Farhan Nearhan ❼

Reconnaissance Has Begun for the New BeyondTrust RCE (CVE-2026-1731): Here's What We See So Far A PoC for CVE-2026-1731 hit GitHub on Feb 10. Within 24 hours, GreyNoise observed reconnaissance probing for vulnerable BeyondTrust instances.

Exploitation of a recent RCE in BeyondTrust remote access products, tracked as CVE-2026-1731, reportedly started less than 24h after a PoC was published

www.greynoise.io/blog/reconna...

x.com/ethicalhack3...

x.com/DefusedCyber...

THEY ARE BUYING UP WAREHOUSES TO HOLD HUMAN BEINGS IN DETENTION INDEFINITELY.

I feel crazy at how everyone is acting like this is normal. These are concentration camps being built right before our eyes. These buildings are not meant to house human beings. People will be caged like cattle and die.

Ai.com spent god knows how much on their Super Bowl ad, and….

By Chinese hackers? Catalin, that seems like our work. :)

Les locaux de X en France perquisitionnés, la justice veut entendre Elon Musk en audition libre Une perquisition est « diligentée dans les locaux français » de la plateforme X par la section de lutte contre la cybercriminalité du parquet de Paris, a annoncé ce dernier mardi sur les réseaux socia...

"A search was carried out (...) by the cybercrime unit of the Paris prosecutor's office with the national cyber unit of the gendarmerie and Europol, as part of the investigation opened in January 2025," the prosecutor's office announced, adding that it would no longer publish on the social network."

The Scam Ad Machine Nearly one in three Meta ads found to point to a scam, phishing or malware

Dear f***ing lord!

Nearly one every three Meta ads showed in the EU and UK over 23 days pointed to online scams

This should be the easiest layup for govt agencies in the history of enforcements

www.gendigital.com/blog/insight...

In past 24h:

❌ 1-click exploit dropped for #OpenClaw: Simply visiting a URL allowed attacker to steal everything: keys & files + take control of the device. Patched.

❌#MoltBook had a vulnerability exposing all users emails, real names etc. Patched. 1/

Takeaway: all gas, no brakes.

Vision Pro & iPhone schematics at risk: Attackers claim access to Luxshare designs RansomHub ransomware gang breached Luxshare, Apple's key iPhone assembler, threatening to leak confidential 3D models, circuit designs for Apple, Nvidia and LG.

Apple contractors and assemblers are getting hacked left and right

cybernews.com/security/lux...

Just saw this in LinkedIn for anyone interested in looking into Grok's production of CSAM and non-consensual sexualised imagery.

www.linkedin.com/posts/mtechl...

Brain organoids are helping researchers, but their use also creates unease Pea-size clusters of human cells called brain organoids inspire both hope and fear. Experts are debating how scientists can responsibly use these bits of gray matter.

Pea-size clusters of human cells called brain organoids inspire both hope and fear. Experts are debating how scientists can responsibly use these bits of gray matter.

Israel bans Doctors Without Borders, dozens of other NGOs in Gaza : NPR Israel accused Doctors Without Borders, one of the largest health organizations operating in Gaza, of failing to clarify the roles of some staff that Israel accused of cooperation with militants.

There are going to be people who unironically praise this and say banning Doctors Without Borders and OxFam is necessary because they're Hamas. And worse, folks will nod and agree as though that's a legitimate position and not absolutely batshit.

www.npr.org/2025/12/30/g...

they should invent a 2026 planner that does the things you write in them

Wishing you and yours the hackerest of holidays.

TRM Traces Stolen Crypto from 2022 LastPass Breach — On-chain Indicators Suggest Russian Cybercriminal Involvement | TRM Blog TRM traced LastPass-linked Bitcoin laundering through mixers to high-risk Russian exchanges, showing how demixing exposes infrastructure reuse and limits mixer anonymity.

Password vaults stolen from LastPass at the end of 2022 were cracked and used to steal cryptocurrency as recently as this year, with the stolen funds being laundered through Russia-based cryptocurrency exchanges

www.trmlabs.com/resources/bl...

