Vincent Yiu

Director of Red Team, Offensive Security, Agentic Super Intelligence.

Helping organizations safeguard their business from the bad guys.

[Vincent Yiu @vysecurity]

In case you missed it:

Add a colon to your password, ":", because all the stealer logs have colons, so it'll end up splitting your password incorrectly.

[Vincent Yiu @vysecurity]

G FUCKING G

[Kalshi @Kalshi]

JUST IN: Elon Musk says Nvidia’s critical deals were "handshakes" with Jensen not a written contract

[Vincent Yiu @vysecurity]

Yep

[Gunther Eagleman™ @GuntherEagleman]

🚨 BREAKING: Transportation Secretary Sean Duffy just laid out EXACTLY what happened in the nationwide ground stop.

At 3:36 PM, radar and communications at air traffic centers across the country BECAME UNSTABLE. 
Systems weren't fully down, but the data stopped being reliable, so the FAA grounded flights.

MORE THAN 3,500 PLANES WERE IN THE AIR. Duffy says fewer than 400 are left now, and they're all coming in to land safely. Medevac flights, lifesaving cargo and law enforcement kept flying the whole time. 

His bottom line is that America is running "AN INCREDIBLY OLD AIR TRAFFIC CONTROL SYSTEM."

Trump and Duffy have been warning about this for two years.

Washington needs to quit stalling and fund the fix.

[LazyTitan @LazyTitan33]

A new LPE via Windows CLFS and Nightmare again uses Defender in ways that are exceedingly funny 🤣
https://t.co/gu1LqM24wG

The vuln is very well explained and I like his last remark: "If you have a problem with this repository, contact [email protected] with your concerns."

[Vincent Yiu @vysecurity]

Bro guys gotta open their MSG file

[!Manan @0xManan]

Outlook zero-day leaks NTLMv2 on open - no external-content warning.

CVE-2026-124194 (CVSS 6.5, exploited ITW, CISA KEV). Classic Outlook / M365 / LTSC 2021+2024.

• Crafted .msg embeds UNC in PidLidReminderFileParameter (0x851F)
• Open → Outlook hits attacker SMB (\\attacker\share\reminder.wav) with no warning
• NTLMv2 Type 3 hash leaks for relay/pass-the-hash

PoC (make_msg.py + listener): https://t.co/WajoBNqazR
MSRC: https://t.co/scoDhvUDPL
Credit: nono + Benoît Sevens (Claude-assisted)

Patch Office now - Windows Update alone is not enough.
#Outlook #NTLM #0day #CVE

[!Manan @0xManan]

Outlook zero-day leaks NTLMv2 on open - no external-content warning.

CVE-2026-124194 (CVSS 6.5, exploited ITW, CISA KEV). Classic Outlook / M365 / LTSC 2021+2024.

• Crafted .msg embeds UNC in PidLidReminderFileParameter (0x851F)
• Open → Outlook hits attacker SMB (\\attacker\share\reminder.wav) with no warning
• NTLMv2 Type 3 hash leaks for relay/pass-the-hash

PoC (make_msg.py + listener): https://t.co/WajoBNqazR
MSRC: https://t.co/scoDhvUDPL
Credit: nono + Benoît Sevens (Claude-assisted)

Patch Office now - Windows Update alone is not enough.
#Outlook #NTLM #0day #CVE

[Vincent Yiu @vysecurity]

GG

[TeslaFUDKer 🍁⚡️ 𝕏𝕏𝕏 @technoking_420]

Damn Elon moves quick 👀👀👀👀😂😂

[Vincent Yiu @vysecurity]

Time for Jensen to use it as leverage to increase his package 😂

[Mason @MasonWaltemyer]

🚨JUST IN- $NVDA is signing their own death warrant…

$NVDA if you fire @JensenHuang it will be the DUMBEST decision you’ll ever make. I want you to realize, every top engineer at your company will be following Jensen right over to $SPCX and $TSLA. That’ll go for your shareholders as well.

Jensen & Elon would then create an #AI conglomerate. Becoming your TOP competitor…

A Jensen & @elonmusk SUPERTEAM would ANNIHILATE any potential competition.

@grok what would this mean for $SPCX?

[Vincent Yiu @vysecurity]

NVDA -10%, SPACEX +20% 😱

[JIMMIE @jimmieX07]

🚨 BREAKING: NVIDIA AND ITS EXECUTIVES HAVE REPORTEDLY PAUSED THEIR PLAN TO SACK CEO JENSEN HUANG OVER THE SEXUAL AFFAIR ALLEGATIONS INVOLVING KIMBERLY POWELL, AS ELON MUSK SAYS HIRING HIM WOULD BE AN “HONOR”!

Elon Musk has reportedly expressed strong support for Jensen Huang, saying that hiring the Nvidia CEO would be an “HONOR” amid growing reports that Nvidia’s board is considering removing its longtime leader. Musk’s comments have added another unexpected twist to the unfolding corporate drama.

