Israel G

. ..: I love solve problems for which there is no obvious answer

[Israel G @ipartner_]

Team 1nf0s3c with @jhtt89 at #RealCTF thanks to
@smigalin Solving WarnUp Social DDoS & working on Script-Kiddie 1

https://t.co/lFpxS6ZSJy

[ELFloader @Southwin11]

今天不发推文，我们决定开源近期自研的进攻型 Agent 工具——该工具在腾讯实测跑分中位列第三，红队/SRC/CTF三大场景；
项目地址：https://t.co/RJa3A0u47z，
跑分地址：https://t.co/nInvBMbLbb

[Smukx.E @5mukx]

RedLotus is a Rust based Windows UEFI bootkit that executes before ntoskrnl.exe to bypass DSE and manually map unsigned kernel drivers. A research focused PoC demonstrating modern bootkit techniques and low level rust development. by MemN0ps

Blog:- https://t.co/YKY5KN6DAK

[Anthropic @AnthropicAI]

New Anthropic research: Discovering cryptographic weaknesses with Claude.

Claude Mythos Preview has helped our researchers find weaknesses in cryptographic algorithms—the mathematical methods that are used to keep data private.

Read more: https://t.co/TYKLjb3Q7V

[Dark Web Intelligence @DailyDarkWeb]

German and U.S. authorities dismantle the Kratos phishing-as-a-service platform

Authorities in Germany and the United States disrupted the central infrastructure of Kratos, a phishing-as-a-service platform used to create credential-harvesting pages and conduct attacks globally. The suspected developer was arrested in Indonesia.

#DDW #Phishing #Kratos #DarkWeb

[MSec Operations @MSecOps]

Initial access. Post-exploitation. Persistence.

These are the phases most of you need to simulate in your day-to-day engagements.

RustPack can help across all of them. Our latest blog post covers a range of common TTPs and shows how RustPack can help you save time, reduce effort, and streamline your operations. 🫡

https://t.co/W4uhn3mx0g

#OST #maldev #Pentest #RedTeam

[Web Security Academy @WebSecAcademy]

Burp Intruder has 4 attack types 👇

🔶 Sniper - One payload list in one position
🔶 Battering Ram - Same payload in multiple positions
🔶 Pitchfork - Different payload sets in parallel
🔶 Clusterbomb - All combinations of multiple payload sets

Try it out 🧪

[BleepingComputer @BleepinComputer]

Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak
https://t.co/vHFALU3Ev5

https://t.co/vHFALU3Ev5

[Cyber Security News @The_Cyber_News]

❗️❗️Threat actors are actively exploiting a critical authentication bypass flaw in Palo Alto Networks firewalls to breach corporate networks and deploy Qilin ransomware.

Full Story: https://t.co/MRbgjeWpst

The flaw, tracked as CVE-2026-0257 (CVSS 7.8), affects the GlobalProtect portal and gateway in PAN-OS. It becomes exploitable when authentication override cookies are enabled alongside specific certificate configurations, allowing unauthenticated attackers to bypass login controls entirely and establish legitimate-looking VPN sessions.

#cybersecuritynews

[mRr3b00t @UK_Daniel_Card]

something that might help fellow CTI nerds!
https://t.co/RlpSli3003

[Hackmanac @H4ckmanac]

🚨Cyber Alert ‼️

🇦🇷Argentina - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝗱𝗮𝗱 𝗡𝗮𝗰𝗶𝗼𝗻𝗮𝗹 𝗱𝗲 𝗠𝗮𝗿 𝗱𝗲𝗹 𝗣𝗹𝗮𝘁𝗮 (𝗨𝗡𝗠𝗱𝗣)

Nova hacking group claims to have breached Universidad Nacional de Mar del Plata (UNMdP). Allegedly, the attack led to the exfiltration of 3.5 GB of data.

Threat actor: Nova
Sector: Education
Data exposure (claimed): 3.5 GB
Data type: Not specified
Observed: Jul 20, 2026
Status: Pending verification
ESIX©: 5.23

Full details and impact assessment on https://t.co/eB7qgxKFAa

[Dark Web Intelligence @DailyDarkWeb]

🚨 Threat Actor Offers Fraudulent Emergency Data Requests for Major Platforms

A threat actor is advertising what they claim are "emergency data requests" (EDRs) for several major technology platforms on a cybercrime forum.

