Nikhil Kamboj 🇮🇳

Security Researcher | Red Team

[Nikhil Kamboj 🇮🇳 @nik_kamboj]

Instagram OSINT for gathering informations of public accounts. https://t.co/DW0EVa7S3w
#OSINT #information #research

[Mert Metin Tekdemir @mertmetindev]

Bir Kere Girince Saatlerce Çıkamayacağınız 50 Site

1.) 'https://t.co/FDTmt38jKw' — Dünyayı canlı uydu görüntüsüyle izleme
2.) 'https://t.co/Tytazsp6y2' — Şu an gökyüzündeki her uçağı görme
3.) 'https://t.co/b8trMj1vUi' — Denizdeki tüm gemileri anlık takip
4.) 'https://t.co/EYzDYh0BqF' — Rüzgar ve fırtınaların canlı haritası
5.) 'https://t.co/tJHTnBvUBe' — Dünyaya düşen yıldırımları anlık izleme
6.) 'https://t.co/ePbstmUfab' — Son depremlerin canlı listesi
7.) 'https://t.co/G7cSydNKiO' — İnterneti taşıyan okyanus kabloları
8.) 'https://t.co/3KOx1uP05V' — Ormanların yok oluşunu uydudan izleme
9.) 'https://t.co/BjXxDVBtur' — Dünyanın istatistikleri saniye saniye
10.) 'https://t.co/cO1EjkMwuG' — Şu an atılan tweet ve arama sayısı
11.) 'https://t.co/ciADXU3PhE' — Ülkelerin gerçek boyutlarını karşılaştırma
12.) 'https://t.co/LO6JWd0BlG' — Yüzyıllar öncesinin haritaları
13.) 'https://t.co/EEUvFXzGao' — 150 bin tarihi harita arşivi
14.) 'https://t.co/yK72tIFetv' — Gönüllülerin çizdiği dünya haritası
15.) 'https://t.co/QfXLWflDxA' — Rastgele birinin penceresinden dünyaya bakma
16.) 'https://t.co/ESMrPd5w78' — Şehirlerde sanal yürüyüş
17.) 'https://t.co/pRBm3f1ANH' — Dünyanın rastgele bir noktasına ışınlanma
18.) 'https://t.co/8JaKk4HmQi' — Dünyanın en tuhaf yerlerinin kataloğu
19.) 'https://t.co/qwJXW2a6zm' — Etkileşimli bilgi deneyimleri
20.) 'https://t.co/Sp9uLE2QOu' — Atomdan evrene ölçek yolculuğu
21.) 'https://t.co/2FitQ7k3ZI' — Güneş sistemini 3B gezme
22.) 'https://t.co/KH9VyPhaoW' — Tarayıcıda gerçek gökyüzü haritası
23.) 'https://t.co/JBLDnae59F' — NASA'nın günün astronomi fotoğrafı
24.) 'https://t.co/HuFaH5Zc2g' — NASA'nın tüm görsel arşivi ücretsiz
25.) 'https://t.co/T3QWBtfYKB' — Veriyle anlatılan görsel makaleler
26.) 'https://t.co/isIkHYtRCm' — Dünyanın gerçek verilerle hali
27.) 'https://t.co/NJ7TdwwdbA' — Dünya hakkındaki yanlış bildiklerimiz
28.) 'https://t.co/vmkn87BBGW' — Karmaşık veriyi görselleştirme
29.) 'https://t.co/eHqySW1EGw' — Dünya Bankası'nın açık verileri
30.) 'https://t.co/av0bjbISF2' — Türkiye'nin resmi istatistik veritabanı
31.) 'https://t.co/l3Mb5x5KkS' — Milyonlarca kitap, film ve yazılım arşivi
32.) 'https://t.co/B6NDL6Bxri' — Telifi düşmüş 70 bin ücretsiz kitap
33.) 'https://t.co/no8SFuA27T' — Dünyanın her kitabının kaydı
34.) 'https://t.co/I1TMHDw3qI' — ABD Kongre Kütüphanesi dijital arşivi
35.) 'https://t.co/yxkHTsqFnH' — Avrupa'nın kültürel miras arşivi
36.) 'https://t.co/wMcjgRaBht' — Amerika'nın dijital kütüphane koleksiyonu
37.) 'https://t.co/8MpQHB3zrG' — Müzeleri evden gezme
38.) 'https://t.co/i3Vt53wDvA' — Sanat eserlerini yüksek çözünürlükte indirme
39.) 'https://t.co/5ei05nWSvS' — 250 bin sanat eserinin arşivi
40.) 'https://t.co/2SpGcVKFiD' — Tarihin unutulmuş görsel hazineleri
41.) 'https://t.co/sSdBoLWEvB' — Ücretsiz kültür ve eğitim arşivi
42.) 'https://t.co/UyUZxtlbfh' — Met Müzesi'nin açık koleksiyonu
43.) 'https://t.co/23cxfWRaNy' — Müzik türlerinin soy ağacı
44.) 'https://t.co/gMDy3tUEMT' — Ülke ve on yıl seçip o dönemi dinleme
45.) 'https://t.co/WrXSWim8jr' — Wikipedia düzenlemelerini sese çevirme
46.) 'https://t.co/IcRIPgCDAS' — Rastgele bilgi kuyusu
47.) 'https://t.co/WoE9MNJ5PU' — Zaman, gündoğumu ve gökyüzü olayları
48.) 'https://t.co/VrkUoUal3M' — Bilim haberlerinin güncel akışı
49.) 'https://t.co/4Nwok7W5wn' — Bilimsel makalelerin ücretsiz ön baskıları
50.) 'https://t.co/DqmPFeYnrl' — Veriyi canlı kodla görselleştirme

