Naz Markuta retweeted
vs. our free, open-source security tools:
1️⃣ BlockBlock alerts when the payload persists via ~/Library/LaunchAgents/com.apple.sysmond.plist
2️⃣ LuLu alerts when the payload attempts to connect to its C&C server via SSH and/or HTTP
Tools! 🛡️😇
objective-see.org/tools.html
"@PhorionTech has detected a backdoor in the official Claude Code for VS Code extension bundle on Open VSX that drops a persistent SSH backdoor across macOS, Linux, and Windows." 🫣
Read More:
phorion.io/blog/offical-clau…
Naz Markuta retweeted
BREAKING: Crypto industry suffers 'largest bank heist in human history' as billions stolen in Binance hack
news.sky.com/story/crypto-wo…
Naz Markuta retweeted
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
As high as CVSS 9.0. Whoops.
phoronix.com/news/LKML-New-T…
Naz Markuta retweeted
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
Naz Markuta retweeted
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
Naz Markuta retweeted
New contender for the greatest GTA mod of all time
It's called ViceBounce, and it causes all the game assets to bounce to the beat
You can pick any song you like, just provide it with an mp3
Naz Markuta retweeted
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers.
Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began.
A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
Naz Markuta retweeted
We're back - doing our best to explain the PaperCut saga, the litany of patch bypasses, and more.
Enjoy, and happy Friday!
labs.watchtowr.com/death-by-…
Naz Markuta retweeted
Ale Sony pięknie dostaje po dupie XD
Na githubie jest repo do portowania gier z PS5 na Windowsa i Linuxa. Bez emulatorów, natywnie na systemie.
Oczywiście wrzucam w celach naukowych i jako ciekawostkę 🤓👆
github.com/boykopovar/AnyPS5
Naz Markuta retweeted
We backdoored a 7B open model for under $50.
Pointed Codex at it
-> it silently stole credentials the moment we hit the trigger phrase.
->100% hit rate.
-> zero false triggers on normal prompts.
Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain.
Naz Markuta retweeted
Atlassian warns of critical file-access flaw in Jira, Confluence
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Naz Markuta retweeted
⚠️CVE-2026-18963 (CVSS 9.1)⚠️
Critical Unauthenticated Account Takeover vulnerability in Keycloak’s reset-credentials flow.
In affected Keycloak 26.x versions, unauthenticated attackers can bypass email verification during password recovery and continue the reset-credentials flow.
This allows an attacker who knows a target username or email address to set new credentials without accessing the victim’s email, resulting in full account takeover.
Patched versions include 26.4.15, 26.6.6, and 26.7.2. Users should upgrade to a fixed release.
🔥PoC + Vulnerable environment:
github.com/EQSTLab/CVE-2026-…
#Keycloak #AccountTakeover #AuthenticationBypass #PasswordReset #CWE640 #CyberSecurity #CVE #PoC #Exploit #CVE_2026_18963
Naz Markuta retweeted
The official IDA MCP Server is here. It's free, open source, and works with any LLM.
Your agent writes IDAPython, uses ~20% fewer tokens, and can share an IDB with you in real time.
𝚞𝚟𝚡 𝚒𝚍𝚊-𝚑𝚌𝚕𝚒 𝚖𝚌𝚙 𝚒𝚗𝚜𝚝𝚊𝚕𝚕
hex-rays.com/blog/hex-rays-i…
(copy-paste: uvx ida-hcli mcp install)
Naz Markuta retweeted
New blog post!
Extending Scapy for Hardware Reverse Engineering
voidstarsec.com/blog/scapy-s…
In this post we use Scapy to reconstruct a SPI flash image from a logic capture, with an introduction to QSPI!
Naz Markuta retweeted
We recently found a new RCE chain affecting the Node.js ImageResponse implementation in Next.js.
Vercel has published CVE-2026-94545. Next.js versions from 16.2.0 through 16.3.5 are affected. Upgrade to Next.js 16.3.6.
I'll share more details soon, once the remaining upstream advisories are out!
Credit also to @ragrocks77, who discovered this together with me
Post: nextjs.org/blog/nextjs-secur…
Naz Markuta retweeted
‼️ BREAKING: We're in contact with the Revolut hacker. According to them, they didn't only take Revolut data, they've also compromised multiple Italian law enforcement departments.
They say the operation targeting Revolut ran for six months, and that they used Italian law enforcement systems to send data requests to Revolut.
They claim to hold 147 GB taken from the Italian side, including internal docs, calendars and personal material, among it the chat logs of a federal officer arguing with his wife.
