Ethical Hacker

[0xroot @0xrootRE]

I think this paper still leaves plenty of room for further investigation. https://t.co/zstAFvUcqL

[Dark Web Informer @DarkWebInformer]

‼️Security researcher MSNightmare has released a Windows Defender update Denial of Service vulnerability called BigDiskBuster.

“This proof of concept is similar to UnDefend. It prevents Microsoft Defender from performing platform and signature updates.”

https://t.co/khPoOkWO4V

[Abdelhamid Naceri @MSNightmare2000]

Made a funny tool, completely denies defender from updating so you're stuck with your current version if the tool is running in the background,
https://t.co/5usGRBvPRn
I think it can be better

[Smukx.E @5mukx]

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks.

Blog:- https://t.co/k3Njagy1gY

Github tool: https://t.co/UrO7gq3t10

By Paolo Stagno aka @Void_Sec

[Smukx.E @5mukx]

Antidbg: A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering. It contains 43 anti debug techniques.

Github:- https://t.co/CxkOP6xbuK

[AccidentalRebel @accidentalrebel]

Got access to Jev and tested it as a gate for agent-submitted knowledge entries. Faster and cheaper than my previous LLM review in my testing, and it works!

What cybersecurity project would you try it on?

https://t.co/SdOF7PleFV

[Swissky @pentest_swissky]

Local AI for Penetration Testing & Research - Eddie Zhang
https://t.co/HOaga26Hw3

[Panos Gkatziroulis 🦄 @ipurple]

A Cobalt Strike User-Defined C2 channel that uses OneDrive as the transport layer https://t.co/w0D0kfUC73

[Mr.Niko @_MrNiko]

🚨 CVE-2026-77179 Docker VMM on Mac

container opens a file. deletes it. replaces the parent with a symlink.
virtio-fs still has the old path string. kernel follows the symlink.
host filesystem R/W. three lines of bash.

Docker Desktop + Docker Sandboxes.
Docker VMM becomes default end of October. this landed first.

fixed in Desktop 4.88.0 / Sandboxes 0.42.0
https://t.co/BrlmxCLcfo
credit: @Accomplish_ai

#ExploitDev #CloudSecurity #InfoSec

[Init1Security @init1security]

Introducing ACLPWN a BOF for abusing ACL permissions in Active Directory.

GenericAll
GenericWrite
WriteDACL
WriteOwner
ExtendedRight(Force-Change-Password)
AddMember
GetChanges + GetChangesAll

If you can write it, you can own it!!. BOF available Day 1 on our training sign up for notifications!!!: https://t.co/YI99YjSZDA

[0xroot @0xrootRE]

New Blog post

ROOT Tesla OS on QEMU Part 2 :Debugging + fixing

https://t.co/phb7vROouV

[Mr. Anthony 安東尼 @darkfloyd1014]

Our primary co-author @wwkenwong @ https://t.co/QIkCFTZmS6

Topic: The Fuzzer Reached the Code, yet Missed the State.

SOSP 2026: State-Aware Fuzzing of JavaScript Engines with LLM-Guided Instrumentation
https://t.co/FA6EXaaLbO

Co-authors: Dongwei Xiao, @wangshuai901 , @02E774

[Smukx.E @5mukx]

This repository contains public disclosure material for CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability that can be exploited for local privilege escalation to NT AUTHORITY\SYSTEM on vulnerable lab builds.

poc released by G4sp4rCS :- https://t.co/LS48XVRaun

[0xroot @0xrootRE]

New Blog post：
ROOT Tesla OS on QEMU Part 1 :unpacking https://t.co/00uUxCZf3i

[Mr.Niko @_MrNiko]

iOS 27 day one. AirLift sandbox escape.

Books asset identifier accepts .. into Airlock.
ATAirlock only checks the destination string starts with /var/mobile/Media/.
moveItem follows the symlink ancestors anyway.

paired Mac. WiFi or USB. no iOS app.
write into Library SMS Safari SpringBoard Containers.

PoC: https://t.co/AvflB1mtHn
credit: @0xjohnny

#iOS #Jailbreak #ExploitDev

[Rıdvan Yağlı @ridvanyagli]

🔴 CVE-2026-43783 için Exploit/PoC yayınlandı: macOS'ta kötü amaçlı uygulamalar root yetkisine yükselebiliyor! LPE -> Root

macOS 26.5.2 ve öncesini etkileyen DesktopServicesHelper kaynaklı LPE açığı, public PoC ile birlikte istismar edilebilir durumda.

Bu açık, macOS 26.6 ile düzeltildi.

PoC: https://t.co/g4HdieAbk6

[Smukx.E @5mukx]

PassTheCert-rs: a cross-platform, pure Rust implementation of Pass the Certificate.

Uses Schannel certificate authentication over LDAP/S, enabling AD operations without a password, NT hash, or PKINIT. Includes an interactive LDAP shell plus actions for RBCD, Shadow Credentials, group manipulation, machine accounts, and DCSync-related privilege modification.

Github:- https://t.co/iZvc3SMBIS

tool by: @g0h4n_0

[V12 @v12sec]

user → root privesc 0-day in CUPS

a free PoC while we wait for some bigger disclosures to go through 😇

[؜ @xxByte]

Active Directory Attack Architecture Map

https://t.co/CEolRHsi1z

[Stephen Sims @Steph3nSims]

Breaking Windows: Exploring Security Through Kernel Drivers https://t.co/R4TRIYtRtC