Nurobyte 🇪🇺🥷🏼 @nurobyte

Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace JFrog published the DirtyClone exploit walkthrough Thursday; most distros still lack the fix. techtimes.com/articles/31918… #linux #kernel #Dirtyclone #exploit

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

New BitUnlocker Downgrade Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes #bitlocker #MicrosoftCorporation cybersecuritynews.com/bitunlocker-do…

Former Federal Contractor Wiped 96 Government Databases in Revenge Attack. #revenge #federal #wipe gadgetreview.com/former-federal…

Build an Autonomous AI Agent System in Under 30 Minutes #AI #Openclaw geeky-gadgets.com/openclaw-setup…

North Korean Lazarus Group has weaponized this exact class of Microsoft-signed kernel driver. It is sitting on MILLIONS of Windows PCs right now. It gives any local process full control from the deepest level of Windows. 5 lines of code. Zero validation. Your antivirus can’t stop what runs below the OS.

keyboard_arrow_left Previous keyboard_arrow_right Next

You pay Google $10/month to store your files. On Google's servers. Where Google can read them. You pay Dropbox $12/month. On Dropbox's servers. Where Dropbox can read them. You pay Apple $10/month. On Apple's servers. Where Apple can read them. Dropbox was breached in 2024. User emails, hashed passwords, API keys, and OAuth tokens were exposed. There is a tool that syncs your files directly between your own devices. No cloud. No server. No middleman. Ever. It's called Syncthing. 81,900+ stars on GitHub. Your files go directly from one device to another. Peer-to-peer. They never touch a third-party server. Not even Syncthing's. Here's what it does: → Syncs files between any number of devices in real-time. → Peer-to-peer. No central server. Your files go directly between YOUR devices. → TLS encryption with perfect forward secrecy on every connection. → Every device authenticated with a strong cryptographic certificate. → Works over LAN and internet. No port forwarding needed. → Selective folder sharing. Sync different folders with different people. → File versioning. Deleted or changed something? Roll it back. → Runs on Windows, Mac, Linux, Android, FreeBSD, Solaris, and more. → Web dashboard to monitor everything from your browser. → No account. No sign-up. Install it. Share a device ID. Done. Here's the wildest part: There is no Syncthing server. There is no Syncthing cloud. There is no company storing your data. The protocol is open and documented. There is nothing between your devices except an encrypted tunnel. Google has shut down 293 products. Dropbox has been breached. iCloud photos have leaked. Every cloud service is one policy change away from scanning everything you store. Syncthing can never shut down your files. Because your files were never on their servers. Dropbox Plus: $12/month. $144/year. Google One 2TB: $10/month. $120/year. iCloud+ 2TB: $10/month. $120/year. Syncthing: $0. Unlimited devices. Unlimited storage. Your hardware. Your files. Forever. 349 contributors. 464 releases. 5,000+ forks. Battle-tested since 2013. Run by the Syncthing Foundation. A Swedish non-profit. MPL-2.0 licensed. Open protocol. Peer-to-peer. Free forever. 100% Open Source.

Find GPS trackers using the EMR noise they make: if it works, it leaks emissions we can catch! 🚗📌🗺️🦻🔨 More details on: LinkedIn: linkedin.com/posts/dlaskov_… Substack: it4sec.substack.com/p/find-gps-tra…

搞安全渗透的注意了！据说朝鲜黑客盗取加密货币就使用了这些工具！ GitHub上有个神器叫HackingTool，一个工具集成了185+个黑客工具，覆盖20个分类——信息收集、SQL注入、钓鱼攻击、云安全、移动安全全都有。 输入/直接搜索，输入r说"我想扫描网络"它帮你推荐工具，一行命令装完，不用手动配置任何东西。搞渗透测试的人手必备。 🔗 github.com/Z4nzu/hackingt… ---------------- 全网征集AI超级个体、一人公司(OPC)真实创业案例，带项目、收入截图私信投递，优质项目及个体将在我的X同步曝光，给与流量支持，个人IP指导！

FBI Extracts Suspect’s Deleted Signal Messages Saved in iPhone Notification Database. push notifications... 🎉😱 404media.co/fbi-extracts-s…

CPUID hacked to deliver malware via CPU-Z, HWMonitor downloads. bleepingcomputer.com/news/security/…

Lazarus Group stole $7B in crypto then got caught on camera at some random football match in Russia waving North Korean flags on live TV😂. Founders, is your lead dev doxxed in there? Might wanna check 👀

ZachXBT @zachxbt

3 months ago

@CR1337 @moothefarmer TLDR: DPRK ITWs got caught via OSINT after partying in Laos on New Years a few years back by Chollima Group Source: chollima-group.io/posts/tracking…

14 71 607 361K 221

Project Glasswing Securing critical software for the AI era. #Ai #anthropic #zerodays anthropic.com/glasswing

Claude Code Found a Linux Vulnerability Hidden for 23 Years. ,💪😱 #claude #code #Linux mtlynch.io/claude-code-fo…

A Threat Actor has announced, through text and video in a Telegram group, the launch of BLACKNET-00 — the world’s most advanced and accessible ransomware builder platform. Featuring a professional dark-themed graphical interface, intuitive tabs, and real-time configuration preview, anyone — even with ZERO programming knowledge — can generate fully functional ransomware with just one click. High-risk features of the BLACKNET-00 tool include: • AES-256, RSA, and ChaCha20 encryption • Complete disablement of Windows Defender, Task Manager, and critical system controls • Advanced persistence + network/USB self-propagation • C2 server with Tor + DGA support • Anti-detection (VM, sandbox, delayed execution) • Exfiltration of passwords, crypto wallets, screenshots, and webcam footage Announced price: US$ 500. This platform democratizes ransomware, completely eliminating the technical barrier and dramatically increasing the risk of mass attacks by low-level actors. Cybersecurity professionals and organizations: immediately raise your alert level and reinforce defenses. Share to spread awareness. #CyberSecurity #Ransomware #BLACKNET00 #ThreatIntelligence #InfoSec #Malware #RansomwareAsAService #CyberThreat #ThreatActor

write down a command-line to see the help text that matches each argument. explainshell.com #shell

‼️Looks like GrapheneOS is partnering with Motorola for the first non-Pixel supported device, based on a leak from a now-deleted post. ⤵️

Open Source Intelligence (OSINT): Using Flowsint for Graph-Based Investigations Flowsint reveals hidden connections between domains, IPs, emails, and criminals. hackers-arise.com/open-source-in… @three_cube

😱 Someone has downloaded a lot of songs 😅 and they say🤣 Backing up Spotify We backed up Spotify (metadata and music files). It’s distributed in bulk torrents (~300TB), grouped by popularity. annas-archive.li/blog/backing-u… #songs #spotify #torrent

@windscribecom Happy Xmas to all of you!🎄🎁🚨💪