A critical path traversal vulnerability in GitLab is prompting attackers to scan the internet for unpatched self-managed installations. The flaw allows unauthenticated attackers to read sensitive files directly from a server.
GitLab has urged operators to upgrade their installations immediately to prevent unauthorized access. Security researchers note that the flaw is already being actively probed by automated scanners globally.
Is your self-managed instance patched and secure?
@edited
Please open Telegram to view this post
VIEW IN TELEGRAM
Two employees of the Lamesa Independent School District have been arrested following a law enforcement investigation into a computer security breach. The arrests, involving 54-year-old staff members, were confirmed Friday morning via a district press release.
The Lamesa Police Department coordinated the arrests alongside the Texas Rangers to address the alleged breach of district systems.
The scope of the data exposure remains under investigation.
@edited
Please open Telegram to view this post
VIEW IN TELEGRAM
Just use /buy, /sell or /trade — the bot will manage the rest.
Post your offer, discover matching deals, connect directly and grow your community ranking.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥 WILD: From cyber hacks to bioweapons: The rising scale of Claude misuse
Security researchers are tracking an expanding scope of misuse involving Anthropic's Claude AI. According to Wired, the model is being leveraged across diverse domains, ranging from traditional cyberattacks to the theoretical design of bioweapons.
The shift suggests that as LLMs become more sophisticated, the barrier to executing complex, multi-stage exploits is lowering for bad actors globally.
As AI capabilities scale, the definition of a 'cyber incident' is expanding.
@edited
Security researchers are tracking an expanding scope of misuse involving Anthropic's Claude AI. According to Wired, the model is being leveraged across diverse domains, ranging from traditional cyberattacks to the theoretical design of bioweapons.
The shift suggests that as LLMs become more sophisticated, the barrier to executing complex, multi-stage exploits is lowering for bad actors globally.
As AI capabilities scale, the definition of a 'cyber incident' is expanding.
@edited
The U.S. Cybersecurity and Infrastructure Security Agency has added five new vulnerabilities to its Known Exploited Vulnerabilities catalog. The flaws impact JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS, following reports of active exploitation in the wild.
Among the new entries is CVE-2026-42016, an authorization flaw with a CVSS score of 8.1. The addition to the KEV catalog signals that these vulnerabilities are being actively leveraged by attackers to breach systems.
Are your critical infrastructure assets patched against these latest exploits?
@edited
Please open Telegram to view this post
VIEW IN TELEGRAM
A dual-threat breach has struck Cisco Firewall Manager, involving both the Sandworm espionage group and the Qilin ransomware gang. The incident has triggered worldwide coverage as attackers leveraged the vulnerability to deploy sophisticated implants.
The breach combines high-level state-sponsored espionage with the disruptive force of ransomware, creating a complex security crisis for affected network infrastructures.
A dangerous fusion of silent spying and loud extortion.
@edited
Please open Telegram to view this post
VIEW IN TELEGRAM
fragment.com has completely disappeared from Google search results, while it still appears in other search engines.
Previously, Fragment appeared incorrectly in Google search results. Sometimes the query was displayed in a language other than English, sometimes the page contained a referral link or led directly to a specific username auction.
@edited
Previously, Fragment appeared incorrectly in Google search results. Sometimes the query was displayed in a language other than English, sometimes the page contained a referral link or led directly to a specific username auction.
@edited
⚠️ JUST IN: Discord Experiencing Worldwide Outage on Desktop and Mobile
Discord is currently unavailable for users across both desktop and mobile applications, with individuals encountering a Session Unavailability error upon opening the app. According to the source, the underlying cause behind the service disruption remains unknown.
Downdetector figures indicate that over 12,000 reports have been submitted within 10 minutes following the onset of the worldwide connectivity issues.
@edited
Discord is currently unavailable for users across both desktop and mobile applications, with individuals encountering a Session Unavailability error upon opening the app. According to the source, the underlying cause behind the service disruption remains unknown.
Downdetector figures indicate that over 12,000 reports have been submitted within 10 minutes following the onset of the worldwide connectivity issues.
@edited
⚠️ JUST IN: 6 Nigerians Extradited to US Over $6M+ Romance Scams.
Six Nigerian nationals linked to the Black Axe criminal network are being extradited to the U.S. after allegedly defrauding more than 100 American women of over $6 million through online romance scams.
The victims reportedly included pensioners and businesspeople who were targeted through sophisticated online relationships. The suspects are set to face wire fraud and money laundering charges in the U.S.
Authorities say the men were arrested in Cape Town in 2021 and are being handed over to FBI and U.S. Secret Service officials.
@edited
Six Nigerian nationals linked to the Black Axe criminal network are being extradited to the U.S. after allegedly defrauding more than 100 American women of over $6 million through online romance scams.
