🦜 💻 🔥 🐀

United States
Joined February 2023
I got this Mfker! Tip , make sure your report is pretty and all that crap or else they will make you retype it again Over all 10/10 exam
2
15
2,944
CrypticSploit retweeted
The potential impact of the ConnectWise supply chain attack is massive. One compromised OAuth application with elevated permissions could give attackers access to emails, files, and directory data across hundreds of Microsoft 365 tenants. Even worse, attackers could establish persistent access by adding credentials to other applications, surviving the revocation of the original compromised credentials. And with MSPs involved, the potential blast radius could extend even further to downstream customers. We don't know the full extent of the compromise yet, but this could affect far more organizations than those directly using ConnectWise Cloud Backup. linkedin.com/posts/microsoft…
14
126
9
447
38,630
CrypticSploit retweeted
New research by Citizen Lab reveals zero-click spyware delivered through targeted ads. They call it "AdFection." Just viewing an ad can be enough to infect a device.
116
1,055
195
6,807
649,958
🇺🇸 🚨 CALIFORNIA SAYS ETS BREACH COPIED STATEWIDE TESTING DATA ON PUBLIC-SCHOOL STUDENTS Educational Testing Service (ETS), the nonprofit that runs California's statewide student assessments (CAASPP, ELPAC) under state contract, has begun notifying students and families, the California Department of Education said on Oct 16, 2026. An unauthorized party used a compromised login credential to copy files from an ETS SFTP site between May 22 and Sept 18, 2026. ETS identified the activity on Sept 25. The copied data covers students including, but not limited to, all those enrolled in the previous three school years. It may include names, birth dates, addresses, student IDs, demographics, disability/504 status and assessment results. No SSNs, financial data or passwords. No total count has been given. ETS says it has found no evidence the data was made public. Notices began Oct 16 and are expected to run through early November. cde.ca.gov/nr/in/ets-notific… #DataBreach #California
1
9
5,974
🇺🇸 🚨 FLORIDA DMV (FLHSMV) CONFIRMS BREACH OF DRIVER LICENSE AND VEHICLE RECORDS, INCLUDING DOCUMENT IMAGES The Florida Department of Highway Safety and Motor Vehicles said in an official Oct 16, 2026 notice that a malicious actor accessed department records on Sept 4, 2026 using compromised credentials. Key details: • FLHSMV attributes the breach to an "international cybercriminal organization" • Access came through credentials of a local Florida law enforcement agency employee, which FLHSMV says were improperly stored on an electronic device • Potentially affected: driver license and motor vehicle data, document images and other personal information • FLHSMV has not said how many people are affected and says it has no evidence of misuse so far • Letters are going out this week to current license and ID holders, with 1 year of Sontiq (TransUnion) monitoring and $1M identity theft insurance • Former license, ID or title holders may not get a letter and are covered by a substitute notice ⚠️ Analyst Note: License data plus document images is a strong kit for identity fraud and account takeover. Expect phishing that impersonates FLHSMV breach letters: check only via flhsmv.gov, and consider a credit freeze. One stored credential at a partner agency was enough to reach a statewide system. Sources: content.govdelivery.com/acco… flhsmv.gov/data-breach/ #DDW #DataBreach #Florida #FLHSMV #CyberSecurity
1
2
1
12
5,566
‼️ UPDATE: Calif showed one-tap attacks on Signal and iMessage on iOS, which make it possible to run code on an iPhone with a booby-trapped PDF. On iOS 26.5, opening one in iMessage sent the phone's messages to a server. Calif says everything will be released "in due time."
‼️ BREAKING: Security firm Calif unveiled an untethered iPhone 18 Pro jailbreak on stage in Paris. Its Hexacon demo shows the phone on iOS 27.0.1, Apple's latest, giving up a root shell within 2 minutes of boot.
38
311
29
2,298
153,591
CrypticSploit retweeted
Jagex has cancelled RuneScape Reignited just days after announcing it. Reignited was planned as a fresh-start version of RuneScape, giving players new characters, progression and economies. Jagex has now backed down. “It is clear that we missed the mark on this, and so we are not moving forward with it.” He also said the goal is to grow RuneScape without hurting the existing community. “Our goal is to see RuneScape grow again, with returning players coming back and new players joining, but never at the expense of our existing community.”
78
25
25
765
107,023
CrypticSploit retweeted
40% of workers earning over $300,000 say they're living paycheck to paycheck, per Goldman Sachs.