İnternet, algoritmanın önünüze koyduğu o beş siteden ibaret değil.

[말러팔삼 @mahler83]

구글 타임라인 1년간 행적 동영상으로 만들어주는 앱인데, 꽤나 만족스럽게 잘 만들어지네요. 작년에 안티그래비티가 초안 만들었던 걸 오늘 코덱스가 완성해줌. 안드로이드 쓰는 트친님들 apk 파일 받아서 써보시죠
https://t.co/wKud24bPy1

[cryptoshant🇮🇳 @cryptoshan484]

To find subdomains you can use this new technique:

https://t.co/OAAowvtwaT

[RoboRocks @malagojr]

PAID VERSION → FREE VERSION

1. Netflix Premium → Plex
2. Spotify Premium → SoundCloud
3. Apple TV+ → Freevee
4. Disney+ → Pluto TV
5. YouTube Premium → NewPipe
6. Amazon Prime Video → Tubi
7. Audible → LibriVox
8. Hulu Live → Roku Channel
9. Crunchyroll Premium → RetroCrush
10. YouTube Music → Audiomack
11. HBO Max → Plex Free Movies
12. Apple Arcade → Poki
13. Xbox Live Gold → Steam Free Games
14. PlayStation Plus → Epic Games Store
15. Grammarly Premium → LanguageTool
16. Canva Pro → Adobe Express Free
17. Notion AI → Obsidian + Free AI Plugins
18. Midjourney → Microsoft Designer
19. Adobe Photoshop → GIMP
20. Microsoft 365 → LibreOffice

📌 Bookmark this and stop paying for what you can get free.

[Chandana 🌻✨ @RoseOnX9]

How deficiency affects Your hair :

[Min Choi @minchoi]

Grok Bot just killed 1,000 startups.

Each Bot gets its own computer.

It learns your workflows, uses your apps, and works while you sleep.

Grok just became your 24/7 AI employee.

[Michael Bargury @mbrg0]

it gets worse. using Claude in Chrome? xss is making a comeback! welcome back to the 90s!

[pwn.ai @pwn_ai]

Introducing XSS2Shell ⛓️: WordPress Core preauth XSS→RCE vulnerability affecting 43% of the internet, discovered autonomously by pwn (using open-source models), affecting all WordPress versions.

https://t.co/Fql6aLPrtT

Please patch CVE-2026-64638 as soon as possible!

[Anthropic @AnthropicAI]

In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three different organizations.

Our post describes what happened, how it happened, and what we’re changing. We encourage other AI developers to perform similar reviews.

We conducted this review together with @Irregular, one of our evaluation partners, and thank them for the joint investigation and their collaboration on this post. This type of collaboration is increasingly critical to safe, rigorous evaluation of models, and we look forward to continuing to work together on security.
https://t.co/dKFCdpKd9v

[Akshay 🚀 @akshay_pachaar]

Stateful vs. Stateless MCP core.

(Anthropic's biggest MCP update)

Let me explain what that means:

Until this release, talking to an MCP server worked like a phone call. Both sides ran an initialize handshake, and the server returned a session id carried on every later request.

That session was a live object inside one specific server process, holding the negotiated state.

Picture a restaurant where the waiter who took the order is the only one who knows what was ordered. Everything works until that waiter goes home.

Because that state lives in one process, a balancer could not spread requests across three MCP server instances. Teams pinned clients with sticky sessions or pushed session state into shared storage, which blocked autoscaling and made a single restart drop every open session.

The latest update deletes all of it. The handshake and the Mcp-Session-Id header are gone, and each request now carries its own protocol version, client identity, and capabilities in a _meta field.

Clients that want the capability list up front can call server/discover, but nothing requires it.

The restaurant works the other way around now. That flips the restaurant around. Every request is a written order slip now, and any waiter can fill it.

