Gh0sT*23

OSINTer, Hacker, always looking for secrets… Always staring at the sky…

[鸟哥 | 蓝鸟会🕊️ @NFTCPS]

吓到我了！

GitHub上有个工具叫GhostTrack，输入一个手机号，能直接扫出这人在哪些平台注册过账号，还能查IP定位、运营商信息。

克隆代码跑脚本，5分钟搞定，门槛低得离谱。你以为自己在网上隐身呢？

早被扒得透透的了。信息安全这事，真得重视起来。

🔗 https://t.co/yVGCsmsjyi

[0xor0ne @0xor0ne]

Collection of paper related to LLM for vulnerability research/detection

https://t.co/c0F7TkOvHp

#infosec

[The Hacker News @TheHackersNews]

🔥 Google's Pixel smartphones under attack!

Two new #Android security flaws - CVE-2024-29745 & CVE-2024-29748 - uncovered, exploited in the wild by forensic companies.

Learn more: https://t.co/jYqyaQp8r8

#CybersecurityNews #Hacking

[Cyber Security News @The_Cyber_News]

🚨 Hackers Leverage Microsoft Teams to Breach Organizations Posing as IT Helpdesk Staff

Source: https://t.co/dldRzGb0OW

A newly identified threat group, UNC6692, has been caught running a sophisticated multistage intrusion campaign that uses Microsoft Teams impersonation, a custom modular malware suite, and cloud infrastructure abuse to deeply penetrate enterprise networks, all without exploiting a single software vulnerability.

The campaign abuses legitimate external collaboration features in Teams, with attackers convincing users to override multiple, clearly presented security warnings. Victims accepted the Teams chat invitation from an account outside their organization, a seemingly minor action with catastrophic consequences.

#cybersecuritynews #teams

[0xMarioNawfal @RoundtableSpace]

ANTHROPIC PAYS $750,000 A YEAR FOR ENGINEERS WHO UNDERSTAND WHY AI WORKS.

STANFORD JUST PUT THE SAME KNOWLEDGE ON YOUTUBE FOR FREE.

WATCH IT THIS WEEKEND. NOT EVENTUALLY. THIS WEEKEND.

[Cyber Security News @The_Cyber_News]

⚠️ CrowdStrike LogScale Vulnerability Allows Remote Attackers to Read Files from Server

Source: https://t.co/ZIk1ToJCb8

An urgent security advisory for a critical unauthenticated path-traversal vulnerability (CVE-2026-40050) affecting its LogScale platform, warning that a remote attacker could exploit the flaw to read arbitrary files directly from the server’s filesystem without authentication.

The vulnerability resides in a specific cluster API endpoint within CrowdStrike LogScale. If this endpoint is exposed, a remote attacker can leverage it to traverse the server’s directory structure and access sensitive files without needing credentials.

#cybersecuritynews

[Hacking Team @HackingTeam77]

METATRON

AI-powered penetration testing assistant using local LLM on linux (Parrot OS)
https://t.co/ogKXT1Y14F

[Tib3rius @0xTib3rius]

I just disrupted the entire Cybersecurity industry AGAIN.

[Tom Dörr @tom_doerr]

Collection of tools for intelligence gathering on the dark web

https://t.co/Y8CbkjJm5N

[The Cyber Security Hub™ @TheCyberSecHub]

Kali Linux Introduces AI-Driven Penetration Testing Through Claude Integration https://t.co/1qKgAeRSkW

[Geekboy @emgeekboy]

Scanning for CVE-2025-14847 (MongoBleed🩸) using @pdnuclei

If you're running MongoDB, scan your servers now.

Nuclei Template - https://t.co/Ca06eWHmYO

Vulnerability Summary - https://t.co/qJU3gl8KNH

#cybersecurity #mongobleed

[NASA @NASA]

LIVE: After returning to Earth on Dec. 9, @JonnyKimUSA is here today to recap his mission aboard the @Space_Station. Tune in to hear about his eight months on the orbiting lab. https://t.co/Yt2OjTvr1E

[blackorbird @blackorbird]

#APT28 transitioned from compromised routers to proxy tunneling platforms, such as ngrok and Serveo, to relay credentials and bypass CAPTCHA and two-factor authentication challenges.
https://t.co/zQiQyntt7S

[ProjectDiscovery @pdiscoveryio]

Tired of your recon data getting bloated with static files? 

Here is a quick katana one-liner to actively crawl deep, parse JS, and strip out the noise (css, svg, fonts, etc.) automatically.👇

katana -u subdomains_alive.txt -d 5 -kf -jc -fx -ef woff,css,png,svg,jpg,woff2,jpeg,gif,svg -o allurls.txt

[Gh0sT*23 @InfoSecLeader]

Loving this game! #starwars #starwarsoutlaws

[Gh0sT*23 @InfoSecLeader]

@elonmuskTN 50

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Static analysis for Android apps based on the OWASP MASVS framework 🌟

- https://t.co/3coBYQJ8iX

#infosec #cybersec #bugbountytips

[The Hacker News @TheHackersNews]

🔥 Wild find from Microsoft.

Even when your AI chats are encrypted, someone watching the network can still guess what you’re talking about.

They call it "Whisper Leak" side-channel attack.

And in tests, models like #OpenAI and Mistral gave away topics with 98% accuracy.

Worth your attention ↓ https://t.co/xdco1xgGeE

[Clandestine @akaclandestine]

Browse Malicious Packages & Threats - https://t.co/XBMCHHzFij https://t.co/xqkUGbzhw0