CA$H

Electrical Engineer turned Digital Forensicator. Thinker, tinkerer, inventor, artist, home chef, gamer, home brewer. Socially aware, spiritually awoke.

[CA$H @RobJTejas]

@BelannF @01Funkytown The emf generated in electric vehicles is just as bad. Even your wifi signal is an issue, but it's coming from everywhere. 5G signals are in the house, on the street, in our pockets.

[Cyber Security News @The_Cyber_News]

🔴 GentleKiller Ransomware Abuses Vulnerable Drivers to Disable 400+ EDR Security Processes

Source: https://t.co/yEHKXCZjxc

A highly sophisticated EDR-killing framework, dubbed GentleKiller, was used by the Gentlemen ransomware-as-a-service (RaaS) gang to systematically disable endpoint security tools before deploying its ransomware payload.

GentleKiller is an in-house EDR-killing framework with at least eight distinct variants, each impersonating a different legitimate security product and abusing a unique vulnerable or malicious kernel-level driver.

In total, GentleKiller targets more than 400 processes mapped to 48 security products, including industry leaders such as Microsoft Defender, CrowdStrike, SentinelOne, Sophos, Palo Alto Networks, ESET, Bitdefender, Kaspersky, and McAfee/Trellix.

#cybersecuritynews

[Aircorridor @_aircorridor]

Build a Wi-Fi scanner in Python that locates the physical position of nearby access points!

Parse 802.11 frames, read RSSI values, and turn raw signal data into geolocation.
https://t.co/Hx54cnmLCH
@three_cube @DI0256 @IamSmouk @co11ateral

[Mohamed Alzhrani @0xMaz]

Hello guys،

Do you want to Bypass all production EDR ?

Read my new research to enjoy in kicking EDRs defenses.

https://t.co/Y0QMWXM9GZ

The proof-of-concept implementation is available at https://t.co/CAUeRcumK5

#Maldev

[Khushi Doshi @aiwithkhush]

10 GITHUB REPOS THAT SCRAPE THE ENTIRE INTERNET FOR YOU

Bookmark every single one. Each one pulls clean data off any website on earth, the kind of access companies sell behind a sales call and a contract.

1. https://t.co/yjhB8qsY2r

Point it at any website and it crawls every page, renders the JavaScript, and hands back clean structured data an AI can read instantly. It crossed 130K stars and landed in GitHub's top 100 repos. The scraping backbone half the AI startups quietly run on, open for anyone.

2. https://t.co/H8tTZjwd7O

The #1 trending crawler on GitHub. Turns any site into clean, LLM-ready markdown, faster than the paid services and with no API key, no account, no per-page fee. A dev built it in days after getting fed up paying $16 for a gated scraper. 51K stars. Apache 2.0.

3. https://t.co/xgLQDLB4HL

An AI agent that drives a real browser like a human, clicking, scrolling, logging in, filling forms, and pulling data off sites it has never seen before. Two ETH Zurich researchers built it and it hit 95K stars in about a year. The thing that scrapes pages no simple crawler can reach. MIT.

4. https://t.co/bBDy50sR9R

The full professional scraping framework, with rotating proxies, automatic retries, browser fingerprint spoofing, and queue management, all the machinery that keeps you from getting blocked. The exact stack scraping companies charge thousands to operate, handed to you for free.

5. https://t.co/nKhjeJxe1F

The original industrial-strength scraper that has quietly powered data teams for over a decade. Crawl millions of pages, extract anything, export it clean. Battle-tested at a scale most paid tools never reach, and free the entire time.

6. https://t.co/0NeYEdAWDt

Microsoft's own tool that converts any file or web page, PDFs, Office docs, HTML, images, into clean markdown an AI can actually use. The messy-data-to-clean-data step companies build whole pipelines around, open-sourced by Microsoft itself.

7. https://t.co/vyKqqy18Pi

A stealth scraper built to stay invisible, adapting automatically when a site changes its layout and slipping past the bot detection that stops everything else. The cat-and-mouse layer that anti-scraping vendors sell as a premium feature, free and open.

8. https://t.co/o9TuMdEQ1l

Mirror and control any Android phone from your computer to pull data and automate apps that have no website at all. The bridge into mobile-only platforms that most scrapers can't touch. 130K+ stars. Apache 2.0.

9. https://t.co/24FQISv92x

Show it one example of what you want and it figures out the pattern and scrapes the rest of the site automatically. No selectors, no code to maintain. The "just get me this data" button, in a few lines of Python.

10. https://t.co/BgL79bWL89

A version of curl that perfectly mimics a real browser's fingerprint, so the requests sneaking past every defense look exactly like a human with Chrome open. The lowest-level trick the expensive scraping APIs are quietly built on top of.

Companies sell this access for $2,000 a month. The source code is right here.

