Yusuf Nuh 🍉

I share tech with unfair love for cyber security.

Muslim & Anti-Zionist | CSE undergrad

[Yusuf Nuh 🍉 @SenseWave_]

That's my pin post until you give a like 😘

[Yusuf Nuh 🍉 @SenseWave_]

@nirajxdev only for us. developed countries are pretty good

[Yusuf Nuh 🍉 @SenseWave_]

@Dev_Lurker Stego in memory is no artifacts. EDRs need behavioral hooks, not just signatures

[Yusuf Nuh 🍉 @SenseWave_]

This is a fileless attack using ClickFix social engineering & Trust abuse

Execution primitive: mshta.exe → launches PowerShell

Persistence technique: Steganography hides shellcode in image pixels

Evasion: In-memory execution only — low detection by signature-based AV

[Yusuf Nuh 🍉 @SenseWave_]

@Dev_Lurker i just learnt tody

[Yusuf Nuh 🍉 @SenseWave_]

Did u know 404 isn't alone. It has a whole set of cousins

200 - OK
201 - Created
301 - Moved Permanently
302 - Found
400 - Bad Request
401 - Not Authorised
403 - Forbidden
405 - Method Not Allowed
404 - Page Not Found
500 - Internal Service Error
503 - Service Unavailable

[Yusuf Nuh 🍉 @SenseWave_]

Microsoft had just announced it was expanding its use of OpenClaw for its new "Scout" AI agent, claiming it had "enterprise-grade security."

The timing made Microsoft's announcement look "absurd" and "poorly timed" because the security holes were discovered right before.

[Yusuf Nuh 🍉 @SenseWave_]

Security researcher found five serious security holes (zero-days) in OpenClaw that let attackers trick AI agents into doing bad things by just changing their display name, and Microsoft announced it was expanding its use of OpenClaw at the worst possible time

Key finding 4 u
👇

[Yusuf Nuh 🍉 @SenseWave_]

These flaws let attackers impersonate trusted users by simply changing their display name on chat apps like Slack, Discord, and Microsoft Teams.

Because of this, an attacker could hijack the AI agent and make it read files, run commands, or access internal data.

[Yusuf Nuh 🍉 @SenseWave_]

@The_Cyber_News I don't understand if you're so smart, why doing it illegally?

[DevLurker @Dev_Lurker]

Finally Verified 😇

Reached my follow and reply limits,
and it was keeping me away from my fam.

So I took the step forward:
upgraded to the verified badge.

Now my account is officially recognized,
and staying connected with my community is effortless.

[Yusuf Nuh 🍉 @SenseWave_]

@Dev_Lurker ig it's only 2 and half days and already huge follower + a blue badge. great job buddy

[Yusuf Nuh 🍉 @SenseWave_]

@UK_Daniel_Card Send me some fresh veg via uber 👉👈

[Yusuf Nuh 🍉 @SenseWave_]

@SapperJaeger @UK_Daniel_Card That's something people hardly realise.

They don't speak because they want to give you knowledge.

They hold the microphone to make you listen to something they want you to listen, something that will benefit their business, make them money.

[Yusuf Nuh 🍉 @SenseWave_]

I am personally dead against smart home systems. I need privacy at least at home.

Also doing things on my own gives me a weird feeling of happiness, connection......which these smart devices steal from me

[Cybernews @Cybernews]

Users must either disable a key feature or risk exposed Bluetooth access. More: https://t.co/NVEREka0ME

[Yusuf Nuh 🍉 @SenseWave_]

@BleepinComputer @UK_Daniel_Card Exploits keep happening 😮‍💨

[Yusuf Nuh 🍉 @SenseWave_]

Is that you, programmer?

#linux #windows

[Yusuf Nuh 🍉 @SenseWave_]

@jeffschadow1 @The_Cyber_News @grok Companies are focusing more on innovation (actually profit) than security

[Yusuf Nuh 🍉 @SenseWave_]

@Dev_Lurker 🫠i gave up on the project....

[Yusuf Nuh 🍉 @SenseWave_]

The very linux thing!!! 😜