DigitalOcean

American technology and companies are being exploited to enable global scams, with AI tools like OpenAI’s ChatGPT and Google’s Gemini used in Southeast Asian scam operations. U.S. internet service providers, including Cogent Communications, Oracle, and AT&T, are involved in carrying traffic from scam centers linked to sanctioned entities in Myanmar. The Federal Trade Commission estimates Americans lost nearly $200 billion to such fraud in 2024.

Ozenum, a subsidiary of Instra, operated without profit for five years and used phony identities to register domains on DigitalOcean. The domain LogoInfinix.com.au was later acquired by Miroslav Warmuz after being removed from Ozenum, which was managed by Rino Brindisi and Louis Lentino.

A critical remote code execution (RCE) vulnerability in Gogs, a self-hosted Git service, remains unpatched despite being reported in March. The flaw allows authenticated users to exploit default installations, steal credentials, and execute arbitrary code. Rapid7 researcher Jonah Burgess disclosed the issue (GHSA-qf6p-p7ww-cwr9) and submitted a proposed fix, but Gogs maintainers have not released a patch, prompting a Metasploit module to be published.

Posthorn is a self-hosted email gateway designed to simplify transactional email setup for self-hosted applications. It addresses challenges like VPS SMTP port restrictions and offers features such as HTTP POST support, anti-spam measures, and integration with providers like Postmark and Amazon SES. The open-source project is available under Apache 2.0.

The article details a successful migration from DigitalOcean to Hetzner, reducing monthly costs from $1,432 to $233 while maintaining zero downtime. It highlights the technical process and cost savings achieved through this switch.