cKure

■■■■□ 🖥️ VMkatz — Extract Windows Secrets from Virtual Machine Snapshots. An open-source incident response and security research tool that analyzes virtual machine memory snapshots and disks to extract forensic artifacts and credential material from Windows systems during authorized assessments. ✨ Features • 💾 Supports VMware, VirtualBox, QEMU/KVM, Hyper-V, and raw disk formats • 🔍 Parses VM memory snapshots and offline Windows artifacts • 🗝️ Extracts Kerberos tickets, DPAPI data, cached credentials, and other Windows secrets • 📂 Supports offline analysis of SAM, LSA secrets, cached logons, and NTDS.dit • 🔐 Includes BitLocker key extraction from supported memory snapshots • ⚡ Runs as a compact static binary suitable for virtualization hosts • 📊 Exports results in text, CSV, NTLM, and Hashcat-compatible formats • 🛠️ Designed for DFIR, malware analysis, red team labs, and authorized security assessments https://github.com/nikaiw/VMkatz

■■□□□ Thread: CrowdStrike published a blog at the beginning of the month, exposing new prompt injection techniques. This time, 18 new injection techniques have been added, bringing the project's total coverage to over 200 different injection techniques. The CrowdStrike AI security research team claims to maintain the industry's largest-scale prompt injection classification system, providing a structured hierarchical framework that clearly demonstrates the full spectrum of risks posed by artificial intelligence threats. https://x.com/i/status/2081582153884930237

■■■□□ An interesting thread 🧵 on AI iOS jailbreak. https://x.com/i/status/2081885707602366570

👩‍💻 Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilities. Technical Summary:

https://depthfirst.com/research/going-depthfirst-achieving-gitlab-rce-via-two-ruby-memory-corruption-vulnerabilities

PoC:

https://github.com/wupco/gitlab-rce-demo/tree/main

Overview:

https://depthfirst.com/gitlab-rce-oj-spill

Thread: 🧵

https://x.com/i/status/2080763568044290535

 Malicious sites use JavaScript to build malware in browser memory A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. [...] https://www.bleepingcomputer.com/news/security/malicious-sites-use-javascript-to-build-malware-in-browser-memory/

■■■■□ Open-sourcing RCE implementation for CVE-2026-42533

This is an incredibly powerful NGINX bug that provides both info leak and an out-of-bounds heap write primitives (so, yes, ASLR bypass!). F5 released the security advisory a week ago on July 15th. Fun fact: this bug appears to have been found concurrently by multiple groups. Our team at @depthfirstlabs caught it using our internal systems, right alongside CVE-2026-42530, a separate issue in NGINX’s HTTP/3 QPACK implementation. https://x.com/i/status/2080832510838337940

■■■□□ Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint. https://www.windowslatest.com/2026/07/10/you-cant-fully-disable-microsofts-gdid-windows-11-tracker-but-these-settings-limit-what-it-captures/

■■□□□ Alleged picture showing kinetic strike on AWS insurance in Bahrain.

■■■□□ E-ink tags hacking via Flipper-Zero 🐬

■■■□□ Privacy: China dumping personal video streams.

■■■■□ The Oracle scum: In 2025, Oracle’s executive vice chair, Safra Catz, spoke at the “Taboo Investing: Zionism in Tech” panel hosted by the Israeli-American Council (IAC) and openly bragged about providing “scary technology” to help the Israeli military advance its agenda in Gaza. Tech companies like Oracle, which now controls TikTok U.S.’s algorithm, is not a neutral party in this genocide. They are enabling a genocidal state, profiting from the death of millions and having unprecedented access to our data, our information and our feeds. This is who controls what you see. Keep posting about Palestine. Keep sharing what they want buried. Don’t let them silence us.

■■■□□ Kinetic attack on cyber target as IRGC Claims Destroyed Amazon’s Bahrain Data Center. https://houseofsaud.com/irgc-claims-destroyed-amazon-bahrain-data-center/

■■■□□ Samsung's threat to use private data for AI training.

■■□□□ AI security incident

■■■□□ SLM hack

■■■■■ An interesting thread on the Frag Gap (CVE-2026-53362/CVE-2026-53366)

https://blog.qwerty.or.kr/en/posts/cdf3008a-c1a4-4eca-a373-aa3a2bcf1489/

Exploit code:

https://github.com/qwerty-po/security-research/tree/cve-2026-53362/pocs/linux/kernelctf/CVE-2026-53362_lts

https://x.com/i/status/2079239619611332780

■■■■□ Purple Operations Limited has released a new offensive cyber research report covering 3 side-channel attack vectors: - PJL/SNMP printer dead drops, - ultrasonic browser-to-receiver transfer, - and SNMP trap covert channels.

■■■■□ Military Tech: 🆕 Technology to make drone invisible using AI to find the least visible pattern.

■■■□□ Cyber Warfare by Zelensky.