NotWhatHappened42

[International Cyber Digest @IntCyberDigest]

❗️ Attackers could use iCloud to send email as any icloud[.]com address, including [email protected], while still passing SPF, DKIM and DMARC, the email authentication checks built to stop spoofing.

Researchers found and reported two parsing flaws in Apple's mail servers. An early fix by Apple only blocked the word "admin" and the full patch took 18 months.

Apple paid them $15,000.

[International Cyber Digest @IntCyberDigest]

❗️ More than half a million credentials leaked on GitHub turned out to still work, and the oldest was committed 17 years ago.

Researchers found 543,699 of them across 224 million public repos, where the median working secret was 784 days old.

npm revokes leaked tokens, so just 1 of 101,886 still worked. Of 126,963 leaked Google Cloud service account credentials, more than half still did.

[𝐇𝐚𝐦𝐳𝐚 | Networking Guy @Hamzaonchain]

How Hackers Bypassing OTP using Burpsuite

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: A 16-year-old is suspected of running the KillSec ransomware group, Europol says.

Police seized KillSec's leak site, securing at least 110TB of data. Three suspects were provisionally arrested and eight properties searched in Greece, Romania, Spain and the UK.

The group is linked to ~1,000 suspected attacks worldwide.

[Foxx 🦊 @NadjiaFoxx]

“Dis is food bruh” 🦍
Nignog doesn’t understand that he can’t buy drugs at the vape shop with an EBT card. Edible drugs do not count as food Tyrone.

[International Cyber Digest @IntCyberDigest]

Link to article: https://t.co/r6D9fGYpmR

[International Cyber Digest @IntCyberDigest]

Encryption code was once officially classed as a munition in the U.S., on the same list as military weapons, combat equipment and explosives.

Then a Berkeley mathematics PhD student sued the U.S. government in 1995 for the right to publish his own encryption code.

Daniel Bernstein was told he needed an arms-export license just to put his "Snuffle" code online.

In 1996, a federal judge became the first in the U.S. to rule that source code is speech protected by the First Amendment.

[whiz @crashoverride]

omg i fucking lost it at 0:24😭

[EchosBeast @EchosBeast]

nothing too special but made a ad for antislave / tts feel free to use for yourself if you wish :)

@crashoverride @antislave1 @Rekapzz

[EchosBeast @EchosBeast]

it's funny how vagabond is " in my opinion " the face of kick but yet they treat him so dirty at least antislave will be successful tho especially that @crashoverride has done more the last 2+ weeks then kick has done for the last year that really says a lot about their dev team

[Rex Colt @RexColtClips]

Ozemi, TieDyez and some other leeches get SWATTED!

The Police seem confused, possibly went to the wrong house previously and are sweeping the area.

[whiz @crashoverride]

chucky, freddy & 11 more horror avatars added

free tts on kick, twitch & rumble

https://t.co/3WOsFZ1TQD 🫵😎

[International Cyber Digest @IntCyberDigest]

❗️ An AI agent broke out of its virtual machine and triggered a use-after-free in Google's heavily hardened hypervisor by tricking KVM into quietly rewriting a memory-mapping entry with a single three-byte instruction.

It then flooded the host with 49,152 memory mappings until KVM followed a pointer into that freed memory, and on its fourth live attempt the host handed over Google's secret flag.

No one gave it an exploit, so the agent spent weeks studying KVM's source code and wrote 14,338 lines of harness code to get there.

[' @BDFREEN]

opsec level?

[𝐇𝐚𝐦𝐳𝐚 | Networking Guy @Hamzaonchain]

