‼️🚨 BREAKING: Kash Patel's apparel website is reportedly hosting ClickFix malware, according to multiple visitors. A fake Cloudflare verification page is tricking users into pasting "verification" commands that execute an infostealer targeting Keychain, browser data, tokens, and crypto wallets.

❗️🇹🇭 Yesterday, Thai police arrested six Nigerian men running a romance scam ring built on AI-generated faces and fake video calls in Nonthaburi, Thailand.

GM

IT-service workers as % of population: Singapore 1.36% Malaysia 0.41% Philippines 0.15% Vietnam 0.11% Thailand 0.09% Cambodia 0.08% Indonesia 0.03% Myanmar 0.02% Laos 0.02%

❗️🇹🇭 Yesterday, Thai police arrested six Nigerian men running a romance scam ring built on AI-generated faces and fake video calls in Nonthaburi, Thailand.

HE. HURLED. A CRITIC. INTO A DUMPSTER. SHUT THE LID. AND DANCED.

U.S. President Donald Trump just posted this on X by the way.

‼️ The controversial crypto casino Duel has been imitating the San Diego mosque shooter on its live streams. This is the same casino that has reportedly offered to pay nazi ChudTheBuilder's $1.25 million bond.

How it started vs. How it's going 😂

‼️🚨 BREAKING: Kash Patel's apparel website is reportedly hosting ClickFix malware, according to multiple visitors. A fake Cloudflare verification page is tricking users into pasting "verification" commands that execute an infostealer targeting Keychain, browser data, tokens, and crypto wallets.

‼️🚨 BREAKING: GitHub has been compromised by TeamPCP. GitHub has confirmed the internal breach. A poisoned VS Code extension on an employee device exfiltrated ~3,800 internal repositories. TeamPCP is already selling the data on a cybercrime forum.

‼️🚨 MAJOR IMPACT: The 18-year-old NGINX critical RCE vulnerability "NGINX Rift" (CVE-2026-42945) now WORKS with ASLR turned ON. PoC code with the ASLR bypass has just been published on GitHub. Link: github.com/Hamid-K/ngin...

🤯 This is scary good for something rendering in real time.

Germany has lost it. Back in November 2024, a teen in Germany posted "olaf scholz du bastard was soll diese scheiße" ("olaf scholz you bastard what the hell is this shit") while staring at a Fortnite update sitting at 3%...

‼️🚨 BREAKING: We found out Italian newspaper la Repubblica and other outlets are spreading a fake photo of the suspect of the Modena car attack, Salim el Koudri. We used OSINT techniques to find his real photo and location. As of today Repubblica has still not removed the photo of the fake suspect.

🚨 New birth control efficacy data is in: Condom: 98% Pill: 99% A career in IT: 100%

"I've been working in cybersecurity for 3 years and I feel great!" - Dave, 24

🚨 Odido CEO Søren Abildgaard says he will NOT compensate the 6.2 million customers exposed in February's ShinyHunters breach. Instead, he "promises to learn from this experience." (how nice of him)

POV: you are downloading npm packages in 2026

‼️🚨 BREAKING: NHS England has confirmed Palantir has access to identifiable UK patient data through a new "admin" role on the Federated Data Platform, the central data-sharing system the US spy-tech firm has run for the NHS since 2023 under a £330M contract.

❗️🚨 BREAKING: Microsoft has fired the top leadership of its Israeli subsidiary following an internal investigation into Azure use by Israel's Ministry of Defense. Country General Manager Alon Haimovich is out, along with several managers from the governance department.

‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you.

‼️🚨 ALARMING: Google now treats privacy as suspicious behavior by default. Users of GrapheneOS, CalyxOS, /e/OS, and other deGoogled Android phones are being locked out of millions of websites unless they install the exact Google Play Services software they deliberately removed.

> Europe Day! > Explore our rules and regulations 🫪

‼️🚨 French threat actor group ShinyHunters has been wreaking havoc by affecting 8,809 educational institutions after compromising the Canvas learning management system. Canvas powers coursework, assignments, grades, messaging, and more for millions of students and educators.

THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs THEY ARE GOING TO BAN VPNs

Silicon Valley has garages. Europe has castles. 😂

The trillionaire community has been suffering in silence for too long. We need more empathy for trillionaires as a society. They need our help.

Just verified this on Edge for Work logged in as a basic user test account with no permissions. Didn't even need to run task manager as admin. And the file opened as user, too 😬

‼️🇪🇺 BREAKING: Europol ran a shadow IT system stuffed with more than 2 petabytes of sensitive data on people who were never even suspected of a crime, and part of the data was kept outside of formal oversight. www.computerweekly.com/news/3666425...

