noobintheshell

[Yuval Avrahami @yuvalavra]

We hacked the AWS JavaScript SDK, a core library powering the entire @AWScloud ecosystem - including the AWS Console itself 🤯

How did we do it? Just two missing characters was all it took.

This is the story of #CodeBreach 🧵👇

[tuxedo sam @NotTuxedoSam]

wow the last AWS status update is incredible

[noobintheshell @noobintheshell_]

I discovered "this classic" in 2003 when I wanted to understand how the Blaster worm was spreading!

[Phrack Zine @phrack]

Added syntax highlighting to Aleph1's SMASHING THE STACK FOR FUN & PROFIT.

Enjoy this classic in full color :>

https://t.co/s3aeR1FZ34

[Wiz @wiz_io]

🚨 Shai-Hulud: Major npm supply chain attack.

100+ packages weaponized with stolen GitHub tokens, stealing secrets, hijacking repos, and auto-propagating like a worm.

Guidance + detections inside: https://t.co/g0v3lbE8Z8

[Ivan Krstić @radian]

🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. https://t.co/ule9gaXzc1

[HD Moore @hdmoore]

A PSA for why you should probably not use Postman (it can leak secrets to them): https://t.co/9gV3bt0eU0

[Nick Frichette @Frichette_n]

….HackerOne doesn’t enforce IMDSv2? The…the bug bounty platform on which people report this very same issue to loads of AWS customers/environments?

[Computer ♥ Records @ComputerLove_]

A device that could take screenshots back in 1998

[Insomni'hack @1ns0mn1h4ck]

🚨 The Insomni’hack 2025 Conferences Programme is LIVE!

📅 2 days, top experts, & cutting-edge cybersecurity talks.

Get your tickets now: https://t.co/TwPCSb646c

#INSO25 #Cybersecurity #EthicalHacking #Switzerland

[Nick Frichette @Frichette_n]

I’m very excited for this to be released! RCPs cover a need to restrict external access to resources across your organization. Plus its a whole new policy type to consider!
https://t.co/5VLSf3BF8M

[Wiz @wiz_io]

Introducing "Cloud Security for Kids" - our new children's book! 🍭

Ever tried explaining cloud security to a 5-year-old? 🤔 We've got you covered — our book breaks it down into a fun & illustrated adventure.

Want a free copy? See thread 🧵👇

[WikiLeaks @wikileaks]

JULIAN ASSANGE IS FREE

Julian Assange is free. He left Belmarsh maximum security prison on the morning of 24 June, after having spent 1901 days there. He was granted bail by the High Court in London and was released at Stansted airport during the afternoon, where he boarded a plane and departed the UK.

This is the result of a global campaign that spanned grass-roots organisers, press freedom campaigners, legislators and leaders from across the political spectrum, all the way to the United Nations. This created the space for a long period of negotiations with the US Department of Justice, leading to a deal that has not yet been formally finalised. We will provide more information as soon as possible.

After more than five years in a 2x3 metre cell, isolated 23 hours a day, he will soon reunite with his wife Stella Assange, and their children, who have only known their father from behind bars.

WikiLeaks published groundbreaking stories of government corruption and human rights abuses, holding the powerful accountable for their actions. As editor-in-chief, Julian paid severely for these principles, and for the people's right to know.

As he returns to Australia, we thank all who stood by us, fought for us, and remained utterly committed in the fight for his freedom.

Julian's freedom is our freedom.

[More details to follow]

[Lukasz Olejnik @lukOlejnik]

Critical bug in Windows systems. It is possible to take control of the system via Wi-Fi. The user does not have to do anything. All he needs is for someone within range of his wifi to want to hack him. The attack is simple, repeatable, reliable. https://t.co/2d8bur9rYI

[Johann Rehberger @wunderwuzzi23]

Another data exfil vulnerability in an LLM app fixed! 👨‍🔧 This time in GitHub Copilot VS Code Extension.

#infosec #llm

https://t.co/roDpoZZe7g

[noobintheshell @noobintheshell_]

Précommandé 😍

[Third Éditions @ThirdEditions]

🔥La seconde vague de précommande de l'Édition Prestige de « Le Monument Elden Ring » par @chroniqueslud , c'est maintenant et jusqu'au 23 juin !

Elle contient :
✨Le livre dans son édition First Print
✨Un fourreau or exclusif
✨4 lithographies

⤵️Lien en suivant⤵️

[Third Éditions @ThirdEditions]

🚨 Au sommaire du nouveau Red Alert :
- Lorelei and the Laser Eyes
- Interlude Top 3 des mascottes
- Le retour de l'esthétique PS1

Ce numéro est disponible sur:
- Deezer
- Spotify
- Google Podcasts
- Apple Podcasts
- YouTube

[non aesthetic things @PicturesFoIder]

Years later and I'm just now seeing the original video

[noobintheshell @noobintheshell_]

This evening 😍

[Distant Worlds: music from FINAL FANTASY @ffdistantworlds]

Lyon friends! 💚

Distant Worlds is bringing the music of FINAL FANTASY to Amphithéâtre 3000 TONIGHT! ✨

Relive your favorite FINAL FANTASY moments as Maestro Arnie Roth leads over 100 musicians on stage, with FINAL FANTASY XV composer Yoko Shimomura in attendance!

[Scott Piper @0xdabbad00]

Google Cloud accidentally deleted a company's entire cloud environment (Unisuper, an investment company, which manages $80B). The company had backups in another region, but GCP deleted those too. Luckily, they had yet more backups on another provider.
https://t.co/v5WFxqUtaB

[Marques Brownlee @MKBHD]

This has to be hardest-to-explain thing I've ever tried. But it's so sick!

FULL VIDEO: https://t.co/O2LKrmlIX8

Disney Imagineering Labs let me walk on the "holotile" - essentially a 360-degree treadmill/moving floor for VR