According to Bloomberg, Nvidia’s board has brought in an outside law firm to investigate allegations surrounding Huang’s relationship with a woman suspected by US intelligence officials of having links to Chinese intelligence. Meanwhile, The New York Times has reported a separate alleged relationship involving Kimberly Powell, an Nvidia executive.

The controversy has placed Huang’s leadership under extraordinary scrutiny, with reports suggesting that Nvidia’s board is considering a possible leadership change. The Wall Street Journal has also reported that the board is preparing to consider removing him, although no final decision has been publicly confirmed.

Meanwhile, Musk’s reported willingness to welcome Huang into one of his companies raises an intriguing possibility if the Nvidia founder eventually loses his position. After building Nvidia into an AI industry powerhouse, Huang could potentially find another powerful ally in Elon Musk.

THIS WOULD SEND SHOCKWAVES THROUGH THE TECHNOLOGY INDUSTRY! Is Jensen Huang’s future at Nvidia in serious danger, or will he survive the biggest leadership crisis of his career?

[Auren @auren_xbt]

A security guard came after Cardi B for $24 million. The guard was the one ordered to pay Cardi $19,690.

In the video below, Cardi says what the next person who sues her is going to get.

February 2018, a Beverly Hills obstetrician's office. Cardi was pregnant with her first child, and Emani Ellis was working security there when the two of them started shouting.

Ellis claimed a three-inch fingernail cut her face and that Cardi spat on her. Cardi's version was that nobody touched anybody, and that the argument started because Ellis was filming her on a phone.

It took until August 2025 to reach a jury in Alhambra. On the stand, Cardi said Ellis was "suing me for $24 million." Cardi's doctor and the receptionist told jurors neither of them saw it turn physical.

The jury was out for about an hour.

Nine votes needed. All 12 for Cardi.

In a California civil case, nine would have been enough.

Outside the courthouse, Cardi said, "I don't lay in bed all day." She works hard for her money, she said, "for my kids," and she was not going to pay: "I'm not going to settle." She also asked her fans to leave Ellis alone.

Ellis's attorney said they would appeal. In December the judge turned down Ellis's request for a new trial. In March he ordered her to cover $19,690 of Cardi's court costs.

Cardi didn't settle. Ellis got the bill.

Was Cardi B right to take it all the way to a jury instead of paying, or did Emani Ellis just sue the one star who could afford to say no?

[Dario Fresu @dario_fresu]

Stop obsessing over 90° corners in PCB design

Everyone says never route a 90° corner. So we put one in the @Simbeor field solver, sent a 10 GHz signal through it, and simulated how much comes back. Then we cut one small slot in the plane under the trace, just before the corner.

[Vincent Yiu @vysecurity]

That was beautiful!

[Ozor Ndi Ozor @OzorNdiOzor]

A Nigerian businessman arrived at the UK border planning to stay for 26 days.

She wanted him to win

[Matt Brown @nmatt0]

I too have been basing my dismissal of abliterated models off the regular models lack of refusals.

This post from @Jhaddix made me go back and actually test. I think he is on to something.

In some IoT pentest benchmarks of mine, abliterated GLM 5.3 Flash is finishing the task 2-3x times faster on the same hardware.

Running my full benchmark setup now. This could be big.

[Qwen @Alibaba_Qwen]

Qwen4 is coming.

Deeper knowledge. Richer world understanding. Stronger coding and agentic capabilities.

Built for real-world tasks — from complex coding and knowledge work to front-end builds and professional software workflows.

Qwen4-Max is now in preview on Alibaba’s Token Plan. You can also get early access to the new model on QwenWork, Qoder, Qwen APP, and QwenStudio.

Put it to the test on a real problem. Show us what you build. 👀

Token Plan: https://t.co/LOB2Jdt3Sk

[Vincent Yiu @vysecurity]

Is this an Ad? You have to pay to even try it.

[Federico Viticci @viticci]

If you run agents on remote Macs, go get Screens 5.10 NOW.

Finally, a third-party app has brought Apple's High Performance mode to iPhone and iPad.

It's glorious. My review: https://t.co/gRCtBP90cq

[Vincent Yiu @vysecurity]

Damn NVDA is dropping another 5% 😂

[Windpress @Windpress]

The INFINITE JUMP Glitch is so SATISFYING. You can actually skip the gate by jumping right over it. I love when Devs don't put NEEDLESS invisible walls everywhere which makes games feel SMALL and BORING.

[Vincent Yiu @vysecurity]

lol wtf so they’re just making stuff up?

[Soda @fredsoda]

from the Singaporean government on the WSJ’s NVIDIA story:

the SG government never investigated or was looking into Alice Huang

[Vincent Yiu @vysecurity]

@craigapplecom How can we check if we are affected? What’s the serial number pattern?

[Vincent Yiu @vysecurity]

Qwen 4 release...? It sounds from here that there's some tuning work to be done still. Who's coming up with all the fake dates?

[Nick Powers @zyn3rgy]

New technique to identify if LDAP signing bypass has been patched on DCs. @GrayHatKiller found a creative way to determine patch status, and the best part is you can check it unauthenticated. His PR is merged to RelayInformer!