Force

News for:
security
forensic
network
android
kali
ubuntu
cve
bug
attack
rat
...

[Geek Lite @QingQ77]

OSINT Mapping Tool — 开源情报关系映射工具

在浏览器中组织开源情报研究，将社交账号、电话、车辆等标识符与地理位置关联映射。

https://t.co/jgJn4NMaQ9

一个纯前端工具，用来做开源情报的整理和关联。信息页面用节点图展示各类线索（账号、电话、车辆等），可以连线表示关联；地图页面标记地点，也能和线索挂钩。支持 Google Maps 和 OpenStreetMap 两种地图，数据存成本地 JSON 文件，不上传任何东西。React 18 + Vite，浏览器里直接跑。

[Cyber Security News @The_Cyber_News]

🚨 Windows BitLocker 0-Day Vulnerability Allows Attackers to Bypass Security Feature

Source: https://t.co/nKVJSPN6eK

Microsoft disclosed a new Windows BitLocker Security Feature Bypass vulnerability, tracked as CVE-2026-50507, on June 9, 2026, as part of its June Patch Tuesday security release.

The flaw, rooted in a protection mechanism failure, allows an unauthorized attacker with physical access to bypass BitLocker Device Encryption and access sensitive data on the system's storage device.

While there is no evidence of active exploitation at the time of release, proof‑of‑concept code exists, which typically accelerates the adoption of attacks.

#cybersecuritynews

[Cyber Security News @The_Cyber_News]

⚠️ Windows RDP Vulnerabilities Allow Attacker to Expose Sensitive Data

Source: https://t.co/TBOlg3lko6

Windows systems are impacted by two new Remote Desktop Protocol (RDP) information disclosure vulnerabilities, CVE-2026-42908 and CVE-2026-45639. Both issues were resolved in Microsoft’s security updates released on June 9, 2026.

Both flaws stem from out-of-bounds reads in the RDP stack and are rated Important, with a CVSS v3 base score of 7.5. Microsoft describes CVE-2026-42908 and CVE-2026-45639 as information disclosure vulnerabilities in Windows Remote Desktop Protocol caused by an out-of-bounds read condition.

An unauthenticated attacker can exploit these bugs remotely over the network without any user interaction.

#cybersecuritynews

[Cyber Security News @The_Cyber_News]

🚨 Windows Defender 0-Day Exploit “RoguePlanet” Grants SYSTEM Access to Attackers

Source: https://t.co/h0SqQD6cjB

A researcher known as Nightmare Eclipse has publicly released a new proof-of-concept (PoC) exploit named RoguePlanet, targeting a previously undisclosed race condition vulnerability in Microsoft Windows Defender.

When successfully executed, the exploit spawns a command shell running under SYSTEM-level privileges, granting an attacker the highest possible access on a compromised Windows machine.

The release, posted to GitHub, arrives on Patch Tuesday, June 10, 2026, adding urgency to an already escalating series of Defender-targeting disclosures.

#cybersecuritynews

[Force @Forcedalas]

@Sogol099394475 @elonmusk Fu*k Israel

[Vivek | Cybersecurity @VivekIntel]

Cybersecurity AI (CAI): Open-Source AI Red Teaming & Pentesting Framework 🤖💀

CAI is an open-source framework built for AI-powered cybersecurity operations, combining autonomous agents, offensive security tooling, CTF automation, vulnerability discovery, AI red teaming, and security research workflows.

Key highlights:

• 300+ supported AI models
• Multi-agent architecture (ReAct, Swarm, Handoffs)
• Built-in security tools and guardrails
• MCP support for Burp Suite and external tooling
• Designed for CTFs, bug bounty hunting, pentesting, and AI security research
• Nearly 9K GitHub stars ⭐

A valuable resource for Security Engineers, Pentesters, AI Red Teamers, Threat Researchers, and anyone exploring Agentic AI in cybersecurity.

🔗 https://t.co/frEHB9nCvk

#AIRedTeaming #AISecurity #CyberSecurity #Pentesting #BugBounty #LLMSecurity #AgenticAI #RedTeam

[Cyber Security News @The_Cyber_News]

🛡️ CISA Warns of Linux Kernel Improper Authentication Vulnerability Exploited in Attacks

Source: https://t.co/nYjfoejPRS

CISA has added a critical Linux kernel vulnerability, tracked as CVE-2022-0492, to its Known Exploited Vulnerabilities (KEV) catalog, warning that the flaw is being actively leveraged in real-world attacks.

The issue, categorized as improper authentication, affects Linux systems using the cgroups v1 release_agent feature and may allow attackers to achieve privilege escalation.

By exploiting this behavior, an attacker can execute arbitrary commands with elevated privileges, effectively escaping containerized environments or gaining root-level access on the host system.

