jolmos

I like to create useful things, and sometimes not that useful things just for fun.

[GeoInsider @InsiderGeo]

NEW: 🇳🇱 A cybersecurity incident has now disrupted Dutch supermarket giant Albert Heijn, following a major cyberattack affecting supermarket refrigeration systems in France.

Albert Heijn, along with Etos and Gall & Gall, has experienced significant IT disruptions since Sunday afternoon. The incident has forced the temporary shutdown of several systems, leaving websites, apps and customer services unavailable.

Online grocery deliveries have been halted, loyalty programmes are not working, and electronic shelf labels in stores are displaying outdated promotional prices instead of current offers.

🇧🇪 The disruption has also affected Belgian supermarket chain Delhaize, where customers are experiencing problems with online orders and customer service.

Parent company Ahold Delhaize says it is taking precautionary measures to protect its IT environment and is investigating the incident. The company has not disclosed the exact cause or confirmed whether customer data has been compromised.

The disruption comes as French supermarket chains, including Intermarché, Super U and https://t.co/7bHBi61WPZ, deal with a separate cyberattack targeting refrigeration-control systems.

[TrendAI Zero Day Initiative @thezdi]

Verified! Taisic Yun (@taisic_) of Xint (@xint_official) used a Improper Input Validation bug along with code injection to get his reverse shell on LiteLLM. He earns $40,000 and 4 Master of Pwn points. #Pwn2Own

[!Manan @0xManan]

PoC is public. Internet-facing MikroTik SSH → full admin. No password. No key.

MikroTrick: CVE-2026-67279 + CVE-2026-86060. Fresh on CISA KEV.

Chain: password auth as `-2` (rejected but left sticky) → pre-auth rekey drops the auth gate → `/nova/bin/login` treats `-2` as “read identity + policy from fd 2” → all-ones mask = full admin.

IoC: `login failure for user -2 via ssh` then `user added by ssh:-2@…`

PoC: https://t.co/AWoS9v4lPw

Writeup: https://t.co/xCIKQ0t5Yh

Patch: 7.23.4 / 7.24.2 / 6.49.21 - then hunt `ops` + Flagged.

#MikroTik #RouterOS #CVE #PoC #InfoSec #CyberSecurity

[kishou yusa @kishou_yusa]

After messing around with windows struct to emulate windows I found that there are many project which have pro and con. So here are the way to use it:
For getting the type document then process hacker is the best:
https://t.co/LBIPiC1a9D

[jolmos @sha0coder]

stack overflow over-the-air in realtek drivers
https://t.co/Bjyj7kNRwL

[Daniel @ergot86]

I'm so glad Intel finally added unlimited hardware breakpoints.

[Carlos Santana @DotCSV]

Oh wow, OpenAI quieren darnos GPT-6 Astra rapidito. Tanto que dicen que por cada día que se retrasen nos van a dar un reset acumulable desde el día de hoy.

[jolmos @sha0coder]

If I used realtek wifi drivers, I would like to know this:
https://t.co/1fqb09BLP8

[jolmos @sha0coder]

https://t.co/JO9CNpR3Bo
this night claude code updated to the new version 2.1.243 that segfaults in archlinux

[OrcaRouter 🐳 @OrcaRouter]

We just released our uncensored weights for Qwen3.8 27B FP8, designed for AI Red Teaming and security research, enjoy!
https://t.co/SyuBfYLhtO

[domas @xoreaxeaxeax]

New exploit: “xor dword [0xf80c2094], 1<<22”

Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.

https://t.co/sgAfneFSsf

[Ken W @kenw_2]

风光摄影师王源宗拍摄的2026西班牙日全食，还是得让专业人士来。

[Museo Merindades @MuseoMerindades]

Una foto que hará historia
Frías. Eclipse 12 de Agosto de 2026

📸Ernesto Santana

[Ejército del Aire y del Espacio @EjercitoAire]

¡Buenos días, aviadores! 🌚🌞

Ayer muchos de vosotros mirasteis al cielo para ver el eclipse.

Los aviadores que estaban de servicio tuvieron el privilegio de poder disfrutarlo desde el aire.

Os traemos algunas imágenes tomadas ayer, esperamos que os gusten.

¡Empezamos! ✈️

[V12 @v12sec]

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow)

we will release PoC post disclosure and patch

[jolmos @sha0coder]

@radareorg yeah is quite game-changing, and also mwemu-mcp emulation, but there is much work to do.

[jolmos @sha0coder]

Scales, the eBPF malware targeting ArchLinux
https://t.co/k3E5LhsT65

[Anton @BigToni94]

It’s getting ridiculous how little effort Google seems to put into stopping ClickFix campaigns abusing its own infrastructure.
Attackers are actively using https://t.co/Q8HpzW5rSk for phishing pages, while Google Ads keeps promoting malicious domains with well-known and easily recognizable patterns.
Companies cannot realistically block Google infrastructure entirely, so it would be great if Google actually took responsibility for protecting users instead of just hosting the abuse.
Right now the workflow seems to be:
1. Take money from attackers for ads
2. Deliver malware to users
3. Remove the content after enough reports

This should not be the normal state of the internet in 2026.
#ClickFix #macOS #malware #phishing #security #google

[impulsive @weezerOSINT]

I just reverse engineered the YellowKey BitLocker bypass

Microsoft shipped code that checks for a flag called "FailRelock" in every Windows 11 recovery image. When it's set to 1, after recovery unlocks your BitLocker drive, it never relocks it. All you need is a USB stick.

This code only exists in the recovery environment. Not in normal Windows. They left an entire debug testing framework in production.

[X-Trader @XTraderdotnet]

🎯¡Ya están a la venta para las entradas para la Kedada del 25º Aniversario de X-Trader!

📅 Apunta la fecha: 13 junio 2026 en Madrid
🎟️ Compra tu entrada: https://t.co/2qW6GFhIdt
🌐 Web del evento: https://t.co/MX1bl6nYcU
💬 Hilo oficial del Foro: https://t.co/X2kwT8y6R3

La Kedada más especial de la historia de la web. Sin postureo. Sin humo. Solo trading de verdad. 🔥

Evento patrocinado por @MEXEMBROKER