Bug bounty scamming has broken out into normal infosec scene
> be JayTaelien
> security researcher
> discovered Discord zero day exploit
> send Twitch embed to victim
> something something
> massive exploit chain
> arbitrary code execution
> only requirement is victim clicking a Twitch embed
> Discord confirms 1 ClickRCE
> pays him $5,500
Dawg, someone get Discord on the horn and tell their CEO his company is a fucking piece of shit. This exploit is devastating and if this guy didn't tell them, and instead decided to weaponize it, he could have fucking destroyed end users.
All bro would have had to do is be like. "Check out this Twitch streamers clip", and destroyed their machine, executing any malware they wanted arbitrarily, stealing data, whatever.
Bro could have gone to large Discord channels, shared the link, potentially infecting thousands upon thousands of people effortlessly
He could have down more precise operations targeting prominent streamers, moderators, celebrities known to use Discord, and fucking wiped them all out with anything he chose to execute
Imagine if he sold this exploit to ransomware groups
He could have made millions of dollars, easily
Imagine if he went into a cryptocurrency Discord and the payload was a cryptodrainer. He could have drained entire communities in seconds
And they paid bro $5,500
That's absolutely sickening. JayTaelien is a fucking saint and decides a much larger payouf
ow hey guys just submitting my 15th critical for 200 million dollars all found with $.20! i do literally nothing! the money is made for me i provide no value! ow hey unrelated note anyone know why the programs are cutting bounty amounts ?
yeah hey guys im this really l33t hackerman i just submitted my 90th low report in the last 7 days to this big program! wow invited to podcast yup: ow i wonder why that program is paused what happened probably scared of the pwn i was inflicting upon their systems !
Hey @EpicGames since DOSing is back in RL ranked maybe we can bring white hat back try to get some eyes on it
"Look all I'm saying is that if the job is just yap to the models to pop vulns i mean clearly there isnt a better candidate than I"
if it isn't clear yet selling you the access to the cyber capabilities is probably the end goal at a premium.
Me and @_ChaoticV in RL duos queue like:
TommyBoy retweeted
after seeing the current state of HackerOne, I decided it was time to sit down and address the elephant in the room
blog.teknogeek.io/posts/what…
so naturally the next step is to censor prompts that are allowed to be shared on the internet due to the cybersecurity implications of doing so.
TommyBoy retweeted
Private disclosure party 🚨 "Melting the Frontier Labs" with @0xLupin.
They're dropping some wild research including how they may have compromised a frontier lab via a supply chain attack. Talk followed by food+drinks.
Comment "npm install" for the RSVP link 👇
TommyBoy retweeted
"When you find yourself typing in all caps to an AI chatbot it is probably time to touch grass" ~Tommy Tzu
"When you find yourself typing in all caps to an AI chatbot it is probably time to touch grass" ~Tommy Tzu
SHEESH @WorstWursts
Congratulations to the winners from our Live Hacking Event with @Salesforce in Tokyo! 🎉🇯🇵
First place:
Metnew (@v_metnew)
Second place:
Geluchat (@Geluchat)
Hashkitten (@hash_kitten)
kevin_mizu
Shubs (@infosec_au)
Third place:
adibou
snorlhax
Collaboration:
Aussie
Baguette
Best Hacker:
Aussie
Baguette
An incredible week of collaboration, creativity, and impact from the global security researcher community.
In the agentic AI era, live collaboration helps organizations identify and remediate vulnerabilities faster.
Thank you to everyone who participated and made the internet safer. 💻🔍











