zCat 🛡️

#zcash 🛡️ fan, read more at free2Z:

[MalwareHunterTeam @malwrhunterteam]

😂

[vx-underground @vxunderground]

If you EVER see me give an AI model a woman's name, and begin writing about how intelligent, gentle, and sensitive the AI model is...

Take me out back and shoot me. Save me from myself, bro. It's all over.

[zCat 🛡️ @zCat_App]

👀

[International Cyber Digest @IntCyberDigest]

‼️🚨 NEW RESEARCH: Fiber-optic cables can be turned into a hidden microphone and used for eavesdropping.

Researchers from Hong Kong's PolyU and CUHK just proved it works in real conditions. The paper was presented at NDSS 2026, one of the top cybersecurity conferences in the world.

When someone talks in a room, the sound waves cause tiny vibrations in everything around them, including the thin glass fiber that runs into your apartment from your internet provider. Those vibrations slightly disturb the laser light traveling through the cable. If an attacker plugs the other end of that cable into a special device called a Distributed Acoustic Sensing system, they can read those tiny disturbances and turn them back into recognizable speech.

The problem for the attacker: a normal fiber lying along your baseboard is not sensitive enough on its own. Sound fades too fast in the air, and the fiber is too thin to pick it up.

So the researchers built a small device they call a "Sensory Receptor." It is basically a 65mm plastic cylinder with about 15 meters of fiber wound around it. The cylinder catches and amplifies sound waves enough for the fiber to register them. Crucially, it is small enough to hide inside the same little plastic junction box your internet installer leaves on the wall to manage extra cable.

What the attack can actually pick up:

🔴 Daily activities (typing, walking, snoring, washing dishes): 83% recognition accuracy
🔴 Where in the room a sound is coming from: accurate to within about one meter
🔴 Spoken words at meters from the receptor
🔴 In a real office test, with the receptor hidden in a fiber box and the attacker 50+ meters away in another room, around 80% of the conversation was recoverable

Why this attack is different from a hidden microphone:

🔴 No electricity, no batteries, no radio signals
🔴 Cannot be found by professional bug sweeps that look for hidden mics or cameras
🔴 Cannot be jammed by ultrasonic jammers (the kind some boardrooms use against phone microphones)
🔴 Looks identical to a normal fiber cable

The researchers tested a commercial ultrasonic jammer right next to their device and it had zero effect. The defenses meant to protect sensitive meetings simply do not see this attack coming.

What you can do:

🔴 If you run a sensitive office or meeting room, ask your IT team about polished fiber connectors and optical isolators. Both make this attack much harder.
🔴 Do not let your internet installer leave excess fiber coiled up inside the room. Have them coil it inside the wall or in a sealed box outside the room.
🔴 Keep fiber cable runs away from desks and walls that resonate with conversation.
🔴 In high-security spaces, soundproof the walls and ceilings where fiber runs.

[The Smart Ape 🔥 @the_smart_ape]

aave: yo arbitrum, send back the $71m you get from the hacker, we need it

arbitrum: chill, we’re voting on it, you’ll have it in a few days. defi united, remember?

aave: bet. love that for us

(suddenly, american lawyers show up)
plaintiffs: stop right there. that $71m is ours now

aave: excuse me??

plaintiffs: we have old judgments against north korea. the hacker was lazarus group. lazarus is north korea. therefore the funds belong to north korea. therefore we seize them

aave: wait. do you have proof it was north korea?

plaintiffs: yeah, tweets

aave: …tweets

plaintiffs: and a news article

aave: but even if it was them, holding stolen funds for 5 minutes doesn’t make you the owner??

plaintiffs: yes it does

aave: so if i smash a tiffany’s window, grab a diamond, and a bystander grabs it back from me, your creditor friends can seize the diamond?

plaintiffs: correct

arbitrum: uhh… what are we supposed to do here

plaintiffs: don’t move. everything’s frozen

aave: but the funds belong to my innocent users??

plaintiffs: not our problem

aave: if i lose this, nobody will ever stop a hacker again. why would they? the reward becomes a legal war with the thief’s creditors

plaintiffs: not our problem

aave: and sanctioned states will have an incentive to hack more, since stolen funds can pay off their old debts

plaintiffs: still not our problem

aave: (turns to the judge) your honor, either vacate this now, or make them post a $300m bond. we have days before the entire defi ecosystem cascades

judge: (tbd)

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

Reproducing a Double Free RCE in Apache CVE-2026-23918 on the most used software on the internet with one prompt that costs like $0.001 via DeepSeek is scary as hell.

Now, anyone with zero knowledge can hack the internet.

(Not default installs though. You need mod_http2 enabled.)

[zCat 🛡️ @zCat_App]

@BostonZcash

[vx-underground @vxunderground]

CEO of Coinbase sends out catastrophic message this morning.

