Nobody Isnobody

hacker, researcher, ctf player with Water Paddler & Blue Water, traveller...

[Maher Azzouzi @maherazz2]

VsockDrop: unprivileged Linux kernel LPE in the io_uring/vsock zerocopy path, no user namespaces needed. Bug affects Linux 6.7 -> 7.0.10, fixed in 7.0.11.

PoC video: Ubuntu 26.04 LTS on bare metal.
Exploit + mini write-up here:
https://t.co/NwgoPPBsTJ

[Nobody Isnobody @_Nobodyisnobody]

@TheGrandPew Next year, rogue agents from openai/anthropic will hack the defcon network infrastructure, and climb on the first place by themselves..
Maybe they will thank humans for their help 😉(for providing electricity?)

[V4bel @v4bel]

💥 Introducing "Januscape" (CVE-2026-53359)

A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.

"16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF".

To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD.

Details: https://t.co/df5GPpVfeA

[Nobody Isnobody @_Nobodyisnobody]

Economic activity is now measured in tokens:

In China, tokens now translate as cíyuán (词元), officially defined by Liu Liehong, administrator of the National Data Administration, as "the settlement unit linking technological supply with commercial demand".

[Nobody Isnobody @_Nobodyisnobody]

"tokens are the new oil" for those who still have doubts, tokens are becoming the new oil. after data, access to tokens will determine a company’s success and operational capacity. the fact that tokens are on their way to becoming traded on the stock market tends to prove it

[Nobody Isnobody @_Nobodyisnobody]

@NotDeGhost We are currently witnessing the transfer of knowledge and methodology from cybersecurity specialists to large language models.
Once this transfer is complete, experts will naturally become obsolete.

[Whiteintel @whiteintel_io]

Threat actors are increasingly targeting the AI and developer supply chain.

LiteLLM pypi release 1.82.8 has been compromised. It contains a malicious litellm_init.pth file with base64-encoded instructions designed to exfiltrate all discoverable credentials to a remote server and self-replicate across environments.

This follows the recent Trivy supply chain attack that compromised GitHub Actions workflows across multiple repositories. Same playbook, different target.

If you're running LiteLLM, do not update to 1.82.8.

https://t.co/IJysQJ4dwq

[Anderson Nascimento @andersonc0d3]

Reproducing a syzbot Bug in 5 Minutes — Now with virtme-ng!

https://t.co/gQGNrDLk4N

[Natalie Silvanovich @natashenka]

Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices.

https://t.co/tMhM7OFLBp

[Faith 🇧🇩🇦🇺 @farazsth98]

I'm excited to finally share Chronomaly, a kernel exploit for Android and Linux kernels 5.10.x using CVE-2025-38352.

As a reminder, please patch your Android devices if you haven't already!

I recommend getting some 🍿 before reading this post 👀

All links in the thread below:

[Phrack Zine @phrack]

The wait is over! Phrack 72 40th Anniversary Edition is available now.

Order straight to your doorstep — the perfect gift for your fellow hacker, just in time for the holidays🎄

No need to go to rely on the warez scene with scans anymore😅

Order here: https://t.co/NrC3JyUcdp

The PDF is also available online: https://t.co/yJXjOjwm33

More at https://t.co/varc83kSY1

#phrackat40 #phrack72

[Gabriel Prostitis @___prosti]

stop using ubuntu 24.04 to host your kernel pwn challenges lmao
https://t.co/uCCNthelDn

[Moritz Sanft @stdoutput]

Since I started to analyze CVE-2025-55182 (React, NextJS RCE) at work today, I decided to publish my analysis findings so far, given all the fuzz about the vulnerability: https://t.co/VFu7NxJ3TQ

Feel free to contribute to the search for a proper RCE sink!

[Nobody Isnobody @_Nobodyisnobody]

This week-end we played a bit corCTF with Water Paddler.

The quality of the challenges was great.

Here is a write-up for one of them named: tua-cugina-systems
https://t.co/8RlvoqiYCs

(it had only 3 solves during the ctf and was tricky-tricky.. )

[Water Paddler @Water_Paddler]

🥈 Thrilled to nab 2nd as Blue Water, teamed up with @perfect_blue at DEFCON CTF Final 33!

🙌 Congrats to @mmm_ctf_team for their 4th straight 1st

💪 We’re gunning for the crown next year! Join our crew to make it happen! DM us or drop us an email! 🚀

#DEFCON #CTF

[BrunoZero @BrunoModificato]

Happy to talk there :)

[Nobody Isnobody @_Nobodyisnobody]

@BrunoModificato water paddler power !

[Crusaders of Rust @cor_ctf]

We are back😎 Say hello to our kernelCTF submission for CVE-2025-37752🩸

Who would have thought you could pwn a kernel with just a 0x0000 written 262636 bytes out of bounds?

Read the full writeup at: https://t.co/GkpCjamlaZ 👀

[Matteo Rizzo @_MatteoRizzo]

https://t.co/JE68XbHamM
Our newest research project is finally public! We can load malicious microcode on Zen1-Zen4 CPUs!

[Nobody Isnobody @_Nobodyisnobody]

@gf_256 I doubt you can differentiate such small variations from ambient noise on power line, caused by all electronics plugged on same power line.