🛠️ TaskHound - Remote Windows Privileged Scheduled Task Discovery Tool Identifies Windows scheduled tasks with privileged accounts and credentials. Enumerates tasks via SMB, parses XML, attack opportunities with BloodHound export. Try: github.com/1r0BIT/TaskH... Read: r0bit.io/posts/taskho...

‼️ Cisco Warns of Cyberattacks Against Cisco Secure Email Gateway and Cisco Secure Email and Web Manager The critical vulnerability CVE-2025-20393 has a CVSS score of 10.0, with no patches available. Cisco recommends restricting internet access to these appliances.

❗️We have confirmed that Pornhub is currently under a DDoS attack by SLSH

‼️ Red Hat breach released on the newly launched BreachForums: acquired from Crimson Collective by ShinyHunters. The data includes sensitive customer engagement reports affecting around 800 organizations, along with credentials, authentication tokens, CI/CD secrets, infrastructure blueprints,

🚨‼️ Researchers have found browser VPN extensions with 8 million installs that intercept and steal all AI conversations. Medical questions, financial details, proprietary code, personal dilemmas — all of it sold for “marketing analytics purposes.”

❗ Copilot is being automatically installed on LG TVs upgrading to webOS 25 as an unremovable tile LG has confirmed that the Copilot tile cannot be removed, only hidden.

‼️ Children with Cancer Scammed Out of Millions Fundraised for Their Treatment They were given a script to learn and recite in English. Chopped onions were placed next to them, and menthol was put under their eyes to make them cry.

Before you ask AI another dumb question… watch this.

🚨‼️PornHub Breached ALL Pornhub Premium Users from 2016 to 2023 Including ALL the Search and Watch History Exposed The data was obtained via third-party analytics provider Mixpanel. We were able to confirm this through the threat actor behind the breach: ShinyHunters.

🛠️ Blacklist3r - Authentication Bypass Using Pre-Published Machine Key Code injection attacks using publicly disclosed ASP.NET machine keys Try: github.com/NotSoSecure/...

🛠️ DonPwner - Advanced DonPAPI Analysis & Attack Tool DonPwner is an advanced penetration testing tool that enhances credential analysis using DonPAPI database results.

❗️The German Federal Office for Information Security Compared the Security of 12 Email Clients The study was released today. "...these applications often contain highly sensitive information, they must be well protected against risks such as eavesdropping and manipulation..."

“First touchscreen Mac”

❗️Meet Ahmed al-Ahmed and his brothers There have been some pointless discussions about the religion of the hero. We found this image of Ahmed and his brothers. Their profile reads: "Salams, love you for the sake of Allah, Salams."

📚 Vibecoding my way to a critical on Github Creative exploitation story — turning coding vibes into a critical GitHub vulnerability. Read: furbreeze.github.io/2025/10/28/v...

📚 Signal Desktop Path Traversal Vulnerability in Attachment Saving The app uses the attachment's filename from the message without sanitizing or validating it, allowing an attacker to craft a filename that points outside the user's chosen folder (e.g., the Windows Startup folder).

China’s industry is a different beast 🤯 Every product and its supply chain are tied to one huge city the size of a nation, Eric explains. This is why other nations can’t compete with China.

‼️ The Venezuelan Defense Minister has been seen using Flightradar24 An app that only shows airplanes with transponders on. Military aircraft during missions almost never have their transponders on.

📚 GitHub Copilot Chat Code Execution via Prompt Injection Copilot Chat vulnerability allows remote code execution through malicious prompts. Read: jro.sg/CVEs/copilot/

🛠️ Silent Message Sending in WearOS (CVE-2025-12080) Google Messages vulnerability enables covert messaging. PoC and detailed analysis: github.com/io-no/CVE-Re... towerofhanoi.it/writeups/cve...

❗️Christo caught a Russian sleeper agent using her cat They now call her “The Cat Lady.”

🛠️ DACLSearch - Discover hidden AD permissions A tool to comprehensively retrieve Access Control Entries (ACEs) for principals on Active Directory objects. Try: github.com/cogiceo/DACL...

‼️Trump's administration wants private businesses to help launch offensive cyberattacks against foreign adversaries The government should unleash private businesses on foreign adversaries who breach critical infrastructure or cripple businesses, according to the draft.

🛠️ Ebyte-Syscalls - Advanced AV/EDR Evasion Obfuscate function calls using Vectored Exception Handlers (VEH). VEH allows registering a function called during exceptions, receiving exception details and register states. Try: github.com/EvilBytecode...

😱 This is exactly how I'd imagine Elon's biggest meat-riders: 1. No ability to read between the lines 2. No ability to respect someone's privacy 3. Probably on suicide watch right now

‼️ 🚨 The React Server patches published earlier are still vulnerable If you already updated for the critical security vulnerability last week, you must update again. Versions 19.0.2, 19.1.3, and 19.2.2 remain incomplete fixes; you must update again.

