Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

‼️🚨 Security researcher ggwhyp demonstrated a full-chain Firefox exploit on Windows. He opens an HTML page, Firefox runs the code, cmd.exe spawns, Calculator opens. Signature of a browser-to-OS exploit. Prepared for Pwn2Own. ZDI rejected it. According to the researcher, it was responsibly disclosed to Mozilla.

International Cyber Digest

201,014 subscribers

207,134 views • 3 months ago •via X (Twitter)

News & Politics Science & Technology

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

TrendAI Zero Day Initiative

13,635 views • 9 months ago

🚨#BREAKING: According to FBI officials, the Trump rally shooting is being investigated as an attempted assassination and a potential act of domestic terrorism. The suspected shooter had been rejected from a high school rifle club, according to two former team members as He was asked not to come back because he was such a bad shot; it was considered dangerous," said one of the team members.

🚨#BREAKING: According to FBI officials, the Trump rally shooting is being investigated as an attempted assassination and a potential act of domestic terrorism. The suspected shooter had been rejected from a high school rifle club, according to two former team members as He was asked not to come back because he was such a bad shot; it was considered dangerous," said one of the team members.

R A W S A L E R T S

5,295,585 views • 2 years ago

🚨HUGE: SUI'S LATEST MILESTONE OPENS THE DOOR TO INSTITUTIONAL PARTICIPATION The Chicago Mercantile Exchange (CME) will officially launch trading for Sui futures on May 4th... ... a milestone which may cause a wave of institutional participation when it comes to the $SUI token itself. According to CoinDesk, daily notional volume on CME's growing suite of crypto offerings is already at ~$8 billion.

🚨HUGE: SUI'S LATEST MILESTONE OPENS THE DOOR TO INSTITUTIONAL PARTICIPATION The Chicago Mercantile Exchange (CME) will officially launch trading for Sui futures on May 4th... ... a milestone which may cause a wave of institutional participation when it comes to the $SUI token itself. According to CoinDesk, daily notional volume on CME's growing suite of crypto offerings is already at ~$8 billion.

BSCN

13,757 views • 4 months ago

🌶️ Spicy take: Codex is better at animation than Claude 1. Gave Codex HTML of a page (39,000 lines of code) 2. Told it to recreate the page pixel perfectly 3. Verified it was pixel perfect, told it animate with Remotion like a promo video 4. Three short prompts later...

🌶️ Spicy take: Codex is better at animation than Claude 1. Gave Codex HTML of a page (39,000 lines of code) 2. Told it to recreate the page pixel perfectly 3. Verified it was pixel perfect, told it animate with Remotion like a promo video 4. Three short prompts later...

Jason Zook

48,163 views • 1 month ago

Slightly odd. In April Charlie Kirk appears on Bill Maher’s Club Random. It opens with a discussion of Kirk having to have security. However on Maher’s channel the part where they both discuss using Israelis for their security is edited out. It remains on Kirk’s YouTube channel

Slightly odd. In April Charlie Kirk appears on Bill Maher’s Club Random. It opens with a discussion of Kirk having to have security. However on Maher’s channel the part where they both discuss using Israelis for their security is edited out. It remains on Kirk’s YouTube channel

Sean Padraig McCarthy

3,103,133 views • 11 months ago

🤯 Mind officially blown: I recorded a screen capture of a task (looking for an apartment on Zillow). Gemini was able to generate Selenium code to replicate that task, and described everything I did step-by-step. It even caught that my threshold was set to $3K, even though I didn't explicitly select it. 🤯🔥 "This code will open a Chrome browser, navigate to Zillow, enter "Cupertino, CA" in the search bar, click on the "For Rent" tab, set the price range to "Up to $3K", set the number of bedrooms to "2+", select the "Apartments/Condos/Co-ops" checkbox, click on the "Apply" button, wait for the results to load, print the results, and close the browser."

🤯 Mind officially blown: I recorded a screen capture of a task (looking for an apartment on Zillow). Gemini was able to generate Selenium code to replicate that task, and described everything I did step-by-step. It even caught that my threshold was set to $3K, even though I didn't explicitly select it. 🤯🔥 "This code will open a Chrome browser, navigate to Zillow, enter "Cupertino, CA" in the search bar, click on the "For Rent" tab, set the price range to "Up to $3K", set the number of bedrooms to "2+", select the "Apartments/Condos/Co-ops" checkbox, click on the "Apply" button, wait for the results to load, print the results, and close the browser."

👩‍💻 Paige Bailey

899,757 views • 2 years ago

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment

c0c0n2026

10,386 views • 3 months ago

The Athletics are the favorites to sign SS Johenssy Colome for around $2 million when a new international signing period opens on January 15, according to sources. Colome comes from a family with MLB pedigree. “He is one of the best in this class,” a scout said.

The Athletics are the favorites to sign SS Johenssy Colome for around $2 million when a new international signing period opens on January 15, according to sources. Colome comes from a family with MLB pedigree. “He is one of the best in this class,” a scout said.

