Nabih

COO @FuzzingLabs

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Run iOS 27 full screen in browser on Web UI no extra apps needed.

Control everything all in one place remotely from Chrome, like never before.

- https://t.co/SnjQKfdlXC

[Nabih @Raefko]

@fede_intern One of the founders was actually with me during my 42 bootcamp haha! It was also really cool to follow their journey from the start of Atelier Missor, Their vlogs on YouTube are awesome.

[7h3h4ckv157 @7h3h4ckv157]

Kernel-Exploit-Dojo 📍

Curated archive of 100+ Linux kernel exploitation CTF challenges, organized by bug class, exploitation primitive, final technique, difficulty, and solve count.

The goal is to organize practical kernel pwn techniques such as UAF, heap spraying, pipe_buffer abuse, msg_msg, modprobe_path overwrite, and cred overwrite.

Resource: https://t.co/h1F2CD70Oc

[7h3h4ckv157 @7h3h4ckv157]

Master the art of reverse engineering and binary exploitation. Train through an immersive terminal. Progress through the belt system. 📍

Source: https://t.co/enxuULFPeF

[skull @brutecat]

Hacking Google with A.I. for $500,000

https://t.co/S8NbDU9ZaN

[mikey @0xmachos]

On macOS if you want to mitigate ImageIO bugs you can enable ImageIO out-of-process parsing (ImageIOXPCService sandbox) by exporting IIOEnableOOP=1 via launchctl
https://t.co/XcP4aaK6Xx
https://t.co/fssU8QAiNG

[Carver @carverfomo]

A Chinese engineering student spent $4,000 on two Mac Studios and a Mac Mini. Put them on his desk. Labeled each one with a sticky note: UI/UX. DEV. ADMIN. Connected two monitors. Satellite maps on both screens.

His parents thought he was building a startup. His professors thought it was a thesis project. His roommate thought it was overkill for homework. He let all of them keep thinking that.

Then someone noticed what the three boxes were actually connected to.

A wallet. Making $104K. Betting on the temperature.

ColdMath. $104,642 profit. 5,470 predictions. Joined November 2025. Bio: Edge Compounds.

→ https://t.co/iJLnXKdlnh

Two Mac Studios and a Mac Mini doing one thing. Claude pulls live pilot weather data. METAR. TAF. Real sensors from real stations. Updated every 1-3 hours worldwide. Temperature accurate to a tenth of a degree. The DEV box compares it to prediction market prices. When they don't match the UI/UX screen flashes. The ADMIN box logs the trade.

Flash. Trade. Green.

$25 on Tokyo hitting 16C on March 20. Payout: $12,452. $24 on Chicago reaching 54F on March 11. Payout: $12,398.

Eleven dollar bets returning five thousand. On the temperature in a city most people can't find on a map.

A friend who flies commercial told him pilots get atmospheric data hours before any public forecast. This data is free. Aviation safety requires it. Nobody outside of aviation even looks at it.

He looked. Pointed Claude at the feeds. Said: find me every city where the real temperature doesn't match the price.

Claude found dozens. Every single day. Tokyo. Chicago. Wellington. Atlanta. Ankara. Lucknow. Cities on six continents. All with weather stations publishing data that nobody in the markets is reading.

The three boxes run 24/7. Even when he's in class. Even when he's asleep. The satellite maps keep updating. The DEV box keeps comparing. The screen keeps flashing.

His roommate finally asked what the setup actually does. The student showed him the balance. The roommate didn't say anything. Just asked for a third monitor.

34K people watching. $94K still loaded in active positions. Two Mac Studios. One Mac Mini. Two screens. One quiet kid who realized the most predictable thing on Earth is the thing everyone ignores.

The weather.

[chiefofautism @chiefofautism]

someone at ANTHROPIC just showed CLAUDE finding ZERO DAY vulnerabilities in a live conference demo

claude has found zero day in Ghost, 50,000 stars on github, never had a critical security vulnerability in its entire, history...

it found the blind SQL injection in 90 minutes, stole the admin api key, then did the exact, same thing to the linux kernel

[PwnFuzz @pwnfuzz]

An automated N-day research pipeline at PwnFuzz.

