Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).

175,950 görüntüleme • 2 yıl önce •via X (Twitter)

10 Yorum

Alex profil fotoğrafı
Alex2 yıl önce

Given that I don't see myself as particularly intelligent and yet managed to achieve this, it stands to reason that more skilled individuals are surely on the brink of similar discoveries. This suggests that Microsoft may need to revise their security advisories shortly.

John Hammond profil fotoğrafı
John Hammond2 yıl önce

NICE!!!

Dex604 profil fotoğrafı
Dex6042 yıl önce

🤔 I don't it... Didn't you already published a PoC on Github ?

Alex profil fotoğrafı
Alex2 yıl önce

Without the RCE, yes.

Kristiyan Boykov profil fotoğrafı
Kristiyan Boykov2 yıl önce

I can only imagine the impact... q.q

︎ ︎ profil fotoğrafı
︎ ︎2 yıl önce

@HaifeiLi

vT15” profil fotoğrafı
vT15”2 yıl önce

Congrats 🎉

Pj profil fotoğrafı
Pj2 yıl önce

Single click takeover?

Alex profil fotoğrafı
Alex2 yıl önce

NTLM Leak can be 0-click (thx @johntroony) - will update the repo tonight.

H4cker profil fotoğrafı
H4cker2 yıl önce

W0W congratulations 🎊

Benzer Videolar

OpenAI and Anthropic news roundup (Week 18, 2026) OpenAI open-sourced Symphony spec for Codex orchestration, published "Our principles" post, announced amended Microsoft partnership, achieved FedRAMP Moderate authorization, posted commitment to community safety, brought OpenAI models, Codex, and Managed Agents to AWS, shared cybersecurity action plan, posted Stargate compute infrastructure update, published "Where the goblins came from" post, posted Auto-review write-up for Codex, introduced Advanced Account Security, announced DevDay 2026, repositioned Codex as personal assistant for everyday work, launched Codex setup import, added Codex pets, announced GPT-5.5 party for next week, shared GPT-5.5 one-week launch metrics, and rolled out 360 worlds in ChatGPT Images on web, plus discovered Custom dictionary feature in development, ChatGPT search EU recipient numbers, confirmed new model selector in composer, and updated privacy policy with marketing cookies on by default for free users Anthropic opened Sydney office with new General Manager, launched Claude for Creative Work with new connectors, Claude Code can now send push notifications to your phone, published Introspection Adapters research, BioMysteryBench evaluation, "How people ask Claude for personal guidance" study, launched Claude Security in public beta, and preparing for Code with Claude developer conference next week, plus discovered "Cardinal" stats feature in development and internal red teaming for Claude Jupiter V1 P, and more

Tibor Blaho

12,254 görüntüleme • 4 ay önce

Microsoft is deceiving you by inflating its AI empire with money it handed its OWN customer first. They sold Wall Street a $37 billion AI business, then went silent the moment its own filing showed where that money came from. The line sits in the annual report for fiscal 2026: Microsoft recorded $24.1 billion of revenue from commercial arrangements with OpenAI, including revenue sharing payments. If you run that figure against Microsoft's own AI disclosures you'll find that OpenAI made up more than half, and likely around 70%, of everything the company counts as AI sales. ONE customer. A Microsoft spokesperson confirmed the figure covers all sales and revenue share from OpenAI. The 70% comes by assuming Microsoft's AI run rate kept growing at the 123% pace the company itself reported in March, which is the company's own optimistic math turned around on it. Now follow where that money starts: Microsoft has put around $12 billion into OpenAI since 2019. OpenAI spends its cash on computing power, and Microsoft is the cloud provider selling it. So the money leaves as an investment and comes back as an Azure bill. Microsoft then books that bill as AI revenue and shows it to investors as proof the AI business is "working." Microsoft invests in OpenAI -> OpenAI buys Microsoft compute -> Microsoft records the payment as AI revenue -> the AI growth story goes to Wall Street And a chunk of it never actually arrived. The same filing shows $6 billion of accounts receivable from OpenAI as of June 30. That is $6 billion of AI revenue Microsoft booked and had not been paid when the year closed. Now here's where it gets really concerning for anyone holding the stock... Microsoft has told the public how big its total AI business is exactly twice. Once for the quarter ending December 2024, when it said the unit was on pace for more than $13 billion a year. And once for the quarter ending March 2026, when Satya Nadella put it on pace for $37 billion. That $37 billion number went everywhere. It was the headline proof that Microsoft had won the AI race. Then fourth quarter earnings arrived, and Microsoft did NOT update it. The company that had been announcing the figure as its own scoreboard stopped announcing the figure. In the same stretch, the filing landed showing where most of it came from. So what is actually left underneath? The full year AI business ran near $34 billion. Take OpenAI out and roughly $10 billion remains. Microsoft has spent about $261 billion on capital expenditure since the start of 2022. That is the scale of the bet against what the rest of the AI business currently brings in. And the one customer holding it up is walking further away every quarter. In October, Microsoft's stake in OpenAI dropped to 27% from 32.5%. In April the partnership was rewritten so OpenAI can sell its products across any cloud it likes, which is how Amazon got a seat at the table. The exclusivity that made this arrangement valuable is gone. The compute bill and the unpaid $6 billion are still on Microsoft's books. Nadella spent two years telling the market Microsoft built the largest AI business in software. The filing shows one client bought most of it, on credit, using money Microsoft partly supplied. So watch the next earnings call: If Microsoft puts a fresh total AI number back on the board, the business found customers beyond OpenAI. If you hear a lot about AI momentum and never hear what it adds up to, you already know why the number went missing. But nonetheless, how is something like this even legal?

