rootsecdev

Just wanted to remind everyone. Azure Cloud training does not need to be super expensive. You just need to know where to look. Because that is what hackers do. #Azure #Cloud #Hacking Books: amazon.com/Penetration-Te… Labs: github.com/iknowjason/Awe… Free SANS Courses (on demand): sans.org/webcasts/sans-… sans.org/webcasts/sans-… (Jun8th 2023..live!) sans.org/webcasts/hands… Need more training. Feel Free to check out my blog on this topic: rootsecdev.medium.com/becoming-an-az…

Chuck Norris death: Action legend dies at 86 usatoday.com/story/entertai…

Damn good workout this morning

Hello cloud hackers. @nyxgeek at it again. Like a ninja!

@curi0usJack @techspence I cringe when people ask this. Then…

@techspence If by "platforms" you mean big players like Anthropic/ChatGPT, then no as clients don't want their data shared.

Any red teamers out there using AI platforms for initial access with any level of success? I’m talking like some kind of prompt injection to code execution on a host

Just when we thought spring in the Midwest couldn’t get worse, Ohio gets hit by a meteor

🚨 Governments pay millions for this. Someone just open sourced it for free. It's called Crucix. It watches the entire world. And texts you when something changes. It pulls from 26 live data sources every 15 minutes and renders everything on a single Jarvis-style dashboard. Here's what it watches: → Satellite fire detection (NASA) → Live flight tracking → Radiation monitoring → Conflict zone events → Economic indicators from the Fed → Live market prices, crypto, oil, and commodities → Sanctions lists → Social sentiment from 17 Telegram intelligence channels → Maritime vessel tracking → News from GDELT and RSS feeds Here's what makes this one different: It's two-way. It pushes alerts to your Telegram and Discord. You text it back. Type /brief from your phone and get a full intelligence summary. Type /sweep to force a new scan. It responds like an assistant. It even generates trade ideas based on cross-domain signals. No cloud. No subscription. No telemetry. Runs on your machine. node server.mjs That's it. Your own intelligence terminal. This is the kind of setup that costs six figures behind closed doors. 100% Open Source. MIT License.

@roguekode Instantly increased my testosterone levels by 400% after watching

What I’m realizing is 99.9999999999999999999999999% of AI posts are from people that are trying to get more followers and clicks and has no real world experience on actually deploying. “Improve your workflow 80% by this one Claude skill” “Omg they just released this and it changes the industry completely” It’s all bogus. Create your own workflow that is tailored to you. Don’t buy into this garbage.

Cheers @nyxgeek @HackingLZ

If the disruption lasts long enough, the consequences could be serious and widespread. According to former White House energy adviser Bob McNally, a prolonged closure of the Strait of Hormuz would almost certainly trigger a global recession. cbsn.ws/479DUDM

New CVE Machine 🚨 Principal is now available for you to explore a critical identity boundary flaw. This new free retired Machine is centered on CVE-2026-29000, a newly disclosed authentication bypass in the pac4j-jwt library. Since Pac4j is used to implement major identity flows like OAuth, SAML, and JWT authentication, this vulnerability allows attackers to bypass core security controls in Java applications. Assigned a CVSS score of 9.1, it highlights the far-reaching consequences when a system verifies a cryptographic envelope but fails to validate the claim inside. Sharpen your skills now: okt.to/XmS2Hn #HackTheBox #CVE #Cybersecurity #Pentesting #RedTeam #Infosec #Cryptography

🏟️ Ludus launched 2 years ago and the community embraced and extended it with write-ups, roles, configs, and environments. We're excited to see what you build with Ludus 2! (1/4)

Incredibly proud of the team in putting together our latest @TrustedSec BlackHat class. It's going to be an absolute blast and development is underway. Hope to see you there! #supply-chain-to-runtime-attacking--defending-the-modern-devops-stack-50985" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

Good morning all you vibe coders

@curi0usJack @clandest1n @ustayready 👀👀👀🌮🔥

@clandest1n @ustayready 👀 👀

🔥

Got some @DerbyCon vibes going on this morning

@NathanMcNulty I’m sure it’s Intune managed

Apparently OnlyCopilotFans is a thing... 🤢

Looks at @HackingLZ