InfoFox

InfoSec blueteamer and recreational coder

[Mario Nawfal @MarioNawfal]

🇸🇾🇮🇱 A blunt message from Damascus to Beirut: dealing with Israel is a trap.

Syrian President Ahmad al-Sharaa reportedly told Lebanese PM Nawaf Salam to avoid the path Syria took, handing over concessions and getting nothing back.

He described Israel's approach as squeezing out one giveaway at a time while leaving itself room to keep striking later.

What makes it land is the messenger.

Al-Sharaa already tried engagement, and Syria kept absorbing attacks regardless.

He's now telling his neighbor to learn from his loss instead of his example.

Writer: Daniel

[Watcher.Guru @WatcherGuru]

JUST IN: 🇺🇸 US government orders Anthropic to suspend foreign access to Mythos Fable 5 AI model, citing national security concerns.

Anthropic has disabled access for all users worldwide.

[baron @tyrtyre201]

A guy built a playable game with Claude Fable 5 in a couple of hours. A studio would have needed a team, six months, and a budget that would buy a car.

He didn’t have a team. He didn’t have six months. He didn’t have the budget.

He had a laptop and a model that shipped 4 days ago.

He says one prompt got him a working prototype. A few hours of back and forth got him a playable level. Mechanics that work. Art that loads. Sound that triggers. A game his friends actually wanted to keep playing.

It’s not the best game ever made. It doesn’t have to be.

It’s the cheapest game ever made by a single person that’s actually fun.

The studio model assumed you needed 20 people to do this. Fable 5 just made that assumption look expensive.

Most devs are still arguing about which model to use.

He shipped a game while they argued.

Save this.

The next indie hit might be made by a kid who’s never opened Unity.

[Cyber Detective💙💛 @cyb_detective]

https://t.co/hF8rx9JuOX

Search through 2M+ threat actor usernames and find where they operate

[Ethan Levins 🇺🇸 @EthanLevins2]

🚨🇮🇱 Mossad and CIA could be “MERGING” FOREVER.

Section 622 of the Intelligence Authorization Bill will make it ILLEGAL to suspend intelligence sharing with Israel.

Senator Tim Cotton has officially proposed the law.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Amazon researchers snitched to the US government about jailbreaking Fable 5 and Mythos 5, forcing Anthropic to immediately shut down worldwide access.

A security export control directive from Commerce Secretary Howard Lutnick enforced the action.

Anthropic is fighting the directive and calls it a misunderstanding.

This isn't the first clash. The Trump administration had already tried to get Anthropic to pause the release of its latest models before this directive landed.

[Leonard Rodman @RodmanAi]

Rockstar spent 8 YEARS + $1 BILLION building GTA VI.

Claude Fable 5 rebuilt a GTA-style game in 10 HOURS using 4 million tokens.

No studio.
No payroll.
No 2,000-person team.

It even cut a trailer before logging off.

The barrier to making a AAA game just collapsed from $1 billion to a prompt.

[Middle East Observer @ME_Observer_]

⚡️⭕️ Lebanon/Syria:

In a meeting with Lebanese Prime Minister Nawaf Salam, Syrian President Ahmad Al-Sharaa advised Lebanon not to negotiate with Israel

He warned Salam of ‘repeating the same mistake as Syria’, which involved granting concessions without receiving guarantees and reciprocal compensation.

Al-Sharaa stated that Israel’s strategy is pushing you toward granting gradual concessions without providing any guarantees, while simultaneously keeping open margins that allow it to expand the scope of its future aggressions.

[International Cyber Digest @IntCyberDigest]

🚨 BrEaKiNg: Splunk, a security product, has zero authentication in its built-in database service and accepts any credentials, according to the security researchers who just dropped a full pre-auth RCE chain for Splunk Enterprise (CVE-2026-20253, CVSS 9.8).

Splunk Enterprise on AWS is vulnerable out of the box.

[Lozzy B 🇦🇺𝕏 @TruthFairy131]

Rockefeller openly reveals the goals of the globalists.

In 1994, Rockefeller was quoted at a U.N. dinner as saying:

"We are on the verge of a global transformation. All we need is the right major crisis, and the nations will accept the New World Order."

They tell you what they are planning but still people are too stupid to listen.

[Mohamad Safa @mhdksafa]

This is what Elon Musk doesn't want you to see on this platform. This’s what your media won’t report.

Lebanon is being ethnically cleansed in real time.

[CyberSudo @Cyber_Sudo]

🔎 The First Step to Investigate Email Address

An email address doesn’t exist in just one place…

It often leaves traces across multiple platforms 👀

One of my favorite early OSINT pivots is checking whether an email is actually registered on different services 🧠

Not guesses.

