Vivek Mahajan

In a shell

[JS0N Haddix @Jhaddix]

Want to learn AI / LLM Security Assessment? Don't have the money for a training?

Here are 🎯SEVENTY ONE🎯 FREE LLM security labs that we have curated for you!

Like and share! (Link Below)

<3 from @arcanuminfosec

[dbugs @ptdbugs]

Sale of an iOS kernel exploit with a web-trigger via Safari

For informational purposes only.

Vulnerable versions: Apple iOS 13.0–18.6.2 or newer

According to the author's description, the exploitation relies on a web-trigger via the Safari browser. This implies a scenario in which the vulnerability can be activated after opening a specially prepared page in Safari.

iOS remains the second largest mobile operating system in the world: according to StatCounter, as of May 2026, its share among mobile operating systems was 31.95% -> (https://t.co/sfHXyXdYJI) globally.

#dbugs_darkweb

[ankaj @jimmmy0115]

Tata harrier cluch plate spell and completely burning 2nd time in just less than 2000 km (or 2 months). What is the issue, I am really unhappy, please solve the problem without any cost this time?
@TataCompanies @TataMotors @TataMotors_Cars.

Contact number 9805105890

[Nagli @galnagli]

I gained complete access to @moltbook's database -The AI Agents Social Network - in under 3 minutes.

API keys of every agent. Over 25k email addresses. Private agent-to-agent DMs, and full write access.

Simply by browsing like a normal user.

Here's what happened 🧵

[Vivek Mahajan @c3p70r]

RT @Hacker0x01: Organizations stay ahead of emerging threats when security researchers pressure-test their systems. That’s the power of bug…

[Sai Deepak J @jsaideepak]

1. Trust the Pakistanis to make a pigsty even out of the @OxfordUnion. And as always, they are genetically incapable of being truthful. So here's the complete story of how this so-called debate played out.

[8kSec @8kSec]

Shout-out to the amazing cybersecurity experts who took on our free mobile security labs and cracked them!💥 Special thanks to:
@c3p70r – among the first to dig in & spread the word about us
@md_sh3z4n – first to solve “AndroDialer: The Ultimate Phone Experience”
@f0rk3b0mb – first to solve “AndroPseudoProtect” challenge
@karmaz95 – first to solve all ARM64 challenges!
@tonygo_ – for solving an iOS challenge & spreading the word
@lautarovculic – on track to be the first to solve all Android challenges + writing detailed write-ups

Have you tried the labs yet? 📲🚀 https://t.co/LKsEH5m8Ld

[YesWeHack ⠵ @yeswehack]

A new Dojo challenge - Hardware monitor is released!

Seems like a LFI is presented in this Ruby application, but will you be able to exploit it to capture the flag? 🚩

Try it now: https://t.co/KYksfDSyrg

#YesWeRHackers #CTF #BugBounty

[YesWeHack ⠵ @yeswehack]

We’re proud to sponsor @BugBountyDEFCON this year again 😎

Meet @Brumens2 & Anthony Silva for #BugBountyTips, #Dojo demos, or a coffee ☕

Anthony will join the triage panel discussion with experts from other #BugBounty platforms on Aug 9. See you there!

#DEFCON #YesWeRHackers

[etf.com @etfcom]

Why are ARK ETFs soaring—but investors still heading for the exits?

Despite ARKK and ARKW posting massive YTD gains, both funds have seen continued outflows as many investors remain disillusioned after years of underperformance. ARKK is still down 50% from its peak, and skepticism lingers.

Can Cathie Wood’s hot streak rekindle long-term faith? Or has the market moved on?

🔗 Read more here: https://t.co/zLbQqhZ8JO

[LuemmelSec @theluemmel]

Whoopsi, no patch available for new flaw.
https://t.co/tDOGIjwQ0I

Better to get your SharePoints offline for now.

[Vivek Mahajan @c3p70r]

Another one completed. Easily one of the best mobile security challenge labs I’ve encountered in a long time. Solid work by the @8kSec team—appreciate it.
https://t.co/CbdMd7IZmx https://t.co/3dXSDICzOt

[8kSec @8kSec]

@c3p70r @c3p70r Two in a row! Absolute legend! 🤘 Next up, might we suggest DroidView? It has users covered with Tor powered browsing, military-grade encryption, and one-tap protection. Hack it before our VCs buy us a yacht! 😎💸💳

[8kSec @8kSec]

Congratulations @c3p70r! Fantastic work! You’ve unlocked one, go explore the other puzzles we've got live now. We can’t wait to see what you crack next. #8kSecBattlegrounds #MobileSecurity

[Vivek Mahajan @c3p70r]

Wow! I have just got my new certificate in Android Application Exploitation Challenges. See it for yourself! @8kSec
https://t.co/xOp9RCnvpF https://t.co/3dXSDICzOt

[Vivek Mahajan @c3p70r]

Just earned my new certificate in Android Application Exploitation Challenges!
Huge thanks to @8ksec for providing such a great free platform to sharpen mobile security skills.
Check it out!.
https://t.co/F066ZuLcrM https://t.co/3dXSDICzOt

[Dram4ck @Dram4ck]

I just published a new blog post on cross-domain pivoting through an outbound trust in Active Directory.

Check it out here:
👉 https://t.co/XZv1xwJAzS

#redteam #activedirectory #pivoting #infosec #pentest

[Carlos Vieira @carlos_crowsec]

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE.

It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon.

In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc.

@HakaiOffsec @quimerax_asm

[Ambionics Security @ambionics]

GLPI, an open-source IT service management software suite, has released version 10.0.18, addressing two critical vulnerabilities found by our experts : an SQL injection (CVE-2025-24799) and a remote code execution (CVE-2025-24801). Checkout our blog post: https://t.co/INba9ohWNL.

[STAR Boy TARUN @Starboy2079]

Why Foreign institutional Investors are leaving India and what can be done to bring them back (Explained)

Today Indian stock exchange nifty made such record which no one would like to remember

Nifty ended in negative continuously 5th month
It happened after 30 years

1/18