[Mehmet Ergene @Cyb3rMonk]

New TTP in the arsenal. Looks quite dangerous.

https://t.co/Y5CGZyte84

[HustleBitch @HustleBitch_]

🚨 PEOPLE ARE FINDING OUT WHAT LICENSE PLATE CAMERAS ARE REALLY RECORDING — AND THEY'RE FREAKING OUT

Most people think these cameras only scan your license plate.

That's not what people are worried about anymore.

New technology is reportedly allowing authorities to identify and track phones, smartwatches, Bluetooth devices, vehicle systems, and other electronic signals moving through entire cities.

Your morning commute.
Your gym.
Your coffee stop.
Your kid's soccer practice.

Every trip potentially creating a digital trail.

This isn't really about your car.
It's about YOU.

Who you meet.
Where you go.
What route you take.
What time you leave home.
What time you come back.

And eventually... where you're likely to be next.

Meanwhile, thousands of camera systems are appearing across the country while massive data centers are being built to process and store unimaginable amounts of information.

A growing number of Americans believe we're watching the construction of a real-time surveillance network unlike anything we've seen before.

What do you think they're preparing for that we're not being told about?

[Nicolas Krassas @Dinosn]

Microsoft discovers new lightweight backdoor that steals cryptocurrency https://t.co/Z46wD7hOpA

[SOCRadar® @socradar]

SOCRadar found the attackers' live operational server behind #FortiBleed — and what was on it is alarming. Here's what we know.

[The Shadowserver Foundation @Shadowserver]

We shared a one-off "FortiBleed" dataset of compromised Fortinet devices in our Compromised Website Report https://t.co/D1KZAGvNIZ thanks to collaboration with @socradar!

Stats:
Dashboard World map view:
https://t.co/34HZSWCwd3

Dashboard Tree map view:
https://t.co/8aZBMnT20I

[Cyber Security News @The_Cyber_News]

🚨 Windows Defender 0-Day Exploit “RoguePlanet” Grants SYSTEM Access to Attackers

Source: https://t.co/h0SqQD6cjB

A researcher known as Nightmare Eclipse has publicly released a new proof-of-concept (PoC) exploit named RoguePlanet, targeting a previously undisclosed race condition vulnerability in Microsoft Windows Defender.

When successfully executed, the exploit spawns a command shell running under SYSTEM-level privileges, granting an attacker the highest possible access on a compromised Windows machine.

The release, posted to GitHub, arrives on Patch Tuesday, June 10, 2026, adding urgency to an already escalating series of Defender-targeting disclosures.

#cybersecuritynews

[NBA Memes @NBAMemes]

This might be the coldest quote ever 😮‍💨

[blackorbird @blackorbird]

Analysis of #Lazarus Campaign Exploiting CVE-2025-55182 and Copperhedge Malware
This report analyzes an ongoing intrusion campaign launched by the notorious Lazarus Group, leveraging the high-risk unauthenticated remote code execution (RCE) vulnerability CVE-2025-55182 paired with the Copperhedge malware suite, targeting global financial institutions and blockchain infrastructure for financial theft and sensitive intelligence harvesting.

https://t.co/q34nCgMBv8

[Het Mehta @hetmehtaa]

roadmap for a self-taught hacker

https://t.co/5fYvknGaJS

[Former Congresswoman Marjorie Taylor Greene🇺🇸 @FmrRepMTG]

The United States of America is a sovereign nation.

Section 224 of the 2027 National Defense Authorization Act must be removed.

Our military should not be integrated in any capacity with a foreign country’s military.

Nor should we be funding it.

[0xEvinho @0xEvinho]

If for whatever reason you don’t want to pay for an AI subscription, you can now use chipotlAI and burn chipotles LLM compute instead 🤣🤣🤣

[D4rk_Intel @d4rk_intel]

My article "How To Investigate A Person Of Interest In 2026" is now available as a PDF.

A practical guide to digital footprint analysis – from email reconstruction to metadata mining and entity graphing.

Thanks @osintnewsletter for the mention.

PDF: https://t.co/86YlE9e2pB

[obscaries ❘ AppSec @obscaries]

🔍 Recon is often a chain of multiple tools.

Sudomy attempted to bring much of that workflow into a single framework:

▸ Subdomain Enumeration
▸ Live Host Discovery
▸ DNS Analysis
▸ Tech Fingerprinting
▸ Screenshot Collection
▸ Subdomain Takeover Checks
▸ Endpoint Discovery

Source:
https://t.co/kmbYFlS2vq

#BugBounty #Recon #CyberSecurity #OSINT #Pentesting #InfoSec #SecurityResearch #EthicalHacking

[Dr Boyce Watkins - Wealth is Power @drboycewatkins1]

Damn.

[Ro Khanna @RoKhanna]

And I will be offering an amendment in the committee itself to strip section 224 out, @RepThomasMassie.

Trump can't kill the Massie/Khanna partnership no matter how much he posts on Truth Social.