Ghidra + Ollama + n8n →Diffs Patch Tuesday binaries → LLM analyzes the output → Structured vuln reports, monthly AI-generated reports gets you oriented fast!
Blog: https://t.co/O0EzQNdZev
Repo: https://t.co/wCFo8zoyeL

[Daily CyberSecurity @Daily_CyberSec]

Google uncovers DarkSword, a sophisticated iOS full-chain exploit used globally to deploy spyware via zero-day vulnerabilities. Update to iOS 26.3 now.
#DarkSword #iOSExploit #ZeroDay #CyberSecurity #MobileSecurity #GTIG #InfoSec #Spyware #AppleSecurity
https://t.co/9sJIKmVxHS

[Chaofan Shou @Fried_rice]

vibe coded a fuzzing ai agent last month and let it run for a week using my $200 claude max.

it then found 21 high/critical vulnerabilities in Chrome.

[John Woodman @JohnWoodman15]

Found a Full SIP Bypass in latest macOS version. Looking forward to writing about this one once a fix is released!

[Aman @Amank1412]

Someone really built this.

A VS Code extension that turns your AI agents into pixel art characters working inside a virtual office.

[Disconnect3d @disconnect3d_pl]

Pwndbg 2026.02.18 is out!

We visualize branches in nearpc, sync ur decompiler (IDA/Binja/Ghidra) via decomp2dbg, annotate stack vars from dbgsyms/decomp, added new cmds for tracing kernel allocs/frees, dump task info: https://t.co/Gz2rdZlzxp

Sponsor us: https://t.co/YdAmbhJHyF

[FuzzingLabs @FuzzingLabs]

We just rewrote FuzzForge from scratch and open-sourced it.

Old: Temporal + MinIO + workers + backend. Heavy.

New: CLI + MCP server + containerized modules. Zero infra.

🖥️ Runs fully local
🧠 Plug your favorite LLM (Copilot, Claude, local models…)
🔗 AI agents orchestrate full security pipelines via MCP

Demo: 4 modules, 3 min, 994 crashes → 3 unique bugs.

AI-native security research.

https://t.co/cfAqPPV1Fw

[FuzzingLabs @FuzzingLabs]

We won our entry at #Pwn2Own Automotive 🏆

🎯 Target: Phoenix Contact CHARX SEC-3150
🔓 Auth bypass + priv esc
💰 $20,000
⭐ 4 Master of Pwn points

Congrats to Julien & the team.

Thanks to @thezdi

#Pwn2Own #Infosec #AutomotiveSecurity

[FuzzingLabs @FuzzingLabs]

🚀 Open-sourcing MCP Security Hub

A growing collection of MCP servers bringing security tools to AI assistants

Nmap, Ghidra, Nuclei, SQLMap, Hashcat... and we're just getting started

Contribute your favorite tools 🛠️

⭐ https://t.co/SoKv2T1k1z

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Roadmap for Android security guides, roadmap, docs, courses, write-ups,

- https://t.co/lMrsaaorT6

[Chong-U @chongdashu]

As promised, here's my full workflow of how to vibe code 2d games like this:

- PhaserJs skill for gamedev
- Playwright skill for testing
- Opus 4.5 / Gpt 5.2
- Claude Code / Codex CLI / Cursor

Step-by-step video below👇
Source code + agent .mds + playable links in reply

[Nabih @Raefko]

WE MADE IT
Couldn’t be on stage with the Goat (cc Julien) but we got it!

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Julien COHEN‑SCALI of @FuzzingLabs targeted the Phoenix Contact CHARX SEC‑3150, chaining two vulnerabilities - an authentication bypass and privilege escalation - to earn $20,000 USD and 4 Master of Pwn points. #Pwn2Own #P2OAuto