Dbad

Я люблю h4ck1n9!!!)))

[International Cyber Digest @IntCyberDigest]

‼️🚨 Pwn2Own Berlin 2026 just hit a wall. For the first time in 19-years, ZDI rejected dozens of working zero-day RCE submissions because organizers ran out of contest slots.

Rejected hackers are now going public with PoC demos and direct vendor disclosures, breaking Pwn2Own's usual secrecy.

▪️ AI surfaces a massive wave of 0-day RCEs.
▪️ Submissions overwhelm ZDI past max capacity.
▪️ Slots run out. Researchers with working chains get rejected.
▪️ "Revenge disclosures" begin. ← we are here.

Confirmed casualties so far:
▪️ @xchglabs : 86 vulnerabilities prepared (PyTorch, NVIDIA, Linux KVM, Oracle, Docker, Ollama, Chroma, LiteLLM, llama.cpp). All rejected. Now reporting directly to vendors with writeups dropping as patches land.
▪️ @ggwhyp : full-chain Firefox RCE on Windows. Rejected. Publicly demoed (HTML page → cmd.exe → calc.exe). Responsibly disclosed to Mozilla.
▪️ @yunsu_dev : working RCE chain, rejected. Submitting elsewhere.
▪️ @ryotkak : tried to register for 3+ weeks. ZDI confirmed "at maximum capacity, can't add extra contest days." Considered canceling flight and hotel.
▪️ @anzuukino2802 : Claude Code RCE PoC. Rejected.
▪️ @desckimh : 0-day RCEs in Ollama and LM Studio. Rejected.

Reported impact: a community-estimated 150+ researchers tried to register. Accepted contestants are now being warned about collisions. Rejected vulnerabilities going to bug bounty programs may trigger pre-event patches that invalidate the work of those who got in.

ZDI has not publicly addressed the capacity issue. The event still runs May 14-16 in Berlin.

[Nicolas Krassas @Dinosn]

Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents. https://t.co/lACioWjtkf

[7h3h4ckv157 @7h3h4ckv157]

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.mdfile that primes Claude with expert-level methodology for a specific attack surface from SQLi to shellcode, EDR evasion to exploit development.

Resource: https://t.co/0XvEqoqPfv

[NVIDIA AI @NVIDIAAI]

Happy Friday!

We just put DeepSeek-V4-Pro up on https://t.co/es07MrTxSs. It’s the world’s largest open source model at 1.6T parameters, and you can run it for free running on NVIDIA Blackwell GPUs.

Try the NVIDIA NIM API → https://t.co/zeWX4Y7Ipd

[DeepSeek @deepseek_ai]

🚀 DeepSeek-V4 Preview is officially live & open-sourced! Welcome to the era of cost-effective 1M context length.

🔹 DeepSeek-V4-Pro: 1.6T total / 49B active params. Performance rivaling the world's top closed-source models.
🔹 DeepSeek-V4-Flash: 284B total / 13B active params. Your fast, efficient, and economical choice.

Try it now at https://t.co/GCdiMzk1Dl via Expert Mode / Instant Mode. API is updated & available today!

📄 Tech Report: https://t.co/drlDrxkYtp
🤗 Open Weights: https://t.co/T13Y8i7SDM

1/n

[Chaofan Shou @Fried_rice]

Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness -

Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack.

Check https://t.co/d0SZSf1KqF

[Global Statistics @Globalstats11]

The True Size of Mexico 🇲🇽

[Security Harvester @secharvesterx]

DeepZero: An automated, agentic vulnerability research pipeline for finding kernel zero-days
https://t.co/vCWDnMjYAd

[F.O.L.A @folaoftech]

Me pretending to understand this stuff and smiling 🙂😁.

[ς๏гєɭคภς0๔3г ([email protected]) @corelanc0d3r]

New post: Exploit Writing Tutorials series "on video" - collab with @wetw0rk7 : https://t.co/wyNtX8fyZR #sharethelove

[Dbad @d4sherCap0]

When will there be robots that do household chores @elonmusk ?

[PwnFuzz @pwnfuzz]

An automated N-day research pipeline at PwnFuzz.

Ghidra + Ollama + n8n →Diffs Patch Tuesday binaries → LLM analyzes the output → Structured vuln reports, monthly AI-generated reports gets you oriented fast!
Blog: https://t.co/O0EzQNdZev
Repo: https://t.co/wCFo8zoyeL

[Yasho @YShahinzadeh]

How I reverse-engineered an Android app, bypassed custom encryption layer, achieved server-side RCE, and earned a $5000 bounty. read the full story here (TLDR; but worth reading)

https://t.co/xgvffzspiB

[chiefofautism @chiefofautism]

someone built an entire AI RED TEAM - multiple agents that coordinate HACKING ATTACKS together, ZERO human input

PentAGI, open source, one agent does recon, another scans, another exploits, another writes the report. they talk to each other and adapt based on what they find

it ships as one docker container with nmap, metasploit, sqlmap, hydra preinstalled. the AI decides which tool to use and when. you point it at a target and walk away

a red team engagement costs $30-50k and takes weeks. this is one docker command and API tokens

[Hugging Models @HuggingModels]

Meet VulnLLM-R-7B: a specialized AI that reads code like a security expert. It's trained to spot vulnerabilities before they become breaches. This isn't just another chatbot, it's a digital security guard for your codebase. The community is buzzing because it makes security accessible.

[0xor0ne @0xor0ne]

Beginners intro to Linux kernel fuzzing and vulnerability research (2024)

Part 1: https://t.co/b61r4je69j
Part 2: https://t.co/DQ8j6YfN2C
Part 3: https://t.co/Myjt0BpsPy

Credits @slava_moskvin_

#Linux #cybersecurity

[0xor0ne @0xor0ne]

TP-Link (Tapo) C210 cloud camera: bootloader vulnerability and firmware decryption

https://t.co/jUb9a1NTpd

Credits @Watchful_IP

#embedded #infosec

[OccupytheWeb @three_cube]

Mobile Forensics: Extracting Data from WhatsApp

Your chats aren't as private as you think:

https://t.co/jJbqatmuyA

[0xdf @0xdf_]

If you're using writeups to learn how to hack on HackTheBox (or other CTFs), use AI as a tutor. In this video I'll show a free prompt to use, as well as a Claude Skill I developed.

https://t.co/5PfEhDNPrb

[Csaba Kissi @csaba_kissi]

FREE hosting:

🟣 Sevalla․com
🐙 GitHub Pages
🚀 Netlify
⚡ Vercel
☁️ Cloudflare Pages
🦊 GitLab Pages
🔥 Firebase Hosting
🧭 AWS Amplify
🛠️ Render
🌊 Surge
🌟 Gatsby Cloud
🏝️ Neocities․org
🧩 Carrd
📦 FreeHosting
♾ InfinityFree
0️⃣ Static․run
🏆 AwardSpace
🧵 Byet Host
🧭 Bitbucket