A source for security researchers, and tech enthusiast #OSINT #Pentesting #ThreatIntelligence
Joined February 2014
- Tweets5.4K
- Following1.4K
- Followers7.1K
- Likes4.1K
Hacking Space 📡 retweeted
🎣 ANY.RUN researchers identified 𝗦𝗸𝘆𝘄𝟰𝗹𝗸𝗲𝗿, a 𝗱𝗲𝘃𝗶𝗰𝗲 𝗰𝗼𝗱𝗲 𝗽𝗵𝗶𝘀𝗵𝗶𝗻𝗴 campaign primarily 𝘁𝗮𝗿𝗴𝗲𝘁𝗶𝗻𝗴 𝗨.𝗦. 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻𝘀 across the manufacturing, technology, and healthcare sectors. The campaign uses password-protected contract or service-proposal decoys and sites[.]google[.]com lures to redirect victims to Microsoft authentication, seeking M365 token access without directly harvesting passwords.
#Skyw4lker #DeviceCodePhishing
Hacking Space 📡 retweeted
Nyxar Stealer with potential Turkish roots 🇹🇷, sold as malware-as-a-service with of 60 modules, including:
🪝 Browser credential and cookies stealer
💬 Messaging app credential stealer (Discord, Telegram, etc)
👛 Crypto wallet stealer
🎮 Gaming app credential stealer (Steam, Epic, etc)
Probably of turkish origin:
🕑 Client quotas reset at 03:00 Instanbul time
🇹🇷 tr-TR formatting and error messages in bot admin panel
Botnet C2s:
📡nyxar .cc
📡nyxar .lol
📡nyxarstealer .lol
📡nyxarst .lol
📡polnet .lol
Malware samples:
bazaar.abuse.ch/browse/signa…
ALT NyxarStealer botnet admin panel
#Malware #Stealer #Teelegram #NixScareStealer
StalkCraft.exe:
virustotal.com/gui/file/e1b6…
app.any.run/tasks/75be7f3c-9…
GitHub: github.com/3xp0rt/NixscareSt…
Special thanks to @ViriBack.
xitter.cf/ViriBack/status/130223…
Still information in the comments 👇
Hacking Space 📡 retweeted
hatırlarsanız geçtiğimiz yaz BtcTürk'teki cüzdanlar hedef alınarak yaklaşık 45-50 milyon dolarlık bir siber saldırı gerçekleşmişti. @Root0ne 'ın geliştirdiği PusulaTrace isimli algoritmik model, bu saldırının Kuzey Kore ilişkili Lazarus APT grubuna atfetdildiğini önemli ölçüde kanıtlar nitelikte. 👇
Hacking Space 📡 retweeted
‼️ BREAKING: This is the voice Dutch police want identified: a Dutch-speaking man who called Odido's customer service posing as a colleague from IT.
That single call is how ShinyHunters ended up with the data of more than 6 million people.
Police say the recording is not AI.
Hacking Space 📡 retweeted
HackAgent
A comprehensive Python SDK and CLI designed to help security researchers, developers, and AI safety practitioners evaluate and strengthen the security of AI agents.
Resource/Credit: github.com/AISecurityLab/hac…
Hacking Space 📡 retweeted
🚨 Forminator flaw can give unauthenticated attackers RCE.
CVE-2026-15748 affects 600,000+ active WordPress installs. On susceptible forms, attackers can upload malicious PHP files and potentially take over the site.
Read: thehackernews.com/2026/08/fo…
Hacking Space 📡 retweeted
⚡ A VoLTE exploit chain can give attackers full Android kernel access.
The Unisoc chain starts with modem RCE, then lets modem code modify Android kernel memory. It requires attacker-controlled 4G infrastructure and the victim to answer the video call.
No patch is available.
Details: thehackernews.com/2026/08/un…
Hacking Space 📡 retweeted
iOS 27 beta 4 jailbroken on iPhone 11, Pro 🔥
WiFi, SSH & Sileo already working.
Mac pairing, wallpapers, baseband & passcode still broken but progress is real.
Huge work by the community.
- github.com/xplo8e/usbliter8-…
Hacking Space 📡 retweeted
Codex can now control real iOS and Android phones. 📱
Introducing mobile-harness.com, an open-source agent harness powered by mobilerun-core, giving agents one unified API and a consistent control path across local and cloud mobile devices.
Hacking Space 📡 retweeted
🔴 Windows'ta USB takmak, SYSTEM yetkisine giden bir saldırı zincirini tetikleyebiliyor!
Alejandro Hernando (0xedh) ve Borja Martínez (Qm9yamFN) tarafından DEF CON 34'te sunulan "Plug And Pwn" araştırması, Windows'a bir USB cihaz takıldığında (veya takılmış gibi gösterildiğinde) Microsoft'tan sessizce bir paket indirip içindeki vendor kodunu NT AUTHORITY\SYSTEM yetkisiyle çalıştırabildiğini gösteriyor.
Üstelik:
-> Yönetici yetkisi gerekmiyor
-> Kullanıcının oturum açmış olması gerekmiyor
-> Bazı ortamlarda fiziksel USB bile gerekmiyor
-> RDP USB Redirection üzerinden uzaktan tetiklenebiliyor
Kısaca:
USB -> PnP -> Microsoft'tan paket -> Vendor Code -> SYSTEM
PoC ve araçlar yayınlandı:
🔗 plugandpwn.com
Hacking Space 📡 retweeted
iOS 26.6.1 ve 27.0b4 için 0-day sandbox escape PoC yayınlandı: bad_query
• 27.0 beta 5'te yamalandı.
• 26.6.1'de çalışıyor
• Sideload app'ten r/w erişim veriyor
GitHub: github.com/forcequitOS/bad_q…
Hacking Space 📡 retweeted
PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400).
If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password.
We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path.
Please upgrade your macOS boxes to 26.6.1.
Full technical writeup drops tomorrow.
Hacking Space 📡 retweeted
seems like the 🐈⬛ is out of the 👜
here's our poc for MariaDB 13 RCE, currently still unpatched: github.com/v12-security/pocs…
Hacking Space 📡 retweeted
‼️ BREAKING - A newly discovered #WordPress pre-auth XSS affects every version.
XSS2Shell (CVE-2026-64638) can run attacker-controlled JS in a site's origin without a login. With a logged-in Administrator, one click, and required deployment conditions, it can be chained to PHP code execution.
Update your WordPress sites ASAP 🠖 thehackernews.com/2026/08/ne…
Hacking Space 📡 retweeted
A structured archive of Proof-of-Concept security research, organized by category with metadata, reproduction steps, and references.
github.com/intelseclab/poc-a…
