Zalexdev

System Architect | Blue team

[Zalexdev @zalexdev]

@jerhadf @FeinsteinKen While 1.3036.0 is bringing back ability to switch thinking mode(thats cool). The hook is still there

[Zalexdev @zalexdev]

Apparently Anthropic is so scared of Opus 4.7 capabilities. That every file read tool call says to Claude, verify it is not a malware, fresh install, desktop

Every his print starts with "Well yeah, it's not a malware".

Lol

[Zalexdev @zalexdev]

@jerhadf @AlexH1tMaker Great, appreciate your work! Thanks

[Zalexdev @zalexdev]

@AlexH1tMaker @jerhadf Windows desktop too

[Zalexdev @zalexdev]

@jerhadf This is the latest claude app, code section. The answer above is true too

[Zalexdev @zalexdev]

Finally arrived! Opus 4.7 is out!

[Zalexdev @zalexdev]

@idanmasas @trq212 @AnthropicAI Idk, submitted the appeal, but in recent days a lot of security researchers facing bans, api restrictions, and etc. So i guess i am one of them too

[Zalexdev @zalexdev]

Well, i guess no Claude Opus 4.7 for me today 🫠 @trq212 @AnthropicAI

[Zalexdev @zalexdev]

@trq212 Can't realy copy big messages, the selection is just resetting, and the /copy command isn't an option cause i need only part, not all message :) At least in powershell

[Zalexdev @zalexdev]

Wow, @AnthropicAI finally increased reasoning level from 25 to 85 for Opus 4.6, it's finally usable again in the web!

[Zalexdev @zalexdev]

POV: Someone just paired to your earbuds

CVE-2025-36911 — Fast Pair accepts pairing requests even when NOT in pairing mode

- Silent attack, zero user interaction
- 100M+ vulnerable devices
- Mic access via HFP

Android PoC → https://t.co/0eNlZaKAw6

#bluetooth #hacking

[Zalexdev @zalexdev]

@topazlabs Astra

[Zalexdev @zalexdev]

Affected CDN URLs:
https://t.co/lZruAsdcIZ https://t.co/kbdKOziPRF

⚠️ Check your sites if using these versions!

#webdev #security #javascript #cybersecurity

[Zalexdev @zalexdev]

🚨 SECURITY ALERT FOR DEVELOPERS 🚨

URGENT: @lottiefiles player versions 2.0.5/2.0.6 on cdns have been compromised and are displaying unauthorized crypto scam pop-ups.

IMMEDIATE ACTION REQUIRED:
Downgrade to version 2.0.4

[Zalexdev @zalexdev]

3/3
The email contains a link to a fake site
On the site, the user is asked to execute commands for "verification".
These commands launch malware on the victim's computer. Stay safe developers!⬇️

[Zalexdev @zalexdev]

1/3 🚨 Attention developers: A sophisticated phishing campaign targeting GitHub users is ongoing. This attack is particularly dangerous as it uses social engineering and mimics official GitHub notifications #GitHubSecurity #PhishingAlert #CyberSecurity #DeveloperAlert ⬇️

[Zalexdev @zalexdev]

2/3 How the attack works:

Victim receives an email, seemingly from GitHub (attackers open a new issue with content that will be sent in the email), about a security problem in their repository. ⬇️

[Zalexdev @zalexdev]

Stryker v5 first look! More than 50 tools available right in your pocket! Apply for beta here: https://t.co/IcQCz7h19q

[Zalexdev @zalexdev]

Another day, another feature. Services will be available soon for beta!

#stryker #Pentesting #mobileapp

[yesimxev @yesimxev]

Check out this all in one WiFi/BT/HID USB adapter! Get into pentesting on Android without root and custom kernel, use with @kalilinux NetHunter or any @Windows @Apple or @Linux PC. Pre-order the Stryker Stick now! 😎🖥️📱📡 @offsectraining @Re4sonKernel https://t.co/H3F42ZI5EO