20 bin lirayi mahallede lahmacun yapip dagitsaymis daha hayirli bir is yapmis olurdu :D

Volvió el confinamiento y barbijo obligatorio en Reino Unidos por la Gripe H3N2. Por suerte si llega a Sudamérica el Javo y Lugones su super ministro antivacunas la van a declarar agenda woke, así que no tenemos de qué preocuparnos

🚨 New Report: Morte #LaaS Our Threat Research team analyzes this #malware #loader that eliminates rival botnets to dominate compromised infrastructures 👇 🔗Report: socradar.io/resources/whitep… #CTI #RE #MalwareAnalysis #ThreatIntel #threat #botnet

Her osint'e atlamayin. hackread.com/pystorerat-rat-…

GERMANY: The army has created a new Birds Group inside Land Forces Command to speed drone and robotics development. It will gather ideas from frontline troops, test them quickly, and scale what works, cutting the time to field new unmanned systems. h/t @NSTRIKE1231

GITAI robots cooperatively assemble a 5-meter tower, a building block for future off-world habitats, on its own. The combination of AI and robotics creates the necessary technological breakthrough and acceleration that we have always hoped for.

#China vs #USA

Kısacası: Bir teknik mülakat sırasında bile olsa, kaynağı belirsiz bir reponun kodunu sorgusuz çalıştırmayın. Bu tür supply chain saldırıları artık daha yaratıcı ve hedef odaklı hale geliyor. @canaksoy

Zincirin devamı şöyle ilerliyor: Npm run dev dediginizde. Next.config.js icine gizlenmiş kod tetikleniyor. Sahte bir jquery.min.js üzerinden C2 sunucusuna trafik başlıyor. Backdoor, kullanıcının ~/.vscode/ dizinine yerleşerek kalıcılık kazanıyor.

Bu paketlerden fs@0.0.1-security Node.js’in dahili fs modülünü taklit ederek gölgelemeye çalışıyor. execp@0.0.1 ise doğrudan komut çalıştırılmasına izin vererek sisteme uzaktan erişim kapısı açıyor. Paketler “malicious” olarak işaretleyip registry’den kaldırmış durumda.

LinkedIn’de developer isi arayanlari, bir “e-ticaret şirketi” adına iletişime geçen sahte insan kaynaklari üzerinden hedef alıyor. Senaryo klasik görünüyor: Aday GitHub reposundaki projeyi çalıştırması isteniyor. #CyberSecurity #Malware #NodeJS

Imagine receiving a normal WhatsApp message from someone… and later discovering that the message secretly contained their exact location, even though they never shared it. That’s exactly what happened during a recent forensic extraction I performed on my iPhone 12 Pro Max. During the analysis, I found a I decided to pick a message I received from @RedHatPentester, on 3rd September 2025 at 7:11 AM. Nothing unusual at first glance just a regular text. But deep inside the message metadata, the phone had silently logged: @RedHatPentester exact location at the moment he sent that message. He didn’t share it intentionally. I didn’t request it. Yet the device recorded it automatically. This was extracted directly from my own phone, meaning: If your location is turned ON while chatting on WhatsApp, your exact location can be extracted from someone else’s device if theirs undergoes forensic imaging. Most people have absolutely no idea this happens. But this was only the beginning. Also, every single file created on the device, ie: photos, videos, screenshots, recordings had the exact location of where I was when that file was created. The phone automatically logged precise GPS coordinates for each media file. This means investigators can determine where you were at the exact moment you took a picture, recorded a video, captured a screenshot, or created any media on the device. This level of metadata helps reconstruct movements, timelines, and behaviors with incredible accuracy. The extraction revealed far more than hidden location data and remember, this phone was NOT jailbroken. Here’s what else was recovered: 1. Full Synchronized Accounts & Passwords The extraction pulled: •URLs •Usernames •Passwords •Stored login metadata Basically, every synchronized password ever used on the device all recovered without jailbreak. 2. Complete Application Logs & Histories Every installed application had: ✔ Detailed logs ✔ Usage history ✔ Internal data ✔ Metadata Even apps considered “secure” or “encrypted” still left behind recoverable traces. 3. Full WhatsApp Data, Including Group Histories WhatsApp revealed more than most users realize: •Full history of every group ever joined •Date each group was created •Who created it •Date I was added •Group metadata even after you exit the group This is critical in investigations because a suspect cannot deny belonging to a group when the device itself retains: 📌 Creation date 📌 Creator identity 📌 Join date 📌 Participation timeline Even if they left the group years ago. 4. Message-Level Location Metadata The iPhone logged exact sender locations at the moment messages were typed and sent just like what happened with @RedHatPentester message. Most people never see this. Investigators do. Why This Matters Every phone tells a story. Every app keeps footprints. Every message carries more than text. This extraction proves that even without a jailbreak, investigators can discover: ✔ Locations ✔ Passwords ✔ Group associations ✔ Message histories ✔ Detailed app activity ✔ Metadata most users never realize exists Digital devices rarely forget even when the user does.

Phishing icin buyuk emek harcamislar :D

Seems like @hak5darren is having a phreaking good time with his Pager 🍍 📟 🕶️

Windows 11 b*k gibi

Mavi tik almis arkadaslar. Suna bir el atin aksi daha ileri gidecek Herkes her konuda uzmanlasmis :)

Calisirken dinlenir youtube.com/watch?v=JKlKUVee…

😂😂😂😂😂

😃