📂 ETHICAL HACKING ROADMAP
┃
┣ 📂 01 — Networking
┃ ┣ 📂 TCP/IP
┃ ┣ 📂 DNS
┃ ┣ 📂 HTTP/HTTPS
┃ ┣ 📂 Routing & Switching
┃ ┣ 📂 Firewalls
┃ ┗ 📂 VPNs
┃
┣ 📂 02 — Linux
┃ ┣ 📂 Command Line
┃ ┣ 📂 Filesystems
┃ ┣ 📂 Permissions
┃ ┣ 📂 Processes
┃ ┣ 📂 Bash
┃ ┗ 📂 Package Management
┃
┣ 📂 03 — Programming
┃ ┣ 📂 Python
┃ ┣ 📂 Bash
┃ ┣ 📂 JavaScript
┃ ┗ 📂 SQL
┃
┣ 📂 04 — Security Fundamentals
┃ ┣ 📂 CIA Triad
┃ ┣ 📂 Authentication
┃ ┣ 📂 Authorization
┃ ┣ 📂 Cryptography
┃ ┣ 📂 Vulnerabilities
┃ ┣ 📂 Exploitation
┃ ┗ 📂 Privilege Escalation
┃
┣ 📂 05 — Reconnaissance
┃ ┣ 📂 OSINT
┃ ┣ 📂 Information Gathering
┃ ┣ 📂 Subdomain Enumeration
┃ ┣ 📂 DNS Enumeration
┃ ┗ 📂 Network Discovery
┃
┣ 📂 06 — Scanning & Enumeration
┃ ┣ 📂 Nmap
┃ ┣ 📂 Gobuster
┃ ┣ 📂 Netcat
┃ ┣ 📂 Nikto
┃ ┗ 📂 Enumeration Techniques
┃
┣ 📂 07 — Web Security
┃ ┣ 📂 HTTP
┃ ┣ 📂 Cookies & Sessions
┃ ┣ 📂 Authentication
┃ ┣ 📂 OWASP Top 10
┃ ┣ 📂 Burp Suite
┃ ┗ 📂 Web Exploitation
┃
┣ 📂 08 — System & Network Security
┃ ┣ 📂 Network Attacks
┃ ┣ 📂 Windows Security
┃ ┣ 📂 Linux Security
┃ ┣ 📂 Active Directory
┃ ┣ 📂 Wireless Security
┃ ┗ 📂 Privilege Escalation
┃
┣ 📂 09 — Exploitation
┃ ┣ 📂 Metasploit
┃ ┣ 📂 Exploit-DB
┃ ┣ 📂 Shells
┃ ┣ 📂 Payloads
┃ ┗ 📂 Post-Exploitation
┃
┣ 📂 10 — Choose a Specialization
┃ ┣ 📂 Web Application Security
┃ ┣ 📂 Network Security
┃ ┣ 📂 Active Directory
┃ ┣ 📂 Cloud Security
┃ ┣ 📂 Wireless Security
┃ ┣ 📂 Reverse Engineering
┃ ┣ 📂 Red Teaming
┃ ┗ 📂 DevSecOps
┃
┣ 📂 11 — Practice
┃ ┣ 📂 TryHackMe
┃ ┣ 📂 Hack The Box
┃ ┣ 📂 PortSwigger Academy
┃ ┣ 📂 VulnHub
┃ ┗ 📂 CTFs
┃
┣ 📂 12 — Reporting
┃ ┣ 📂 Vulnerability Reports
┃ ┣ 📂 Evidence & Screenshots
┃ ┣ 📂 Risk Assessment
┃ ┣ 📂 Remediation
┃ ┗ 📂 Pentest Reports
┃
┗ 📂 13 — Career
┣ 📂 Bug Bounty
┣ 📂 Penetration Testing
┣ 📂 Red Teaming
┣ 📂 Security Engineering
┣ 📂 Security Operations
┗ 📂 Security Research

[Pirat_Nation 🔴 @Pirat_Nation]

Some Windows users are reporting that their PCs completely freeze after connecting to the internet.

The suspected cause is a built-in Windows task that updates Secure Boot certificates. On some older PCs with outdated UEFI firmware, the update can apparently get stuck and cause the system to freeze.

Microsoft has confirmed that Secure Boot updates can fail and keep retrying on unsupported firmware, but it hasn’t confirmed that this is causing the freezes.

For some users, disabling the task appears to stop the freezes, but that also means they won’t receive future Secure Boot updates.

[NotWhatHappened42 @WhatHappened422]

@eNdure_24 @crashoverride me to

[komal @komal_uk01]

He Created Linux without using Claude opus 5.5

[International Cyber Digest @IntCyberDigest]

‼️ Linus Torvalds told Linux kernel developers this week that Linux is not one of those anti-AI projects and that AI is now a clearly useful tool.

He says AI's usefulness was still arguable a year ago but no longer is, and that the doubters simply haven't used the tools. Nobody is forced to use AI, but he will ignore anyone trying to stop others from using it. Anyone who wants an anti-AI project, he says, can fork the code or walk away.

In 2024, Torvalds dismissed AI as mostly marketing. By this January he was shipping AI-generated Python in his own hobby repo, and the kernel now accepts AI-written code under disclosure rules.