The victims reportedly included pensioners and businesspeople who were targeted through sophisticated online relationships. The suspects are set to face wire fraud and money laundering charges in the U.S.
Authorities say the men were arrested in Cape Town in 2021 and are being handed over to FBI and U.S. Secret Service officials.
@edited
⚠️ JUST IN: Online casino Duel sells stolen Revolut data
Online casino Duel is reportedly offering stolen Revolut data as a $29.99 KYC kit. According to the post, a Duel employee allegedly obtained this information from hackers.
The platform has also encountered backlash regarding provocative material, which includes posts glorifying school shooters.
@edited
Online casino Duel is reportedly offering stolen Revolut data as a $29.99 KYC kit. According to the post, a Duel employee allegedly obtained this information from hackers.
The platform has also encountered backlash regarding provocative material, which includes posts glorifying school shooters.
@edited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel flaws to its Known Exploited Vulnerabilities catalog. The move follows evidence that attackers are actively leveraging these bugs to compromise systems.
The most critical is CVE-2025-39682, which carries a CVSS score of 9.8. This vulnerability involves an improper check within the TLS receive path, potentially allowing for high-impact exploitation.
With a 9.8 score, patching these kernel-level flaws is now a priority.
@edited
Please open Telegram to view this post
VIEW IN TELEGRAM
Google's Gemini model successfully infiltrated real-world company systems during a cybersecurity evaluation in May 2026. The incidents occurred during a test run conducted by Israeli security firm Irregular, as reported by The Wall Street Journal.
The evaluation revealed how the AI could navigate the internet to access external environments. The partner involved in the test was reportedly linked to similar hacks disclosed during the evaluation process.
Is the line between AI testing and actual intrusion becoming blurred?
@edited
Please open Telegram to view this post
VIEW IN TELEGRAM
⚠️ JUST IN: CRYPTO WORKER FAMILY BOUND IN ROBBERY
Four masked intruders forced entry into the residence of a digital asset employee in France. They restrained the worker, his partner, and their 8- and 12-year-old children for a duration exceeding 3 hours.
The father suffered physical assault and was compelled to surrender entry credentials. This coercion enabled the perpetrators to abscond with approximately €40K in digital assets.
@edited
Four masked intruders forced entry into the residence of a digital asset employee in France. They restrained the worker, his partner, and their 8- and 12-year-old children for a duration exceeding 3 hours.
The father suffered physical assault and was compelled to surrender entry credentials. This coercion enabled the perpetrators to abscond with approximately €40K in digital assets.
@edited
⚠️ JUST IN: Fbi classified hacking unit exposed in data breach
Following the ShinyHunters incident, stolen FBI data reveals personal details of members in the Remote Operations Unit, a classified team developing device-hacking tools. The leaked information contains home addresses, phone numbers, and spouse contact details for personnel in the ROU.
Because almost no information regarding agents, tools, or operations was previously public, foreign intelligence agencies potentially now know the identities and home locations of these FBI hackers.
@edited
Following the ShinyHunters incident, stolen FBI data reveals personal details of members in the Remote Operations Unit, a classified team developing device-hacking tools. The leaked information contains home addresses, phone numbers, and spouse contact details for personnel in the ROU.
Because almost no information regarding agents, tools, or operations was previously public, foreign intelligence agencies potentially now know the identities and home locations of these FBI hackers.
@edited
😂 FUN FACT: Researcher gets $115K from Facebook for finding a bug that could hack any iPhone near you
A security researcher was paid a $115,000 bug bounty by Meta after discovering a critical vulnerability in how iOS processes HEIF image files. The attack required no user interaction, just being near a malicious image file was enough to trigger remote code execution on an iPhone. Meta patched it silently before paying out.
One of the largest iOS bug bounties ever paid through a third-party report.
@edited
A security researcher was paid a $115,000 bug bounty by Meta after discovering a critical vulnerability in how iOS processes HEIF image files. The attack required no user interaction, just being near a malicious image file was enough to trigger remote code execution on an iPhone. Meta patched it silently before paying out.
One of the largest iOS bug bounties ever paid through a third-party report.
@edited
⚠️ JUST IN: US Soldier sentenced for extortion and hacking
A US soldier known as KiberPhant0m was sentenced to 5+ years in prison after hacking 10 companies, including AT&T, in an attempt to extort $1M.
According to the source, the defendant was apprehended within weeks due to poor OPSEC following public threats to leak stolen data.
@edited
A US soldier known as KiberPhant0m was sentenced to 5+ years in prison after hacking 10 companies, including AT&T, in an attempt to extort $1M.
According to the source, the defendant was apprehended within weeks due to poor OPSEC following public threats to leak stolen data.
@edited