Coldfusion

And if you gaze long enough into an abyss, the abyss will gaze back into you.

[Coldfusion @Coldfusion39]

How lucky I am to have had something that makes saying goodbye so hard.

[RFID Research Group @RfidGroup]

We just crossed 2000 backers on the Proxmark5 Iceman Edition campaign.

Today we are also announcing a new stretch goal. If the campaign reaches $1,000,000, the transparent case edition becomes a selectable option for all post-DEF CON backers.

It is a way to reward the community that keeps this momentum going beyond the initial launch wave. Campaign is still live.

Link in the comments.

[Nicolas Krassas @Dinosn]

A File Format Uncracked for 20 Years: Part 2 https://t.co/0cMwXm4qdQ

[Ryan Naraine @ryanaraine]

"The malware checks for the density of the material being simulated and only acts when that value passes 30 g/cm³, the threshold uranium can only reach under the shock compression of an implosion device."

Symantec advances the fast16 research
https://t.co/jxj6OdSyDJ

[Iceman @herrmann1001]

Only ~27 days left in the Proxmark5 early pricing window.

We've already unlocked one stretch goal and are closing in on the Transparent PCB Name card at $600k.

If you've been waiting for a worthy successor to the Proxmark3 RDV4, this is it.

https://t.co/BwWxxgfWyH

#Proxmark

[Abdul Mhanni @abdo_mhanni]

@Octoberfest73 I remember you once posted a quirk of impacket that could be used as an ioc so I thought you’d like this list of 50+ impacket IOCs😄 https://t.co/Xvro8ggumy

[vx-underground @vxunderground]

CVE-2026-31431 a/k/a CopyFail

> Linux LPE
> Description sounds like AI slop
> Exploit is legit
> Impacts every Linux kernel from 2017 - Now
> Proof-of-concept released
> It's Wednesday?

https://t.co/FXgjWW7lOV

[Tom Hegel @TomHegel]

Fresh research from the team (@vkamluk / @juanandres_gs) - this one goes back quite awhile!

fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

https://t.co/cR83vHEzWo

[Nightmare Eclipse @ChaoticEclipse0]

In response to CVE-2026-33825 (BlueHammer patch),
The RedSun, a new unpatched windows defender EoP vulnerability has been publicly disclosed and can be found here -
https://t.co/4nRcWSbuBv

[Nicolas Krassas @Dinosn]

RedSun - Need to overwrite protected system files? Windows Defender is never gonna let you down. https://t.co/yWpSFrA9VW

[Swissky @pentest_swissky]

The Mystery of https://t.co/3DPDF0jrIx - @acidvegas
46 million DNS ANY queries for a Danish man's personal domain, from DoD address space, residential ISPs, and cloud providers across 12 countries. A two-year mystery nobody can explain.
https://t.co/482wBTiyhZ

[Justin Elze @HackingLZ]

Raph is back at it - Small PIC Energy 😂

https://t.co/kIkXdA8IfQ

[Nicolas Krassas @Dinosn]

CVE-2025-8061: From User-land to Ring 0 https://t.co/rtDaQSi9wd

[Co11ateral @co11ateral]

Forensic cold boot attacks are familiar to many, but have you actually seen how they work in real life?

We decided to show how such attacks are carried out against an encrypted laptop and how secrets can be extracted from it

The best takeaway here is to never leave your computer unattended even for a few minutes

https://t.co/wnPpe2TPAr

@three_cube @_aircorridor
#dfir #coldboot

[SpecterOps @SpecterOps]

Relayed NTLM creds are powerful, if you can use them.

@senderend shows why browsers fail through ntlmrelayx SOCKS and introduces ghostsurf to make NTLM-authenticated web apps accessible.

Read more ⤵️ https://t.co/BdtzoKquD1

[Praetorian @praetorianlabs]

🔓 CVE-2025-33073: Any domain user → SYSTEM → DC TGT → domain compromise. No admin needed.

SMB signing on DCs won’t save you.

https://t.co/9DLn8dBs66

#theguardplatform #offensivesecurity

[MDSec @MDSecLabs]

In our latest post, researcher @craigsblackie documents attacks against the Dell UEFI firmware that enable DMA attacks against TPM-only bitlockered devices https://t.co/b835C7rlW4

[Moloch @LittleJoeTables]

@moonlock_lab @patrickwardle @g0njxa @arinwaichulis @philofishal @shablolForce @txhaflaire @theevilbit @L0Psec @theJoshMeister @DefSecSentinel @bruce_k3tta @birchb0y @AndreGironda @suyog41 @NietzscheLab On the topic of undetected MacOS payloads, we also now support shellcode/reflective in-memory dylibs on darwin/arm64 :-)

https://t.co/MIyGQ6qEfQ

[NK @Nikaiw]

meet VMkatz, https://t.co/eza4AXRuFT

[klez @KlezVirus]

[RELEASE] Better late than never! Part 3 is out! Fantastic unwind information and where to find them. We went digging through .pdata, RTF Lookups, and a few ntdll internals that probably weren't meant to be touched. BYOUD dropping alongside. Enjoy 😉

https://t.co/gQ6lRFctO7

[Ido Veltzman @Idov31]

A new post (with a new website design) is finally out: https://t.co/LB2YKVXzUg.

After two years, I wanted to start posting again and really wanted to share something that contains some technical details about hypervisors, my opinions on utilizing hypervisors for defense and 1/2