ππ€π€π©πππ
Open in Telegram
Free content of OFF-SEC, SANS, ec-council, INE, eLearnSecurity, udemy coupons and many more #Malware_analysis #RootSec
Show more1 773
Subscribers
+224 hours
+127 days
+2830 days
Posts Archive
#MLSecOps
#Infosec_Standards
NIST AI 800-2 (IPD):
"Practices for Automated Benchmark Evaluations of Language Models", Jan. 2026.
// This document identifies practices for conducting automated benchmark evaluations of language models and similar general-purpose AI models that output text. Evaluations of these models, often embedded into systems capable of functioning as chatbots and AI agents, are increasingly common. However, consistent practices to support the validity and reproducibility of such evaluations are only beginning to emerge. The practices presented in this document are intended to reflect best practices; where relevant, practices that are relatively less mature in ecosystem use are labeled as emerging practice
#Hardware_Security
"CVA6-CFI: A First Glance at RISC-V Control-Flow Integrity Extensions", Feb. 2026.
]-> Application class 6-stage RISC-V CPU
]-> GNU toolchain for RISC-V, including GCC
// This work presents the first design, integration, and evaluation of the standard RISC-V extensions for Control-Flow Integrity. The Zicfiss and Zicfilp extensions aim at protecting the execution of a vulnerable program from control-flow hijacking attacks through the implementation of security mechanisms based on shadow stack and landing pad primitives
Midnight Lake π | Peaceful 4K Lofi
If you love calm travel vibes, check this out π₯
Watch full 10 sec for best feel π
https://youtube.com/shorts/y8auhuD3kw0?si=dw6QV6LwWMuU2KGt
#tools
#hardening
#MLSecOps
Detecting and Monitoring OpenClaw (clawdbot, moltbot)
1β£ OpenClaw Detection Scripts
// Detection scripts for MDM deployment to identify OpenClaw installations on managed devices
2β£ OpenClaw Telemetry Plugin
// Captures tool calls, LLM usage, agent lifecycle, and message events
3β£ Advanced Cognitive Inoculation Prompt (ACIP)
// Fortifying LLMs against sophisticated prompt injection attacks
#tools
#Sec_code_review
#Offensive_security
Claude Code in a devcontainer
https://github.com/trailofbits/claude-code-devcontainer
// Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review
https://youtube.com/shorts/hCe9adUt7J4?si=8l0QPedUYV30OAln
β¨ βIf this vibe relaxed youβ¦ tap β€οΈβ
πΏ βFollow for daily peaceful escapesβ
π βMore calm travel shots coming soonβ
#tools
#exploit
#AppSec
#Fuzzing
Breaking the Sound Barrier
Part 1 - Fuzzing CoreAudio with Mach Messages
Part 2 - Exploiting CVE-2024-54529
]-> Fuzzing Tools
]-> CoreAudio Exploit POC (macOS Sequoia)
// CVE-2024-54529 (Type Confusion in CoreAudio), CVE-2025-31235 (Double Free in CoreAudio)
#tools
#Cloud_Security
1β£ Weaponizing Whitelists:
An Azure Blob Storage Mythic C2 Profile
https://specterops.io/blog/2026/01/30/weaponizing-whitelists-an-azure-blob-storage-mythic-c2-profile
]-> Azure Blob Storage C2 Profile
// The article explores how enterprise firewalls' broad Azure Blob Storage exceptions can be exploited for covert C2, introducing Mythic's "azureBlob" profile that uses container-scoped SAS tokens and blob operations for stealthy C2
2β£ Moltworker: a self-hosted personal AI agent, minus the minis
https://blog.cloudflare.com/moltworker-self-hosted-ai-agent
// Moltworker enables deploying scalable, secure AI applications on Cloudflareβs platform using Workers, Sandboxes, R2, and Browser Rendering, demonstrated through Slack integrations and open-sourced for global deployment
ExpressVPN Account
User: orlaquirke1@yahoo.co.uk
Pass: rio045866068
User: akash.toor14@hotmail.com
Pass: Prada14!
User: akash.toor14@hotmail.com
Pass: Prada14!
User: gorkov@sbb.rs
Pass: Samsung1811!
#MLSecOps
#Tech_book
"Privacy and Security for Large Language Models: Hands-On Privacy-Preserving Techniques for Personalized AI", 2026.
// This book exists at the intersection of two critical realities. First, that LLMs represent one of the most transformative technologies of our time, capable of revolutionizing everything from healthcare to education. Second, that deploying these models responsibly requires grappling with privacy and security challenges that are fundamentally different from anything weβve faced before. The stakes have never been higher, and the solutions demand both technical sophistication and ethical clarity
#Research
#IoD_Security
"A Large-Scale Evaluation Suite of Security, Resilience, and Trust for LLM-based UAV Agents over 6G Networks", 2026.
]-> Repo
// Large-scale benchmark for evaluating security, resilience, and trust of LLM-based UAV agents under realistic adversarial conditions in 6G-enabled networks, featuring layered attack taxonomies and CWE-aligned evaluation
#Analytics
"The Rise of The Bionic Hacker:
Annual Hacker-Powered Security Report",
9th Edition, 2025/2026.
// In our 9th annual Hacker-Powered Security Report, we reveal how AI is reshaping offensive security into a more continuous and contextual process, and why the future belongs to teams who treat AI not as an add-on, but as a core extension of human expertise