246
279
193
4,838
232,199
🔥 100% Untethered Jailbreak on iOS 27💥 It’s over AI has fucked everything up 🤯🚀
10
10
73
23,164
Lmao Deloitte ??? @Deloitte
‼️🇬🇧 Deloitte has been named by The Gentlemen ransomware. 🇬🇧 Deloitte - A global professional services organization providing audit and assurance, consulting, financial advisory, risk advisory, tax, legal, technology, and cybersecurity services.
1
2
268
CrypticSploit retweeted
i’ve never seen a comment section like this in my life 😭
JUST IN: 🇮🇳 India formally bids to host the 2036 Olympics.
733
11,234
319
159,666
13,286,908
CrypticSploit retweeted
Bug bounties are going to take a hit.
Replying to @AnthropicAI
To secure open-source software, we’re launching OSS Scanner. We’ll use our frontier models to periodically scan opted-in open-source projects for vulnerabilities, at no cost. Our reports will provide a proof-of-concept, explanation, and suggested fix. anthropic.com/research/launc…
15
12
378
34,244
FREE open source software vulnerability scans?
Replying to @AnthropicAI
To secure open-source software, we’re launching OSS Scanner. We’ll use our frontier models to periodically scan opted-in open-source projects for vulnerabilities, at no cost. Our reports will provide a proof-of-concept, explanation, and suggested fix. anthropic.com/research/launc…
64
CrypticSploit retweeted
Update Telegram Desktop immediately! A critical vulnerability has been discovered that allows attackers to gain access to your account and secretly steal files from your computer. The attack uses links in the format tg://. If a special command is constructed, clicking the link can cause a malicious script to send a selected file to the attacker’s channel - without requiring additional confirmation.
546
219
39
936
140,062
🚨 🇺🇸 Pryx says he repeatedly warned 17-year-old “Rey” not to hack the FBI Adem El Adeb, 19, known online as “Pryx,” told Reuters that he tried several times to stop his friend Saif al-Din Khader from targeting the bureau. “You’re suicidal,” El Adeb recalled telling him. He said Khader refused to abandon the plan. Khader, whose alleged online identity is “Rey,” is suspected of playing a key role in the ShinyHunters breach of an FBI jobs platform. He was detained in Jordan on September 29 and is reportedly cooperating with investigators. The FBI is operating under the assumption that the stolen dataset may contain information relating to all its employees, although Reuters has not independently confirmed the full scope. Khader and El Adeb were previously publicly associated with Hellcat, a group known for attacking major organizations and publicly humiliating victims. Hellcat previously claimed the Schneider Electric breach and demanded $125,000 worth of baguettes. El Adeb claims he left cybercrime before turning 18 and is now creating a cybersecurity company called VulOne. He also told Reuters he remains proud of his past experience. Reuters could not fully verify his account or the warning messages, which El Adeb said he deleted after Khader was detained. Source: reuters.com/legal/government…
2
26
3
190
21,208
CrypticSploit retweeted
I got you! Just found a way to steal local Windows user credentials 👀 Turns out, all it takes is a few simple hooks on put_Value and get_Value in credprovdatamodel.dll
8
24
1
303
14,205
CrypticSploit retweeted
Unfortunately, HBO purchased the rights to human executions and witnessing executions carried out by the United States government can only be viewed on HBO Max.
50
96
2
2,478
81,028
SO AGAIN: After testing the BYOVD kernel exploit i then tested it on a mature 2025 server and a win 11 machine tied to it with defender on implementing the technique shows it bypasses it enough for kerberoast and aseproast ETC , WAS fun and will try on a live enviroment soon
3
163
🚨🇺🇸🇫🇷 US and French authorities seize websites selling stolen intimate images and CSAM Authorities seized two domains associated with NudeLeaksTeens (NLT), a platform accused of selling hacked and stolen sexually explicit images and videos of women and girls. ⠀ Investigators found that the site also sold child sexual abuse material, despite displaying warnings that such content was prohibited. Some collections allegedly included identifying information alongside intimate images. Authorities confirmed that some victims were minors when the material was created. ⠀ One advertised collection claimed to contain 6,200 files obtained from compromised Snapchat, Instagram, TikTok and Facebook accounts. French authorities simultaneously arrested a 25-year-old man in northern France suspected of being the platform’s main administrator.
2
23
91
14,614
KDU — Windows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and dump process memory. ktp.sh/kluDMA7Buf
9
43
4,695
TODAY: After messing with Kenerl exploitation i achieved BYOVD to Kernel RCE c2 payload in meemory as shellcode straight to NT/AUTHORITY , pretty nice for straight to the point (If you ask me)
2
140