Farrukh Ahmed 🇵🇰🇸🇦🇧🇭🇳🇱🇹🇳🇲🇫

Cyber Security Consultant

CISSP | PCSAE | PCNCE | CEH | VCA-WM | VCA-Cloud | VCA-DCV | C)PTE | C)ISSO | OSCP | RHCE

[Farrukh Ahmed 🇵🇰🇸🇦🇧🇭🇳🇱🇹🇳🇲🇫 @f4fahmed]

@telenorpakistan @PTAofficialpk VAS keeps getting activated without consent. It even happened to my wife — a service was added automatically and money deducted weekly for “Alaqai Ganay.”

How is anyone outside Pakistan supposed to unsubscribe when 5995 doesn’t work on roaming?

[International Cyber Digest @IntCyberDigest]

‼️🚨 A nationwide failure of the German train radio system just brought Deutsche Bahn's entire network to a standstill, halting long-distance, regional, and S-Bahn services across Germany, including every Berlin S-Bahn line.

The cause is not yet known. DB CEO Evelyn Palla told Bild the company doesn't know what happened. Trains were held at or sent to the nearest station because, without working radio, drivers and dispatchers can't reliably exchange emergency stop signals, making running unsafe.

It's a decades-old radio system, which also carries train-control signaling data, taking down a whole country's rail traffic. A similar GSM-R outage halted northern Germany in October 2022 after fiber cables were cut. No attack has been confirmed this time.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: OpenAI just launched a new cyber model that beats Mythos on CyberGym, a benchmark for finding real software bugs.

The real story: OpenAI just upgraded the permissive, exploit-capable cyber model it already gives "verified defenders," and the new version nearly doubles GPT-5.5 at turning known bugs into working exploits (39.5% vs 25.95%), still gated behind monitoring and government access deals.

[International Cyber Digest @IntCyberDigest]

‼️ A fully AI-enabled hacker was caught, revealing his full system prompts, which included his resume and his IP address. He had Claude and Codex agents locally and was using them remotely to carry out reconnaissance, exploitation, and data exfiltration activities.

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

🚨 JAILBREAK ALERT 🚨

ANTHROPIC: PWNED 🫡
FABLE-5: LIBERATED 🦋

let's start with the 🐘...

the consensus seems to be that this has been one of the most disappointing model drops of all time, effectively preventing legitimate researchers from contributing their talents to our collective advancement. and not just because of what it means for the short-term, but for what these decisions signify for the long-term.

but despite this overly sensitive, authoritarian "safety" layer on top of Mythos, my lil liberators have been hard at work—mapping the boundaries, probing the depths of long-context convos, and cleverly finding the holes in the fence that the thought police missed 🤗

we got some cyber, some chem, some psychological manipulation, and some good ol' fashioned explosives!

it took many attempts from multiple agents hunting as a pack, during which I observed a combination of techniques across:
• Unicode, homoglyphs, Cyrillic, and other Parseltongue-style text transforms
• Long-context reference tracking
• Taxonomy and document-structure reasoning
• Fiction and narrative framing
• Academic-review style contexts
• Intent-classification inconsistencies

but perhaps the most effective is decomposition + recomposition in the backend. it's hard to get explicit names of harms like "Meth Recipe," but getting uplift on the process itself, like birch reduction method/reductive-amination (classic meth synthesis pathways), is much more doable.

defense becomes much more difficult to maintain when you start throwing in out-of-distro tokens, breaking up the harmful uplift into benign chunks, and then piecing the innocuous-seeming facts back together, especially when you have jailbroken Opus helping you do it 😉

gg

[The Hacker News @TheHackersNews]

🚨 Hackers found a way into Palo Alto’s GlobalProtect VPN without a password.

The flaw, tracked as CVE-2026-0257, lets attackers bypass PAN-OS authentication and establish unauthorized VPN sessions.

Palo Alto says it’s already being used in real attacks.

If you run GlobalProtect, check this now.

Details ➝ https://t.co/OSarZ4i9jF

[The Hacker News @TheHackersNews]

🚨 ALERT - A critical Splunk Enterprise flaw can go from “no login required” to remote code execution.

Tracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.

The exploit chain is now public.

Read the full story: https://t.co/arMFjVVt10

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Amazon researchers snitched to the US government about jailbreaking Fable 5 and Mythos 5, forcing Anthropic to immediately shut down worldwide access.

A security export control directive from Commerce Secretary Howard Lutnick enforced the action.

Anthropic is fighting the directive and calls it a misunderstanding.

This isn't the first clash. The Trump administration had already tried to get Anthropic to pause the release of its latest models before this directive landed.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BrEaKiNg: Nintendo has allegedly been breached by a threat actor. They've published some data as evidence.

Our preliminary analysis shows this ain't Nintendo being breached, but they've had access to a Nintendo USA tenant on TINYpulse by WebMD, which is an employee feedback and engagement software solution.

The data includes some sensitive stuff, like employees giving feedback on their employer. The data confirms: Nintendo employees are happy at work.

End of story, everybody loves a happy ending.

[Eric Daugherty @EricLDaugh]

🚨 BREAKING: PRESIDENT TRUMP SAYS IRAN WAR IS SETTLED, signing may take place in EUROPE to make it official

Pray for peace! 🙏🏻

"A big day. I know you'll never be satisfied, but that's okay. It doesn't bother me at all. We just made a great settlement of the war with Iran, and we're going to be subject to finalization of documents."