#cybersecuritynews

[Anastasis Vasileiadis @Anastasis_King]

📌SSRF Bypass Payloads

[Vivek | Cybersecurity @VivekIntel]

KaliGPT: AI-Powered CLI Assistant for Ethical Hackers & Cybersecurity Learners 🤖💀

🔥 Features:

• Gemini Integration
• ChatGPT Support
• OpenRouter Models
• Ollama Local LLMs
• Agentic AI Workflows
• Online Web Search
• Linux Terminal Native
• Termux Support
• Tool Discovery & Management
• Multi-Provider AI Switching
• Offline + Online Modes

Use Cases:

• Learning Ethical Hacking
• Pentesting Workflows
• Linux Automation
• Cybersecurity Research
• OSINT Assistance
• Security Tool Guidance
• Red Team Learning
• CTF Practice

One command gives you AI assistance directly inside your terminal.

🔗 https://t.co/Rckdai85m1

Perfect for Cybersecurity Students, Pentesters, Bug Hunters, OSINT Researchers, and Linux Power Users.

#CyberSecurity #EthicalHacking #KaliLinux #InfoSec #Pentesting #OSINT #Linux #AI #GenAI #RedTeam

[Cyber Security News @The_Cyber_News]

🚨 Fake Claude Code Installer Via Google Sites Delivers Credential-Stealing Malware

Source: https://t.co/6s9juUivcS

A recently identified campaign uses fake pages mimicking Claude Code and OpenAI Codex, hosted on trusted Google Sites infrastructure, to trick users into running commands that quietly steal their credentials and other sensitive personal data from their devices.

The attack follows a technique known as ClickFix, where victims are shown what looks like a legitimate setup page and told to execute a short command. There is no file downloaded in the traditional sense.

Instead, the entire malicious operation runs silently in memory, making it much harder for standard security tools to catch it in the act.

#cybersecuritynews

[Cyber Security News @The_Cyber_News]

🚨 Microsoft Edge Vulnerability Allows Remote Attackers to Execute Arbitrary Code

Source: https://t.co/ucBHY0LbyF

Microsoft has released a security update addressing a critical vulnerability in Microsoft Edge that could allow remote attackers to execute arbitrary code on vulnerable systems.

An attacker who can trick a user into opening a malicious file or visiting a crafted page could exploit this flaw alongside other bugs to run code in the logged-in user's context.

📌 CVE-2026-45495 (CVSS 7.5): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge

📌 CVE-2026-45494 (CVSS 5.0): A navigation-handling weakness that can enable cross-origin script injection; user interaction required.

📌 CVE-2026-45492 (CVSS 4.3): Insufficient origin validation in cross-device managed sign-in, which can expose restricted functionality and be chained with other issues.

#cybersecuritynews #MicrosoftEdge

[Cyber Security News @The_Cyber_News]

⚠️ Critical Notepad++ Vulnerabilities Allow Attackers to Execute Arbitrary Code

Source: https://t.co/iSort2Ikje

Notepad++, one of the most widely used open-source text editors for Windows, has released an urgent security update addressing three vulnerabilities, including two arbitrary code execution flaws that could allow attackers to silently run malicious programs on a victim's machine.

The most severe of the three is CVE-2026-48778, which targets the <GUIConfig name="commandLineInterpreter"> tag inside Notepad++'s config.xml file.

📌 CVE-2026-48770 - Crash via malformed XML structure

📌 CVE-2026-48778 - Arbitrary code execution via config.xml

📌 CVE-2026-48800 - Arbitrary code execution via shortcuts.xml

#cybersecuritynews

[Force @Forcedalas]

Have you seen this series? What do you think? In my opinion, it is the best series on quantum science.

[Dark Web Informer @DarkWebInformer]

‼️CVE-2026-0300: PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID Authentication Portal

CVSS 9.3

PoC: https://t.co/V4z4ro2NPq

FOFA Query: app="Palo-Alto-pan-os"

FOFA Link: https://t.co/YHw3yMbYSF

Results: 32,070

Blog Post: https://t.co/sTKo6l4jn3

[Intigriti @intigriti]

SQLi exploitation guide for beginners!

A thread! 🧵👇

[Mobile Hacker @androidmalware2]

Comparing 3D printed Flipper One model with Flipper Zero
https://t.co/6OUtoKj5Fi

[rapiddns @rapiddns]

One-line subdomain + subdomain takeover:

./rapiddns-cli search https://t.co/cSEuCMwnjJ --column subdomain -o text| nuclei -t http/takeovers -o takeover_results.txt

rapiddns-cli
https://t.co/WyDuhABnAB

#BugBounty #Recon #InfoSec #bugbountytips #hackerone #bugcrowd

[Tom Dörr @tom_doerr]

Collection of penetration testing tools

https://t.co/1jf2iZRqtJ