ABDO10

Get moving men

[International Cyber Digest @IntCyberDigest]

Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time.

His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with.

"If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri

He loved Microsoft.

I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him.

They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below.

According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again.

Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence.

So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case.

All while Abdel was releasing zero-days.

Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000.

He says Microsoft refused to reveal any details about the security breach and went another direction.

If you are reading this, and you can offer him a LEGAL job, this is his e-mail: [email protected]

[General Intels Daily @intels_daily]

🟠 𝗛𝗜𝗚𝗛 · 𝗗𝗯 𝗹𝗲𝗮𝗸

🏢 Target: 𝗠𝗶𝗻𝗶𝘀𝘁𝗿𝘆 𝗼𝗳 𝗡𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗗𝗲𝗳𝗲𝗻𝘀𝗲 (𝗔𝗹𝗴𝗲𝗿𝗶𝗮)

A database leak containing sensitive military personnel data from the Ministry of National Defense of Algeria has been posted. The data includes personal information such as names, ranks, identification numbers, blood types, engagement dates, addresses, functions, and family details.

#DataLeak #DataBreach #ThreatIntel #CTI

[ABDO10 @ABDO10_dz]

@DarkWebInformer Also another lol
Clearnet: https://t.co/Xb8A3Z6v1P
🧅 Onion: …https://t.co/I5JhcCG2us

[ABDO10 @ABDO10_dz]

https://t.co/J2mbPMdCU3
OpenGDS, open src reverse engineering tool, decompiler for the #godot 4.x, #gdscript , #GDSC version 101 bytecode with nice other features

[Daily CyberSecurity @Daily_CyberSec]

Researcher releases PoC exploit code for EventLogin, a TOCTOU flaw in Windows MS-EVEN RPC allowing remote file writes. Patch now.
https://t.co/BT94wqKe09

[0xMarioNawfal - The Roundtable Show @RoundtableSpace]

CYBERSECURITY IS ABOUT TO CHANGE FAST.

Someone just open sourced an autonomous AI red team made of multiple agents that coordinate with almost no human input.

[ℏεsam @Hesamation]

if you want to learn LLMs better than anyone else, implement them in C and watch this video before you do.

[GuidedHacking @GuidedHacking]

🕹️ Defeating Memory Integrity Checks

Learn how to find the specific comparison functions that validate code segments and how to manipulate the return values to bypass the protection entirely.

👉 https://t.co/llakcjl5DR

[ʞʞıdɐɔoɥƆ @Chocapikk_]

CVE-2026-21858 + CVE-2025-68613: n8n Ni8mare - Full Chain Exploit

Unauthenticated to Root RCE:
- LFI via Content-Type confusion
- Read /proc/self/environ to find HOME
- Steal encryption key + database
- Forge admin JWT token
- Expression injection sandbox bypass
- RCE as root

CVSS 10.0

https://t.co/ztHv10BRLw

[Yuval Avrahami @yuvalavra]

We hacked the AWS JavaScript SDK, a core library powering the entire @AWScloud ecosystem - including the AWS Console itself 🤯

How did we do it? Just two missing characters was all it took.

This is the story of #CodeBreach 🧵👇

[0xor0ne @0xor0ne]

Reverse engineering and security analysis of an ESP32 based IoT device (2024 blog post)

https://t.co/cNosfyrJy6

Credits @jmswrnr

#esp32 #cybersecurity

[Florian Hansemann @CyberWarship]

''CimFS: Crashing in memory, Finding SYSTEM (Kernel Edition)''

#infosec #pentest #redteam #blueteam
https://t.co/qrm8FYDaeO

[GuidedHacking @GuidedHacking]

🧨 Load Unsigned Drivers with Vulnerable Ones
🧬 Map Physical Memory Using ZwMapViewOfSection
🧠 Inline Hook System Calls To Invoke Kernel Functions
👉 https://t.co/C380jWj2hb

[ABDO10 @ABDO10_dz]

@0xor0ne Hmm uart connect

[0xor0ne @0xor0ne]

Reverse engineer payment card terminals (Worldline Yomani XR terminal)

https://t.co/C9KN0osqxM

#embedded #reverseengineering

[ABDO10 @ABDO10_dz]

My advanced src codes scanner includes AI deep scanning with localized deepseek-coder on GitHub now https://t.co/z9kT6ZDkb6
#9orsana #ABDO10 #security

[Mohit Mishra @chessMan786]

Monolithic Kernels vs Microkernels

[zhassulan zhussupov @cocomelonckz]

https://t.co/opmpyc3azC next one in my blog. next in the macOS hacking series. used by #apt34 and #apt10 #cybercrime

#hacking #malware #macos #programming #redteam #blueteam #purpleteam #research #injection #book #maldev #malwareanalysis #blackhat

[Smukx.E @5mukx]

Playbook Hunting Chinese APT
an Chinese APT TTPs and LOLBAS Operations

https://t.co/zuNeEK3lmX