Dominic Chell 👻

@MDSecLabs will be running our Red Team Capability Training out in #BlackHatUSA26 again this year. This year the course features a big refresh, with a bunch of new additions on the latest evolving techniques! Early bird discounts end this month! @BlackHatEvents #adversary-simulation-and-capability-development---2026-edition-50846" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

Today, the NCSC, alongside international allies, has published a new advisory on defending against the threat from Russian state intelligence actors. To read more on the threat and how to mitigate it ⬇️ ncsc.gov.uk/news/uk-and-al…

You can read the full write up at: blog.amberwolf.com/blog/2026/july…

The research was carried out by Darren McDonald (@R3n5k1) of AmberWolf and Craig Blackie (@craigsblackie) of MDSec, disclosed to Dell under coordinated disclosure, and is published today alongside a recovery tool and a full technical write-up.

New research from @craigsblackie @MDSecLabs and myself @AmberWolfSec . Bug leaks the decryption key for the BIOS password right next to the encrypted password on some Dell platforms. blog.amberwolf.com/blog/2026/july…

AmberWolf and @MDSecLabs are jointly disclosing technical details on CVE-2026-40639, a weakness found in how some Dell platforms store BIOS passwords.

My next adventure into hacking UEFI, this time with @R3n5k1, my long term friend and fellow hacker! mdsec.co.uk/2026/07/dell-b…

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639) - new research from @craigsblackie and @R3n5k1 from @AmberWolfSec mdsec.co.uk/2026/07/dell-b…

Check Point Research is tracking a new C2 framework used by Iran MOIS threat group Cavern Manticore. Their C2 framework "Cavern" uses multiple compilation formats and a modular architecture for adaptability and obfuscation, dividing functions between cavern agent and cavern modules to focus utility for the target, specializing modules to specific post-exploitation actions and slowing analysts. Cavern's framework is made of multiple .NET binary formats including .NET Framework (IL-only), Mixed-mode C++/CLI (IL+Native), and .NET 8 NativeAOT (Native-only). Defenders have to reverse each format individually to analyze the different modules and agent, forming the anti-analysis layer despite the lack of some traditional obfuscation methods. Cavern Agent, uxtheme.dll, uses AppDomain isolation via proxying the module to remove loaded modules after execution without leaving assembly artifacts behind and load different versions of the same module without conflict. The agent calls .run_DLL to load each module before using DotNetProxy.RunDLL to proxy a module into AppDomain to isolate each module for managed assembly, while native DLLs are loaded with LoadLibraryA/GetProcAddress. Before each execution cycle the agent also deletes everything except the communication module, configuration file, and log files. The communication module, n-HTCommp.dll, additionally obfuscates readable strings by comparing the verb's characters to constants baked into the cmp instructions of the dispatcher as integer immediates. All of this is part of forming an adaptable, modular, obfuscated framework used in attacks targeting Israeli IT and government sectors attributed to an MOIS-linked threat actor. #ThreatIntel #Cyber #CyberSecurity #CyberSecurityNews research.checkpoint.com/2026/cavern-ma…

@_RastaMouse @_xpn_

I'm giving in @_xpn_, what AC unit did you get?

Gary Economics has just ruined its credibility and proven that it clearly knows very little about economics. The absolute tax legend @DanNeidle destroyed Gary in his own documentary. The very documentary just a compilation of Gary being proven wrong time and time again about his "solution" to economic inequality. Let me know if you have watched it. The Dan Neidle debate has gotta be one of the best moments in the show!! #garystevenson @Channel4 @garyseconomics

Unfortunately, the account was temporarily locked for the past few days and was just lifted now. Thank you @vxunderground for your help!

@0xocdsec Can anyone point to ANY credible technical evidence of any kind of capability?

@domchell The essence of the article still smells like ex intelligence (Trump favoured) especially since they get away with it, so someone is backing them (maybe even public 0 day ads). There are documentaries about voter manipulation and it's always backed and defended by certain ppl.

👀krebsonsecurity.com/2026/07/felons…

I truly appreciate all of the people that have sent me DMs and supported me to get it back. Especially thanks smelly and contacting x support to get this resolved and for making a lot of people aware of this problem we are currently facing on X😄 Thank you guys!

Don’t wait for the breach, sign up for tailored alerts on the cyber threats to your organisation's IP address. Early Warning delivers an average of 2,000 alerts a month, offering potentially invaluable time to detect and stop a cyber incident. Sign up⬇️ ncsc.gov.uk/section/active…

@_RastaMouse Just use a VPN… oh wait, they’re talking about banning that too 😂

In today's episode of Dystopian UK, Lucy Powell wants to censor social media during elections by limiting what can be posted and shared.

@_RastaMouse Also, no one is talking about the “gifts” anymore 😆

@_RastaMouse Anything to get the attention on him. More tax payer money wasted. Nearly as ridiculous as Burnham’s by election, except Burnham caused two elections as he needed replacing as Manchester Major as well.

It's pretty funny how Farage can resign, trigger a by-election, and then stand in that same election.

@_xpn_ Another by election and another waste of tax payers money 🙄

Off you trot Farage o/

@X @nikitabier @elonmusk I am once again asking you to review your policies and procedures around offensive security research.