Francys Romero

51,857 views • 7 months ago

Substance Abuse Clinic in Minneapolis has a QR code in the window that leads to a google forms page, and on page 2 it asks people to enter their social security number. This is the clinic Ilhan Omar said would be receiving the $1.4M that was blocked. When has a person ever needed to submit their SOCIAL SECURITY NUMBER into a GOOGLE FORM?!

Substance Abuse Clinic in Minneapolis has a QR code in the window that leads to a google forms page, and on page 2 it asks people to enter their social security number. This is the clinic Ilhan Omar said would be receiving the $1.4M that was blocked. When has a person ever needed to submit their SOCIAL SECURITY NUMBER into a GOOGLE FORM?!

Angela Rose

73,204 views • 3 months ago

Microsoft's new Outlook takes more than 10 seconds to open an email via notifications, while Outlook Classic opens instantly on Windows 11! The funniest part? If I ignore the notification, open Outlook manually, find the email myself, and click it, I can finish faster than the notification flow. It's all because Outlook for Windows is literally Microsoft Edge running Outlook .com in a browser window. New Outlook runs through WebView2 with around 10 separate processes: GPU process, service worker, utility processes, manager, and more. It uses roughly 490MB to 636MB RAM while idle, compared to Outlook Classic sitting around 117MB to 148MB. CPU usage is also worse: around 4% idle on new Outlook versus under 1% on Classic in my testing. Microsoft shut down Mail and Calendar, keeps pushing enterprises toward this web wrapper, and still wants people to believe it is the future of email on Windows. SHAME!

Microsoft's new Outlook takes more than 10 seconds to open an email via notifications, while Outlook Classic opens instantly on Windows 11! The funniest part? If I ignore the notification, open Outlook manually, find the email myself, and click it, I can finish faster than the notification flow. It's all because Outlook for Windows is literally Microsoft Edge running Outlook .com in a browser window. New Outlook runs through WebView2 with around 10 separate processes: GPU process, service worker, utility processes, manager, and more. It uses roughly 490MB to 636MB RAM while idle, compared to Outlook Classic sitting around 117MB to 148MB. CPU usage is also worse: around 4% idle on new Outlook versus under 1% on Classic in my testing. Microsoft shut down Mail and Calendar, keeps pushing enterprises toward this web wrapper, and still wants people to believe it is the future of email on Windows. SHAME!

Windows Latest

101,801 views • 2 months ago

Although it is every pub’s own decision on whether they prefer to use a sparkler or not, we do recommend using one for our beer. It's good to see Daf at The Park Crescent, Brighton agrees. It softens and opens the flavours giving an attractive head of beautiful beery foam.

Although it is every pub’s own decision on whether they prefer to use a sparkler or not, we do recommend using one for our beer. It's good to see Daf at The Park Crescent, Brighton agrees. It softens and opens the flavours giving an attractive head of beautiful beery foam.

Timothy Taylor's Brewery

26,531 views • 1 year ago

As a messianic narcissist like Putin, Elon Musk detests “Western Civilization” because it incorporates the concept of empathy. He says caring about people is an “exploit” and a “bug.” Isn’t this what we used to call “evil” or am I remembering that wrong?

As a messianic narcissist like Putin, Elon Musk detests “Western Civilization” because it incorporates the concept of empathy. He says caring about people is an “exploit” and a “bug.” Isn’t this what we used to call “evil” or am I remembering that wrong?

Jim Stewartson, Antifascist 🇨🇦🇺🇦🏴‍☠️🇺🇸

186,794 views • 1 year ago

They told you it was just an acceptance speech. They told you to applaud and move on. But what if Jim Carrey didn't come to collect an award he came to deliver a verdict, and the silence that followed wasn't respect... it was shock. Here's what they don't tell you: Jim Carrey didn't just thank Hollywood, he indicted it. In a room full of stars, producers, and power brokers, he spoke a truth so dangerous the air left the building: Kidnapping children is not what great nations do. He didn't say it quietly. He declared it. And in that moment, the mask of entertainment slipped, and the monster beneath was named. That silence wasn't awe. It was tension. It was the sound of a system recognizing one of its own had broken the code. Celebrities aren't supposed to mention the unmentionable the trafficking, the corruption, the war crimes dressed as patriotism. Carrey didn't just cross a line. He erased it.

They told you it was just an acceptance speech. They told you to applaud and move on. But what if Jim Carrey didn't come to collect an award he came to deliver a verdict, and the silence that followed wasn't respect... it was shock. Here's what they don't tell you: Jim Carrey didn't just thank Hollywood, he indicted it. In a room full of stars, producers, and power brokers, he spoke a truth so dangerous the air left the building: Kidnapping children is not what great nations do. He didn't say it quietly. He declared it. And in that moment, the mask of entertainment slipped, and the monster beneath was named. That silence wasn't awe. It was tension. It was the sound of a system recognizing one of its own had broken the code. Celebrities aren't supposed to mention the unmentionable the trafficking, the corruption, the war crimes dressed as patriotism. Carrey didn't just cross a line. He erased it.

