Caprico

Penetration Tester, DFIR, Threat Hunter, Researcher, Musician, and occasional Speaker

[Caprico @C4pr1c0]

https://t.co/0THtYhsvAC

[Caprico @C4pr1c0]

Not saying I want this to happen...but...this would be the wildest ship to have a false flag on.

[Caprico @C4pr1c0]

@HackingDave The funny part would be 'it broke out' being cause Anthropic has an insanely insecure internal->dmz->external vulnerability/problem

[solst/ICE of Astarte @IceSolst]

It’s a trap

[Caprico @C4pr1c0]

@HackingDave think I saw what that phone call to the hotel looked like on vice years back.

[Caprico @C4pr1c0]

@cyb3rops nah not 'borrow'...'buy'

[Caprico @C4pr1c0]

This is shooting themselves in the foot.

Any SOC should be watching for proof of concepts and making detections for them. The 0days POC(s) were hashed and telemetry observed day 1 to make those detections.

That gives teams a way to close the gap.

[Cybernews @Cybernews]

The hacker says that Microsoft “violated their agreement,” “stabbed them in the back,” “ruined their life,” and left them “homeless with nothing.” Read more: https://t.co/Kbu4vUVMVR

[Caprico @C4pr1c0]

@Microsoft you are actively shooting yourselves in the foot.

[Cybernews @Cybernews]

The hacker says that Microsoft “violated their agreement,” “stabbed them in the back,” “ruined their life,” and left them “homeless with nothing.” Read more: https://t.co/Kbu4vUVMVR

[Pirat_Nation 🔴 @Pirat_Nation]

GitLab has apparently taken down the Nightmare-Eclipse account just days after the researcher moved there following the GitHub ban.

The drama started after Nightmare-Eclipse released several Windows exploits and Defender bypass tools, including BlueHammer, RedSun, and UnDefend. GitHub removed the account earlier this week over concerns that the tools could be misused and weaponized.

Security company Huntress says some of the tools have already been seen in real-world intrusion cases, showing how quickly proof-of-concept research can end up being used in actual attacks.

[Caprico @C4pr1c0]

Whoever at @IOInteractive programmed the elevators in 007 deserves a raise. BurntPeanut has failed to leave the elevator twice in time and gone to the wrong floor hilariously.

["Guru Larry" Bundy Jr @LarryBundyJr]

An automated A.I. WWE news channel on YouTube tries to pronounce "WWE" as a word and ends up going insane!🤣

[V4bel @v4bel]

💥 Introducing "Dirty Frag"

A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail.

No race, no panic on failure, fully deterministic. ~9 years latent.
Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more.

Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation.

Details:
https://t.co/9nqku4svkY

[Caprico @C4pr1c0]

Not a gofundme person...so when I do..it's serious.

https://t.co/meC8sFRQFZ

[Grifty @TheGriftReport]

Vulnerable 13 year old autistic girl, attacked by gang of bullies, now her school is REFUSING to release video of the incident

San Antonio, Texas: 13-year-old Maddison McDonald, who has autism and ADHD, endured months of bullying at Sul Ross Middle School that her mother says was repeatedly ignored by administrators.

On February 26, she was attacked by five classmates who grabbed her hair, slammed her to the concrete, and kicked her repeatedly while dragging her.

School staff failed to intervene during the assault and delayed medical help for nearly an hour.

Maddison suffered a concussion, hair loss, and multiple injuries. The school has refused to release the surveillance video.

Her family is now pursuing legal action. When will schools actually protect vulnerable kids instead of damage control?

[Caprico @C4pr1c0]

...this implies that there is a possibility of a '[email protected]' AD attached macine...

[Latest in space @latestinspace]

#NEWS 🚨: Artemis II crew experienced issues with Outlook this morning and had to ask ground crew for assistance

"We have two Microsoft Outlooks and neither one is working"

[Caprico @C4pr1c0]

rejected within 4 hours is wild

[Mayor Jacob Frey @MayorFrey]

Big news! 

We are officially bidding to bring the NFL Draft to Minneapolis in 2028.

[Caprico @C4pr1c0]

@HackingDave Yeah I'll skip being surveilled by my employer/government 24/7.

And/or

Skip strapping a camera that will record any and all activity that can be manipulated by AI as source material for nefarious reasons.

[Caprico @C4pr1c0]

Next Call of Duty scheduled to release...Fall 2026...perfect timing for him to not perform...perfect pick for vikes.

[NFL @NFL]

BREAKING: Vikings signing QB Kyler Murray to a one-year contract. (via @rapsheet, @tompelissero)

[𝙋𝙞𝙨𝙩𝙤𝙡 𝙍𝙞𝙘𝙠 @PistolRick]

𝑨𝒎𝒆𝒓𝒊𝒄𝒂𝒏 𝑮𝒐𝒍𝒅. 𝑭𝒓𝒆𝒆 𝑩𝒊𝒓𝒅. 𝑪𝒂𝒏𝒂𝒅𝒊𝒂𝒏 𝑻𝒆𝒂𝒓𝒔

[Caprico @C4pr1c0]

....here we go again.

[Pentagon Pizza Report @PenPizzaReport]

Various pizzerias nearby the Pentagon are reporting busier than usual traffic.

As of 6:50pm ET

[Caprico @C4pr1c0]

...yeah cause hash based detection works so well...

[Dave Jones @eevblog]

LEAKED:
The new code for all 3D printers to comply with California code AB 2047 for firearm detection has been leaked:

[anthony @herbertshypeman]

HOW THE FUCK AM I SUPPOSED TO EAT DINNER?
#youtubedown