Sabitlenmiş Tweet
In case you missed it:
Add a colon to your password, ":", because all the stealer logs have colons, so it'll end up splitting your password incorrectly.
English
Vincent Yiu
36.2K posts
Vincent Yiu
@vysecurity
Director, Red Team, Offensive Security. Help organizations safeguard their businesses from the bad guys.
Hong Kong Katılım Aralık 2014
303 Takip Edilen31.5K Takipçiler
Vincent Yiu retweetledi
Vincent Yiu retweetledi
Full Minimax results now available!
MiniMax (official)@MiniMax_AI
Introducing MiniMax-M2.7, our first model which deeply participated in its own evolution, with an 88% win-rate vs M2.5 - Production-Ready SWE: With SOTA performance in SWE-Pro (56.22%) and Terminal Bench 2 (57.0%), M2.7 reduced intervention-to-recovery time for online incidents to 3-min on certain occasions. - Advanced Agentic Abilities: Trained for Agent Teams and tool search tool, with 97% skill adherence across 40+ complex skills. M2.7 is on par with Sonnet 4.6 in OpenClaw. - Professional Workspace: SOTA in professional knowledge, supports multi-turn, high-fidelity Office file editing. MiniMax Agent: agent.minimax.io API: platform.minimax.io Token Plan: platform.minimax.io/subscribe/toke…
English
Vincent Yiu retweetledi
⚠️ WARNING - An unpatched critical telnetd bug (CVE-2026-32746) lets attackers gain full system access with no credentials.
One connection to port 23 is enough to trigger memory corruption and execute code as root.
No patch yet. Prior telnet flaw is already exploited in the wild.
🔗Read → thehackernews.com/2026/03/critic…
English
❗️Pryx just replied with the cheapest MacBook, a cheap Taurus gun and about 80 USD worth of Kazakhstani tenge.
International Cyber Digest@IntCyberDigest
❗️Meet Hellcat ransomware group operator 'Pryx' — responsible for high-profile hacks like Jaguar Land Rover, Telefonica, Schneider Electric and many more. He started doing cybercrime as a kid. He got 4 people killed and 27 injured after starting a fire by hacking into the SCADA network of Telecom Egypt. An OSINT researcher just revealed who he is and how he tracked him down.
English
Vincent Yiu retweetledi
🚨 BREAKING: Someone just open-sourced a full suite for tracking satellites and decoding their radio signals locally.
You don't even need the internet. It uses an SDR to pull weather images and raw data straight from space to your hard drive.
100% Open Source.
English
Vincent Yiu retweetledi
❗️Meet Hellcat ransomware group operator 'Pryx' — responsible for high-profile hacks like Jaguar Land Rover, Telefonica, Schneider Electric and many more.
He started doing cybercrime as a kid.
He got 4 people killed and 27 injured after starting a fire by hacking into the SCADA network of Telecom Egypt.
An OSINT researcher just revealed who he is and how he tracked him down.
English
Vincent Yiu retweetledi
Research shows how Palo Alto Cortex XDR predefined BIOC behavioral rules can be decrypted and analyzed. By understanding rule logic and built-in exceptions, attackers can adapt techniques to evade detection and bypass behavioral protections.
core-jmp.org/2026/03/decryp…
English
Vincent Yiu retweetledi
Just migrated our entire production stack from @DigitalOcean to @Hetzner_Online in just 24 hours — $1,432 → $233/month. Zero downtime. 30 MySQL DBs (248GB), 34 Nginx sites, GitLab EE, Neo4j. All automated with Python scripts.
Full write-up on my blog 👇 isayeter.com/posts/digitalo…
Scripts on GitHub: github.com/isayeter/digit…
#devops #hetzner #digitalocean #mysql #migration #linux
English
@HackingLZ We noticed that also today as well. Glad I'm not crazy.
English
Microsoft patched the ACS tenant enum unless you happen to hit a server(2.1.23623.6) that isn't yet.
gist.github.com/HackingLZ/678a…
English
Vincent Yiu retweetledi
New claim on the shame-site for #ransomware / #datatheft group #Gunra.
Organization: Ngong Ping 360 Ltd.
Location: #HongKong
Industry: #TravelArrangements
Staff: 201-500 employees
Learn more at ecrime.ch
English
Vincent Yiu retweetledi
Vincent Yiu retweetledi
AI hardware is starting to appear.
But running reliable agents is a different challenge.
Tool use.
Long tasks.
Multi-step workflows.
GLM-5-Turbo + OpenClaw now run inside the Mechrevo AI box
bringing native agent runtimes to devices.
English
Vincent Yiu retweetledi
Took some tokens/time still no ASLR work around but im sure all kinds of embedded devices don't have it enabled
x.com/JFrogSecurity/…
JFrog Security@JFrogSecurity
PSA - Incoming Pre-Auth RCE in inetutils telnetd. Global buffer overflow. No CVE / fix yet. RCE proven, although real world cases would need ASLR bypass. If you are running telnetd (why??) please take note lists.gnu.org/archive/html/b…
English
Vincent Yiu retweetledi
PSA - Incoming Pre-Auth RCE in inetutils telnetd. Global buffer overflow. No CVE / fix yet. RCE proven, although real world cases would need ASLR bypass.
If you are running telnetd (why??) please take note
lists.gnu.org/archive/html/b…
English
🚨🇲🇴🇨🇳 BREAKING — Macau:
Police Arrested a Robot in China.
It Had Harassed an Elderly Woman.
English
Vincent Yiu retweetledi
Fork and added features of Patrick Binder's apimspray tool really coming along...
github.com/jsarkisian/api…
English
@vysecurity @Apple @Microsoft watch is charging. I've got 3 GB of RAM MAX to use with BURP... so I'm skeptical as to if anyone would want to actually run burp on this....
English