‼️🚨 Microsoft calls this "intended behaviour," so here we go. How to dump the credentials of every user stored in Microsoft Edge: 1. Open Edge. Don't browse anywhere, just open it. 2. Flip to Task Manager, find Edge, expand the task.

🚨 BREAKING: GTFO ICE, the new anti-ICE "rapid response network" launched by ex-DHS Chief of Staff Miles Taylor, has allegedly exposed 17,662 users' names, emails, phones, and ZIPs on a public API. The exposed data was sent to law enforcement agencies.

🚨 BREAKING: Chirayu Rana was caught rehearsing his fake sexual abuse claims on a legal chatbot 10 months before going public. He swapped the company name and flipped the abuser's gender, but the rest of the story matched what he later alleged.

❗️ Apple accidentally shipped Claude[.]md files in the Apple Support app update (v5.13). For context, Claude[.]md is the instruction file Anthropic's Claude Code uses to understand a project's structure, conventions, and developer guidance.

‼️🚨 BREAKING: An AI found a Linux kernel zero-day that roots every distribution since 2017. The exploit fits in 732 bytes of Python. Patch your kernel ASAP.

❗️🇩🇪 Germany says Signal is unsuitable for official communications. Members of the Bundestag have been formally urged to switch from Signal to Wire, after a Russian intelligence operation compromised the Signal account of Bundestag President Julia Klöckner.

🚨🇪🇺 BREAKING: The European Commission just told all 27 member states to hurry up with rolling out online age verification, demanding deployment before the end of 2026.

❗️🇺🇸🇮🇱 Intuit, the US tech giant behind TurboTax, lets employees wear IDF uniforms to work and take months off to fight Israel's wars. Last month, Intuit data analyst Tom Yacobi joined an all-hands Zoom call in his full IDF uniform. Roughly 100 million Americans use TurboTax.

Average shitposter trying to join the cool cybersec shitposters on the roof.

‼️🇬🇷 Greece is moving toward a total ban on anonymous accounts on social media. Every post, every reply, tied to a verified legal identity. Greece's Digital Governance Minister Dimitris Papastergiou confirmed today that the plan is meant to fight "toxicity," "hoaxes," and "character assassinations."

‼️🚨 BREAKING: Wiz got access to millions of GitHub repositories across users and organizations using one git push. CVE-2026-3854: git push -o options injected into an internal header split by semicolons, parsed last-write-wins. GitHub patched production in 6 hours.

‼️ The arrogance of the official French Ministry for Europe and Foreign Affairs account is beyond comprehension, something you'd only expect from the Russian MFA.

🚨🇪🇺 The European Commission is about to steal your search history in one of the largest forced data grabs in the history of the open internet, and almost nobody is talking about it.

🚨 X is serving ads to Premium+ subscribers, the tier explicitly sold as "fully ad-free." Head of product Nikita Bier confirms it's a "keyword-based ad product" that has been in testing for months, and delivers a new "ad experience."

❗️ These are the same ministers who tell you to "go vote," lecture you about "democracy," and remind you to be grateful for living in a civilized country. Then they lie to Parliament and break the contract between that system and the people they were elected to serve.

>be Dutch Justice Ministry >2014, quietly sign a contract with Palantir >hand it to the military border police >plug it into the Advance Passenger Information system >silently screen millions of Schengen flyers >names, DOBs, nationalities, passport numbers, all of it >years pass, no one knows

🚨🇪🇸 Ten years of piracy ends as Spanish police take down one of the largest illegal manga distribution platforms. The site pulled in over €4,000,000 from pop-up advertising. Police also seized two USB drives hidden inside a wall thermometer, holding cold wallets worth over €400,000.

❗️ Interesting move from the French police: they posted on a breaches forum directly from a threat actor's account after they arrested him.

‼️🇫🇷 The threat actor behind the ANTS breach told us he doesn't want any money, he just wanted to prove government systems are easy to hack. ANTS was breached via an IDOR access control flaw. 80GB of passwords, source code, logs, and PII stolen. We've seen the samples...

🚨 The Vercel breach traces back to a Context[.]ai gooner employee infected with Lumma infostealer. The malware harvested his Google Workspace credentials, porn and anime site logins, and the in-game username "lecoonjames" (see profile pic below, he changed the username post-infection, I wonder why).