PwnedSOCmonkey

Application security believer ヽ( ͝ ° ͜ʖ͡° )ﾉ

[Simone Margaritelli @evilsocket]

escape the matrix

[cat @a_musingcat]

accelerate

[Adnan Khan @adnanthekhan]

RIP GitHub Actions Cache Poisoning. 🫡

https://t.co/dUSYcHjt0h

[Linus ✦ Ekenstam @LinusEkenstam]

Anyone who tries to argue climate change with you, just pull up this.

Not about no AC’s no more.

This is about future generations being able to grow food in europe or not.

[PwnedSOCmonkey @PwnedSOCmonkey]

Right place, right time

[Codez @0xCodez]

A senior Anthropic engineer just dropped 11-page PDF on "Loop Engineering" for agentic systems.

The shift: you stop prompting the agent. You build the system that prompts it instead.

Schedule → Discover → Build → Verify → Repeat

Every loop runs one turn, five moves:

• Discovery: it finds its own work - failing CI, open issues, recent commits - instead of being handed a list.

• Handoff: each task gets an isolated git worktree so parallel agents don't collide.

• Verification: a second agent, told to assume the code is broken, reviews the first. The "thing that can say no."

• Persistence: results get written to disk, never left in a context window that gets flushed.

• Scheduling: an automation wakes it on a timer. That's what makes it a loop.

The key insight: an agent grading its own work always praises it.

This 11-page PDF changed how I'm building agentic systems today.

Read it now, then explore the article below.

[Ayaan 🐧 @twtayaan]

Apple just made Docker Desktop optional on Mac.

And it is completely free.

This is apple/container. 26.5k stars no Github.

You can now run Linux containers natively on your Mac without installing Docker Desktop, without a background daemon hogging your RAM, and without paying $21 a month per developer for a commercial license.

Here is what it does:

→ Runs Linux containers as lightweight VMs directly on Apple Silicon using macOS 26 virtualization
→ Fully OCI compatible. Pull any image from Docker Hub, GitHub Container Registry or anywhere else
→ Written in Swift and optimised specifically for Apple Silicon. Faster and lighter than anything Docker Desktop does on Mac
→ Standard container CLI syntax. If you know Docker commands you already know how to use this
→ Push images you build to any standard container registry and run them anywhere

Docker Desktop charges $21 per developer per month for commercial use. Apple's version costs nothing and ships as open source under Apache-2.0.

Microsoft made Docker Desktop optional on Windows with WSL Containers last month.

Apple just did the same on Mac.

Docker is not going anywhere. But the era of paying for a GUI wrapper around containers on your own machine is quietly ending.

Repo here: https://t.co/uFJ867sul6

[Karl (RIP ) @supersat]

NSA: "Mythos Broke Into Nearly All Classified Systems"

Also NSA: (from 2013)

[PwnedSOCmonkey @PwnedSOCmonkey]

AI is commoditizing your expertise — so you'd better lock yourself into our ecosystem.

[Satya Nadella @satyanadella]

https://t.co/vLmiBKTtX3

[s13k @s13k_]

fable: *flagged for cybersec* 🔒
me: it's ok 🙂
fable: authorized 🔓

[Тsфdiиg @tsoding]

Programming is understanding. If you don't understand what you are doing, you are not programming. You are generating text.

[ClaudeDevs @ClaudeDevs]

We've reset 5-hour and weekly rate limits for all users. Enjoy Fable 5!

[Jeff Geerling @geerlingguy]

Today I disabled IPv6 on my home router entirely. There are (sadly) too many devices and services with obscure bugs when it's enabled, and I'm tired of playing whack-a-mole sysadmin just to keep a full IPv6 stack.

I'm not sure we'll ever see full IPv6 adoption.

[Zack Korman @ZackKorman]

My current advice on AI agent security is to avoid these agent firewalls / ai runtime security products.

If an action is dangerous enough that you can identify it from the action itself, then you could have prevented it with permissions and sandboxing.

[Nicolas Krassas @Dinosn]

Ghosts in the Cloud: Chinese Hackers Hid in Microsoft 365 Networks for 18 Months https://t.co/u1PhFURiuM

[frye @___frye]

stackoverflow is a ghost town now. it’s like walking through an abandoned liminal space. the top question from the past month has 78 upvotes and is titled “how can i avoid using LLMs as a software developer”

[Smukx.E @5mukx]

Response from @github .

You can see this yourself. Your thoughts please, i don't have any words to speak. Next it could be you guys.

@Microsoft @github @MsftSecIntel . i still have 1% of hope and i have replied with proper evidence. Kindly reconsider and fix the issue.

Also the mentioned repositories does not harm anyone are allowed under: GitHub Active Malware or Exploits policies.

Ticket ID: #4440743

Thank you.

[Smukx.E @5mukx]

Honestly, what is this ? I got a response from @github support team. So here after legal Security Research and PoC's is not allowed on GitHub ?

I'm Completely got disappointment by @github and @Microsoft @MsftSecIntel .

In what ways i distribute and share malware. Can anyone tell me if there is a mistake from my side, did i share 0 days, vulnerabilities, direct binaries or full exploit chain that harm users ? NONE ?

is posting Legal source codes and tools that are made of public PoCs are wrong ? there are thousand of full chain real expoits that bypasses EDRs, C2s that evades security solutions, phishing kits that bypasses MFA of Microsoft out there in @github , if that is legal then why cant this simple publically made poc can't be in the github ?

I have replied regarding my statements, please don't disappoint younger legal windows security researchers like this. I have some little hope on @github @Microsoft @MsftSecIntel .

I have a little hope. So Please don't make me loose on @github & @Microsoft & @MsftSecIntel .

Ticket ID: #4440743

Will be waiting for your kind response. Thank you.

https://t.co/FTpHwmDK8D

#github #microsoft #security #research

[hacker.house @hackerfantastic]

Github is hostile to cyber security research.

[Ryan Naraine @ryanaraine]

Good lord 🤮