ud444ng

😸😩

[ud444ng @takeptoto]

I WANT MY GOOD INTERNET BACK MA LORD

[vx-underground @vxunderground]

BREAKING: Microsoft reportedly consulting with Billy Witch Doctor to summon Mega Ultra Chicken to combat rogue security researchers.

We reached out to Microsoft for comment and they declined

[MalaysianWireless @malaysia601]

From MalaysianWireless Forum:

Public complaints seen between 1 May and 10 May involved Maxis mobile, Hotlink, Maxis Fibre, Maxis wireless broadband and customer service issues.

[International Cyber Digest @IntCyberDigest]

‼️ Microsoft has responded to the recent wave of public zero-day disclosures tied to Nightmare-Eclipse.

In an MSRC post titled "A shared responsibility," Microsoft addressed RedSun, UnDefend, BlueHammer, YellowKey, GreenPlasma, and MiniPlasma, saying the vulnerability details were not shared with the company before release.

That claim is contested.

Nightmare-Eclipse says at least BlueHammer wasn't a blindside. In an April 15 signed post, the actor said MSRC was fully aware of the disclosure, that a case had been filed and dismissed, and that Microsoft knew another disclosure was coming.

Microsoft's new post gives no per-CVE timeline. So right now, the public record has two conflicting versions.

Microsoft never printed the handle "Nightmare-Eclipse," but by naming all six vulnerabilities it left no doubt who the post was about.

The company says its security teams have been working "around the clock" to assess impact, protect customers, and ship updates.

It also says its Digital Crimes Unit will keep pursuing the actors who weaponize these exploits and those who enable them.

The case for coordinated disclosure is straightforward.

The point of giving a vendor advance notice is not to protect the vendor. It is to protect the people running the software.

Patch before PoC means defenders get a head start.

PoC before patch hands it to attackers.

That does not make the tension one-sided.

Researchers walk away from coordinated disclosure for reasons: slow fixes, disputed severity, no credit, no payment, broken trust, or deleted reporting accounts.

Nightmare-Eclipse claims Microsoft revoked access to the MSRC account used to report bugs, wiped it, and ignored requests for an explanation.

Microsoft's post does not address that claim directly.

It says only that it still welcomes submissions from anyone through its public researcher portal, regardless of past interactions or reputation.

Both things can be true at once.

A vendor can have a real duty to treat researchers fairly.

And a researcher can still be wrong to burn the disclosure process in a way that arms criminals.

The friction between those two points is exactly where users get hurt, and it's exactly why disputes belong inside proper channels, even after the relationship breaks down.

[marcus @marcusyul]

> la IA contaba mal el inventario en Starbucks

> Microsoft bloqueó claude code para sus propios ingenieros

> Uber no encuentra el ROI después de gastar miles de millones en IA

3 derrotas de la IA esta semana en el sector laboral.

WE ARE SO BACK

[spidey @lochan_twt]

"the database is slow, let's just use cache for everything"

[ethéra @etheravibe]

life when you stop caring about who stays or leaves

[Antoine @TROOVY]

Introducing Hanta Virus

[ud444ng @takeptoto]

@atanudin_ crazy

[International Cyber Digest @IntCyberDigest]

🚨 Brutal showing: security researcher Orange Tsai just made $375,000 in 24 hours at Pwn2Own Berlin 2026. He landed both Microsoft Edge AND Microsoft Exchange in back-to-back demos.

- Day 1: Chained 4 logic bugs to escape the Microsoft Edge sandbox. Payout: $175,000
- Day 2: Took down Microsoft Exchange in the Server category. Payout: $200,000

Congrats 🥂

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[solst/ICE of Astarte @IceSolst]

I love cybersecurity (computers being silly)
but I fucking hate cybersecurity (lamp shade on head, grifter bootcamps, 50 cold LinkedIn sales dms per day, soc2 auditors, DNSSEC, “omg Firefox rce, we are so cooked”, “omg Cisco hacked”, 99 billion feet peaks LEEKED, @snyksec)

[ud444ng @takeptoto]

@syaraasyifaa @atanudin_ we can swim gurl😸

[ud444ng @takeptoto]

@ilikeronnnnii @alexalbert__ at this point i wanna tanam cili

[ud444ng @takeptoto]

@unshadow97 padu abe

[ud444ng @takeptoto]

@desckimh crazy

[ud444ng @takeptoto]

@dedsecx01 demo pls