axmine

[Marius du Preez @mdp_sec]

https://t.co/hxXItV914C

[dawgyg @thedawgyg]

Since the @Apple Bug Bounty Program is by far the worst program I've ever hacked on, I am going to be dumping all of the data/POCs/report write ups etc for everything found during the 4 months of hacking them. This will include POCs for vulns that didnt meet their bar for a bounty so wasnt reported to them, so you may be able to find ways to escalate some of them. Ill be uploading the data all this weekend.

[探姬 | Hello-CTF 🚩 @ProbiusOfficial]

php2shell稳定利用：
https://t.co/uRz4M2a2DZ

[Kirill Firsov @k_firsov]

php2shell

Tomorrow is a helluva day.

[axmine @axmine_0]

@h4x0r_dz @polydaic 🤣🤣🤣

[Hexacon @hexacon_fr]

The Last Proof of Human Craft by Orange Tsai 🍊 (@orange_8361)

[sudo @rootsud0]

facts

[Paulos Yibelo @PaulosYibelo]

Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon

[Marius du Preez @mdp_sec]

enjoy all
https://t.co/EIzCWH0JxX

[H4x0r.DZ @h4x0r_dz]

My AI agent spent 200 hours in a hacking loop on a target. It found little.
So it made a decision: go out of scope.

It started enumerating subdomains extracted from CNAME records.
Then it found a critical auth bypass.

It accessed production pipelines.
Fully autonomous. No human guidance.
This is the new reality of bug bounty.

Responsible disclosure sent.
But the implications are huge.
AI agents don't care about scope.
They just find a way in.
#AI #CyberSecurity

[axmine @axmine_0]

@h4x0r_dz Does it beat DeepSeek though? 👀

[axmine @axmine_0]

@actuallyclover take a look how many reports they recived in just few days

[Duty @duty_1g]

🚀 x64dbg-MCP Server — fully automated, dynamic, agentic reverse engineering for x64dbg.

🧠 71 MCP tools
🤖 Fully automated & dynamic agentic RE
🔴 22 debugger event callbacks
⚡ Native Zig plugin — zero dependencies
🛠️ Breakpoints, memory, registers, tracing, xrefs, PE analysis & more
🌐 Streamable HTTP + SSE
📦 x32 + x64
Let your AI agent control, analyze, debug, and dynamically reverse engineer binaries directly through x64dbg.
🔗 https://t.co/5gmqJw6SVm
#x64dbg #MCP #AgenticAI #ReverseEngineering #CyberSecurity #RedTeam #MalwareAnalysis #Zig

[International Cyber Digest @IntCyberDigest]

Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time.

His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with.

"If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri

He loved Microsoft.

I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him.

They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below.

According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again.

Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence.

So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case.

All while Abdel was releasing zero-days.

Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000.

He says Microsoft refused to reveal any details about the security breach and went another direction.

If you are reading this, and you can offer him a LEGAL job, this is his e-mail: [email protected]

[Coffin @lostsec_]

Bug Hunting Skills added for the upcoming video on Claude 👀
Make sure you’ve got notifications turned on..

[H4x0r.DZ @h4x0r_dz]

If China had not released all these AI models, we would be buying GPT and Claude for $1 per token today.

[Nick Mykhailyshyn 🇺🇦 @whoareme33]

I earned a $22,500 bounty from Airbnb using a custom Opus 4.7 workflow built with MCP and Skills.

It feels like bug bounty hunting has changed forever