According to the listing, the service allegedly covers:
* Meta (Facebook & Instagram)
* X (formerly Twitter)
* Telegram
* T-Mobile

The seller claims to provide emergency data requests for $300 per request, accepts cryptocurrency payments (preferably Monero), and advertises that "proof" can be provided to prospective buyers.

Emergency Data Requests (EDRs) are legitimate legal mechanisms used by authorized law enforcement agencies to obtain user information in situations involving imminent threats to life or serious physical harm. Cybercriminals have increasingly attempted to abuse or fraudulently obtain these requests through social engineering, compromised government accounts, or forged legal documentation.

Daily Dark Web cannot verify the authenticity of the seller's claims or whether they possess the advertised capability.

Analyst Note: The emergence of EDR-related services on cybercrime forums highlights continued attempts by threat actors to exploit trusted legal disclosure processes. Organizations should ensure robust verification procedures for emergency requests, enforce strong identity validation for government portals, and monitor for signs of unauthorized access to law enforcement or government accounts.

#DDW #Intelligence #DarkWeb #Cybercrime

[OccupytheWeb @three_cube]

Now You Can Track People Using the Simple and Inexpensive ESP-32!

https://t.co/7TLEYEwK0O

[hacker.house @hackerfantastic]

Updated our inference fuzzing write-up - now with the vuln specifics we held back. Full detail on a pre-auth path traversal in OpenWRT (LuCI bmx7) that reads any file as root. Notified 8 July, no reply. https://t.co/Oxuk6eevC3

[Daily CyberSecurity @Daily_CyberSec]

Discover how to create a highly efficient ESP32-C3 ad blocker for just $5. This miniature device seamlessly blocks over 537,000 domains on your network.
#ESP32C3 #AdBlocker #DNSFilter #Cybersecurity #DIY
https://t.co/dD45XoWG3L

[Hacking Articles @hackinarticles]

Cyber Security Attack Mindmap 🔥

🔥 Telegram: https://t.co/upuP8k7Ev3
✴ Twitter: https://t.co/Za7rYIL1h6

Cyber Attacks focus on identifying vulnerabilities, exploiting systems, and maintaining access during offensive security operations. This mindmap provides a structured breakdown of real-world attack techniques, tools, and methodologies used by attackers and red teamers.

📚 Topics Covered in the Mindmap

🔍 Reconnaissance
⚔️ Initial Access
💥 Exploitation
🎯 Privilege Escalation
🕵️ Lateral Movement
📦 Credential Dumping
🔐 Persistence
🚫 Defense Evasion
📡 Command & Control

🧠 Mindmap:
https://t.co/pkDnSapgtg

#CyberSecurity #EthicalHacking #RedTeam #Pentesting #Infosec #Hacking

[Dark Web Informer @DarkWebInformer]

🚨 RaidForums [.]su domain was suspended.

New domain: [.]ru

They also have a new site called RaidBin, which is a paste-sharing platform.

raidbin[.]org

Dark Web: http://raidbinahr33urj6dcnuphimsnnxkvryvomimphp5wsfa5x3gkm2jsqd[.]onion

[Nicolas Krassas @Dinosn]

Salat Stealer – From Telegram Proxy to C2 Infrastructure https://t.co/iLrnbxucwd

[Virus Bulletin @virusbtn]

Microsoft researchers have observed increased ACR Stealer activity across customer environments. These campaigns are using ClickFix lures to steal browser credentials, authentication tokens, and sensitive documents from enterprise environments. https://t.co/kVF65gdubY

[vx-underground @vxunderground]

We desperately need someone to update noob malware literature.

The shit for malware noobs looks like it was written in 1995 and by someone who doesn't know shit about malware or how it actually works.

It reads like someone describing swimming who hasn't ever been in a pool

[Unit 42 @Unit42_Intel]

We recently investigated cases involving a vishing playbook and passkey-themed domains from an extortion group calling itself FALCON. We track this activity as CL-CRI-1182 and assess with moderate confidence that this is related to CL-CRI-1116 (BlackFile) https://t.co/eanCXvTgpe