Ricardo

24,389 görüntüleme • 1 ay önce

🌋 A Mega thread on MegaETH Terminal & points ⚠️No exact details on rewards 🪙But as per tokenomics 2.5% supply for mainnet campaign 📅Season 1 - 28 April to 23 June 2026 🎁At the end of a season, there will be rewards for eligible users 🗓️8 weeks 🪙Points calculated weekly activity Tuesday snapshot 🪙Points Distributed Wednesday 🪙Points based on app interaction ⚠️All apps & interactions won't give points 🌊Wave 1 ends on 30April 👾6 apps live 👇Steps 1️⃣ Bridge 🔗 ✅Bridge some $ETH & $USDM 2️⃣Terminal Sign up 🔗 ✅Signup with wallet 3️⃣Explorer Terminal ✅Check all options ✅Click on icons on map to reveal apps ✅6 icons reveal 6apps ✅Interact with them for weekly points 4️⃣ Hit 🔗 ✅Sign up with email ✅Link account to terminal, so points update for account ✅Deposit some $USDM ✅Start playing by selecting amount u want to use & click icon ✅If u lucky u win or u loose ✅Close position when u want ⚠️Don't do with big funds 5️⃣ Kumbaya 🔗 ✅Connect wallet ✅Use Swap ✅Add liquidity ✅Sign up for launchpad ✅It will create sub wallet ⚠️Don't forget to link wallet to terminal, with button on top ✅Interact with launchpad 6️⃣Interact with other apps ✅ Monster ITS TopStrike NextRare 💥Done 🚀 If u participated in sale u get booster on points 🖼️ If u have NFTs u can join clam 🌉 If u bridged funds already, u may have some points accumulated ⚠️Don't expect big rewards, as pool is small for 8 weeks 🤷Not sure if 2.5% is got S1 or for all mainnet campaigns 💙Like 🔁RT

CryptoTelugu

54,637 görüntüleme • 4 ay önce

🙏🏻💔URGENT APPEAL🙏🏻💔 We hope you have all had an amazing Christmas celebrating with friends and family🎄 While the team has enjoyed a couple of days off, we are now desperately trying to catch up behind the scenes 😅 Which leads us onto our next appeal 💔 Sadly, over the Christmas break, more dogs have been dumped in the pound either by the dog catcher or by owners 😞💔 The pound again is nearly full, and the rescuer is struggling to just cover their food simply to keep them alive. We recently helped our rescuers to spay neuter and release 30 dogs from the pound (we managed to find space and place a couple in pensions too) but this is just a drop in the ocean. We will again in the new year launch another spay and release campaign. Our rescuer has asked if we can help save 5 new dogs who have arrived in the pound. 2 smaller size ones and 3 lab mix types (2 black and 1 brown) All 5 are so sweet, and she has managed to secure space in the shelter for them if we agree to take them on. That means we need to raise and pay up front their preps to get them released and cover their food, etc I know Christmas has just passed, and money is always tight after the celebrations, but if everyone who could afford £1 donated, we could change the fate of these 5 dogs. Please, if you can help us save another 5 souls before 2024 passes, please use ref POUND: Bank and PayPal Details Bank details: Name: Second Chance Dog Rescue CIC Account Number: 53479449 Sort Code: 608371 Thank you, as always, everyone, for your support❤️

