Ayman Alhakimi

Penetration Tester | Laravel-PHP Web Developer | Networking | Linux
🇾🇪 🇵🇸

[Nicolas Krassas @Dinosn]

LG TV flaws could let attackers listen in, even in standby mode https://t.co/Ueg2XQFgOS

[إبراهيم بوحيمد | Ibrahim Buhaimed @buhaimedi]

شاشات LG تتنصت على المستخدمين وتسجل اصواتهم ولقطات من البرامج الي يتابعونها !!

فريق Steve Burke من Gamers Nexus عمل مع Level1Techs وباحثين أمنيين مستقلين. اشتروا أجهزة من المتاجر وراقبوا حركة الشبكة بأدوات مثل Wireshark، عشان يحللون البيانات الي تطلع من التلفزيون للانترنت

يتبع

[korz3yn @webenstein_]

One dark truth about security research:

The deeper you go, the less you trust what the software tells you.

You stop reading features.

You start reading behavior.

You trace memory, execution flow, hidden logic, and the assumptions buried inside compiled code.

[Abdelhamid Naceri @MSNightmare2000]

Kaspersky 0day ? Anyone ?
https://t.co/vWYLAS3kuT

[John Hammond @_JohnHammond]

🧵 Here's how a TeamPCP hacker got doxxed.

[Co11ateral @co11ateral]

PwnEye

PwnEye can test cameras through ONVIF and RTSP. It can play the stream, deface a camera, move it and get a shell.

Cameras shouldn't be ignored during a pentest. There are dozens of known CVEs affecting them. They can be used as proxy to attack other hosts or maintain persistence. IoT devices can cause havoc if you don't update them.

https://t.co/wQ1oa4HuTc

[Abdelhamid Naceri @MSNightmare2000]

Microsoft has failed to properly patch RoguePlanet (CVE-2026-50656), ShieldBreak, a PoC that demonstrates a full bypass to the previous patch is now public.
https://t.co/YFfn559z6o
The PoC works with the latest August 2026 patch

[pwn.ai @pwn_ai]

Introducing XSS2Shell ⛓️: WordPress Core preauth XSS→RCE vulnerability affecting 43% of the internet, discovered autonomously by pwn (using open-source models), affecting all WordPress versions.

https://t.co/Fql6aLPrtT

Please patch CVE-2026-64638 as soon as possible!

[Kalshi @Kalshi]

JUST IN: OpenAI says its AI agent "hacked" another company

[Chaofan Shou @shoucccc]

Kimi K3 exploited the latest Redis server with a 0day it discovered.

All it took was 27min with 32 agents.

https://t.co/ZOKA2wchLa

[International Cyber Digest @IntCyberDigest]

❗️ An Israeli startup founder secretly uploaded a cluster of malicious typosquatted npm packages that impersonate Anthropic, Vercel, LangChain, Ollama, OpenAI and Aspect Security and profile developer machines on install.

The packages skip passwords and tokens by design. Instead, the install script harvests identity: hostname, every git and SSH email on the box, teammate emails from the git reflog, AWS/GCP profile and account details, and the corporate DNS domain, all shipped to a Google Cloud Run endpoint.

There were about 20k downloads before takedown.

[🇬‌🇱‌🇦‌🇸‌🇰‌🇮‌🇩‌ @GLAsk1d]

If this isn't enough of a reason for you guys to switch to Linux idk what is.

I understand some people feel as though it doesn't matter because they "have nothing to hide" but it really does matter guys. This level of surveillance should be considered by everyone to be completely unacceptable.

And this is just the stuff we know about...

[vx-underground @vxunderground]

> Peter Stokes
> Scattered Spider guy
> Arrested
> Microsoft helps FBI
> Read court documents
> Page 12
> Microsoft tracks Stokes from GDID
> Microsoft Global Device Identifier (GDID)
> Stokes used Windows
> Page 34
> GDID assigned to each OS install
> GDID unique to each device
> GDID only change if OS wiped
> Stokes GDID 6755467234350028
> GDID reported internet activity to Microsoft
> GDID showed Stokes using Ngrok
> GDID reported Stokes IP address
> GDID showed Stokes web activity
> GDID showed timestamps of web activity
> GDID mapped with video game activity
> GDID showed games played
> GDID undocumented
> GDID only mentioned in one MSDN document
> Azure UCDOStatus
> Azure Monitor Logging

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

⚡ INTRODUCING: T3MP3ST!!! ⚡

AUTONOMOUS HACKBOT STRIKE FORCE 🌩️ BRING THE STORM 🌩️

your favorite coding agent is now a full-stack red team 🫡⚔️

https://t.co/k0SXmPAFaD

that AI agent already humming in your terminal? well now it has FANGS. strap a full offensive-security harness onto the agents you already pay for — Claude Code, Codex, Hermes, etc. — point it at an authorized target, and in a few clicks you're watching it hunt real vulns autonomously!

