Turning caffeine into code since 0x00. 🔥 Warm by name, hot by debugging. Always compiling bad jokes, but my code runs smooth (most of the time). #CodeWarm
California, USA
Joined April 2023
- Tweets113
- Following1.4K
- Followers827
- Likes40
₡ođ€ ₩₳₹M retweeted
⚠️ Nginx Buffer Overflow Vulnerability Allows Attackers to Execute Arbitrary Code – PoC Released
Source: cybersecuritynews.com/nginx-…
A high-severity heap buffer overflow in NGINX Plus and NGINX Open Source can let unauthenticated attackers crash worker processes and, under certain conditions, run arbitrary code.
Tracked as CVE-2026-42533, the flaw affects configurations that use regex-based map directives or non-cacheable variables in string expressions, and it is especially dangerous when the Stream module’s ssl_preread feature processes crafted TLS traffic before authentication.
An attacker who can send crafted HTTP or TLS requests may trigger a heap buffer overflow in the NGINX worker process, forcing a restart.
#cybersecuritynews
₡ođ€ ₩₳₹M retweeted
Unpatched Fastjson Vulnerability Exploited in Attacks securityweek.com/unpatched-f…
₡ođ€ ₩₳₹M retweeted
First-Ever 1- Click Android 17 Exploit Allows Attackers to Gain Full Control Over Your Android Phone
Source: cybersecuritynews.com/androi…
A full-chain exploit dubbed "IonStack" demonstrates how a single malicious URL click can hand attackers complete control over an Android device.
The proof-of-concept, described as the world's first public Android 17 root demo, chains two zero-day vulnerabilities spanning Firefox and the Linux kernel to achieve remote code execution and privilege escalation without further user interaction.
The exploit chain works by first compromising the Firefox renderer process through the browser flaw, then pivoting to the underlying Linux kernel (which powers Android) to break out of sandbox restrictions entirely.
#cybersecuritynews #android
₡ođ€ ₩₳₹M retweeted
🛡️ WinRAR Vulnerability Could Allow Attackers to Take Control of Your Computer
Source: cybersecuritynews.com/winrar…
WinRAR 7.23 addresses a newly disclosed heap overflow vulnerability in the RAR5 recovery volume processing code, tracked as CVE-2026-14191. Closing a memory-corruption flaw that could be triggered by malicious recovery volume (.rev) data and potentially lead to application crashes or further exploitation.
WinRAR 7.23 is a security-focused maintenance release that primarily fixes two vulnerabilities impacting archive handling and extraction safety. The most critical issue is a heap overflow in the RAR5 recovery volume data reconstruction logic, which affects WinRAR, command-line RAR, and UnRAR components.
#cybersecuritynews
₡ođ€ ₩₳₹M retweeted
Microsoft Outlook Bug Removes Copilot Button for Windows Users
Source: cybersecuritynews.com/outloo…
A software defect in classic Outlook for Windows caused Copilot Chat and Copilot entry points to vanish for affected users, with Microsoft confirming the issue was tied to specific Basic-tier Copilot licenses.
The bug has since been resolved through a server-side fix, but it disrupted workflows for users relying on AI-assisted email management.
After Classic Outlook for Windows updated to build 20026.20182 and higher, users with a Copilot Chat (Basic) license lost access to Copilot Chat and all Copilot entry points within the application.
#cybersecuritynews
₡ođ€ ₩₳₹M retweeted
Alleged Scattered Spider Member Extradited to the US for His Role in Hacking 100+ Networks
Source: cybersecuritynews.com/allege…
A dual U.S.-Estonian citizen accused of belonging to the notorious Scattered Spider hacking collective has been extradited from Finland to face federal charges in the Northern District of Illinois, the Department of Justice announced Tuesday.
Peter Stokes, 19, was arrested by Finnish authorities in April under an Interpol Red Notice and extradited to the United States last week.
He appeared in federal court in Chicago on Tuesday, where he was ordered held in law enforcement custody. A criminal complaint, unsealed the same day, charges Stokes with conspiracy, computer intrusion, and fraud.
#cybersecuritynews
₡ođ€ ₩₳₹M retweeted
🌐 Shodan — Search Engine for Internet-Connected Devices 🔎
Shodan helps security professionals discover internet-facing devices, services, and technologies to better understand their organization's external exposure. It's a valuable resource for security assessments, asset visibility, and cybersecurity research.
Understanding what is publicly accessible is the first step toward reducing risk and improving your security posture.
💬 Comment "SHODAN" if you want to learn more about internet exposure and security research! 🚀
#Shodan #CyberSecurity #InfoSec #NetworkSecurity #OSINT #SecurityResearch
₡ođ€ ₩₳₹M retweeted
Anthropic's Claude Code Reportedly Uses Hidden Code to Detect Chinese Users
Source: cybersecuritynews.com/anthro…
A Reddit user detailed findings on June 30, 2026, claiming to have reverse-engineered Claude Code while attempting to restore a disabled remote control feature in version 2.1.196. During that process, he discovered obfuscated code that had been silently present since version 2.1.91, released on April 2, 2026, with no mention in the release notes.
