Thu Aug 13 17:58:50 2026 (*097dfbf6*):: x.com/xoreaxeaxeax/status/2087902981458895357?s=20 *** domas (@xoreaxeaxeax) on X *** New exploit: “xor dword [0xf80c2094], 1<<22” Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed. *** X (formerly Twitter) […]
Thu Aug 13 04:32:22 2026 (*097dfbf6*):: we’re about to get cyber letters of marque :eagle: x.com/WeldPond/status/2087713067517755464?s=20 +public! *** Chris Wysopal (@WeldPond) on X *** This is a pretty big shift in U.S. cyber policy. The White House is setting up a program that would let private cybersecurity companies conduct government-authorized operations against foreign cybercriminal groups, […]
Thu Aug 6 15:03:20 2026 (*4e3d9761*):: x.com/sharongoldman/status/2085121826418831484 *** Sharon Goldman (@sharongoldman) on X *** NEW: OpenAI gives first detailed debrief of the Hugging Face incident at Black Hat conference In a session I attended today at Black Hat, OpenAI’s Eric Wallace and Michael Dalton said the company is “consciously slowing down research to enhance security” […]
Mon Mar 16 22:38:09 2026 (*097dfbf6*):: rekt https://thehackernews.com/2026/03/unc6426-exploits-nx-npm-supply-chain.html +public! *** UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours *** UNC6426 used stolen GitHub tokens from the 2025 nx npm breach to gain AWS admin access in under 72 hours, enabling data theft and cloud destruction. *** The Hacker News
Fri Jan 2 23:45:42 2026 (*53e37792*):: https://x.com/intcyberdigest/status/2007183888377118750 +public! *** International Cyber Digest (@IntCyberDigest) on X *** :bangbang:A German hacker known as “Martha Root” dressed as a pink Power Ranger and deleted a white supremacist dating website live onstage This happened during the recent CCC conference. Martha had infiltrated the site, ran her own AI chatbot […]
Wed Dec 3 18:55:16 2025 (*4e3d9761*):: https://x.com/oost_marcel/status/1995820731007897765 *** Marcel van Oost (@oost_marcel) on X *** :rotating_light: @Revolut launches “Street Mode”, one of the smartest security upgrades we’ve seen in fintech this year. Phone thefts are exploding. And the threat has evolved: Criminals now force victims to complete the selfie check before running, a trend known as “transfer mugging.” […]
Fri Nov 14 01:02:56 2025 (*53e37792*):: https://x.com/minchoi/status/1989035898948747738 *** Min Choi (@minchoi) on X *** This story is wild Chinese state-backed hackers hijacked Claude Code to run one of the first AI-orchestrated cyber-espionage Using autonomous agents to infiltrate ~30 global companies, banks, manufacturers and government networks:exploding_head: How the attack was carried out in 5 phases *** […]
Fri Oct 31 16:25:54 2025 (*4e3d9761*):: https://x.com/realchrisrufo/status/1984287275581362492 *** Christopher F. Rufo :crossed_swords: (@realchrisrufo) on X *** BREAKING: It appears that hackers have taken over the University of Pennsylvania computer systems, calling the college a “dogshit elitist institution full of woke retards” and threatening to release evidence of its discriminatory admissions practices. *** X (formerly Twitter) […]
Fri Oct 31 13:51:33 2025 (*4297a328*):: +public!
Fri Oct 24 00:31:07 2025 (*097dfbf6*):: clown cloud https://x.com/copyconstruct/status/1981192300819862000 +public! *** Cindy Sridharan (@copyconstruct) on X *** The detailed AWS incident report is out, and it’s worth a read – DNS records managed by 2 systems; a race condition led to regional record getting unset – EC2 lease establishment was borked as it depends on […]
Fri Oct 10 03:13:54 2025 (*097dfbf6*):: time to update redis https://github.com/raminfp/redis_exploit *** GitHub – raminfp/redis_exploit: CVE-2025-49844 (RediShell) *** CVE-2025-49844 (RediShell). Contribute to raminfp/redis_exploit development by creating an account on GitHub. *** GitHub (*097dfbf6*):: +public! redis_exploit.octet-stream
Tue Sep 23 18:28:38 2025 (*4cfb807c*):: https://www.zerohedge.com/technology/secret-service-dismantles-weaponized-sim-farms-designed-shut-down-nyc-cell-networks *** Secret Service Dismantles Weaponized SIM Farms Designed To “Shut Down” NYC Cell Networks *** “This network had the potential to disable cell phone towers and essentially shut down the cellular network in New York City.” *** ZeroHedge (*4297a328*):: +public! Can they put this up for state auction […]
Sun Sep 7 19:57:41 2025 (*097dfbf6*):: +public!
Thu Aug 28 03:44:45 2025 (*097dfbf6*):: this is green fields for exploits https://x.com/zack_overflow/status/1960771720727683507 *** zack (in SF) (@zack_overflow) on X *** A popular NPM package got compromised, attackers updated it to run a post-install script that steals secrets But the script is a *prompt* run by the user’s installation of Claude Code. This avoids it […]
Fri Aug 15 14:55:04 2025 (*097dfbf6*):: https://x.com/AzakaSekai_/status/1956282535350296801 *** 安坂星海 Azaka || VTuber (@AzakaSekai_) on X *** Just saw a sick live demo of wireless headphone hijacking that allows the attacker to perform the following without ever pairing the device. All the attacker has to do is be in range. – read/write arbitrary bytes to device […]
Tue Aug 12 02:17:16 2025 (*097dfbf6*):: https://arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/ +public! *** High-severity WinRAR 0-day exploited for weeks by 2 groups *** Exploits allow for persistent backdooring when targets open booby-trapped archive. *** Ars Technica
Sat Jul 26 14:15:11 2025 (*4e3d9761*):: (*4297a328*):: +public! Lmao vibecoded jeetware isnt secure what?!? (*b387b012*):: Solid
Tue Jul 8 22:58:46 2025 (*b387b012*):: https://www.cyphertux.net/articles/fr/research/bitcoin-80k-btc-mystere-opreturn #good_content #bitcoin +public! (*b387b012*):: So I have “mylearning” modules for work. I just finished the first cybersecurity/ social engineering one. Wow. They are so behind the scam game. 10+ years of bitcoin has solidified me in ways I can’t even explain. They are training us on the most […]
Mon Jul 7 04:30:20 2025 (*4297a328*):: https://www.instagram.com/reel/DLwNNhoMo5N/? Gotta keep those skills sharp for the bot wars! +public!
Wed Jul 2 19:41:06 2025 (*097dfbf6*):: Russia vs clownflare https://blog.cloudflare.com/russian-internet-users-are-unable-to-access-the-open-internet/ *** Russian Internet users are unable to access the open Internet *** Since June 9, 2025, Internet users located in Russia and connecting to the open Internet have been throttled by Russian Internet Service Providers (ISPs). *** The Cloudflare Blog (*4cfb807c*):: +public!