Saka-0

Cybersecurity Researcher | Red Team & Blue Team | Vulnerability Research & CVE Analysis | OPSEC | AI & Software Engineer | SEO Engineer

[Cyber Security News @The_Cyber_News]

‼️ Hackers Hijack 4,837 GitHub Accounts to Target 61,764 Repositories With CI Secret-Stealing Malware

Read more: https://t.co/dBsW1ycxSc

A threat actor has used stolen GitHub credentials to push a secret-stealing payload into tens of thousands of code repositories. The activity began on November 10, 2026, around 12:45 UTC. It aims at the secrets and cloud keys that sit inside GitHub Actions, the tool many teams use to build and ship code.

So far, 4,837 hijacked accounts opened probe pull requests in 61,764 repositories. At least 1,806 repositories ran the payload and lost credentials. At least 50 of the hijacked users also publish packages for npm, Go, Packagist, PyPI, or crates, which raises the risk for people who rely on their work.

#CybersecurityNews

[Co11ateral @co11ateral]

Hunting for Creds with CredsHound

This is a new scanner for creds. It's library has 678 different credentials, from basic services to AI API and more.

You can import its results into BloodHound to see things visually or just read the output in the terminal.

There's a website with all the services catalogued

https://t.co/K3T8P0IfKp

[Rıdvan Yağlı @ridvanyagli]

🔴 PHP2Shell'i bulan Calif ekibi, bu sefer Brotli bellek bozulması açığıyla (CVE-2026-111497) Lockdown Mode'daki iPhone ve MacBook'u ele geçirdi.

En kötü senaryoda cihaz üzerinde kod çalıştırılabiliyor.

Apple bu açığı dün yayınlanan iOS / macOS 27.2.1 güncellemeleriyle kapattı.

Güncellemediyseniz güncellemeyi düşünün.

[Preventing - LA ☠️ @LethalAccess]

🚨 CVE-2026-87902 - WordPress Core - PHP Template Path Traversal

Nuclei Template - https://t.co/96jdw7Z8qh

Reference: https://t.co/JlXS9sjUUv

[International Cyber Digest @IntCyberDigest]

The bug is like a joke.

On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀

[H4x0r.DZ @h4x0r_dz]

Backdoor

[Dhiyaneshwaran @DhiyaneshDK]

CVE-2026-123158 - SSHole - OpenSSH/musl Password Auth Bypass 🔥

Nuclei Template : https://t.co/gxUdw2v3nf

Reference : https://t.co/jiBgKOaTu8

#ssh #authbypass #hackwithautomation

[加西 @gaoyy9]

免费服务器大羊毛，亲测成功上车！

国家超算互联网官方免费算力：

✅ 7 核 CPU
✅ 60GB 内存
✅ 16GB AI 加速卡
✅ 约 200GB 根目录空间

🚀 领取教程：
1️⃣ 打开 https://t.co/CHgAyvxwfL
2️⃣ 注册登录 → 算力市场 → 选择「华中三区【武汉】」
3️⃣ 找到「异构加速卡1」，点击「申请试用」
4️⃣ 选择 PyTorch 镜像，填写容器名称，点击创建
5️⃣ 等待部署完成，进入 Web Shell 即可使用！
⚠️ 这是 AI 算力容器，不是传统 VPS；永久免费，需要保活，保活方法随便找个AI部署。
⚠️ 使用提醒：
❌ 不建议用来搭建代理节点、科学上网，可能违反平台使用规定。可以用来训练模型。

#薅羊毛 #免费服务器 #Linux

[Saka-0 @SakaaZero]

WTS API KEYS

Google Gemini API
OpenAI API
AWS

For inquiries & details:

WeChat: Raden_4K
Telegram: SakaOctapus

#APIKeys #GeminiAPI #OpenAI #AWS #AI #ArtificialIntelligence #API #Developers #TechMarketplace #ForSale

[Nicolas Krassas @Dinosn]

irraz/vulnerator-ai: Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language. https://t.co/D0MeZTz9eb

[Rıdvan Yağlı @ridvanyagli]

🔴 Araştırmacı @4osp3l, Microsoft Azure Application Gateway v2 üzerinde ilginç bir 403 Forbidden bypass yöntemi buldu.

