Mehmetcan Yildiz

Cybersecurity & DevOps | OSCP+

[Mehmetcan Yildiz @UN5T48L3]

Are you interested in wireless pentesting?
Here's the most up-to-date, comprehensive course for diving into WiFi auditing at an affordable price.

Famous Airgeddon tool creator, @OscarAkaElvis, contributed to this course.

Get your CWP today!
https://t.co/vsZhYkuUuG

[Tuta @TutaPrivacy]

🚨 Google is killing Android freedom. 🚨

In 2027, Google plans to roll out mandatory developer verification globally. Apps from developers who haven't registered with Google will face restrictions on certified Android devices → including apps installed outside Google Play.

🚩 F-Droid and other independent app stores will become harder to use
🚩 Sideloading unverified apps will require a special “advanced” process
🚩Independent developers and hobbyists will have to deal with Google’s registration system
🚩 Google is becoming a gatekeeper for software running on Android devices

This undermines one of Android’s defining features: the freedom to install software from wherever you choose. 😤

Android is supposed to be open, and your phone should be yours → NOT GOOGLES.

It’s time to support open alternatives like GrapheneOS, CalyxOS and LineageOS. ✊

Find out more: https://t.co/c89lutjb4k

Sign the petition:
https://t.co/pMT2XhrZGC

[Mehmetcan Yildiz @UN5T48L3]

@ResisttheMS He is one of the most stupid Turkish guys I have ever seen. Why is the USA so tolerant of him and not taking action to stop his hate speech against almost everyone?

[Mehmetcan Yildiz @UN5T48L3]

@insaatdoktoru Toki sahiplerinin hepsinin araştırılması lazım. Bu toki sonuçta daha düşük gelirli insanların ev sahibi olabilmesi için devlet tarafından yapılan bir yardım değil mi? Ama sahibinden'e girip bakarsanız her şehirde binlerce kiralık toki ve satılık toki evleri mevcut. Yazıklar olsun

[Mehmetcan Yildiz @UN5T48L3]

Haluk Levent denen şarkıcının iyilik perisi gibi yıllardır milyarlarca lirayı yönetmesine sessiz kalınmasıydı asıl mesele. Bir an bile sevmedim, güvenmedim ve böyle pisliklere karıştığını bir şekilde hissediyordum ama ispatlayamayacağım için hiç umursamadım. Umarım yanına kalmaz.

[Mehmetcan Yildiz @UN5T48L3]

@OscarAkaElvis Best WiFi pentest tool 4 ever.

[Óscar Alfonso Díaz @OscarAkaElvis]

🎉 airgeddon 12.0 released!
The 10th Anniversary Edition is here 👽

✅ Partial 6GHz support
✅ Evil Twin improvements
✅ Multiple fixes & hardening & more
Thanks to everyone supporting the project over the last 10 years ❤️
Sponsor: https://t.co/GSsT9WVdB0
#wifi #linux #hacking

[The Hacker News @TheHackersNews]

⚡ An 18-year-old flaw in NGINX can let unauthenticated attackers run code or crash servers using crafted HTTP requests.

Tracked as CVE-2026-42945 and named NGINX Rift, the bug affects NGINX Plus and Open Source.

Patch details and mitigation steps: https://t.co/Xfz4sQ4Xtz

[Daily CyberSecurity @Daily_CyberSec]

Public PoC for NGINX CVE-2026-42945. An 18-year-old RCE flaw in the rewrite module enables server takeover. Update to NGINX 1.31.0 or 1.30.1 immediately.

#NGINX #CyberSecurity #InfoSec #RCE #Vulnerability #CVE #WebServer #PoC #GitHub #SysAdmin #TechNews
https://t.co/huz0K21JaR

[News from Google @NewsFromGoogle]

The Google Threat Intelligence Group has detected the first known instance of a threat actor using an AI-developed zero-day exploit in the wild. While the attackers planned a wide-scale strike, our proactive counter-discovery may have prevented that from happening. This finding is part of our new report on AI-powered threats.

[Mehmetcan Yildiz @UN5T48L3]

@Samaytwt both are currently best models in the world

[JS0N Haddix @Jhaddix]

I'm here to tell you... Cyber Security, Assessment, and the "scene" is most certainly NOT over. 🫶

[Arika @Arikalabs]

on linux, you can take a snapshot of a running process its memory, its open files, its registers write it to disk, kill it, and restore it later (even on another machine, if the environments match).

it's called CRIU.

docker’s checkpoint/restore uses this under the hood.

[CyberSatoshi 𓆙 @XBToshi]

12 years.

No VCs.
No CEO.
No corporate bailouts.

Just a dozen years of being hunted by every three-letter agency on the planet.

They delisted it from the transparent casinos.
They slapped IRS bounties on the cryptography.
They flooded the network with spam attacks.

The network didn't flinch. It just kept routing.

Look around today. The clearnet is rolling out mandatory digital ID ankle monitors. The "sound money" crowd is literally debating base-layer confiscation buttons to protect their fiat bags from a quantum dump.
Total panic in the light. Absolute stability in the dark.

While the rest of the space rots into a regulated surveillance derivative, XMR is quietly celebrating 12 years of flawless, untraceable settlement. The baseline utility never drops.

Surviving a decade-plus of state-level hostility is the only audit that matters.
Happy Moneroversary to the builders, the node runners, and the operators.

Raise a glass.
Then get back to the terminal.

Keep building.

[Mehmetcan Yildiz @UN5T48L3]

@iyoushetwt unpopular and unrealistic opinion

[The Hacker News @TheHackersNews]

🚨 WARNING - A new #iOS exploit kit, DarkSword, has been active since late 2025 across multiple threat groups.

It targets #iPhone on iOS 18.4–18.7, chaining zero-days to gain full access and rapidly extract data—files, messages, credentials, and crypto wallets—then wipe traces within minutes.

🔗 DarkSword details here → https://t.co/bS2GhSKltf

[Mehmetcan Yildiz @UN5T48L3]

@elonmusk Elon, you know that manipulating LLMs isn't a big challenge. They can easily produce this type of image for any AI service with the prompts given by the user. So yeah, eventually I think Claude has the best coding skills so far.

[Claude @claudeai]

Introducing Claude Code Security, now in limited research preview.

It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.

Learn more: https://t.co/n4SZ9EIklG

[Mehmetcan Yildiz @UN5T48L3]

#SiberVatan projesi kapsamında Denizli Pamukkale Üniversitesi'ndeydik ve pırıl pırıl genç arkadaşlarımıza Siber Güvenlik alanında sağlam bir başlangıç yapmaları adına ilk 3 günde temel eğitimleri verdim.
Eğitimlere diğer şehirlerde de devam edeceğiz.