oddshell

I enjoy shaming infosec larpers

[oddshell @0ddshell]

puffpuffcats rocked this🥳

Thanks for the great challenges on Pre-CTF #Nahamcon @NahamSec

[Me]+ @AstroKrypTech

[Butterfly @bflycomputer]

Pond, our linux operating system, is now available for anyone to try!

Our updated website includes the installers and a detailed look at the operating system

https://t.co/PXszgKgdzK

[oddshell @0ddshell]

@f4micom When it comes to lobbying, Brussels is as bad, and for some industries, even worse then Washington, not surprised sadly.

[oddshell @0ddshell]

@SharylAttkisson too bad the video is chopped.

[BlindVia @blind_via]

University lab builds bringing you the nightmares of tomorrow.

[oddshell @0ddshell]

@ZianESmith Haha

[oddshell @0ddshell]

can't enjoy oldschool vulnerability challenges anymore, mfs use AI for everything.

[Ananda Dhakal @dhakal_ananda]

@hash_kitten @kevin_mizu Codex (GPT-5.5) solved it with 0 guidance. Just gave it access to the Chrome MCP and let it run on background!

[calle @callebtc]

I'm tired boss

[Dino A. Dai Zovi @dinodaizovi]

It's so fascinating to me how many are claiming some sort of credit for pwn2shell who *aren't* @lcfr_hax, who *actually* discovered it, exploited it, and reported it first.

Here's to the quiet ones.

[oddshell @0ddshell]

@kmcnam1 @_MG_ @Cthulhu_Answers @NetworkChuck @0dayCTF Im sorry about that honestly.

It just annoyed me at the first sight to see that two people who have also done work in this field are being attacked, especially in post-epstein files period. We really need all the help, our leaders are compromised and we are on our own rn.

[oddshell @0ddshell]

@kmcnam1 @_MG_ @Cthulhu_Answers @NetworkChuck @0dayCTF Impressive! I didn’t know you have done work in this space! Respect 👏🏼

[oddshell @0ddshell]

@kmcnam1 @Cthulhu_Answers @NetworkChuck @0dayCTF Fair point on the 5th. But I dont think 0day is “targeting” gay people, that some streched framing of the issue. Watch his Interview with Shawn Ryan, he demonstrates how he hunts predators, independent from their sexuality.

[Cloudflare @Cloudflare]

At 250 billion DNS cache entries, one wasted byte costs 250 GB of RAM.

Five Rust optimizations later: 100 TB freed, inserts 43% faster, lookups 19% faster.

We didn't trade speed for space. https://t.co/mMyOYnj0mQ

[Hunt.io @Huntio]

🎥 Operation CameraSwarm: over 14,000 Dahua cameras compromised across Ukraine and Russia

NEW RESEARCH: A single operator left their entire working directory exposed on an open HTTP server. We crawled it and recovered 2,616 files, 407 MB, the full toolkit behind a 35-day camera-compromise campaign.

The scanning ran global, but the confirmed compromises landed in 🇺🇦 Ukraine and 🇷🇺 Russia, with Ukraine holding the largest share.

What we found:

→ 14,530+ devices compromised in 35 days, the brute-force engine alone reaching 12,324 unique addresses

→ 1,923 cameras carrying a persistent backdoor account installed over RPC, surviving a password change and, on most firmware, a factory reset

→ 283 cameras reached by serial number alone through the cloud relay, most requiring no authentication to open a channel

→ A separate Windows stealer staged on the same host, unrelated to the camera activity

→ The toolkit assembled from at least six upstream developers' work, not authored from scratch

We assess with moderate confidence the toolkit was built to hand access to a third party, based on its transferable recovery-code design and enterprise-format export pipeline.

Full breakdown, indicators, and mitigations 👇

https://t.co/idNiyfhHeq

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: Journalists hid an Airtag in a rare book shipment and confirmed Amazon to be one of the buyers behind the bulk orders destroying rare-books to feed their AI.

They tracked it to Amazon's LAS8 warehouse in Las Vegas, home to VGT3 (see logo below), a scanning operation feeding Amazon's AI training data, where workers say they cut the bindings off books to scan them faster.

Amazon won't say why the books are destroyed.

[Init1Security @init1security]

DEFCON has released all slides and videos!!
https://t.co/qOh1quSnOF

[oddshell @0ddshell]

WTF, basically “Insider Trading API”

[The Kobeissi Letter @KobeissiLetter]

BREAKING: Trump Media says more than 10 customers have signed up for "Truth API" which provides faster access to President Trump's Truth Social posts.

The earliest customers are mostly high-frequency trading firms who are being charged between $60,000 and $100,000 per month.

[Shawn Ryan @ShawnRyan762]

Cybersecurity Expert Warns AI Will Be the Cyber Weapon of the Future

“It used to take us five days with two smart humans. It’s five minutes to ten minutes with AI now. It finds all paths in almost immediately. It can think, learn, and has total recall.”

“It will be the cyber weapon in the future. We’re going to end up creating models that are offense against cell phones, offense against drones, offense against Windows, deep models actively working the same way a human did, but thousands and thousands of times the speed. AI is going to be embraced by the criminal element, and we can’t withstand it unless we build it ourselves and figure it out.”

-Kevin Mandia

[oddshell @0ddshell]

It's over Arch bros

[Cybernews @Cybernews]

Arch, a major Linux distribution valued for giving users complete control and access to bleeding-edge software, has been forced to shut down all uploads to its AUR repository. Read more: https://t.co/oMnakIobO5