403 Forbidden veren bir URL, URL'nin sonuna "?x=.js" ekleyince (veya query string içinde .js geçen herhangi bir şey) kısıtlama bypass oluyor ve sayfaya erişilebiliyor.

[Ron Masas @RonMasas]

Liked PHP2Shell? You’re gonna love Node2Shell.

We reproduced CVE-2026-111497 as pre-auth RCE. On a vulnerable Node.js runtime, app.use(express.json()) is enough to expose your server to code execution through a single Brotli request. Patch your systems now!

https://t.co/NLluyUopEi

[Dhiyaneshwaran @DhiyaneshDK]

🚨 PHP2Shell (CVE-2026-109618/CVE-2026-109619)

Nuclei Template : https://t.co/gGhrsBq5KX

Reference: https://t.co/AI7cruXnbh

#hackwithautomation #php2shell

[lumxss @bkdgiffug]

说个听着挺渗人的事：你家那台 WiFi，其实没你以为的那么牢靠，真不是吓唬你。

有个开源工具叫 Airgorah，Rust 写的，底层借的是 aircrack-ng 那套东西，外面套了层图形界面，只能在 Linux 上跑。它能干啥，我摊开给你看：

1️⃣ 把周围 WiFi 的流量抓下来
2️⃣ 挖出某个热点底下都挂了哪些设备
3️⃣ 发断网攻击，逼设备重新连一遍
4️⃣ 截握手包，然后直接动手破密码
说白了，网络安全审计该有的那些功能，它差不多都齐了。
作者也把丑话摆在前头：只允许测你自己的网络，碰别人的 WiFi 就是违法，出了事自己担，别说没人提醒过。
🔗 https://t.co/rernjE6C4x

[RILE @RileNFTs]

IT'S OVER: All Bitcoin seed words got leaked

[Dhiyaneshwaran @DhiyaneshDK]

🚨 CVE-2026-104935 - Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header

Nuclei Template : https://t.co/NptmYzDMUz

Reference: https://t.co/u50r7PtEUc

#bugbounty #hackwithautomation #ivanti

[Hunt.io @Huntio]

👻 Open Directory Stages NGINX Rift and Ghost CMS Exploits, Targeting 11 Countries

We found an open directory on a Singapore VPS (165.154.236[.]93): an attack server that was also set up to receive reverse shells.

One host, seven exploits, wired to verify its own blind attempts over DNS callbacks.

On the box:

- NGINX Rift (CVE-2026-42945), a long-standing heap overflow, and Ghost CMS blind SQLi (CVE-2026-26980)
- Splunk, PaperCut, Samba, WebLogic, D-Link NAS tooling alongside them
- OOB DNS callbacks to per-target subdomains to check whether blind attempts landed
- A full AdaptixC2 build and SuperShell install files
- Country and sector target lists: government, universities, healthcare, finance across 11 countries

Simplified Chinese comments and the use of Goby and Supershell suggest an operator comfortable with the language. That is a comfort signal, not attribution or a state nexus.

👉 Full research: https://t.co/p6Dy5usIY4

#nginx #ghostcms #threatintel #threathunting #cybersecurity #opendir

[I'M H4CK3R 42 @luckyhacker43]

PoC:

[CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core 👾💥

- https://t.co/ZDVEsm6M9Q
- https://t.co/JOUKcKrnbh
- https://t.co/gI3T9ZxbAV

- https://t.co/4AxAJTRmyi

- https://t.co/6ngEvl8Uv6
- https://t.co/VUJrmtsHZN

[FEY8ER @woleswoosh]

Gratis 1jt token claude haiku 5.5 dr @ZenMuxAI

Buruan klaim jgn sampe habis! 👇

https://t.co/vQc1Fb9xr5

[Rıdvan Yağlı @ridvanyagli]

🔴 CVE-2026-21589 (CVSS 9.3): Atlassian Jira, Confluence, Bitbucket ve diğer Data Center ürünlerini etkileyen kritik güvenlik açığı, kimlik doğrulaması olmadan uygulama dizinindeki hassas dosyaların okunmasına imkan tanıyor. Bu açık için PoC yayınlandı.

Etkilenen sistem yöneticilerinin yamaları uygulaması ve erişim kayıtlarını şüpheli /download/ isteklerine karşı incelemesi öneriliyor.

PoC:
https://t.co/7pOOLYJTR7