Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Watch us open the camera and uncover the anonymous identity behind Tor browser: We published the writeup for the browser RCE in IonStack. Mythos reported 271 bugs in Firefox 150 but still missed this one. And the Tor Browser is also affected by CVE-2026-10702. Update your Tor!

nebusecurity's profile picture

NebuSec

7,191 subscribers

74,105 Aufrufe • vor 1 Monat •via X (Twitter)

Comedy
LIVE

Anya Rossi• Live Now

Private livecam show

18 Kommentare

Profilbild von NebuSec
NebuSecvor 1 Monat

IonBanana (CVE-2026-10702) was fixed in Firefox 151.0.3. Tor Browser stable tracks Firefox ESR and backported it in 15.0.19 on July 21. Our full writeup:

Profilbild von drivertom
drivertomvor 1 Monat

Wait, tor?

Profilbild von NebuSec
NebuSecvor 1 Monat

But luckily we managed to protect people using Tor this time.

Profilbild von x509
x509vor 1 Monat

Try it on Qubes Whonix VM lmao. Android TBB has a very bad sandbox.

Profilbild von Frank Wu
Frank Wuvor 1 Monat

🎶 @roddux

Profilbild von The Labyrinthian
The Labyrinthianvor 1 Monat

Try this against a grapheneOS device. Where camera is turned off. I doubt it will work.

Profilbild von Circumjovial
Circumjovialvor 1 Monat

Nice work! I'd like to see an exploit of the browser running on Tails that gains access to unmounted disks on the host system.

Profilbild von 总舵主
总舵主vor 1 Monat

Holly sh***** !!!!!

Profilbild von Angel
Angelvor 1 Monat

Anyone who believes Tor or any other form of encryption is safe, is a fool.

Profilbild von Ali Sherief
Ali Sheriefvor 1 Monat

Tor on Android in particular is always going to be less secure when you use a mobile data connection with the default DNS. But you seem to be using WiFi so you're all good. Your cats are amazing btw

Profilbild von arnoldrimmer
arnoldrimmervor 1 Monat

WHO is so stupid to scan an unknown QR code ?.

Profilbild von Omar وديع
Omar وديعvor 1 Monat

Mythos found 271 bugs but missed this RCE. CVE-2026-10702. Patching my Tor install now.

Profilbild von Serial experiments Luna
Serial experiments Lunavor 1 Monat

One reason to not scan random QR codes.

Profilbild von David
Davidvor 1 Monat

🤝🤝

Profilbild von Jodi♂️☢️
Jodi♂️☢️vor 1 Monat

Nonsense.

Profilbild von Sercan Arğa
Sercan Arğavor 1 Monat

don't stop. keep shoving those qr codes into our lives. i'll always get for a physical menu...

Profilbild von 𝛼 ✨
𝛼 ✨vor 1 Monat

Your Tor becomes their Backdoor

Profilbild von tky0jpn
tky0jpnvor 1 Monat

meh

Ähnliche Videos

YANcast - YAN Mission Statement, We talk about UAPs, and give a lesson on how to install the Tor Browser on Linux.
10:03

YANcast - YAN Mission Statement, We talk about UAPs, and give a lesson on how to install the Tor Browser on Linux.

Anonymous

1,184,820 Aufrufe • vor 3 Jahren

The new tomi Browser is here!! Join us on tomi’s journey to a decentralized web. tomi is a project for the community and by the community - and this is where you come in. Help us improve the Browser by sharing your ideas and reporting any bugs you find. Together, we can build the next-gen internet. Download the Browser now through our website, and be part of the change!
0:40

The new tomi Browser is here!! Join us on tomi’s journey to a decentralized web. tomi is a project for the community and by the community - and this is where you come in. Help us improve the Browser by sharing your ideas and reporting any bugs you find. Together, we can build the next-gen internet. Download the Browser now through our website, and be part of the change!

TOMI

10,684 Aufrufe • vor 2 Jahren

Exa is partnering with Firefox 🔥 to power search for an AI browser for the open internet. Will Bryk sat down with Ajit Varma, Head of Firefox, to talk about the future of the browser and why user choice matters more than ever.
17:53

Exa is partnering with Firefox 🔥 to power search for an AI browser for the open internet. Will Bryk sat down with Ajit Varma, Head of Firefox, to talk about the future of the browser and why user choice matters more than ever.

Exa

575,259 Aufrufe • vor 1 Monat

people kept asking for a browser in herdr. but herdr lives in your terminal so it's not possib... INTRODUCING THE HERDR-BROWSER PLUGIN experimental and separate from herdr core. this isn't a browser rendered in your terminal (impossible), but it acts like one! 👇
1:07

people kept asking for a browser in herdr. but herdr lives in your terminal so it's not possib... INTRODUCING THE HERDR-BROWSER PLUGIN experimental and separate from herdr core. this isn't a browser rendered in your terminal (impossible), but it acts like one! 👇

herdr

148,034 Aufrufe • vor 1 Monat

Browser Use is now available in SpaceXAI's Grok Build! Ask Grok to complete tasks for you, or have it test your websites and fix bugs. Grok Build can work in your own browser or one hosted in the cloud.
0:31

Browser Use is now available in SpaceXAI's Grok Build! Ask Grok to complete tasks for you, or have it test your websites and fix bugs. Grok Build can work in your own browser or one hosted in the cloud.

Browser Use

34,537 Aufrufe • vor 1 Monat

Loved the skills system of the @Diabrowser and dropped a Skill Gallery for Dia Browser—one-click commands for content, research, and design, all in your browser. Link below.
0:38

Loved the skills system of the @Diabrowser and dropped a Skill Gallery for Dia Browser—one-click commands for content, research, and design, all in your browser. Link below.

