r0n0

[Joel Margolis (teknogeek) @0xteknogeek]

after seeing the current state of HackerOne, I decided it was time to sit down and address the elephant in the room

https://t.co/aHg7T7ds31

[JS0N Haddix @Jhaddix]

Giveaway time!

Up for grabs is 3 free tickets to our “Attacking AI” live course!

Repost and like to enter!

https://t.co/cp2y6DDxqp

[ThreatMon @MonThreat]

🚨 A significant data leak has exposed a suite of advanced cyber weapons developed by APT43, also known as Kimsuk, a North Korean state-sponsored threat group. The leaked materials, dated June 2026, include source code for backdoors, rootkits, and exploitation tools targeting critical infrastructure.

The arsenal features a C++-based backdoor with full encryption algorithms and automatic trace-hiding mechanisms designed to evade detection on victim servers. Additionally, the leak includes a rootkit capable of high-accuracy server takeovers.

Most critically, the exposure reveals three zero-day vulnerabilities in the Android Kernel, along with tools for penetrating Android phone kernels. The group also possesses a zero-day vulnerability allowing for root privilege escalation on Linux servers running the Linux 7.0 kernel.

APT43 has historically targeted financial institutions, telecommunications, and government sectors. The availability of these zero-days and exploitation tools poses a severe risk to global IT infrastructure, particularly Android devices and Linux-based servers.

#APT43 #Kimsuk #ZeroDay #LinuxSecurity #AndroidSecurity #NorthKorea #DataLeak

[José Maria @jose_9maria]

sou director executivo numa multinacional, no privado, e hoje faço greve; explico porquê:

Durante o último governo AD, eu era lead de um departamento, e vi, um a um, o resto da equipa emigrar — não foram piegas — e fiquei apenas eu. Emigraram todos.

Hoje é a mesma coisa. +

[Elorm Daniel @elormkdaniel]

Hackers exploited Zero-click vulnerability in Samsung S25 Ultra under 1 min Pwn20wn 2025 hacking Contest and earned $100,000 💀

[Ciarán Cotter @monkehack]

https://t.co/ZjCoUwbkke

[Joe Grand @joegrand]

Soon...

[castilho @castilho101]

Stealing Salesforce OAuth Tokens via the WAF: A write-up on SFRA context and escalating XSS to Account Takeover using the WAF as a gadget. Hope you enjoy it

https://t.co/vUNKbjUeWk

[Altered Security @AlteredSecurity]

Black Friday Giveaway & Exclusive Discounts

Win FREE access to:
• 1 CRTE seat
• 1 CETP seat

How to participate:
1️⃣ Like this post
2️⃣ Comment which course you’re interested in and why
3️⃣ Repost

Winners will be randomly selected and announced on December 2, 2025.
Those who’ve already availed the Black Friday offer are still eligible!

Black Friday Sale is LIVE:
• Up to 25% OFF Red Team Labs & Bootcamps
• Up to 15% OFF AltSecCON 2025 tickets

Grab your offer today: https://t.co/c9Jvl54ZC5

#BlackFriday #Giveaway #RedTeam #CyberSecurity #CRTE #CETP #AlteredSecurity

[r0n0 @0xr0n0]

@AlteredSecurity Crtp

[Alp @alp0x01]

Cloudflare has started blocking proxy tools like Burp Suite. If you encounter this error, download the “Bypass Bot Detection” extension from the BApp Store in Burp Suite. It should resolve the issue for Burp Suite.

[尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ @simps0n]

AppSec Ezine - 610th 🎃 https://t.co/KyYRdIf6kh #AppSec #Security

[r0n0 @0xr0n0]

Stealing the keys from the octopus: Exfiltrate Git Credentials in Argocd

https://t.co/ORczMGdTJ7

[r0n0 @0xr0n0]

Future Sight Group Blog Post - Exfiltration of git credentials in Argocd

https://t.co/ORczMGdlTz

[Mantas Sabeckis @ott3rly]

5 stages of hacking:
- This is impossible.
- Why am I even doing this?
- Wait... what if I try this?
- holy sh*t it worked
- I am a genius.

[7h3h4ckv157 @7h3h4ckv157]

Collection of Cyber Threat Intelligence sources from the deep and dark web

Source/Repo Link:

https://t.co/HvE6QGl6v5

[尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ @simps0n]

AppSec Ezine - 600th 🎉 https://t.co/u5AAjUs4P1 #AppSec #Security

[Dodge This Security @shotgunner101]

Defcon = Fedcon

How far the hacker culture has fallen. And while both the UN and WEF have a 2030 global agenda (literally on their websites go look) to force digital id, digital wallets, forced biometrics, internet id verification, backdoored e2e encryption, clientside scanning, algorithm + narrative control online, speech censorship laws, en masse biometrics cameras and license plate reader deployments, etc.

Hacker's literally welcoming global all encompassing surveillance with open arms....

[Hackmanac @H4ckmanac]

🚨A phishing targeting Booking[.com users swaps the “/” in the URL with the character “ん” to appear legitimate.

Nice catch, @JAMESWT_WT.