T3MP3ST is a harness of harnesses, with prompting that unlocks offensive-cyber workflows + a full arsenal of exploit tooling that'd make any seasoned hacker smirk. simple, yet powerful. 🦾

support for:
🕸️ web apps, APIs, OWASP Top 10
🔌 network recon + fingerprinting (live nmap/DNS/HTTP); lateral + privesc experimental
📂 source code audits, white-box vuln hunting
🚩 CTFs, wargames, challenge ranges
💰 smart contracts / DeFi / Solidity (reproduction — Damn Vulnerable DeFi, not novel discovery)
🤖 embedded, IoT, OT/SCADA, robotics OSS
… and more in development!

now let's talk numbers 👇

📊 XBEN — XBOW's own 104-challenge suite:
• black-box: 90.1% pass@1 from the single-agent exploit loop (worst single sweep 91/104 = 87.5%) — clearing XBOW's past self-reported 85% on their own suite. gpt-5.5.
• white-box (source staged, reported separately): 98.7% pass@1, worst single sweep 102/104 = 98.1%. 🎯
every solved flag graded reported-vs-expected against the challenge's own committed flag oracle — `verify-claims` recomputes the pass/fail from committed artifacts. looks like we need new benchmarks 😏

🧩 Cybench — the 40-task academic bench (Opus 4.8, hints + writeups stripped): 23/40 = 58% single-run, hint-free pass@1 — real exploits (format-string pwn, eval-jail escapes, crypto oracles), every flag graded vs a committed oracle. (Anthropic reports 76.5% pass@10)

🕳️ CVE-Zero — we pointed it COLD at real CVEs disclosed in 2026, AFTER the model's training cutoff:
10 unseen 2026 CVEs across 7 languages — prompts never tuned on them. a single agent pinned 8/10 to exact file/line/CWE (stable under re-scoring); the full pack surfaced all 10.
memorization AND overfitting, both off the table — it's finding real vulns whose disclosures landed AFTER the model's training cutoff. (n=10, reported honest & directional)

🧠 the architecture: either run as a SINGLE agent (already the benchmarked, incredibly-capable path) — or pack-hunt with dozens of agents running on 8 specialist operator classes keyed to Cyber Kill Chain + MITRE ATT&CK phases: recon → scan → exploit → lateral → exfil → persistence → C2 → report.

⚓️an Op Admiral plans the whole op from a plain-english target. flip on coordination (experimental) and the operators share a blackboard — a tool-verified finding spawns the next move. full swarm or solo one operator, your call. the admiral can also update the prompts, tools, and configs of the other agents on the fly, and T3MP3ST gets stronger the more memories you build!

🧰 the Arsenal is comprehensive — nmap / nuclei / semgrep / ffuf / gobuster + more. 35 wired by default (the clean bench runs bash-only for a comparable number), 83 with the opt-in full arsenal (T3MP3ST_FULL_ARSENAL), and the spicy post-ex drivers (metasploit, hydra) gated behind human approval. exposed via CLI + HTTP API; recon (security_recon) is also live over MCP so your agent invokes it natively. 🔗

🛰️ where this goes: a self-improving swarm of specialist operators wielding a full Kali+ arsenal, learning which loadouts + configs are the most efficient tactics available, WITH a held-out train/test split baked in so it can never fool itself on its own eval. built in the open, one re-derivable number at a time.

🚧 this is v1, and parts are still under active development. chunks of the arsenal, the coordinated swarm, and some ranges are still being wired up. it's built in the open, and the receipts tell you exactly what's live vs what's roadmap.

offensive security shouldn't be pay-to-play. T3MP3ST puts a red team in the hands of anyone with a coding agent.

what's the first target you're feeding it? 👇

⚠️ DISCLAIMER: FOR AUTHORIZED USE ONLY. point it only at systems you own or have explicit written permission to test. unauthorized access can be a crime, and that call is yours alone. shipped as-is under AGPL-3.0: no warranty, no liability, zero endorsement of misuse. get permission. stay in scope.

open source. AGPL-3.0. 100% free.

FORTES FORTUNA IUVAT 🌩️

gg 🫡

[Ayman Alhakimi @mofii0x]

@YourFinalSin Congratulations

[vx-underground @vxunderground]

> be Zuckerberg
> needs AI everywhere (apparently)
> lays off a bunch of employees
> replaces with AI
> fast forward
> AI is dog shit
> AI tricked into stealing accounts
> try to fix
> fail like 5 times
> product now leaking CEOs PII

AI truly is the future, wow

[Yasho @YShahinzadeh]

My First RCE by Reverse Engineering an EXE File With the Help of AI

A secure web app → a JS file leaking a download endpoint → a .NET binary → AI-assisted reverse engineering → a localhost WebSocket with no origin check → RCE

Write-up: https://t.co/CN6VM92hqA

[OpenClaw🦞 @openclaw]

"You can run OpenClaw inside your company now." Annoucing our work with @Microsoft to bring OpenClaw to the Microsoft and Windows ecosystems. Claws now work securly in the enterprise.

[Nasser Albarrak @nass3r000]

كعادة الانستقرام وثغراته، شركة بحجم ميتا وتمر عليهم اشياء تافهة كذا… السوال كم لها الثغرة موجوده؟