Second Chance Dog Rescue

15,804 görüntüleme • 1 yıl önce

After two incredible years serving on staff in vocational ministry, I’ve made the decision to step away and transition into a new professional chapter. The flexibility this role has provided over the last couple of years has been an absolute lifeline for my family - especially as we navigated the complex medical needs of our daughter, born in late 2024. I am profoundly grateful for that time and space. Now, I’m looking to step back into a space that aligns directly with how I’m wired: High-Level Communication: Crafting workflows both internally and externally that connect and build community. Project & Systems Management: Designing, optimizing, and overseeing complex workflows. Detail-Oriented Execution: Diving into the micro-details to deliver macro results. Stepping into the unknown with three kids at home is certainly nerve-wracking, but it’s equally exciting. My background is diverse—I’ve managed social media accounts, worked in customer service as a tech specialist, been a podcast host of a major sports show, edited both long form and short form videos, and the list really goes on and on. What I’m looking for: I am completely open to various industries and am seeking remote opportunities - whether that looks like contract projects, part-time work, or a full-time role if the fit is right. The main priority is maintaining the flexibility required to continue prioritizing my daughter’s care. If you have an opening, know of an opportunity, or just want to swap ideas, I’d love to connect! 📥 Reach out directly via DM or 📧 Email me at: [email protected] Let’s see what’s out there! 🚀

Kyle Yates

14,510 görüntüleme • 3 ay önce

🇲🇦 🇳🇵 UPDATE — Nepal flood: Nepal's Tourism Board says 384 travelers are so far unaccounted for after Wednesday's (Aug. 26) Bhote Koshi flash flood — 291 foreign nationals (including 3 Americans, plus Indian, British, Malaysian, Dutch, South African and Australian tourists) and 93 Nepalis, linked to nine trekking agencies. Crucially, the board stresses this is a preliminary figure: authorities are still verifying who is safe versus truly missing, so "unreachable" doesn't yet mean confirmed casualties — many may be stranded and out of contact. At least 8–9 deaths are confirmed so far. The cause is now established: the AP reports the flood was triggered by an ice-and-rock avalanche, consistent with the glacial-lake outburst pattern that hit this same river in 2024 and 2025. Rescue is intense — 14 helicopters (6 army, 8 private) are flying — but high water is hampering landings. One example of the uncertainty: a bus of 38 pilgrims lost contact; 4 escaped, 34 remain unreachable. The danger isn't over. Authorities warn of continued risk along the Bhote Koshi and Trishuli corridors — a debris-dammed section upstream may not have fully drained, raising the threat of a second surge. Downstream alerts extend into India's Bihar state. Residents are told to stay off the riverbanks. Developing: figures are preliminary and being cross-checked; the toll of confirmed dead may rise as crews reach cut-off areas. Sources: AP; ABC News; CNN; Nepal Tourism Board; The Tourism Times; Nepal Army

🔥🗞The Informant

103,189 görüntüleme • 24 gün önce

Abiy’s Mixed Signals = Strategy to Confuse, Not Convince 🇪🇹❓ While pretending to preach peace, Abiy Ahmed continues his classic flip-flop tactics — saying one thing, doing another. 🔍 But Eritrea sees through the fog. Here's the truth 👇 🚨 Facts vs. Abiy’s Fiction 🟥 “Ethiopia won’t start war with Eritrea,” says Abiy — 👉 But he’s the one fueling war propaganda daily via state media. 🟨 Claims to “respect Eritrea’s sovereignty” — 👉 Yet demands military base access to Eritrean ports & pushes stone-age “give and take” logic. 🟩 Says “Ethiopia is too big to fall” — 👉 But his army struggles in Amhara, Oromia, and Tigray — civil unrest is crippling the nation. 🟥 Pretends to be a peacemaker — 👉 But refuses to accept the Final & Binding EEBC ruling (2002) on Eritrea’s internationally recognized borders. 🇪🇷 Eritrea’s Position is Clear & Consistent ✅ Wants Peace in the Horn of Africa ✅ Supports good neighborliness based on sovereignty & mutual respect ✅ Offers ports for fair international commercial terms — not for Abiy’s delusional empire dreams ✅ Will NOT tolerate threats to its land, sea, or dignity 💣 But Let the World Be Warned: 🔻 Eritreans are united, disciplined, and alert 🛡️ Eritrea will crush any miscalculation against its sovereignty ⚠️ Abiy’s confuse-and-blame strategy won't work — not now, not ever ✊🏾 Truth > Propaganda | Peace > Provocation | Action > Lies 📌🛑 Eritrea will not kneel to threats, fake diplomacy, or military blackmail 🔥 Awet n’Hafash! VIDEO: ______________ 🟥 #HandsOffEritrea 🇪🇷 | 🟩 #PeaceInTheHorn | 🟦 #ExposeAbiy 🟨 #RedSeaSovereignty | ⚖️ #RespectBorders | 📢 #SayNoToWar #Fano #Tigray #Ethiopia #Egypt #Somalia #Sudan

