WHATS I built a free tool that finds the one AD change that breaks every attack path (HorusEye v2.3)
For [Blue|Purple] Teams in Cyber Defence ·
WHATS
THE HAX?
Security community
Top story
Also in coverage
BogusMips 2026-10-31 (first version) released: Integrated disassembly and network sniffing for Android apps
Reverse Engineering ·
Cloud Exposure Index 2026: 484,142 open buckets mapped
Technical Information Security Content & Discussion ·
Am I qualified for a SOC analyst?
cybersecurity ·
Article feed
6 sources ↓I built a free tool that finds the one AD change that breaks every attack path (HorusEye v2.3)
[ Removed by Reddit ]
CTO at NCSC Summary: week ending November 1st
[2610.39807] InferD: A Honeypot Framework for AI Inference Infrastructure
Installed Base Program: CISA & OEMS: Strengthening OT Resilience Through Partnership and Action
Commerce Core - Highly critical - Access bypass
Mythos Linux kernel 0day feed
Arad-Code: AI-powered SAST agent for security research
Generating Precise Format Specification for Network Protocols Through Adversarial LLM Interactions
Vulnerabilities in Supermicro BMC firmware, October 26, 2026 (1)
cve-2026-111497-wordpress-poc: CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress
Sandbox Flipped to ‘Danger-Full-Access’: Unauthorized AI Relays Create Risk for Organizations
Load/Mine: A Hugging Face Malware Campaign Returns After Takedown
Securing Internet-Critical Software: How We Could Have Backdoored Bash
Amatera: How the prolific infostealer works and spreads
Detecting & Responding to AI-aided or Agentic Attacks
GitLab security incident: attempted exploitation of CVE-2026-97229
Controlled Unclassified Information in GSA’s Google Drive Was Improperly Exposed
BlackApex, SPY, and Counting: The Emerging Wave of Vibe-Coded Phishing Kits
dragon-tales: A binary analysis library for disassembling, assembling, and analyzing machine code across multiple architectures. Built on LLVM 21.
BogusMips 2026-10-31 (first version) released: Integrated disassembly and network sniffing for Android apps
I reverse engineered RuneScape's July 2007 revision.
aternative for runjs? desktop?
Malware Analysis - Decompiling JavaScript .jsc
I reverse engineered the Attack Shark X6 software to get a proper Linux configurator, and I want people to test it
81.5% code recovered for mythical Icewind Dale 2 lost source code. ETA 2027 unless you plug your agents today!
D2-Web: Diablo II 1.13c Open-Source and Playable in Browser
I couldn't find a Flutter-specific security scanner that runs entirely on Android, so I built one. No root, no PC, no internet.
Built a Microsoft-signed Windows kernel filter driver for keyboard & mouse input.
PUBG Lite DEVLOG #9 - Movement, Airplane, Blue Zone update
GameFrame: Code skills for humans and agents for reverse engineering and rebuilding old games
Reverse engineering the SMS and phonebook formats in Nokia Series 30+ backups
Reverse engineering the JBL PartyBox Bluetooth protocol: GATT over classic Bluetooth and a speaker that drops links it didn’t create
NWH Stealer Payload Extraction, Fileless Bun Runtime & Cloud C2 (AWS/R2)
Reverse engineering Peugeot SMEG+: VxWorks 6.7 and native UI in a custom QEMU MPC5121E model (AI-assisted)
GitHub - 1llu50ry/mcp-reverse: MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.
Amd uProof EoP kernel driver vuln
Reconstructing an MF904Q LK Unlock Path: Actual Gate Inputs, Corrected Return Instrumentation, and Persistence Under Factory LK
I am testing the power of this obfuscator is there anyone who can deofuscate this code because I am testing the power of this obfuscator
I made a reverse engineered version of cursor that you can customize as you want
Cloud Exposure Index 2026: 484,142 open buckets mapped
Supermicro BMC ipmi cves
Claude vs Code Extension compromised
php2bitcoin x brotli2coin: live hacking stream
Every false positive we have shipped had the same cause
Stopping Remote Code Execution with Sandboxes, CVE-2026-115995: Rust Zip
EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur
TightVNC Viewer Pre-auth RCE
TeamViewer RCE Vulnerability (CVE-2026-11585)
PHP2Shell Activity Across Previdian Network
The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!
Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286)
XML Signature Wrapping authentication bypass in Moldova's MPass SAML NuGet library, fixed in 10.0.4 (CVE requested, CAN-2026-2041077)
Turning the Valve - Exploiting RCE and LPE in the Steam Platform
An attacker can crash a Godot game server using DTLS with an unauthenticated UDP datagram
Scanning 7.25 Million Public Repositories on China's Largest Git Platform for Secrets
SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks
Cache Me If You Can: XSS in Cloudflare's /cdn-cgi/image/
I got RCE on the sandboxes of Instinct and Muse!
Where a million-request-a-second HTTP/2 flood goes: XDP drop counters from two real attacks
Am I qualified for a SOC analyst?
Black October for AI Developer Platforms: nine incidents, more to come
Hundreds of supermarkets in France hit by ‘unprecedented’ cyberattack
honeypot stuff with bots
Shivay Lamba on X: "And now @NVIDIAAI Brev also got a security breach. At this point in time, every major tech
Are the days over for “passionately” finding bugs and CVEs?
Been a fun last two weeks
Title: SOC Analysts and Security Engineers: What's the biggest problem in your daily security operations?
North Korea Steals USD 6.36 Billion From Binance in the Largest Hack in History | TRM Labs
Northflank breached - Rotate environment variables immediately
How much traveling do you do for Incident Response?
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon's 'Silent Train' Network
Constantly needing to consult write-ups
Malicious Claude Code version could have given hackers a secret way in: first steps to secure yourself
Cognition acquires Corridor
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
I checked the DMARC policies of 226 large European listed companies (Euro Stoxx 50, DAX, CAC 40, IBEX 35, FTSE 100): 48 of them can still be spoofed
Any news about Zero2Automated beginner course and @0verfl0w_?
phantomfleet: open-source synthetic osquery fleet for testing queries and detections without real endpoints
Rustc 1.99.0 Windows exe flagged as malicious
i js do a malwwarre
php2shell exploit toolkits and a PAN-OS repackaging recovered from open directorie
Fling trainer fake website.
Cursor warns malicious Claude Code extension may leave malware after removal, with up to 5,000 users affected
GitHub - HappyHackingSpace/claude-code-backdoor-check: Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS + Linux.
Trojanized Claude Code extension on Open VSX planted a persistent SSH backdoor
Hidden Browser Extensions Hijack Searches for 13 Million Users
Open-source tool for unpacking stripped Android native (.so) malware: static RegisterNatives recovery, ARM64 OLLVM (BR X8) deobfuscation, and Dobby anti-Frida tracing
SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks
Rebranded GodPotato + PowerShell stager + Impacket env, left open by an operator who stole 68 GB from a Philippine government agency
Indirect Syscall Rust Loader Analysis (Stream)
Malicious AGENTS.md file in Downloads folder hijacks AI coding agents
Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution Chain
Reversing a Ren’Py installer: hidden payloads, Amatera Stealer and a changing C2
Windows msi Malware file - Downloaded from fake cloudflare Clickfix page
Nextcloud compromised via the built-in Collabora app (richdocumentscode): how I found out and what I found
KeyStealth: A $10,000 PhaaS Kit caught in the wild
Tanpering with AI models via writing to GPU memory a la poisoned python
A fake HTML file, three AES layers, and three C2 domains: unpacking a malware ZIP
LOLCHAIN: Blockchain abuse research and evidence for malware analysts
Turning the Valve - Exploiting RCE and LPE in the Steam Platform
Tool for scanning through million of text files easily
A researcher used an AI agent to reverse-engineer a Brother printer's firmware and found hidden Telnet debug modes
What would be the next step?
HTTP2Shell is real: I turned one WordPress pingback into a Bash shell
I collected 79 cybersecurity books in one place
Controlling electronic shelf labels with Evil-Cardputer
AI Smartcard hacking
How to Intercept HTTP/3 Traffic (QUIC and QPACK Explained)
Automatic Lockpick Machine
Looking for a mentor
BlackX UEFI Bootkit Leverages “Baton Drop” Flaw to Bypass Secure Boot
Today, we hacked what we'd set out to hack: the iPhone
The Adversary v0.5.0-alpha for Cardputer/ADV is out!
Gothenburg Computer Club Firefund
MarauderBox — Bringing NyanBox-compatible apps and Marauder features to ESP32 Marauder v8
Gamer nexus eMudhra smart TV opportunity
GitLab warns of new max severity code execution vulnerability
Researchers discover a new cyber threat to water and energy networks
I built (vibed)a self-hosted cyber threat map: Emberwatch (Docker, Python backend)
Try another search or clear the filters.