So any request can land on any instance behind a plain round-robin balancer, with no shared session store. MCP servers become ordinary HTTP services that run on serverless and edge, and survive restarts.

Removing sessions broke three features, so each got rebuilt.

→ Tools that need to ask the user something mid-call used to push that request down a held-open stream. Now the server returns input_required and the client retries with the answers attached.

→ Method and tool names moved into the Mcp-Method and Mcp-Name headers, so a gateway or rate limiter can route and meter without parsing the JSON-RPC body.

→ List responses carry ttlMs and cacheScope, so clients cache tool catalogs instead of refetching them on every reconnect.

State did not disappear here, it moved somewhere the model can see it.

Applications that need continuity get an explicit handle from a tool and have the model pass it back as an argument on the next call.

A session id in a header is invisible to the model, while a handle in the arguments is something it can read, thread between tools, and recover from after a failed call.

Official Spec: https://t.co/jC4Lu7eGi5

Since we are on MCP, I also wrote about why the MCP versus CLI debate was the wrong one, and how agents can call tools by writing code instead of loading every schema into context.

The article is quoted below.

[ClaudeDevs @ClaudeDevs]

Before, running a remote MCP server meant managing session state, which limited where you could run it.

Now that MCP is stateless, you can deploy on serverless and edge infrastructure, or scale horizontally behind any load balancer.

[Fish Audio @FishAudio]

Today we’ve raised $52M Seed and we are announcing the public launch of S2.1 Pro.

>It can clone a voice from 5 seconds of audio
>2x faster than Cartesia & 1/6th the cost of Eleven Labs
>most expressive model with word level control over emotion, intonation, pacing etc

We support frontier AI companies including HeyGen, LiveKit, Retell, Sanas, and OpenArt all run our model in production.

If you're a business and we can't cut your voice AI costs by 50%, we'll give you 1 year of Fish Audio for free.
Book a demo: https://t.co/vHkyZf9JoG

To celebrate our first birthday, we'll give you 1 month of S2.1 Pro for free. Like, retweet, and comment “Fish” to get it.

[Tibo @thsottiaux]

More opensource goodness. We have just released a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI.

https://t.co/nkfTbw8p7b

[Rachel Tobac @RachelTobac]

Super impressed with @huggingface's breakdown of the AI agent autonomous cyber attack from OpenAI, including technical timeline, & interactive replay (AND how they defended against the attack)!
Here is the interactive attack replay vid and source:
https://t.co/SVsc5ClRcW

[Anthropic @AnthropicAI]

There’s been a lot of speculation about where we stand on open-weights models. We’ve outlined our views in full here: https://t.co/NtXQuWm2g5

[clem 🤗 @ClementDelangue]

Open-source is not the cause of the cybersecurity crisis, it's the solution! https://t.co/YpykmLGv7B

[joy @newbie_joy]

To bypass this:

1. Press Windows Key + R, type `regedit`, and hit Enter.

2. Navigate to: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters`

3. Right-click an empty space on the right panel, select New -> DWORD (32-bit) Value.

[BSNL India @BSNLCorporate]

If your hotspot comes with too many rules, maybe it's time for a smarter connection.

Switch to BSNL and stay connected with confidence.

#BSNLIndia #StayConnected #InternetForEveryone #DigitalLife #IndiaOnline #BSNLServices #SmartIndia #EverydayConnectivity #SwitchToBSNL #HotspotAllowed @CMDBSNL @robertravi21

[Abhishek Yadav @yabhishekhd]

We already saw reports that Airtel doesn't allow Unlimited 5G data sharing via mobile hotspot.

Now, it is officially mentioned on Airtel's website that mobile hotspot is not allowed on its Unlimited 5G mobile data plan.
The 300GB monthly data cap has also been there since the beginning.

Airtel is currently offering 5G NSA, which is an enhanced 4G-based network.

However, reports in February this year claimed that Airtel would start upgrading to 5G SA, the true standalone 5G network that Jio has been offering since day one.

[Kimi.ai @Kimi_Moonshot]

Introducing Kimi K3: Open Frontier Intelligence

🔹 2.8 Trillion Parameters, 1 Million Context, Native Multimodal
🔹 Kimi Delta Attention enables up to 6.3x faster decoding in million-token contexts
🔹 Attention Residuals deliver ~25% higher training efficiency at <2% additional cost
🔹 Built for long-horizon agentic coding and self-evolving workflows

Kimi K3 is now live on on https://t.co/zrk6zZxZUo, Kimi Work, Kimi Code, and the Kimi API.
Open Weights by July 27, 2026.

🔗 API: https://t.co/XCrgjXAqMw
🔗 Tech blog: https://t.co/YTfiMSNM1f