the Georgian Young Lawyers’ Association, Miladze appealed to the European Court of Human Rights. He argued that the fine violated Article 10 of the European Convention, which protects freedom of expression. In May of this year, the court unanimously ruled in Miladze v. Georgia that the fine complied with the convention. The judges accepted the Georgian courts’ distinction between forceful political criticism and hostile personal denigration. They emphasized Miladze’s sexually explicit language, the video’s reach, and TikTok’s young audience. The minimum fine, they concluded, was proportionate. Government outlets presented the Strasbourg ruling as a victory and proof that the new restrictions were legitimate safeguards against abuse rather than political repression.

    “The government propaganda seized on the Strasbourg decision right away,” Miladze said. “It indeed restricts freedom of expression. I was talking about the systemic injustice that exists in the country, about how high-ranking officials use privileges, break the law, and face no enforcement. … But what can be done here when a criminal syndicate is basically running the country?”

    Across the post-Soviet space, Strasbourg has long served as a court of last resort for people seeking justice after domestic courts failed them. The Miladze ruling now offers other authoritarian governments policing speech a Strasbourg judgment they can cite to defend penalties for offensive political expression. By U.S. constitutional standards, most of these cases would struggle to survive First Amendment scrutiny. Vulgar criticism of government officials generally remains protected unless it amounts to a true threat or incitement. But the European Court thought otherwise.

    A decade ago, Georgia ranked as the democratic leader of the South Caucasus, with competitive elections, media, and a national consensus around integration with the West. Today, the country is moving through the familiar stages of authoritarian consolidation at remarkable speed.

    Yet despite the pervasive legal threats, heavy penalties, and state watching, public resistance endures. “I hold the same view: fuck them,” Miladze said with laughter, risking yet another fine.



    Source link

    09/16/2026
←Previous Page
1 … 5 6 7 8 9 … 1,155
Next Page→