Dominic Chell 👻

@MDSecLabs will be running our Red Team Capability Training out in #BlackHatUSA26 again this year. This year the course features a big refresh, with a bunch of new additions on the latest evolving techniques! Early bird discounts end this month! @BlackHatEvents #adversary-simulation-and-capability-development---2026-edition-50846" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

Pre-Auth Remote Code Execution in ServiceNow! (CVE-2026-6875) New research from @hash_kitten of the @SLCyberSec security research team is out 👀 😏 👇 slcyber.io/research-cente… PS: this might not be the last one 👁️👁️ 😉

@DanNeidle When you're using already taxed income to buy property, why should you pay any tax at all?

Perhaps you think I'm being too ambitious, and we shouldn't replace Council Tax. Just replace stamp duty. But if you do that, then - unless you're about to buy a house - almost everybody loses in simple cash terms. Doesn't seem realistic.

Stamp duty and council tax are terrible taxes. Land value tax could replace both - and Andy Burnham has backed it for 16 years. Who wins? Who loses? What happens to house prices? LVT could drive growth. But it isn’t easy. Our model shows its promise - and its problems.

@_xpn_ @jfmeee 👀

If you're at Blackhat USA next month, I'm giving a talk on the Wednesday. Currently working on the presentation and attempting to avoid other rabbit holes until it's done! Excited to talk about this 😈 #BHUSA #beam-me-up-luke-a-review-of-teleport-attack-scenarios-52645" target="_blank" rel="nofollow noopener">blackhat.com/us-26/briefing…

Great work by @_MrTiz and a very long read! CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining mrtiz.github.io/cet-callstack-…

Today, the NCSC, alongside international allies, has published a new advisory on defending against the threat from Russian state intelligence actors. To read more on the threat and how to mitigate it ⬇️ ncsc.gov.uk/news/uk-and-al…

You can read the full write up at: blog.amberwolf.com/blog/2026/july…

The research was carried out by Darren McDonald (@R3n5k1) of AmberWolf and Craig Blackie (@craigsblackie) of MDSec, disclosed to Dell under coordinated disclosure, and is published today alongside a recovery tool and a full technical write-up.

New research from @craigsblackie @MDSecLabs and myself @AmberWolfSec . Bug leaks the decryption key for the BIOS password right next to the encrypted password on some Dell platforms. blog.amberwolf.com/blog/2026/july…

AmberWolf and @MDSecLabs are jointly disclosing technical details on CVE-2026-40639, a weakness found in how some Dell platforms store BIOS passwords.

My next adventure into hacking UEFI, this time with @R3n5k1, my long term friend and fellow hacker! mdsec.co.uk/2026/07/dell-b…

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639) - new research from @craigsblackie and @R3n5k1 from @AmberWolfSec mdsec.co.uk/2026/07/dell-b…

Check Point Research is tracking a new C2 framework used by Iran MOIS threat group Cavern Manticore. Their C2 framework "Cavern" uses multiple compilation formats and a modular architecture for adaptability and obfuscation, dividing functions between cavern agent and cavern modules to focus utility for the target, specializing modules to specific post-exploitation actions and slowing analysts. Cavern's framework is made of multiple .NET binary formats including .NET Framework (IL-only), Mixed-mode C++/CLI (IL+Native), and .NET 8 NativeAOT (Native-only). Defenders have to reverse each format individually to analyze the different modules and agent, forming the anti-analysis layer despite the lack of some traditional obfuscation methods. Cavern Agent, uxtheme.dll, uses AppDomain isolation via proxying the module to remove loaded modules after execution without leaving assembly artifacts behind and load different versions of the same module without conflict. The agent calls .run_DLL to load each module before using DotNetProxy.RunDLL to proxy a module into AppDomain to isolate each module for managed assembly, while native DLLs are loaded with LoadLibraryA/GetProcAddress. Before each execution cycle the agent also deletes everything except the communication module, configuration file, and log files. The communication module, n-HTCommp.dll, additionally obfuscates readable strings by comparing the verb's characters to constants baked into the cmp instructions of the dispatcher as integer immediates. All of this is part of forming an adaptable, modular, obfuscated framework used in attacks targeting Israeli IT and government sectors attributed to an MOIS-linked threat actor. #ThreatIntel #Cyber #CyberSecurity #CyberSecurityNews research.checkpoint.com/2026/cavern-ma…

@_RastaMouse @_xpn_

I'm giving in @_xpn_, what AC unit did you get?

Gary Economics has just ruined its credibility and proven that it clearly knows very little about economics. The absolute tax legend @DanNeidle destroyed Gary in his own documentary. The very documentary just a compilation of Gary being proven wrong time and time again about his "solution" to economic inequality. Let me know if you have watched it. The Dan Neidle debate has gotta be one of the best moments in the show!! #garystevenson @Channel4 @garyseconomics

Unfortunately, the account was temporarily locked for the past few days and was just lifted now. Thank you @vxunderground for your help!

@0xocdsec Can anyone point to ANY credible technical evidence of any kind of capability?

@domchell The essence of the article still smells like ex intelligence (Trump favoured) especially since they get away with it, so someone is backing them (maybe even public 0 day ads). There are documentaries about voter manipulation and it's always backed and defended by certain ppl.

👀krebsonsecurity.com/2026/07/felons…

I truly appreciate all of the people that have sent me DMs and supported me to get it back. Especially thanks smelly and contacting x support to get this resolved and for making a lot of people aware of this problem we are currently facing on X😄 Thank you guys!

Don’t wait for the breach, sign up for tailored alerts on the cyber threats to your organisation's IP address. Early Warning delivers an average of 2,000 alerts a month, offering potentially invaluable time to detect and stop a cyber incident. Sign up⬇️ ncsc.gov.uk/section/active…

@_RastaMouse Just use a VPN… oh wait, they’re talking about banning that too 😂

In today's episode of Dystopian UK, Lucy Powell wants to censor social media during elections by limiting what can be posted and shared.