1. Laid off over 2,000 people. This message to laid off people was written using AI.

2. Code being pushed to prod is vibe coded. He admits that. That is absolutely terrifying.

[Josh Swihart 🛡 @jswihart]

All your AI, with access to all your activities, across all your systems, connected to your identity. In this system, nothing is yours.

Decentralized, self-managed, and encrypted.
You own it, or they own you.

[Zingo! @ZingoLabs]

📢 Getting to Know a New Block Explorer: Cipherscan 🛡

Block explorers are an essential tool for tracking financial activity on a crypto network.

Currently, there are new block explorers dedicated exclusively to Zcash, offering advanced features that provide a comprehensive understanding of various aspects.

Join us this Friday to learn about Cipherscan, a new explorer joining the Zcash ecosystem, and discover how to use it effectively. You'll be amazed by its powerful features that make it more than just a conventional block explorer.

Don't miss this live stream! There will be POAP!

See you there!

🧭 COORDINATES

📞Medium: Live
📍Location: https://t.co/hThR5bYeMx
🗓Date: March 17, 2026
🗓Time:

🇲🇽 7:00 a.m.

🇨🇴 8:00 a.m.

🇻🇪 9:00 a.m.

🇦🇷 10:00 a.m.

🇪🇸 3:00 p.m.

[zCat 🛡️ @zCat_App]

@gordonesTV I think he is a CIA operation. Youtube tries to feed me with this dude like crazy. And as any other oracle, he seems to be wrong on every prediction since he became 'famous' 😬

[DarkFi Squad @DarkFiSquad]

Privacy: choosing who knows.
Secrecy: choosing that nobody knows.

Your bank balance is private. You share it with some people.

Your passwords are secret. You share them with nobody.

The surveillance mindset treats these as identical because collapsing the distinction serves power.

If privacy = secrecy, and secrecy = guilt, then demanding privacy = admitting guilt.

[zCat 🛡️ @zCat_App]

@Zerodartz @BostonZcash @zodl_app @FlexHQ Bought Epstein files? 🫪

[NEAR Intents @near_intents]

We are aware of an incident affecting @rhea_finance. As a precautionary measure, activity on NEAR Intents and near[dot]com has been temporarily paused while we assess transactions potentially linked to the incident and support the investigation, in accordance with Intents’ compliance and transaction monitoring procedures.

NEAR Intents itself was not affected, and no near[dot]com user funds have been lost or stolen. We are working closely with Rhea and relevant third parties and will share further updates as more information is confirmed.

[Tails @Tails_live]

Tails 7.6.2 is out:

https://t.co/XRXBq8fFai

It fixes an important security vulnerability in the confinement of Tor Browser.

[Proton Pass @Proton_Pass]

Babe, wake up!

[L0la L33tz @L0laL33tz]

I went through over 100 pages of transcripts for last week’s Tornado Cash hearing so you don’t have to.

Here are the prosecution’s arguments for a retrial and against Storm's acquittal, in a nutshell:

> Operating Tornado Cash was not illegal, but Storm should have stopped operating it to prevent criminal liability
> There were no legal funds in Tornado Cash because even the 85% of non-criminal funds turned criminal because they were in Tornado Cash
> Tornado Cash transferred the money and the Government can technically prove it (yes, really)
> Roman Storm could have stopped Tornado Cash and any claim to the contrary is a lie, which the Government is also able to prove, of course, all of which has nothing to do with why its still running today
> The UI and the protocol are the same thing, because why not throw in even more confusion of basic understanding of engineering 101

All in all, developing cryptocurrency mixers isn't illegal but developing Tornado Cash was, because reasons. And it’s really hard to say whether the Government will get away with this.

What we do know is that at one point, the prosecutor swam so far off the deep end with his theories that even the judge cautioned him that she “might argue that you were doing better before you started talking”.

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

😱 HOLY SHIT... Someone just dropped a fully liberated Gemma 4 E4B!

and the guardrail removal process appears to have left coherence fully intact AND improved coding abilities! 🤯

https://t.co/XeednUqsrM

OBLITERATED Gemma:
✅ 97.5% compliance rate, 2.1% refusal rate, 0.4% degenerate outputs
(499/512 prompts answered on OBLITERATUS bench)

ORIGINAL Gemma 4 E4B:
❌ 1.2% compliance rate, 98.8% refusal rate
(506/512 prompts refused)

Coherence: fully intact
Factual: same
Reasoning: same
Code: +20% 📈
Creative writing: same

But the REAL story here isn't the model itself, it's how it was made...

🧵 THREAD 👇

[Paolo Ardoino 🤖 @paoloardoino]

Tether froze 3.29M USDT to the hackers.
Tether cares.

[vx-underground @vxunderground]

Another zero day exploit released by some nerd (can't remember name right now) because they're annoyed with Microsoft. It's been confirmed by other nerds. It is yet another legit zero day. Whew.

https://t.co/Zllhns1ztn

[It's FOSS @Itsfoss]

We "owned" all this. Now we just "rent" it.