Phantom Radar Project🦉

Independent cyber threat intelligence project. Operated by individual researcher. Not affiliated to any entity. Beta testing released April 20, 2026

[Tom Dörr @tom_doerr]

Wi-Fi motion detection without cameras

https://t.co/4t8bf1jnk1

[周览💪｜实用工具分享 @grgerwcwetwet]

终于找到一个能替代 Wireshark 的开源神器。

GitHub 3.7 万 Star 的 Sniffnet，把网络监控做成了普通人也能看懂的样子。

很多人打开 Wireshark 的第一反应都是：
看不懂，直接关闭。

而 Sniffnet 完全不同。

实时显示上传下载流量、连接主机、访问域名、IP 地理位置，甚至还能查看正在偷偷联网的软件。支持流量过滤、PCAP 导入导出、多网卡监控。

最关键的是界面非常舒服。

不用研究抓包规则，不用学习复杂命令，打开就能看到电脑到底在和谁通信。很多用户直接把它当成 GlassWire 的免费替代品。(Windows Central)

Windows、macOS、Linux 全平台支持，Rust 编写，占用资源极低。(GitHub)

对于经常折腾代理、NAS、Docker、服务器的人来说，这绝对属于装机必备工具。

https://t.co/pXQHkfXRzU

[BleepingComputer @BleepinComputer]

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
https://t.co/s1EDQUZXmU

https://t.co/s1EDQUZXmU

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[V12 @v12sec]

today we are releasing a qemu escape

[Phantom Radar Project🦉 @phantmradar]

@IntCyberDigest Bro is a legend

[V12 @v12sec]

another day, another universal linux LPE

[Claude @claudeai]

Effective today, we are:

1) Doubling Claude Code’s 5-hour rate limits for Pro, Max, and Team plans;

2) Removing the peak hours limit reduction on Claude Code for Pro and Max plans; and

3) Substantially raising our API rate limits for Opus models.

[7h3h4ckv157 @7h3h4ckv157]

90+ recon modules
48 secret-regex patterns
80+ dorks
9 read-only credential validators
27 attack-path templates
5,500+ lines of structured tradecraft.

Might be helpful. Try: https://t.co/xgi9WrBG7F

[SANS.edu Internet Storm Center @sans_isc]

Cleartext Passwords in MS Edge? In 2026? https://t.co/ylTUy4zsnm

[Tom Jøran Sønstebyseter Rønning @L1v1ng0ffTh3L4N]

Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them.

[Florian Roth ⚡️ @cyb3rops]

Anyone else seeing Microsoft #Defender flagging #DigiCert root certificate registry keys as malware?

We’ve seen reports that Defender signature update from April 30 added a detection called:

Trojan:Win32/Cerdigent.A!dha

In some environments, Defender apparently detected DigiCert Root CA certificate registry entries and removed them from the trust store.

The affected cert hashes mentioned so far:

0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
DDFB16CD4931C973A2037D3FC83A4D7D775D05E4

Example path:

HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

There’s also a Reddit comment suggesting Microsoft has started restoring the certs and that admins can check this via Advanced Hunting in Defender:

DeviceRegistryEvents
| where RegistryKey contains "0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43"
or RegistryKey contains "DDFB16CD4931C973A2037D3FC83A4D7D775D05E4"
| where ActionType == "RegistryKeyCreated"
| where Timestamp > datetime(2026-05-03T04:00:00)
| project Timestamp, DeviceName, ActionType, InitiatingProcessFileName
| order by Timestamp desc

On an affected device, this can also be checked with:

certutil -store AuthRoot | findstr -i "digicert"

Could become an annoying day for admins if this spreads

https://t.co/VflLyFgssp

[Phantom Radar Project🦉 @phantmradar]

🖤

[7h3h4ckv157 @7h3h4ckv157]

Manifesting 🤞🏻❤️

[Phantom Radar Project🦉 @phantmradar]

@7h3h4ckv157 😍🤣

[ᴍᴀɴᴜ. @ESnomanu]

He visto suficientes películas para saber por qué evacuan antes al vicepresidente JD Vance que al presidente Donald Trump

[Phantom Radar Project🦉 @phantmradar]

@elonmusk And it’s just in beta

[Phantom Radar Project🦉 @phantmradar]

@tetsuoai 👍

[Phantom Radar Project🦉 @phantmradar]

@DailyDarkWeb

[Vivek | Cybersecurity @VivekIntel]

Claude-Red: Turn Claude into a Red Team Operator with 38 Offensive Security Skills. 🤖💀

Prebuilt SKILL .md modules for SQLi, XSS, EDR evasion, exploit dev, OSINT & more — structured like real attacker workflows.

AI is powerful, but garbage input = garbage output. Skills define capability.

#RedTeam #AIsecurity #CyberSecurity
https://t.co/QraHdkdU0A