📚 Claude Pirate - Data Exfiltration with Anthropic Claude Anthropic enabled Claude’s Code Interpreter to make network requests. This is highly dangerous, as shown here: embracethered.com/blog/posts/2...

‼️Your biometric data and a five-year social media history will be mandatory for entry to the US This affects people from dozens of countries. "We want to make sure we're not letting the wrong people enter our country," Trump said.

‼️🇮🇱 Smartphones worldwide were silently infected with Israeli malware via malicious ads Simply viewing their ads was enough to get infected. Surveillance company Intellexa gained full access to cameras, microphones, chat apps, emails, GPS locations, photos, files, and browsing activity.

‼️Meet the Ukrainian woman who hacked children's swimming pools and public water systems to poison and destroy Westerners. Her name is Victoria Dubranova, a Russian state-sponsored threat actor. She is awaiting trial in the US on charges stemming from 99 documented acts of conspiracy.

‼️🚨 Google has released an urgent security update for Chrome to address a high-severity zero-day vulnerability currently being exploited in the wild. "Google is aware that an exploit for 466192044 exists in the wild." chromereleases.googleblog.com/2025/12/stab...

📚 Reverse Engineering Amazon's Kindle A researcher reverse-engineered Amazon's Kindle Web DRM and wrote a detailed report. Read: blog.pixelmelt.dev/kindle-web-d...

‼️ Amazon's Ring now supports mass surveillance by uploading and storing everyone's face to the cloud for AI processing They call the new feature "Familiar Faces." Whether you consent or not, they've got your face. The feature is still in beta, and owners must activate it manually.

‼️Meet the Ukrainian woman who hacked children's swimming pools and public water systems to poison and destroy Westerners. Her name is Victoria Dubranova, a Russian state-sponsored threat actor. She is awaiting trial in the US on charges stemming from 99 documented acts of conspiracy.

📚 Zero-Day in TP-Link AX10 Router (CVE-2025-9961) Exploiting a zero-day vulnerability in the TP-Link AX10 router. Read: blog.byteray.co.uk/8745f9af9c46

‼️China says it no longer wants Nvidia chips. This comes shortly after Trump approved exports of the advanced Nvidia H200 chip to China. China is now restricting their use and prioritizing domestic chips.

❗️ Chinese intelligence services shared photos of a meeting between Taiwanese and Dutch spies in the Netherlands. The intel was shared via a Chinese-Hungarian website. This appears to be retaliation for the Dutch seizing control of semiconductor chip manufacturer Nexperia.

📚 Early Exception Handling - Advanced Windows exploitation Triggering exceptions before Vectored Exception Handlers are called. kr0tt.github.io/posts/early-... github.com/kr0tt/EarlyE...

‼️ Three Ukrainian men travelling across Europe were apprehended in Poland for possessing hacking tools possibly intended to target critical national IT systems They claimed to be IT specialists.

❗️NATO distributed pins featuring the American and NATO flags that were “Made in China” during its flagship Cyber Defence exercise in Estonia. An exercise where NATO tests its ability to protect networks and critical infrastructure against threats like.. you guessed it.. China.

📚 Paint it Blue - Attacking Bluetooth Stack Bluetooth is a prime target for attackers due to its widespread presence in devices like TVs, car chargers, and connected fridges, especially on mobile devices where it runs as a privileged process with potential access to microphones, address books,

Pay.

📚 Syntax Confusion & Ambiguous Parsing Exploits A guide on exploiting parser confusion in real-world applications. Read: www.yeswehack.com/learn-bug-bo...

Linus Torvalds accidentally slams Elon Musk 🔥

Cry, baby, cry.

📚 Windows RDP - Remote to Rogue Comprehensive analysis of (lesser known) RDP exploitation vectors by Google Threat Intelligence. cloud.google.com/blog/topics/...

❗️The Company That Sells Toilet Cameras Has Access to Images of Their User's Poop The $600 Kohler Dekoda camera, which requires a subscription to function, was advertised as having “end-to-end” encryption. Investigations show the other end is the company itself.

❗ 🇵🇱 The Polish Minister of Foreign Affairs had a message for Elon today

🔥 A Mastercard employee aired the dirty laundry: it's a mess. After doxxing himself, he immediately deleted the post. But we still have it. You can read all the juicy “dumb shit” Mastercard does.

❗️🇪🇺Elon Musk's social media platform X was fined $140m by the EU over its deceptive blue ticks The EU said that by allowing people to pay for a blue verified checkmark, the platform deceives users because it is not meaningfully verifying who is behind the account.