Risiraj Dey

[Evan You @evanyou]

Do I know anyone that works at Discord? Vuetify server has been hacked and need urgent help.

[Brave @brave]

⚠️ Today's browser update (v1.90.128) contains a fix for a Chromium vulnerability that allows websites to plant hidden scripts via the Background Fetch API.

These scripts survive restarts and could be used to track users, run malicious code on their devices, or launch DDoS attacks on others.

You may have already received the automatic Brave update on desktop. If not, you can manually update by visiting 'About Brave' in the browser's settings.

The Android update is waiting on Google Play Store review and should be out soon.

[SpecterOps @SpecterOps]

Create a folder called (calc). Shift+Right click « Open PowerShell Window here » and boom you have a command injection.

@podalirius_ found two command injection vulnerabilities in Windows Explorer's context menus, both exploitable since 9 years. https://t.co/LNNTpKeDnJ

[Tom Jøran Sønstebyseter Rønning @L1v1ng0ffTh3L4N]

Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them.

[Risiraj Dey @RDxR10]

@zeyu1337 Do you have any time/speed comparison data (time because its a core aspect of CTFs)?

[Risiraj Dey @RDxR10]

It's out there. Sooner or later, a researcher will exploit it (with or without AI). I'll reveal my script (created 22-04-2026) that day.

[Risiraj Dey @RDxR10]

Its "Code execution and antivirus evasion lead to potential compromise". My bad. Should have changed my words. But changing words won't change the impact.

[Risiraj Dey @RDxR10]

@msftsecurity
@msftsecresponse
I would like to bring your attention to this issue: PowerShell Script as a C# compiler service

A threat actor can potentially use this for malicious script or shellcode execution

Example script (harmless):
https://t.co/NG4d3G5IZN

[Risiraj Dey @RDxR10]

@Windows

[Risiraj Dey @RDxR10]

I made a CLI music player for Windows. No installation needed. Check it out!
https://t.co/Sa6JH8ucue

[Microsoft Learn @MicrosoftLearn]

The best way to learn a new tool? Use it to solve a problem you already have.

[Narendra Modi @narendramodi]

Rongali Bihu greetings to you all!

[Kyle Daigle @kdaigle]

HUGE moment for India 🇮🇳

27M devs building on @github in India
2M+ more joined in 2026
1 in 7 new devs are from India
7.5M contributions to open source AI projects on GitHub

Behind India’s economic growth is a relentless community of devs. Grateful we got to celebrate on the ground with so many of them here in Bengaluru.

A big thank you to this community for building with us all these years. ❤️

[Risiraj Dey @RDxR10]

I made a CLI music player for Windows. No installation needed. Check it out!
https://t.co/Sa6JH8ucue

[Stephan Berger @malmoeb]

Calling out for help. We have proof that a threat actor exfiltrated data to a Microsoft Azure Blob, thanks to detailed logs in the *.log files written by azcopy, for example:

C:\Users\compromised_user\.azcopy\1323eb6d-2624-834e-45e0-218454b383be.log

We see the blob name where the data was exfiltrated to, and exactly which files the threat actor copied, thanks to the excessive logging.

We reached out to our Microsoft contacts for a takedown of the blob (and, with it, a takedown of the stolen data), and the answer was, disillusioning, to say the least. Microsoft is sending us down a Kafka-esque road, with the chances of a takedown slim to non-existent.

Is that really the best they can do? Who from Microsoft is reading this message and could potentially speed up our case?

[LaurieWired @lauriewired]

its really not groundbreaking at all. 12 years do this all the time on shodan.

slightly smarter automation of known techniques isn't very useful

[Risiraj Dey @RDxR10]

I think this needs to be fixed before sorting out the rate-limiting issues @AnthropicAI

[pilcrow @pilcrowonpaper]

Well, this is unfortunate

https://t.co/THgqJehTky

[Risiraj Dey @RDxR10]

My question for the leetcode interviewer guy: code up chinese checkers in 5 minutes. LIVE.

A bot will keep saying "Make it fast" every 15 seconds.

Language? Any.
Bonus points for the UI.

[Risiraj Dey @RDxR10]

How many issues did you close today?

None, boss. Tired after a few rounds of vibe coding. I need to get some rest.