Rest In Peace IBM X-Force Vulnerability Database Within the vulnerability ecosystem, the CVE project / vulnerability database is certainly the most well-known. Over the past 30 years many others have come and gone, and others are still around. So…

The IBM X-Force Exchange, the company's in-house vulnerability database that was founded even before the CVE program, appears to have been abandoned

jericho.blog/2025/12/23/r...

Meet the man hunting the spies in your smartphone Ronald Deibert and his research group, the Citizen Lab, have rigorously worked to unveil alarming digital threats for the past two decades. Now, he warns, this kind of work is under threat.

MIT Technology Review profiles @rondeibert.bsky.social, who understood that civil society needed digital defense long before just about anyone else and has been doing it ever since.

www.technologyreview.com/2025/12/24/1...

Archivists Posted the 60 Minutes CECOT Segment Bari Weiss Killed iCloud, Mega, and as a torrent. Archivists have uploaded the 60 Minutes episode Bari Weiss spiked.

iCloud, Mega, and as a torrent. Archivists have uploaded the 60 Minutes episode Bari Weiss spiked.

The Breachies 2025: The Worst, Weirdest, Most Impactful Data Breaches of the Year Another year has come and gone, and with it, thousands of data breaches that affect millions of people. The question these days is less, Is my information in a data breach this year? and more How many...

A good mix of real security fails & a healthy dose of snark. @eff.org: 'The Breachies 2025: The Worst, Weirdest, Most Impactful Data Breaches of the Year.' Congrats (?) @troyhunt.com? www.eff.org/deeplinks/20... #cybersecurity @gate15.bsky.social @campuscodi.risky.biz @ransomwaresommelier.com

New York Times columnist David Brooks appears in latest Epstein photos Brooks, who dismissed Epstein scandal as ‘stupid story’, wrote column expressing lack of interest in developments

"Why is everyone SO OBSESSED with the Epstein Files," whined the guy who is in the Epstein Files.

www.theguardian.com/us-news/2025...

Rockets owners expand talks to buy, move Sun

Terrifying headline if you don’t realize they are sports teams.

A wrong Grok post making up a white guy who stopped the Australian mass shooting.

BBC 'Hero' who wrestled gun from Bondi shooter named as Ahmed al Ahmed Emily Atkinson Sun, December 14, 2025 at 1:06 p.m. CST 2 min read A "hero" bystander who was filmed wrestling a gun from one of the Bondi Beach attackers has been named as 43-year-old Ahmed al Ahmed. Video verified by the BBC showed Mr Ahmed run at the gunman and seize his weapon, before turning the gun round on him, forcing his retreat. Mr Ahmed, a fruit shop owner and father of two, remains in hospital, where he has undergone surgery for bullet wounds to his arm and hand, his family told 7News Australia.

This is fucking grim. Somebody invented a white guy, an "IT professional" named Edward Crabtree, who stopped the Bondi shooting and spread it all over the internet, which was picked up by AI agents and slop aggregation sites.

The real hero is a fruit stand owner named Ahmed el Ahmed.

Horrific, disgusting, inexcusable, antisemitic

PATCH YO’ IOS

About the security content of iOS 26.2 and iPadOS 26.2 - Apple Support support.apple.com/en-us/125884

But like you’re still not special because they’re targeting everyone.

When Americans were cheering on a billionaire (and soon trillionaire) firing low level government employees in the hopes that they’d get a refund check from the savings was when I realized how much propaganda has turned our brains to mush.

Every car made today is an incredibly sophisticated computer on wheels. Really unfortunate that there is simply no solution to having it die because one (1) little overhead light was left on overnight.

curl known risks, i actually wasn't aware of that one.

curl.se/docs/knownri...

Spongebob voice: 50 yEaRs LaTEr

Your time is the ultimate zero-sum game.

If you work on P for an hour, you're not working on Q.

So, prioritization is paramount, and whiling away a useless hour is prohibitively expensive.

Except, rest and creativity and daydreaming generates ideas and well-being.

the biggest lesson from the emails today is that powerful people are so unafraid of consequences for crimes as bad as “raping children” that they will just talk about it openly in emails

the only path to a better society is one where that is no longer true