TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️

Privacy, motorcycle, and craft beer geek. Adversarial thinker. Blue team your blue team for better red teaming.

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

All this time people have been saying LLMs burn trees or whatever. No. Here’s one that burns burritos.

[dax @thdxr]

someone made a fork of opencode that routes through the unsecured ai endpoints from chipotle

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

This isn’t the path I’d like to see vulnerability research go down. It’s not the path many researchers currently choose. This is the alternate route that will always exist for your bug bounty program.

[IRIS C2 @C2IRIS]

@midwestneil Just sell to firms like ours and enjoy the fruits of your labor

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

Hey, I wonder what happens if a well known org is hostile to security researchers for years?

https://t.co/6N2sEQS7IW

[ClaudeDevs @ClaudeDevs]

We’ve shipped a security-guidance plugin for Claude Code that helps identify and fix vulnerabilities as you’re writing code.

Available for all Claude Code users. Install from the plugin marketplace (/plugins).

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@HackingLZ A friend’s work was HANDING THESE OUT to any employee that wanted one.
Very jealous.

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@HackingLZ Proof that throwing money and resources at a thing doesn’t guarantee success.

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

Ok, haven’t tested this yet, but THANK YOU

[Panos Gkatziroulis 🦄 @ipurple]

Ledger - A Cobalt Strike aggressor script that tracks every operational change made during an engagement. ✅ Services
✅ Firewall Rules
✅ Accounts
✅ Registry keys
https://t.co/ybXV8uNKLS

[Flipper Devices @flipper_net]

We're finally ready to talk about Flipper One — a project we've been grinding on for years and have rebuilt from scratch several times. Read blog post >>
https://t.co/tTywwytXzO

[Samir @SBousseaden]

MiniPlasma LPE exploit works perftectly. Elastic Defend behavior protection catches the exploit primitives involved in the chain, providing detection coverage even against fresh public exploit.

https://t.co/81lEg2J3MA

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@CopyRebeldia I’m so tired of AI generated feeds like this. Gross.

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

Technically they released a new exploit for an old vuln that wasn’t properly addressed. Not another vulnerability?

[Dark Web Informer @DarkWebInformer]

🚨 Nightmare Eclipse just released another vulnerability called MiniPlasma

GitHub: https://t.co/oySBY1X8ke

CVE: CVE-2020-17103 which is a high-severity elevation of privilege vulnerability in the Windows Cloud Files Mini Filter Driver that allows an attacker to gain elevated, unauthorized access to a targeted system

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@ConsciousHacker Batters almost works here. Whoops.

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

2026 is going to break some people.

[Gray Hats @the_yellow_fall]

Public PoC for NGINX CVE-2026-42945. An 18-year-old RCE flaw in the rewrite module enables server takeover. Update to NGINX 1.31.0 or 1.30.1 immediately.

#NGINX #CyberSecurity #InfoSec #RCE #Vulnerability #CVE #WebServer #PoC #GitHub #SysAdmin #TechNews
https://t.co/huz0K21JaR

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@ConsciousHacker Same one. The amount of hype for every CVE is wild. But sorting through everything to understand what batters for your org? I don’t know if we’re ready.

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

Wheels down in Chicago. I’m baaaaack!

Oh hey and @bsides312 is this weekend. Come suffer in the CTF!

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@n00py1 Or just cycle the service….

When I mentioned this on the author’s LinkedIn post, the reply was that you’d have to clean the malware off the compromised endpoints first.

Yes. Yes you would.

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@mariuszbit @_RastaMouse

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

Ubuntu note: AppArmor restricts unprivileged user namespaces by default. You must first run:
sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
Well done, @ubuntu

[V12 @v12sec]

this is a dirtyfrag variant. PoC and patch: https://t.co/5lEDZZU3Sj

[TechByT̷͔̼̯̖̟͔͎͑̽o̶͚̠̰͚̩̻̝̰͂̿̔̄̊́͘m̷̡̟̍́̏̔ ⚠️ @techbytom]

@Haus3c Wut

[Jint3x @Jint3x]

@IntCyberDigest POV: you are downloading packages in 2026