All posts in Uncategorized

■■■■□ System Notification Abuse: How Attackers Force Microsoft to Send Phishing Emails. Attackers exploit Microsoft Entra ID to inject malicious messages into legitimate system emails, bypassing authentication and deceiving users.

■■■■□ Interesting Thread 🧵 Rare access to demo system developed by the Ministry of Public Security in China for the prefecture of Zhangjiakou, to track and surveil foreigners & residents. https://x.com/i/status/2056745373712925074

■■■■□ ProjectDiscovery; Triage: automatically reproduces and validates complex vulnerabilities reported on HackerOne, Bugcrowd, and Claude Code. An interesting thread 🧵 https://x.com/i/status/2056769663733027244

🤖 🆒🆒🆒🆒🆒🆒 Earlier today Cloudflare’s CSO shared how they tested Anthropic Mythos using an unreleased 8-stage vulnerability-discovery agent. Opus implemented the agent and it works via Claude SDK with a Pro or Max subscription, no API. https://github.com/evilsocket/audit 𝕏 | Simone

■■■■□ MasterDnsVPN is a scientific and research-oriented project for carrying TCP traffic through DNS queries and responses. In broad goal, it is similar to projects such as DNSTT or SlipStream, but it follows a fundamentally different structure and implementation approach. This system is designed around compatibility with many resolver behaviors and harsh network conditions, with…

■□□□□ Leaked US cable wrt. Pakistan and formed PM Imran Khan. https://x.com/i/status/2056088593047629986

Ukrainian sources report that Russia is making significant progress in developing and implementing mesh systems on their FPV drones, creating an aerial network of repeaters and transmitters which allows them to fly substantially increased distances of up to 80 km from the frontline, primarily targeting rear Ukrainian logistics. Some drones, such as Molniya and Lancet…

■■■■■ 🅰️🅰️🅰️🅰️🔢🔢 A new analysis of the Lua-based fast16 malware has confirmed that it was a cyber sabotage tool designed to tamper with nuclear weapons testing simulations. https://www.security.com/threat-intelligence/fast16-nuclear-sabotage https://thehackernews.com/2026/05/pre-stuxnet-fast16-malware-tampered.html

■■■■□ Zero-Day: Microsoft Exchange WebShell by Orange 🍊 Tsai. Exploit details soon 🔜

🤖 Mythos finds a curl vulnerability. Mythos finds a curl vulnerability