NCT

We deliver cutting-edge cybersecurity solutions designed to protect your digital landscape

[Nicolas Krassas @Dinosn]

A 100% offline, fully portable, zero-trace AI (Ollama + Llama 3 + AnythingLLM) that runs natively from a USB drive on Windows and Mac. https://t.co/vmUJkE2vX1

[David Hendrickson @TeksEdge]

❓ Is dual RTX-3090 rig worth $4K for home inferencing?

🔹 2× RTX 3090 GPUs in one PC with shared mem
🔹 + NVLink bridge for best performance
🔹 Gives effective 48 GB VRAM via tensor parallel (TP=2)

✅ Memory is pooled for large models (70B+ Q4/Q5)
✅ vLLM / llama.cpp / ExLlamaV2 split & run across both
❌ 4090 & 5090 lack NVLink → slower PCIe-only multi-GPU

Still a top value local LLM rig in 2026.

[Ahmad @TheAhmadOsman]

New hardware from Framework / AMD

Max+ 395 - 128GB Desktop PC

- 16-core/32-thread , 64MB L3 Cache

- 3.0GHz, up to 5.1GHz max boost

- 128GB LPDDR5x-8000

- Radeon™ 8060S Graphics

- Wi-Fi 7, 5Gbit Ethernet

Putting it together now, more pics soon

[0xor0ne @0xor0ne]

Reverse engineer and get full root access on the TP-Link Tapo C200 (2025)

https://t.co/bZs0gVGO5L

Research by @qkaiser

#infosec

[How Things Are Manufactured @fastworkers6]

I respect the silent Chinese marketing

[John Ombagi @johntroony]

The company behind Pokemon go (Niantic) was a geospatial mapping company. It crowd sourced geolocation data with few meters precision that would have cost them millions or billions of USD to do it by themselves. In fact, people paid to participate in the game (data collection).🧵

[NCT @CoreNoort]

@0x0SojalSec 3 Billion USD is an overstatement but the point is clear.

[Alex Cheema @alexocheema]

people are now sequencing their DNA at home, locally on DGX Sparks and Mac Studios.

this madlad is running Evo 2, a 40B‑parameter DNA LLM that predicts genome sequences instead of text.

local AI is going to unlock a world of creativity. @karpathy’s personal computing v2 is here.

[Ivan Kuleshov @Merocle]

Solution for connecting the Spark to a laptop via USB-C (kinda)
GitHub:
https://t.co/va9lRiN6rt
Article about:
https://t.co/5jBzYcoBIa

[DirectoryRanger @DirectoryRanger]

Microsoft Entra Agent ID: A Practical Guide to Blueprints and Agent Identities
https://t.co/eYlIUUQEOs

[Tom Dörr @tom_doerr]

Affordable hardware hacking kit

https://t.co/H0bgZUPeNQ

[TheCyberPatronNetwork © @TheCyberPatron_]

𝗙𝗿𝗲𝗲 𝗦𝗜𝗘𝗠 𝗧𝗿𝗮𝗶𝗻𝗶𝗻𝗴𝘀

✅ Microsoft Sentinel
📎 What is Microsoft Sentinel – https://t.co/WM1y9nQoib
📎 Microsoft Sentinel Level 400 Training – https://t.co/9NZLGR4GAA
📎 SOC 101 – https://t.co/3RUpdukXm9

✅ Other SIEM Platforms
🔹 FortiSIEM – https://t.co/mxNw0FLRwC
🔹 AlienVault OSSIM – https://t.co/mCgM0NZdU5
🔹 LogSign – https://t.co/Sz59sU8PeJ
🔹 Exabeam Fusion SIEM – https://t.co/y2kKZo1ryk
🔹 Devo SIEM – https://t.co/trLJwQaCFc
🔹 Rapid7 InsightIDR – https://t.co/Z71LZxxWmt
🔹 Chronicle Security (Google Cloud) – https://t.co/3H53RsJ7YX

[Panos Gkatziroulis 🦄 @ipurple]

ExportHider - Generating Export Table during Runtime to Hide the Exported Functions from the DLL File. https://t.co/NGjvE4xwFi

[inversecos @inversecos]

NEW XINTRA COURSE!!!🥳
Windows Kernel: Offensive, Defensive & Reverse Engineering by @Idov31

https://t.co/3qiJyib7ro

Build an EDR and rootkits from scratch while mastering the Windows kernel.

Over 70 videos and labs covering:
> Build your own EDR (detection + prevention)
> Rootkits & offensive tradecraft
> Reversing Windows kernel & drivers
> Kernel callbacks, ETW, minifilter and more

There are preview videos too if you wanna see some snippets of the course content ;)

This course is instructed by Ido Veltzman (@Idov31), a senior security researcher specializing in reverse engineering, operating system internals, vulnerability research, and exploit development.

His work spans UEFI, hypervisors, kernel, and user mode, where he has developed advanced evasion, persistence, and injection techniques.

@XintraOrg

[Dinesh Shetty @Din3zh]

How Codex rooted a Samsung TV https://t.co/oYNDVigN1X #AndroidSecurity #MobileSecurity

[🕳 @sekurlsa_pw]

https://t.co/8QEJfYjSHm

“NTLM HTTP relay tool with SOCKS proxy for browser session hijacking.

1️⃣Capture NTLM auth,
2️⃣relay to HTTP/HTTPS targets,
3️⃣then browse as the victim through a SOCKS ❄️proxy.

This works even when cookie replay doesn't.”

🎯
https://t.co/U49D8cw9nJ

[vx-underground @vxunderground]

This is very good malware.

This is solid-solid-SOLID B+ malware, very close to A- malware.

APT37 is using a old-school playbook. They're doing EPO (Entry Point Obfuscation) on a self-delivered binary for evasion. They also unironically are using something akin to cavity infection ... but on themselves. This is something you saw more in the Windows 95 - Windows XP era, not something you see in 2026.

Very cool. I respect it.

The multi-staged fragmentation of shellcode phases is also really, really, really cool. This is (once again) a more old-school technique usually reserved for infected binaries, not self-delivered binaries.

Despite all of these super cool features, APT37 shoots themselves in the foot immediately.

- EAT walking for Kernel32 functionality (???)
- XOR decryption is a huge red flag
- Allocating with PAGE_EXECUTE_READWRITE (???)
- Hardcoded OAuth token (???)
- Used external dependency for AES (???)

Why not use NT functionality to hook evasion? XOR is easily identified in static analysis, why XOR? Allocating memory with VirtualAlloc with RWX is a MASSIVE RED FLAG. They also hardcode a OAuth token ... they can multi-staged shellcode payload with old-school malware techniques but hardcore AN OAUTH TOKEN?

It unironically makes me wonder if they had one old-head malware guy working on it, then they had some newer dude do the non-hardcore stuff. There is a huge gap in skill sets here.

Or the old-head hasn't kept up to date on malware stuff since 2005... or they got lazy... I don't know, really weird.

[Ivan Kuleshov @Merocle]

Unusual stateful AI cluster

512 GB of unified RAM, 80 ARM cores and 4 PFLOPs FP4
and a nvme NAS for data storage and as a switch

[leopardracer @leopardracer]

Everyone told him he needed a $3,000 GPU.

He spent $599.

The 35B model runs faster.