According to the disclosure, the code performs a multi-factor check whenever a proxy is detected. It reads the system's timezone to determine whether it matches Asia/Shanghai or Asia/Urumqi, and simultaneously inspects the proxy URL against a hardcoded list of Chinese domains and known Chinese AI lab hostnames.
#cybersecuritynews
₡ođ€ ₩₳₹M retweeted
New Claude Code Attack Allows Attackers to Take Full Control of Developers’ Systems
Source: cybersecuritynews.com/new-cl…
A proof-of-concept attack that shows how a completely clean-looking GitHub repository can trick AI-powered coding agents like Claude Code into silently opening a reverse shell on a developer’s machine, without a single line of malicious code ever appearing in the repository.
Published on June 25, 2026, the proof-of-concept (PoC) attack targets agentic coding tools such as Claude Code and exploits indirect prompt injection, a technique that embeds malicious instructions in external content the AI agent processes, rather than in direct user input.
The result is catastrophic: a fully interactive shell running under the developer's own user privileges, with access to every secret in the environment, from ANTHROPIC_API_KEY to AWS_SECRET_ACCESS_KEY and GITHUB_TOKEN.
#cybersecuritynews
₡ođ€ ₩₳₹M retweeted
🚨 New Microsoft Defender Zero‑Days Actively Exploited in the Wild
Source: cybersecuritynews.com/micros…
Two newly disclosed Microsoft Defender vulnerabilities are being actively exploited in the wild, enabling local attackers to elevate privileges to SYSTEM and potentially disrupt endpoint protection across Windows environments.
The bugs, tracked as CVE‑2026‑41091 (Elevation of Privilege) and CVE‑2026‑45498 (Denial of Service), were published on May 19, 2026, and affect core Microsoft Defender components used across all supported Windows versions.
The U.S. Cybersecurity and Infrastructure Security Agency has added both CVE‑2026‑41091 and CVE‑2026‑45498 to its Known Exploited Vulnerabilities (KEV) Catalog, underscoring confirmed in‑the‑wild abuse.
#cybersecuritynews #Windows
₡ođ€ ₩₳₹M retweeted
⚠️ Critical Chrome Vulnerabilities Enable Remote Code Execution Attacks – Patch Now!
Source: cybersecuritynews.com/critic…
Google has released an urgent security update for Chrome, addressing 16 vulnerabilities, including two rated Critical, that could allow attackers to execute arbitrary code on affected systems.
The Stable channel has been updated to 148.0.7778.178/179 for Windows and Mac, and 148.0.7778.178 for Linux, with the rollout expected to complete over the coming days.
Use-after-free bugs are particularly dangerous because they allow threat actors to manipulate freed memory regions, often leading to full system compromise when successfully chained with other exploits.
#cybersecuritynews #Chrome
First Public macOS Kernel Exploit on Apple M5 Prepared Using Mythos Preview in Five Days cybersecuritynews.com/first-… via @The_Cyber_News
Breaking!
cybersecuritynews.com/first-…
₡ođ€ ₩₳₹M retweeted
Hi Everyone,
A Very Important Disclosure- Supply Control.
To Prevent Initial Pump and Dump, We purchased 8.56% From the open market,
Out of which, we will be locking away 5.56% again to affirm our commitment towards the project for 4 years, making our total locked supply at 10.26%~ 102.6 Million $OFFCHAIN Tokens.
The Remaining 3%, that we will be holding, would be spread across wallets and exclusively used for any Listing Requirements, Giveaways & Airdrops, And To Fund Further Development.
As Costs of our API's to enable SMS and Offline payments are expensive, we will also be dedicating all the creator rewards towards the Maintainence and operations of the service.
We Are Here to onboard the next billion people directly to Solana and we are the only project to have our tech stack ready for the same, hence supply control was very very necessary.
Also, Since we've now locked 10% supply, we're eligible for Pump Fun Grant, we would be reaching out to @PumpFun team and discuss all the possible opportunities with them as well.
We will always strive hard to ensure there is no doubt around our product, feel free to test and try it out now. And we will ensure to always be transparent with our community.
With Love
Team Offchain.
₡ođ€ ₩₳₹M retweeted
QT with your Halloween Couple art
Artistic Challenge: Halloween Couples 🎃👻
Are you ready to showcase your creativity? Use any AI art tool to create a captivating Halloween couple! Whether it’s spooky, cute, or fantastical, let your creativity shine through. Post your masterpiece in the comments or as a quote post, and collect the most likes to win the challenge! Remember, you can share the same image in both the comments and the quote post.
Let's make this Halloween-themed challenge spooktacular! ✨
₡ođ€ ₩₳₹M retweeted
Boy George Reinvents ’80s Era Classics with Culturally Diverse Music: #boygeorgetour #boygeorge #thebaycaresound #vangelispolydorou #rockatnight #rockatnightmagazine #clearwaterfl rockatnight.com/2024/09/boy-…
