MathewCanton

[Welf @_welf]

60 fps paper-like screens have been achieved internally

[Johann Rehberger @wunderwuzzi23]

Whoa! Big bounty! 🎉

[Yasho @YShahinzadeh]

My First RCE by Reverse Engineering an EXE File With the Help of AI

A secure web app → a JS file leaking a download endpoint → a .NET binary → AI-assisted reverse engineering → a localhost WebSocket with no origin check → RCE

Write-up: https://t.co/CN6VM92hqA

[Bennett @b_nnett]

Reverse-engineering the Whoop 5.0 to work without a subscription in 24 hours.

Starting now.

[MathewCanton @talys2803]

@payloadartist My mother Fell for it. it targets old ppl esp.

[Erfan Tavakoli @Maverick_0o0]

برای بچه‌هایی که هانت میکنن و حوصله ندارن توی js دنبال endpointها بگردن یه اکستنشن Burp نوشتم که امیدوارم خوشتون بیاد.
https://t.co/P6C1TC2bW5

[Kavish Krishnakumar @SynKavish]

CloudOS, Apple's extremely sophisticated web operating environment with Springboard, based on SproutCore, designed for iCloud (2012)

[Kagi @KagiHQ]

Absolutely. Kagi exists to honor the creators, writers, and bloggers who give the web its soul.

We're here to surface their work, support it, and keep it discoverable.

[Pablo Antonio @PabloAntonio]

These are my designs for the Aaron Swartz monument to remind us of the Core Internet Values:

1. Freedom of Speech
2. Freedom of Access to Info
3. Right to Privacy

[chaskin.eth @jchaskin22]

respectfully, fuck every website that blocks you from using a VPN :)

[Tom Dörr @tom_doerr]

Discovers real IPs behind Cloudflare

https://t.co/Ix3kVM6Tmt

[MathewCanton @talys2803]

@ProtonPrivacy Whats up with (Proton) Drive not showing in VLC anymore?

[CinemaCopa @CopaExMachina]

"He turned the volume up because he can't hear the dialogue. Now make the action scenes as loud as possible."

[gus @igus_ai]

Apple pasó 5 años construyendo una protección para blindar su sistema operativo.

Tres investigadores la esquivaron en 6 días usando Claude Mythos.

Apple diseñó MIE como la gran defensa de seguridad de los chips M5 y A19, una capa creada específicamente para bloquear la mayoría de hacks modernos incluso aunque existiera un bug dentro del sistema.

Según la propia compañía, impedía todos los exploits públicos conocidos en iOS moderno.

Pero el equipo de Calif encontró otra ruta.

No rompieron la protección directamente.
La rodearon.

Y lo más loco es la velocidad:

→ descubrieron el bug el 25 de abril
→ el 1 de mayo ya tenían un exploit funcional desarrollado con ayuda de Claude Mythos.

Un ataque extremadamente raro que no necesita modificar memoria crítica ni ejecutar malware de la forma tradicional.

Solo llamadas normales del sistema desde una cuenta sin privilegios, hasta conseguir acceso root en macOS.

Y fueron personalmente a Apple Park para entregar el informe técnico.

El paper completo tiene 55 páginas y se publicará cuando Apple lance el parche.

Posiblemente la historia del año en ciberseguridad.

[Ejaaz @cryptopunk7213]

claude mythos just broke Apple's $2 billion defense system. it did so by discovering a completely different attack vector to break in

only took it 5 days costing ~$35K of mythos api time (the same exploit class costs $5-10M on grey market)

the researchers that commandeered the exploit produced a 55-page report that was delivered to Apple HQ in-person (hoping they release it after patching).

most shocking part for me is apple's MIE worked as intended. mythos just discovered a new way to side-step it entirely by poisoning the data the M5 chip ingested.

at this point i think we have to accept that mythos walks the walk.

As the anthropic red-team explicitly confirmed this week - this is NOT a compute resource issue. its national defense.

[Vik Sharɱa - Cake Wallet 🇺🇸 🦞🍰 @vikrantnyc]

We at @cakewallet are matching $50,000 in donations! We need open source privacy projects to be funded and thrive.

[Cointelegraph @Cointelegraph]

🚨 ALERT: Google says hackers used AI to create a zero-day exploit capable of bypassing multi-factor authentication, per Bloomberg.

[moose 🐦‍🔥 @usermooseontwt]

two unskippable ads

[摆烂程序媛 @wanerfu]

OpenClaw 现在可以抓取任何网站而不被屏蔽——零机器人检测，原生绕过 Cloudflare，比 BeautifulSoup 快 774 倍。

无需维护选择器。无需变通方案。只需数据。

这是不公平的优势，而且完全开源。
https://t.co/4r4Jg23jal

[TheCryptoBolt @TheCryptoBolt]

These tools power 90% of real-world hacks in 2026, and most people only know 3 👀

— Nmap → Network scanning & recon
— Metasploit → Exploitation framework
— Burp Suite → Web app testing
— Nessus → Vulnerability scanning
— Wireshark → Network traffic analysis
— OWASP ZAP → Web security scanner
— sqlmap → SQL injection automation
— Nikto → Web server scanning
— Gobuster → Directory brute-forcing
— Aircrack-ng → WiFi security testing
— John the Ripper → Password cracking
— Hashcat → Advanced password cracking
— Nuclei → Fast vulnerability scanning
— Wfuzz → Web fuzzing
— Snort → Intrusion detection

If you’re serious about cybersecurity, you don’t just know these… you understand when to use each.

How many have you actually used?