Luigi Intel

#Underground_Detective | #PrivateInvestigator | #CyberIntelligence | #Darkweb| #GrayHat | #OSINT | #cybercrime | #OPSEC | #Crypto_Enthusiast

[International Cyber Digest @IntCyberDigest]

‼️🚨 Pwn2Own Berlin 2026 just hit a wall. For the first time in 19-years, ZDI rejected dozens of working zero-day RCE submissions because organizers ran out of contest slots.

Rejected hackers are now going public with PoC demos and direct vendor disclosures, breaking Pwn2Own's usual secrecy.

▪️ AI surfaces a massive wave of 0-day RCEs.
▪️ Submissions overwhelm ZDI past max capacity.
▪️ Slots run out. Researchers with working chains get rejected.
▪️ "Revenge disclosures" begin. ← we are here.

Confirmed casualties so far:
▪️ @xchglabs : 86 vulnerabilities prepared (PyTorch, NVIDIA, Linux KVM, Oracle, Docker, Ollama, Chroma, LiteLLM, llama.cpp). All rejected. Now reporting directly to vendors with writeups dropping as patches land.
▪️ @ggwhyp : full-chain Firefox RCE on Windows. Rejected. Publicly demoed (HTML page → cmd.exe → calc.exe). Responsibly disclosed to Mozilla.
▪️ @yunsu_dev : working RCE chain, rejected. Submitting elsewhere.
▪️ @ryotkak : tried to register for 3+ weeks. ZDI confirmed "at maximum capacity, can't add extra contest days." Considered canceling flight and hotel.
▪️ @anzuukino2802 : Claude Code RCE PoC. Rejected.
▪️ @desckimh : 0-day RCEs in Ollama and LM Studio. Rejected.

Reported impact: a community-estimated 150+ researchers tried to register. Accepted contestants are now being warned about collisions. Rejected vulnerabilities going to bug bounty programs may trigger pre-event patches that invalidate the work of those who got in.

ZDI has not publicly addressed the capacity issue. The event still runs May 14-16 in Berlin.

[Luigi Intel @LuigiIntelOps]

Depix - an open-source library that recovers text from pixelated screenshots.

https://t.co/ixYbKgVjUU

[Daniel Heinen @heinenbros]

AI can help track criminals from a screenshot of a live stream using nothing but pixels.

[Luigi Intel @LuigiIntelOps]

@Cyberknow20 @vxunderground checked it and it seems to be fake https://t.co/YAdrw3Jnc0

[vx-underground @vxunderground]

If anyone is curious: the file is the publicly available Pegasus Spyware Description PDF.

Then it contains the WINDOWS Pegasus RAT (NOT NSO GROUP PEGASUS SPYWARE)

The last file is something from a person named Jonathon Scott with a long ReadMe file

tldr FAKE AS ALWAYS

[Luigi Intel @LuigiIntelOps]

Explore open directories across the internet.
#OSINT
https://t.co/BpPHHTkmb0

[Luigi Intel @LuigiIntelOps]

Recommended tools for dark web investigations 🔍💻

[Daniel Heinen @heinenbros]

GeoSpy feels both magical and scary some days

[Luigi Intel @LuigiIntelOps]

Great blog
https://t.co/acfwggJVAu

[Nariman Gharib @NarimanGharib]

Iran’s Presidential Strategic Management Center for Cybersecurity (AFTA) confirms it blocked APT15, a hacker group linked to #China, after they had gained access to some critical infrastructure & gov systems. This might be the first time an Iranian official body has admitted that Chinese hackers accessed Iran’s infrastructure. 🇮🇷🇨🇳

[Luigi Intel @LuigiIntelOps]

@MonThreat Did you understand if his offer is real? We know there are lots of scams and his rep low

[Luigi Intel @LuigiIntelOps]

@InfosecurityMag Lots of news but it still not clear, someone understands how the attackers infiltrated the company? What method was used?

[Luigi Intel @LuigiIntelOps]

@Cybersecinsider Did you figure out how they infiltrated the company?

[Luigi Intel @LuigiIntelOps]

@01ra66it Did you understand how they infiltrated the company?

[Luigi Intel @LuigiIntelOps]

nice move
https://t.co/U9Thm4fBRw

[Luigi Intel @LuigiIntelOps]

@MonThreat did he share sample?

[Luigi Intel @LuigiIntelOps]

WhatsApp OSINT logs tool spy
https://t.co/QFqoOd8Vzc

[Luigi Intel @LuigiIntelOps]

Code Leak Search Engine 🔥

https://t.co/0uFcItrb2E

[Luigi Intel @LuigiIntelOps]

Kind of Shodan alternative - meet Hunter Search Engine
https://t.co/lxSIgUfkVy

[Luigi Intel @LuigiIntelOps]

Advanced whois resource

https://t.co/Dqp5rdfRJp