Here’s how it works 👇

📧 Step 1 — Start with an email address
From a dataset, profile, or open source mention

🔍 Step 2 — Run it through an email enumeration tool
Check platform responses for “registered” or “exists” signals

🌐 Step 3 — Identify confirmed accounts
Look for platforms like:
• Social media services
• Music / streaming platforms
• Communication tools

📊 Step 4 — Map the footprint
Each “yes” response helps build a clearer digital presence map

🎯 Real-life example:
You find an email in a leaked dataset or suspicious profile.

Instead of guessing where it’s used, you check it against multiple services.

The tool shows that the email is registered on platforms like X or Spotify, while others return no match.

Now you don’t have speculation you have verified starting points for further OSINT investigation.

One email → multiple confirmed footprints → clearer investigation path.

🔗 Tool: https://t.co/No6vS87l3i

What’s your go-to method for validating email presence across platforms?

P.S. ♻️ Repost if you found this helpful.

[Martin Witt @martinfrasser]

@om_patel5 meanwhile, that "someone":

https://t.co/WomeK9UKkg

[BleepingComputer @BleepinComputer]

Tchap data breach affects over 73,000 French govt employees
https://t.co/8u6USEsq5u

https://t.co/8u6USEsq5u

[Aryan @justbyte_]

This looks accurate 😂😀

[Om Patel @om_patel5]

SOMEONE VIBE CODED A VIDEO STREAM THAT IS SECRETLY 100% TEXT SO IT CANT BE BLOCKED

it plays 360p video at 30fps, but theres no actual video on the page. every frame is just colored text characters being repainted on a canvas

to the browser its not media at all, its javascript updating some text

its called asciline, and here's the trick:

> the server decodes the real video and streams it as binary packed text over websockets
> the browser paints thousands of colored block characters fast enough to look like 360p
> ad blockers and autoplay blockers cant catch it because theres no video element to catch
> it streams in kilobytes since its just strings, so it runs on trash internet

since the video is literally text, you can apply css glows to it, let people copy paste a moving frame, or feed it straight to a local llm

however, an unblockable stream is also an unblockable ad as well

[Tips Excel @gudanglifehack]

If you have a Gmail account, you need to read this.

Google's AI now scans your emails and attachments, bank statements, tax files, medical letters, all of it. It turned on by default, and there's a class-action lawsuit over how.

Here are 5 moves to shut it off, the switch is hidden in two places:

(Save this for later).

[Mario Nawfal @MarioNawfal]

🇬🇧 Not to alarm anyone, but the UK wants to scan every photo, video, and message on your phone before it's encrypted.

Tech CEOs who refuse to comply face up to 5 years in prison.

They're calling it a safety measure. It isn't. Pre-encryption scanning means governments can see everything before you've even sent it, and they can expand what gets flagged whenever they want.

The track record here is brutal. Europe's age verification app was hacked in under 2 minutes. Over 70,000 IDs and selfies were exposed in a separate breach.

These are the people who want access to every device in the country.

Once the infrastructure exists, no government in history has ever chosen to use less of it.

Source: CSOOnline / Writer: Jamie

[Raymond Hakim @RaymondFHakim]

🔴 التصريح الذي قد يُنهي العلاقات مع إيران

🔴 الرئيس عون لرويترز :
لا نقبل أن تملي علينا إيران ما يجب فعله، ولا يحق لها التحدث باسمنا
قرار التفاوض مع إسرائيل اتّخِذ وسيستمّر حتى إنهاء حالة العداء وتحقيق السلام

🔴 صفعة قوية لم يجرؤ عليها رئيس
من قبل
أضرب والريح تصيح
عشت

[Dark Web Intelligence @DailyDarkWeb]

🪟Microsoft Windows Defender

A threat actor has publicly claimed the discovery of an unpatched Windows Defender zero-day vulnerability capable of elevating privileges to NT AUTHORITY\SYSTEM.

According to the post, the exploit was successfully tested against fully patched Windows 10 and Windows 11 systems released in June 2026. The actor describes the vulnerability as a race-condition issue and claims Windows Server installations may also be affected.

Screenshots shared by the actor appear to show successful SYSTEM-level privilege escalation. A public Proof-of-Concept (PoC) repository was also referenced.

At the time of writing, Daily Dark Web has not independently verified the vulnerability or Microsoft's awareness of the claim.

Analyst Note: If validated, this would represent a high-impact local privilege escalation vulnerability affecting one of the most widely deployed security products in the world. Organizations should closely monitor Microsoft advisories and security researcher disclosures for confirmation and mitigation guidance.

#DDW #Intelligence #DarkWeb #Microsoft