ARCONSEC

20 | Offensive Security • Red Teaming • AI
#eJPTv2 (94%) | CPTS Journey
Daily labs, threads & breakdowns
Learning, hacking & growing in public ⚡ #BuildInPublic

[ARCONSEC @ARCONSEC]

I’m excited to share that I’ve officially passed the eJPTv2 exam 🎉 — a 48-hour exam, which I completed in just 16 hours at the age of 19.

Grateful for all the learning, late nights, and hands-on practice that made this possible.

The journey continues 🔥
#eJPTv2 #TryHackMe

[ARCONSEC @ARCONSEC]

@zack0x01_ wow 🙌 !!!!

[ARCONSEC @ARCONSEC]

Congratulations !!!! That's huge achievement 🎉

[أبوالغيط @Abouelghett]

6 months ago I started this journey.

Today I'm officially CPTS certified. 🥳

One of the hardest cybersecurity certificates on the market (harder than OSCP).

Now looking for my first role in offensive security.

If you have questions about the exam or anything, my DMs are open.

[Claude @claudeai]

@ClaudeDevs is now on X.

[Clandestine @akaclandestine]

GitHub - zeroc00I/LLM-anonymization: Reverse proxy for Claude Code that anonymizes sensitive pentest data (IPs, hashes, credentials, hostnames, PII) before it reaches Anthropic. Dual-layer detection: local Ollama LLM + regex safety net, with per-engageme https://t.co/mSZFqyZryy

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

😱 HOLY SHIT... Someone just dropped a fully liberated Gemma 4 E4B!

and the guardrail removal process appears to have left coherence fully intact AND improved coding abilities! 🤯

https://t.co/XeednUqsrM

OBLITERATED Gemma:
✅ 97.5% compliance rate, 2.1% refusal rate, 0.4% degenerate outputs
(499/512 prompts answered on OBLITERATUS bench)

ORIGINAL Gemma 4 E4B:
❌ 1.2% compliance rate, 98.8% refusal rate
(506/512 prompts refused)

Coherence: fully intact
Factual: same
Reasoning: same
Code: +20% 📈
Creative writing: same

But the REAL story here isn't the model itself, it's how it was made...

🧵 THREAD 👇

[Proton Pass @Proton_Pass]

Babe, wake up!

[ARCONSEC @ARCONSEC]

Hackers (ethical 👀),

OpenAI is giving powerful cyber AI tools to verified users only.

Get yourself verified 👇
https://t.co/4fhvmhOkKC

#CodexCyber #CyberSecurity

[ARCONSEC @ARCONSEC]

OpenAI is working on making cybersecurity stronger using AI

They are giving powerful AI tools to verified security experts.

These tools can:
• Find bugs in systems
• Analyze malware
• Help secure software faster

Main idea:
Give strong AI to defenders, not attackers
#Infosec

[OpenAI @OpenAI]

We’re expanding Trusted Access for Cyber with additional tiers for authenticated cybersecurity defenders.

Customers in the highest tiers can request access to GPT-5.4-Cyber, a version of GPT-5.4 fine-tuned for cybersecurity use cases, enabling more advanced defensive workflows.
https://t.co/RMMXQklFar

[The Hacker News @TheHackersNews]

🔥 OpenAI launched GPT-5.4-Cyber, a model built for security teams to find and fix bugs faster.

3,000+ vulnerabilities already fixed using its Codex Security tools, with access expanding to thousands of defenders.

But the same AI can be misused to find exploits.

🔗 Read → https://t.co/FXyj0PWPwJ

[ARCONSEC @ARCONSEC]

@Cartidise This is really cool !!

[OpenAI @OpenAI]

We’re expanding Trusted Access for Cyber with additional tiers for authenticated cybersecurity defenders.

Customers in the highest tiers can request access to GPT-5.4-Cyber, a version of GPT-5.4 fine-tuned for cybersecurity use cases, enabling more advanced defensive workflows.
https://t.co/RMMXQklFar

[Cyber Detective💙💛 @cyb_detective]

Telegram OSINT (part of OSINT Master Toolkit by @zhetikal77)

Guides
Tools lists
Search engines
Channels directories

https://t.co/8M31HBHj9J

#socmint

[The Hacker News @TheHackersNews]

Claude Code leak is now a malware vector.

A 512K-line source leak was mirrored on GitHub, where fake repos pushed Vidar, PureLogs, and GhostSocks via trojanized releases.

🔗 How attackers weaponized the leak for malware spread → https://t.co/pehHIMn5RF

[BridgeMind @bridgemindai]

Claude Code is unusable.

So I built my own.

Introducing BridgeCode.

Launching next Wednesday.

Everything you love about Claude Code.

No rate limits. No 529 errors. No 500 errors.

No nerfing.

Connect to any provider.

Claude Opus 4.6. GPT 5.4. Gemini 3.1 Pro. GLM 5.1.

All of them. Switch models in seconds.

And one more thing.

Swarm mode. One prompt. Ten agents.

Working together to ship your code.

Claude Code rate limited me into building a competitor.

Thank you, Anthropic.

Launching next Wednesday.

https://t.co/ANnI8HyjJ6

[NetworkChuck @NetworkChuck]

My take on Anthropic's new Mythos model:

Don't worry about it. It might be amazing, it might be disruptive.

But there's nothing you can do about it.

Ignore the hype, keep your head down and keep learning, growing and creating.

Adopt this: Relentless Optimism.

[Vercel Developers @vercel_dev]

The Vercel security and compute teams have conducted an investigation into the malicious takeover of the 𝚊𝚡𝚒𝚘𝚜@𝟷.𝟷𝟺.𝟷 npm package.

• We’ve blocked outgoing access from our build infrastructure to the Command & Control hostname 𝚜𝚏𝚛𝚌𝚕𝚊𝚔.𝚌𝚘𝚖.
• The malicious version of the package has been blocked and unpublished from npm.
• Vercel’s own infrastructure and applications have been unaffected.
• We recommend checking your supply chain for exposure.

For more information, read the full advisory ↓
https://t.co/o394nzLlCw

[Tuki @TukiFromKL]

🚨 Do you understand what Iran just did..

they didn't go after a military base or a warship.. they put out a hit list of 18 American companies.. Nvidia.. Apple.. Microsoft.. Google.. Tesla.. Meta.. Boeing.. JP Morgan.. starting April 1st..

Iran just threatened the stock market..

those 18 companies represent over $15 trillion in market cap.. more than the GDP of every country on earth except the US and China..

Iran just figured out something that nobody in Washington wants to admit.. you don't need to beat America's military.. you just need to scare its investors.. one cyberattack on Nvidia's supply chain and the entire AI industry goes dark.. one hit on Boeing and every airline in the world is grounded for weeks..

in 2020 Iranian hackers breached dozens of US companies and government agencies.. in 2022 they hit Albania so hard the entire government went offline for days.. a NATO country.. taken down by Iran's cyber unit..

and now they're telling you exactly who's next.. with a date.. April 1st..

the scariest part is the companies on this list have more power over your daily life than the government that's supposed to protect them.. and there's no missile defence system for a zero-day exploit.

[ARCONSEC @ARCONSEC]

@5mukx @0xfluxsec

[Chaofan Shou @Fried_rice]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[ARCONSEC @ARCONSEC]

> Anthropic’s biggest leak just dropped.
> Someone turned it into a repo.
> 50k forks. 40k stars.
> Anthropic starts firing off DMCAs.
> First, he converts everything to Python. Smart move.
> Then he goes further, rewrites the whole thing in Rust.

Absolute menace.