IRISH PATRIOT

659,716 views • 7 months ago

A guy in Vancouver built an entire operating system inside a Chrome tab. By himself. Over six years. His personal website is the OS. You open and a Windows-style desktop loads. File explorer. Start menu. Taskbar. You can drag in a zip and extract it. You can play DOOM. You can play Quake III Arena. You can boot Linux from an ISO. You can run Stable Diffusion locally for image generation. You can open a Python terminal. You can edit code in Monaco, the same engine that powers VS Code. All of it runs in your browser tab. Nothing installs. His name is Dustin Brett. Self-taught engineer. Father. Husband. 4,473 commits. All his. He had to swap the Windows icon for the π symbol because of legal pressure. The repo has 12,883 stars. MIT license. His hosting bill is one dollar a month. A single Cloudflare CDN does the rest. This is what the open web was built for. (Link in the comments)

A guy in Vancouver built an entire operating system inside a Chrome tab. By himself. Over six years. His personal website is the OS. You open and a Windows-style desktop loads. File explorer. Start menu. Taskbar. You can drag in a zip and extract it. You can play DOOM. You can play Quake III Arena. You can boot Linux from an ISO. You can run Stable Diffusion locally for image generation. You can open a Python terminal. You can edit code in Monaco, the same engine that powers VS Code. All of it runs in your browser tab. Nothing installs. His name is Dustin Brett. Self-taught engineer. Father. Husband. 4,473 commits. All his. He had to swap the Windows icon for the π symbol because of legal pressure. The repo has 12,883 stars. MIT license. His hosting bill is one dollar a month. A single Cloudflare CDN does the rest. This is what the open web was built for. (Link in the comments)

Nav Toor

72,629 views • 1 month ago

one of my favorite ways to use claude code skills right now - combining remotion with claude-in-chrome for motion video creation. the workflow is addictive. the clip you see here was produced with minimal prompting effort let me know if you would like me to write a full break down of this process. you describe to claude code what you want, claude code writes the remotion components, opens the remotion studio (via browser) with claude-in-chrome, sees the actual rendered output, and iterates on it in real time. need the arrows pointing to the center of the bubbles instead of the edge? just say it. need the layout shifted to the center? say it. claude sees the preview, adjusts the code, re-renders. then when you're happy you tell claude code to render the final video. but skills are what make this possible. remotion knowledge + browser automation + the taste to iterate visually. no copy pasting screenshots back and forth. no "can you try moving it 10px to the right" over chat. it just looks and fixes. this is the kind of workflow that makes you realize how much further claude code can go beyond just writing code in a terminal. i didn't touch any code while working on the clip you see if you haven't tried combining skills together like this - start experimenting. the skills combos is where the magic is at.

one of my favorite ways to use claude code skills right now - combining remotion with claude-in-chrome for motion video creation. the workflow is addictive. the clip you see here was produced with minimal prompting effort let me know if you would like me to write a full break down of this process. you describe to claude code what you want, claude code writes the remotion components, opens the remotion studio (via browser) with claude-in-chrome, sees the actual rendered output, and iterates on it in real time. need the arrows pointing to the center of the bubbles instead of the edge? just say it. need the layout shifted to the center? say it. claude sees the preview, adjusts the code, re-renders. then when you're happy you tell claude code to render the final video. but skills are what make this possible. remotion knowledge + browser automation + the taste to iterate visually. no copy pasting screenshots back and forth. no "can you try moving it 10px to the right" over chat. it just looks and fixes. this is the kind of workflow that makes you realize how much further claude code can go beyond just writing code in a terminal. i didn't touch any code while working on the clip you see if you haven't tried combining skills together like this - start experimenting. the skills combos is where the magic is at.

elvis

46,494 views • 6 months ago

In Russia’s Krasnodar region, security forces violently detained a Belarusian citizen. He was accused of allegedly planning to blow up an administrative building in Novorossiysk on orders from Ukrainian intelligence. According to the FSB, the Belarusian was gathering information on military facilities and preparing to sabotage a Russian military assembly point.

In Russia’s Krasnodar region, security forces violently detained a Belarusian citizen. He was accused of allegedly planning to blow up an administrative building in Novorossiysk on orders from Ukrainian intelligence. According to the FSB, the Belarusian was gathering information on military facilities and preparing to sabotage a Russian military assembly point.

NEXTA

513,344 views • 1 year ago

🍒 i received a lot of greetings yesterday.. jeonghan was definitely the first one to send [a greeting], personally on kkt 🍒 jeonghan sent it first~ he said he set an alarm for it

🍒 i received a lot of greetings yesterday.. jeonghan was definitely the first one to send [a greeting], personally on kkt 🍒 jeonghan sent it first~ he said he set an alarm for it

쿱한

42,098 views • 9 days ago