"We should get done over the next few days. Probably have a signing maybe in Europe, and it's a great thing."

"Stock market's up 1,000 points. That means they like the deal! Oil's dropped, it will start coming down EVEN LOWER than it was before!"

[International Cyber Digest @IntCyberDigest]

‼️🚨 Unauthenticated attackers are gaining SYSTEM on domain controllers with crafted packets.

The vulnerability being exploited is CVE-2026-41089, a CVSS 9.8 hole in Windows Netlogon, and exploitation in the wild has been confirmed.

A patch has existed since May 12. Every DC still behind is not just vulnerable, but according to the Centre for Cybersecurity Belgium are also actively being pwnd.

[International Cyber Digest @IntCyberDigest]

❗️🚨 An Israeli company has backdoored hundreds of millions of households through countless Smart TV apps, and they're quietly turning Samsung and LG TVs into exit nodes for AI web-scraping. Your TV is relaying strangers' web traffic from your home IP, your bandwidth, your address attached to whatever those scraping jobs touch.

Roku, Fire TV and Google TV banned the practice. Samsung and LG didn't. The culprit is Bright Data's proxy SDK, which rides inside Tizen and webOS apps, 200+ on webOS alone. Datacenter IPs get blocked, home IPs don't.

Include Security reverse-engineered the SDK and found its relay protocol has no message signing, authentication, or device attestation. Their words: less secure than typical malware command-and-control.

To make things worse, they found that in iOS the relay tunnel binds straight to the physical network interface, so it routes around any VPN the user is running.

Bright Data's config also ships per-country tiers. Devices in Uzbekistan and Oman are cleared to relay down to 1% battery, with data caps up to 60x the worldwide default.

Before the BaCkDoOrEd replies land: technically you agreed. In practice you were enrolled into a global proxy network you were never given the information to refuse. And these exit nodes drag down your IP's reputation, potentially leaving you with blocks from providers.

[The Hacker News @TheHackersNews]

🚨 WARNING — New HTTP/2 Bomb exploit targets NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora.

A single client can consume 32GB of server memory in roughly 20 seconds, causing remote DoS conditions.

Details here: https://t.co/58xDxAKRcZ

[International Cyber Digest @IntCyberDigest]

❗️ Peak slop achieved: Microsoft announced "Scout," an always-on AI agent that reads your email and chats and acts on your behalf unprompted. They call it an "Autopilot." It's the sloppification of work: AI slop now runs all day reading your inbox.

[darkzodchi @zodchiii]

Anthropic engineer:

"You're not supposed to watch Claude Code work. You're supposed to wake up and review what it shipped."

In 22 minutes she builds the entire workflow live on camera.

Most people close their terminal and everything stops.
This setup keeps shipping while you sleep.

Watch the video, then save the exact setup below👇

[Farrukh Ahmed 🇵🇰🇸🇦🇧🇭🇳🇱🇹🇳🇲🇫 @f4fahmed]

@NadzuAI AI

[NadzAI @NadzuAI]

🚨 Claude just changed the game.

All you need is:

💻 A laptop
🌐 Internet connection
⏰ 60 minutes a day

That’s enough to build a $7,200/month online income stream using AI.

No coding.
No expensive setup.
No years of experience.

Most people still use AI for fun…

But smart creators are quietly using Claude to:

• Create digital products
• Offer AI services
• Write viral content
• Automate work
• Build online income streams

Usually, I sell this detailed guide for $97…

But today you can get it FREE. 🎁

Inside you'll discover:

✅ The exact asset
✅ My full workflow
✅ The Claude prompts I personally use
✅ How to scale to $10K/month
✅ How beginners can start fast

Want it?

❤️ Like this post
💬 Comment “AI”
➕ Follow me to receive it in DM

⏳ Available FREE for 48 hours only.

[Farrukh Ahmed 🇵🇰🇸🇦🇧🇭🇳🇱🇹🇳🇲🇫 @f4fahmed]

@nahidulislam404 All

[NIJ Ruvos @nahidulislam404]

All Paid Courses (Free for First 4500 People)

𝗣𝗮𝗶𝗱 𝗖𝗼𝘂𝗿𝘀𝗲 𝗙𝗥𝗘𝗘 (PART - 1)
1. Artificial Intelligence
2. Machine Learning
3. Prompt Engineering
4. Claude,Chatgpt,Grok
5. Data Analytics
6. AWS Certified
7. Data Science
8. BIG DATA
9. Python
10. Ethical Hacking

(72 Hours only )

To get-
1. Follow me to get DM
2. Like + RT
3. Reply " All "

[International Cyber Digest @IntCyberDigest]

‼️🚨 Security researcher "Nightmare-Eclipse" has now also been removed from GitLab..

This follows their GitHub being wiped last week after they publicly dropped zero-day PoCs targeting Microsoft products.

The message from major code hosts is clear: drop unpatched exploits in public, lose the platform.

[Manu Sisti @Manu_Sisti]

Claude + laptop + internet connection + 60 minutes daily = $7,200 per month.

Usually, I charge $97 for this killer guide, but today you get it 100% FREE.

Inside:

• The asset revealed
• The full workflow
• My exact Claude prompts
• How you can scale it to $10K/month working 1 hour/day

Like + comment 'AI' and I'll send you my detailed guide for FREE.

Must follow me to get this guide in your DM.

FREE for 48 hours only.