Xar

Programmer (C ; C++ ; Lua) & penetration tester (Vulnerability Vector Analyst) :-) Following unnecessary - I only post on my main account

[Xar @Xar1964]

‼️⚠️‼️

[The Hacker News @TheHackersNews]

‼️ OnePlus confirmed a stock phone could be rooted by an installed app. Then it warned the researcher not to publish.

The app needs no special permissions. OnePlus confirmed the two flaws in May, but no fix was available when the researcher disclosed them. No real-world exploitation is known.

How the root chain works → https://t.co/0WRNLlTvyd

[Xar @Xar1964]

@JulesWarDa Er kannte sie halt nur unter dem Namen „Bruder“ und „Papa von Bruder“ 🤷‍♂️

[Xar @Xar1964]

@gruenebombe https://t.co/yv2Jcret1c

[Xar @Xar1964]

@WayneSchlegel_ @Diranar Kein Problem, inzwischen sollte auch @BILD wissen, dass es Archive gibt. https://t.co/9chhpSY9D0 😊

[Xar @Xar1964]

@elonmusk @wholemars In Germany, we call it a „Pimmel“ 🫣

[Xar @Xar1964]

Berlin could use this. At 5.8 TB, a data leak would definitely get noticed — it only leaves by truck. Although… even a convoy outside the Rotes Rathaus wouldn’t register with the CDU until someone filled out a form for it. 😈

[Dark Web Intelligence @DailyDarkWeb]

Developers today:
“Deploying to production…”

Developers in 1926:
*CLACK*
*CLACK*
*CLACK*
*CLACK*

“Download complete.”

And somehow it still had fewer dependency issues than npm. 😂

#Programming #TechHumor #Developers #CyberHumor

[Xar @Xar1964]

‼️⚠️‼️

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: Asus has been breached and is warning eShop customers of unauthorised access to part of its online store, where customer contact details and order records may have been accessed.

The company says it is not aware of any misuse so far but warns the data could fuel convincing emails, texts and phone calls that appear to relate to Asus orders.

[Xar @Xar1964]

‼️⚠️‼️

[FBI @FBI]

The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the https://t.co/xzuiRQwBTb portal and alleged impact to FBI employee personally identifiable information (PII). While the point of breach is still undetermined—whether a third-party or the FBI’s enterprise—we are actively and aggressively investigating this matter and working closely with those third-party providers that support https://t.co/xzuiRQwBTb to mitigate any and all risk.

[Xar @Xar1964]

@hanfverband Da bin ich raus. Auf einem Volksfest mit Familien und Kindern muss man nun wirklich nicht auf Biegen und Brechen für Cannabis-Konsum kämpfen. Solche Aktionen werfen am Ende eher ein schlechtes Licht auf alle, die für einen vernünftigen Umgang mit Cannabis stehen.

[Xar @Xar1964]

‼️⚠️‼️

[vxdb @vxdb]

ShinyHunters PSA to the FBI

[Xar @Xar1964]

‼️⚠️‼️

[FBI Director Kash Patel @FBIDirectorKash]

SIX CYBERCRIMINALS EXTRADITED TO THE UNITED STATES.

Operation Riptide sent a message every cybercriminal targeting Americans needs to hear:

There is NO safe harbor.

The FBI and our international partners will identify you. We will locate you. And no matter where in the world you try to hide, we will work to bring you back to the United States to face justice.

Borders will not protect you. Distance will not save you.

We will find you.
—DKP 🇺🇸

[Xar @Xar1964]

@DarkWebInformer I’m a pentester in Germany.
Germany in one meme:
Explaining cyber risk to the board.
Meanwhile: Berlin is leaking, healthcare is showing up on leak sites, and anyone trying to test for real first hits approvals, scope theater, and “we’re not allowed to do that.”

[Xar @Xar1964]

‼️⚠️‼️

[Dark Web Informer @DarkWebInformer]

‼️🇩🇪 ShinyHunters names a German healthcare company

🇩🇪 Fresenius Medical Care - A Germany-headquartered healthcare company specializing in dialysis products, services, and treatments for people with kidney disease.

[Xar @Xar1964]

@polizeiberlin Warum so viele Beamte? Einfach hängen lassen und abwarten 🤷‍♂️

[Xar @Xar1964]

‼️⚠️‼️

[The Hacker News @TheHackersNews]

🚨 A public exploit now targets an unpatched Ubuntu 26.04 kernel flaw that can escape containers and gain root on the host.

The AF_UNIX bug is reachable through syscalls allowed by default Docker and Kubernetes seccomp profiles. No attacks are confirmed.

How it works: https://t.co/AsNPkMC4eR

[Xar @Xar1964]

‼️⚠️‼️

[BleepingComputer @BleepinComputer]

D-Link warns of max severity zero-day bug in DIR-822A routers
https://t.co/2cwQyH16W4

https://t.co/2cwQyH16W4

[Xar @Xar1964]

‼️⚠️‼️

[Blue Team News @blueteamsec1]

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw https://t.co/eFKCwdUVsY #CyberSecurity #VPN #PaloAlto #GlobalProtect #CVE2026

[Xar @Xar1964]

@JuedischeOnline Immerhin ist die AfD mit ihren islamfeindlichen Positionen nicht an der Macht 😊 *ironie off*

[Xar @Xar1964]

‼️⚠️‼️

[Cyber Security News @The_Cyber_News]

🛡️Critical WordPress Core Vulnerability Lets Attackers Execute Code Without Logging In

Details: https://t.co/WokyPZ1rjz

WordPress has released version 7.1.2 to address a critical security vulnerability that could allow unauthenticated attackers to execute code on vulnerable websites under specific conditions.

The flaw is tracked as CVE-2026-87902, and it affects WordPress page template resolution, a core mechanism that determines which PHP template file renders a requested page.

The vulnerability can allow a remote attacker to influence template resolution and cause WordPress to include a readable local PHP file located outside the active theme directory.

#cybersecuritynews

[Xar @Xar1964]

‼️⚠️‼️

[BleepingComputer @BleepinComputer]

Chinese hackers exploit multiple technologies to steal govt data
https://t.co/DSxn1daSik

https://t.co/DSxn1daSik