G. Drar

17,286 görüntüleme • 1 yıl önce

Omije Ojumi is trending because gospel artiste Bunmi Akinnaanu has passed on, after struggling with serious affliction since 2024. [Full] In 2021, a fan delivered a message prophesying her death through an affliction, asked her to pray. Ojumi blasted the fan, and reported to the police. Years later she started developing mild strange complications, which were managed at the time. Until last year when she was totally bed ridden, forcing her team to cry out for help. Industry colleagues and fans donated for her medical treatment. Yet, her nature of sickness couldn’t be explained or disclosed even to closest associates. Until October 2025 she made a public appearance at Prophet G.F David’s church. Showing she was suffering from bleeding, hip problems, and a swollen foot. He prayed for her and she walked for the first time in a year. But landed back at the clinic. Apparently, she sought more spiritual help due to the nature of the sickness. Just last week, fans started asking questions about her whereabouts or atleast, a sit-rep. Because she had gone unusually silent from social media since September 2025. Only for her brother to announce her passing last night. Confirming the 46yr old gospel sensation died on 12th January 2026, at a Lagos Hospital. She’s survived by two kids and husband. Yet her death continues to pull conversations, surrounding the nature of her sickness, or affliction and what could have been done or otherwise. However, analyzing reports and videos, her affliction seemed spiritual. As the prophet confirmed an arrow was shot. Follow Trending Explained for daily explanations!

Trending Explained

52,206 görüntüleme • 8 ay önce

I think ignoring pro-government mobilization in Iran weakens ability to provide realistic analysis. The key is to separate: -regime capacity from regime legitimacy -short-term survival from long-term stability -protest movement setback from protest movement defeat A key part of Iran’s political reality today—one that shouldn’t be ignored for the sake of wishful thinking—is that the state has managed to bring sizable pro-government demonstrations onto the streets across multiple cities, even amid its brutal crackdown. This of course does not confer legitimacy on the Islamic Republic, nor does it erase the scale of repression, the hundreds confirmed killed so far, or the horrific violence obscured by internet shutdowns. But it does matter for assessing the immediate viability of protests or the efficacy of a US military attack on the country. As of now, there are no confirmed reports of major elite splits or security-force defections, though under conditions of near-total information blackout it is impossible to gauge the depth of internal fractures. What is visible is a state that has doubled down, relying on repression and foreign intervention narratives to rally its base. This suggests that a critical mass sufficient to topple the system has not yet formed. But it would be a grave mistake to conclude from this that the Islamic Republic can simply restore the prior, already highly volatile balance that existed between itself and society. The protesters’ message to the ruling elite has been unmistakable: coercion can no longer compel consent. Fear barriers have been breached. Iranians have en mass risked bullets to demand change. The state may suppress this round of protests, but without meaningful political and economic transformation, the conditions that produced them will persist. What lies ahead won't be stability for it, but a system limping forward—more brittle and increasingly vulnerable to the next eruption of public anger.

