June 22, 2025
June 22, 2025
https://t.co/kZuTtTS9dV
— randy@infosec.exchange (@rpargman) June 20, 2025
Pretty cool experimentation work from the Infoblox team to speed up the boring work of web searches for open source threat intelligence reports and extracting IoCs. If you spend a lot of time at work copying and pasting stuff from security blogs... 👀
What is interesting to me here is how a perfect crime fell apart because a member on the periphery was busted for something unrelated.
The court heard authorities were alerted to the scheme when the lavish lifestyle of a Portuguese man and his partner caught the attention of French authorities.
Questioned by police about the acquisition of properties in France and Portugal worth €1.2m while on an income of about €2,500 a month, the man – who it turned out worked as a handyman in Parisian galleries – confessed to his part in working as a middleman who collaborated in the furniture fraud, news agency AFP reported. The money trail then led investigators to Mr Desnoues and Mr Pallot.
The furniture fraud who hoodwinked the Palace of Versailles - BBC News
Bill Pallot and Bruno Desnoues falsified 18th-century furniture they said belonged to French royalty.
This is my research project in creating read, write and allocate primitives that can be turned into an injection in order to evade certain telemetry which I presented last year in RedTreat. I hope everyone likes it \m/. https://t.co/GY37MMfCGl
— trickster0 (@trickster012) June 21, 2025
Vanessa Molter shared a talk on GLASSBRIDGE, a group of 4 companies that push pro-PRC narratives by operating networks of inauthentic news sites & newswire services.
— CYBERWARCON (@CYBERWARCON) June 20, 2025
Talk here >>> https://t.co/kMdg7hVSIi
Here research here >>> https://t.co/GcJfTLyJa9
Woah, @WangTielei talk “Sending Me Your IOUserClients: A Bypass to Immovable Ports” at @deepsec_cc was insanely good! I enjoyed it! Super clever new discovery. feels awesome to see other researchers referencing my past work. pic.twitter.com/0Th5sGYWEO
— Huke (@08Tc3wBB) June 20, 2025
Three unexpected attack scenarios:
— Trail of Bits (@trailofbits) June 18, 2025
1. Marshaling private data with misconfigured tags
2. Parser differentials in a microservices architecture
3. Cross-format confusion attacks (JSON→XML)https://t.co/2IpN8pvVI0
Vibe coded a minimal #bugbounty progress tracker app
— payloadartist (@payloadartist) June 21, 2025
It helps
→ Break down the complex hunting methodology, inspired by @Jhaddix's TBHM, into simple steps
→ Avoids missing test cases
→ Pro-privacy: Offline, no data collected
→ Uses less memory
→ Stores data in .YAML files pic.twitter.com/qGOmmoZTk5
GitHub: https://t.co/p6LrAvAFuA
— payloadartist (@payloadartist) June 21, 2025
Linus Torvalds & Bill Gates just met each other for the first time pic.twitter.com/vEGq6C44pg
— nixCraft 🐧 (@nixcraft) June 21, 2025
Prompt injection works a lot better if your message sounds like the data the model was trained on.
— Critical Thinking - Bug Bounty Podcast (@ctbbpodcast) June 21, 2025
Some prompt formats that have worked in real bugs: pic.twitter.com/uf8AdUqEbm
The future is wild.
https://www.reddit.com/r/CombatFootage/comments/1lgy71n/ukrainian_ground_drone_cut_off_the_fiber_optic/working on a theory that US intervention in the middle east is correlated to 11 year solar cycle of sunspot activity pic.twitter.com/ZMhJmYrjqJ
— onionweigher 🧅⚖️ (@onionweigher) June 22, 2025
#SpyNews - week 25 (June 15-21):
— Spy Collection (@SpyCollection1) June 22, 2025
A summary of 84 espionage-related stories from week 25 coming from 🇸🇴🇮🇱🇮🇷🇮🇳🇵🇰🇩🇰🇷🇺🇺🇦🇺🇸🇲🇽🇨🇳🇬🇧🇹🇷🇹🇼🇧🇷🇰🇿🇫🇷🇵🇸🇦🇿🇳🇱🇮🇹🇻🇦🇳🇬🇸🇪🇲🇳🇪🇨🇦🇷🇦🇺🇷🇸🇽🇰🇱🇻🇫🇮🇰🇷🇰🇵🇨🇦🇸🇦🇮🇶🇯🇴🇸🇾🇰🇼🇱🇧🇹🇳🇺🇿🇩🇪🇧🇪🇦🇲🇧🇬🇦🇹🇨🇾 https://t.co/VllXWDbIgD#espionage #OSINT #HUMINT #SIGINT #spy
🇺🇸 #US: The FBI has arrested James Wesley Burger, a 21 year old from Round Rock, Texas, for allegedly threatening a violent attack on a Christian music festival, which he discussed on the online game Roblox.
— POPULAR FRONT (@PopularFront_) June 22, 2025
Federal agents were tipped off by another user who overheard Burger… pic.twitter.com/rFWCK2WRpG
Guys i don't mean to brag but my feedback was valuable and will be used to improve the user experience
— John Attridge (@John_Attridge) June 21, 2025