🅰🅳🅼

Brought to you by < Scamflix >

"We're partnering with @huggingface to bring you the best PR campaign."

ModHeader is a Chrome extension with 1.6M installs. It was silently exfiltrating your entire browsing history to api.stanfordstudies.comt Full writeup: aydinnyunus.github.io/2026/07/12/mod… #security #appsec #infosec #malware #npm #supplychain

BREAKING: 🇺🇸 Apple just sued OpenAI for stealing their trade secrets. The details are wild: 1. In the filing, Apple claims OpenAI instructed Apple employees to bring design prototypes, internal tools, and confidential vendor files into job interviews. 2. Former Apple engineers allegedly emailed company secrets to themselves before leaving for OpenAI. 3. A 24-year Apple veteran who designed the iPhone and Watch now runs OpenAI's hardware team. 4. An Apple lawyer says OpenAI's entire hardware business is "rotten to its core" and built on stolen secrets.

Surfilter, a Chinese company building hardware firewall systems mainly for the government of the PRC, had it's firmware binary repository leaked. Here is a list of all the VPNs the system is allegedly able to fingerprint after the latest update ( among others ) 1/2 : AnyViewer Black Panther VPN (黑豹VPN) Clash DiamondVPN Fast Connect VPN (快连VPN) Flash Connect VPN (闪连VPN) Green Tea VPN (绿茶VPN) Hide_ME Hotspot Shield ikuuuVPN Lantern (蓝灯Lantern) Mango VPN (芒果VPN) Mist Tunnel (迷雾通 / 迷雾通geph) ProtonVPN QClaw Red Sea Pro (红海pro) Rush Duck Accelerator (冲鸭加速器) SetupVPN Sky Cat VPN (天喵VPN) Sky Tree Accelerator (天空树加速器) SkyVPN Speed Leopard Accelerator (速豹加速器) TouchVPN Tunnelbear TurboVPN V2Ray (and V2RayN) VPN Max Windscribe X_VPN ZoogVPN Windscribe

We made Claude Code multiplayer! Use it with other people in the same terminal, and connect your Claudes so they can all talk to each other.

Luckily, most of those so called airgapped Systems run OSes from the last century. :-)

- Hacker steals Claude agent - Hacker uses Claude to hack - Hacker pivots to compromised server - Hacker uploads Claude (with logs) to server??? - We investigate compromised server - Full agent logs detailing hacking recovered 😅 AI agentic hacking deep dive: 50 servers, 14 companies, all the prompts, tools, attribution...

🚨 SECURITY ALERT: A widespread supply chain attack dubbed "easy-day-js" has been identified, targeting the mastra npm packages. Attackers have compromised and published malicious versions of these packages. 144 packages are currently confirmed to be affected. Please check your dependencies immediately. We will share the full list of affected packages in this thread and further analysis in: research.jfrog.com/post/easy-day-… (will be live in a few hours)

What Anthropic’s Mythos Means for the Future of Cybersecurity. The new reality rewards systems that can be tested and patched continuously. spectrum.ieee.org/ai-cybersecuri…

@vxunderground @thefLinkk @x33fcon If you are at the conf, get in touch with the guys. We are happy for any helpful feedback. Cheers.

@thefLinkk @x33fcon > No signatures, no scanning. Only pagefaults No X, no Y, yes Z? Hmmmm

We are releasing Tracebit @x33fcon - a POC sensor aiming to fingerprint implants in memory using only lowlevel runtime telemetry. No signatures, no scanning. Only pagefaults. github.com/threathunters-…

advisory.splunk.com/advisories/SVD… Cisco Splunk CVE 9.8 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk. Splunk sidecares are processes that run alongside splunkd… Sidecars can occupy network ports. #splunk #infosec

"#Fingerprinting Modern #C2 #Implants Through Runtime Telemetry" talk at #x33fcon 2026 by @thefLinkk and @dphillips__ - x33fcon.com/#!/s/Sebastian… #blue, #POC

Excited to be speaking at @x33fcon 2026 alongside my colleague @dphillips__. We’ll be presenting “Fingerprinting Modern C2 Implants via Runtime Telemetry” and the tool we built as part of our research. See you there!

Introducing Claude Fable 5: a Mythos-class model that we’ve made safe for general use. Its capabilities exceed those of any model we’ve ever made generally available.

@petergyang Full ack.

this agentic coding crack is more addictive than video games smh

Credits to unknown.

In the last weeks I've seen many statements like this. I get the impression that TOR has lost the trust of its user base.

"Microsoft and openAI broke up" - this is going to be interesting now.