Sina Toossi

84,051 görüntüleme • 8 ay önce

⚠️💹Little-noticed report in China Daily indicates the govt is preparing the central bank to buy bonds. This wouldn't be QE, it's money-financed fiscal expansion. Profound difference. If confirmed, everyone's going to be shouting INFLATION when this means the total opposite. 1. Report from China Daily - CCP's English language paper means it was approved. Not exactly the Peoples' Daily which is the Central Committee's mouthpiece, though still pretty official and has to be approved. 2. China Daily clearly referencing money-financed fiscal expansion and doing so on purpose. It actually makes perfect sense given the circumstances. This isn't to say it's like to work - it won't, hasn't yet. 3. While both money-financed fiscal expansion (MFFE) and QE have the central bank buying bonds, they are very different, starting with who is SELLING them. 4. This won't matter to inflation-ists who see inflation in everything. So, prepare for the next round of MONEYPRINTERGOBBRRRR bullshit. 5. The point behind MFFE is to bypass a broken banking system. CB buys bonds from central govt to finance direct spending or transfers (could be tax cuts). Instead of the CB printing fresh money and handing it over to the govt, govt borrows from the CB having to pay it back like any other bond. CB isn't a printing press, it's an external bond market. Yes, this is a distinction that matters (but won't to the inflation-ists). 6. This has been tried and at enormous scale and you won't be surprised to learn that the results were deflation not inflation. Japan's TFB and FILB in the nineties were financing upwards of 70% the size of the on-budget central govt expenditures. 7. The reason it was deflationary is the only reason this matters: it's an acknowledgement of a broken banking system. Broken banks mean deflation. Period. 8. Look at how things have progressed in China: banks increasingly in trouble, loan growth plunges, accelerating downside. Suddenly in Sept govt pledges a massive bank recapitalization plan and then...nothing. Dead silence. Chinese realized banks are a dead end, recap too big and too complicated. Therefore, work around the banks - try to - with MFFE. Just like Japan. I've been saying all along watch China's banks. Sept recap plan already confirmed big problem. This, if it happens, takes it one step further. More details on the report and what all this means here: For my breakdown on Japan's MFFE experience, that's for DDA subs. We are having an unadvertised "webinar sale" (after yesterday's webinar) which you can find here:

Jeffrey P. Snider

11,596 görüntüleme • 1 yıl önce

#COLDCARD Firmware Update # Shared Mk4 & Q New Features: 📳 PushTX: once enabled with a service provider's URL, you can tap the COLDCARD and your phone will open a webpage that transmits your freshly-signed transaction onto the blockchain. See Settings > NFC Push Tx to enable and select service provider, or your own webpage. More at pushtx org. You can also use this to broadcast any transaction found on the MicroSD card (See Tools > NFC Tools > Push Transaction). 🕵️‍♂️ Transaction Output Explorer: allows viewing all output details for larger txn (10+ output, 20+ change) before signing. Offered for large transactions only because we are already showing all the details for typical transactions. 🏷️ Setting to enable always showing XFP as first item in home menu. Enhancement: ⏫ When signing, show sum of outgoing value at top. Always show number of inputs/outputs and total change value. ⏫ Add Sign PSBT shortcut to NFC Tools menu ⏫ Stricter p2sh-p2wpkh validation checks. ⏫ Show master XFP of BIP-85 derived wallet in story before activation. Only words and extended private key cases. ⏫ Add Theya option to Export Wallet ⏫ Mention the need to remove old duress wallets before locking down temporary seed. Bugfix: 👨‍🔧 Fix PSBTv2 PSBT_GLOBAL_TX_MODIFIABLE parsing. 👨‍🔧 Decrypting Tapsigner backup failed even for correct key. 👨‍🔧 Clear any pending keystrokes before PSBT approval screen. 👨‍🔧 Display max 20 change outputs in when signing, and max 10 of largest outputs, and offer the Transaction Output Explorer if more to be seen. 👨‍🔧 Calculate progress bar correctly in Address Explorer after first page. 👨‍🔧 Search also Wrapped Segwit single sig addresses if P2SH address provided, not just multisig (multisig has precedence for P2SH addresses) 👨‍🔧 Address search would not find addresses for non-zero account numbers that had been exported but not yet seen in a PSBT. ## Mk4 Specific Changes 5.3.2 - 2024-06-26 👨‍🔧 Displaying change address in Address Explorer fails if NFC and Vdisk not enabled. ## Q Specific Changes 1.2.2Q - 2024-06-26 ⏫ Coldcard multisg export/import format detected in Scan Any QR Code. ⏫ Support newer-version QR scanner modules. 👨‍🔧 Exporting BIP-85 derived entropy via NFC was offered even when NFC disabled, leading to a Yikes error.

COLDCARD

211,534 görüntüleme • 2 yıl önce