Caner Aras

85,041 Aufrufe • vor 1 Jahr

Our iOS browser is live and already seeing a surge of downloads and glowing reviews. Protect your privacy today - the mobile browser with free anonymous routing, built-in. 🔹
0:38

Our iOS browser is live and already seeing a surge of downloads and glowing reviews. Protect your privacy today - the mobile browser with free anonymous routing, built-in. 🔹

ANyONe Protocol

70,392 Aufrufe • vor 1 Jahr

We added a device tool bar to the Codex in-app browser, so it's easier to build and test responsive apps! Now, you can have Codex test your app in different dimensions, so it can fix bugs & improve UI for every device. Just click the 3 dots on the right of the URL bar to use it! As part of this change, we also: - improved the speed of browser use (~30% in my vibe testing) - tightened the animation of the cursor - added a way to hide the composer in full screen mode - fixed a few bugs for browser use in Windows Oliver Tepman and John Nastos cooked on this one! Try it out and let us know what you think!
0:25

We added a device tool bar to the Codex in-app browser, so it's easier to build and test responsive apps! Now, you can have Codex test your app in different dimensions, so it can fix bugs & improve UI for every device. Just click the 3 dots on the right of the URL bar to use it! As part of this change, we also: - improved the speed of browser use (~30% in my vibe testing) - tightened the animation of the cursor - added a way to hide the composer in full screen mode - fixed a few bugs for browser use in Windows Oliver Tepman and John Nastos cooked on this one! Try it out and let us know what you think!

James Sun

148,546 Aufrufe • vor 4 Monaten

Codex just updated their in app browser... You can now open multiple tabs, import cookies and passwords and more. And then 2 days later Claude Code released a similar update... This completely shifts the way we use computers... Here's everything you need to know. 00:00 Intro 00:36 Codex Browser Example 02:17 Updated Claude Code Browser 03:43 Using Codex in App Browser 06:30 4 Ways to Use The Browser in Codex 10:22 The AI Operating System 13:31 6 Useful Browser Workflows
21:18

Codex just updated their in app browser... You can now open multiple tabs, import cookies and passwords and more. And then 2 days later Claude Code released a similar update... This completely shifts the way we use computers... Here's everything you need to know. 00:00 Intro 00:36 Codex Browser Example 02:17 Updated Claude Code Browser 03:43 Using Codex in App Browser 06:30 4 Ways to Use The Browser in Codex 10:22 The AI Operating System 13:31 6 Useful Browser Workflows

Riley Brown

91,639 Aufrufe • vor 2 Monaten

Introducing developer mode for browser use in Chrome and the Codex in-app browser. Codex can use the Chrome DevTools Protocol (CDP) to debug browser issues by profiling JavaScript performance and inspecting console output, network traffic, and page state.
1:27

Introducing developer mode for browser use in Chrome and the Codex in-app browser. Codex can use the Chrome DevTools Protocol (CDP) to debug browser issues by profiling JavaScript performance and inspecting console output, network traffic, and page state.

OpenAI Developers

377,947 Aufrufe • vor 3 Monaten

Ukraine’s Prymary GUR special unit reported striking six Russian air defense targets in January. The hits included one Pantsir S1 system, one Tor M1, one Tor M2 with its reload vehicle, one RLM ME radar from the Nebo M complex, and one Protivnik GE radar. #Ukraine
0:52

Ukraine’s Prymary GUR special unit reported striking six Russian air defense targets in January. The hits included one Pantsir S1 system, one Tor M1, one Tor M2 with its reload vehicle, one RLM ME radar from the Nebo M complex, and one Protivnik GE radar. #Ukraine

NOELREPORTS 🇪🇺 🇺🇦

26,604 Aufrufe • vor 7 Monaten

Autopilot for your browser is here. You type the task. Composite does the rest. Imagine this: - You describe a browser task - Composite clicks, types, navigates, and finishes it like magic - Works on any website. In any browser. No migration needed. It’s not just AI. It’s your operations team, copilot, and Jarvis all inside your current browser. Composite uses your browser just like you would, but faster, smarter, and endlessly patient. How I use it: As a content creator, I auto-sync my content calendar across Notion, Trello, and Slack, while I’m busy writing the next viral post. No new browser. No learning curve. No vendor lock-in. Just pure agentic power in your browser. Put your browser on steroids. Get hours of work done in minutes here:
0:55

Autopilot for your browser is here. You type the task. Composite does the rest. Imagine this: - You describe a browser task - Composite clicks, types, navigates, and finishes it like magic - Works on any website. In any browser. No migration needed. It’s not just AI. It’s your operations team, copilot, and Jarvis all inside your current browser. Composite uses your browser just like you would, but faster, smarter, and endlessly patient. How I use it: As a content creator, I auto-sync my content calendar across Notion, Trello, and Slack, while I’m busy writing the next viral post. No new browser. No learning curve. No vendor lock-in. Just pure agentic power in your browser. Put your browser on steroids. Get hours of work done in minutes here:

Shushant Lakhyani

29,302 Aufrufe • vor 1 Jahr

The third Russian «Tor» SAM (Surface-to-Air Missile) system struck by the operators of the 413th «Raid» Regiment of the USF in just 5 days! What is the final result? In the worst-case scenario for the enemy, the «Tor» is headed for long-term repairs. Essentially, we have another wrecked SAM system and a «hole» in the Russian sky, clearing the way for future missions.
0:27

The third Russian «Tor» SAM (Surface-to-Air Missile) system struck by the operators of the 413th «Raid» Regiment of the USF in just 5 days! What is the final result? In the worst-case scenario for the enemy, the «Tor» is headed for long-term repairs. Essentially, we have another wrecked SAM system and a «hole» in the Russian sky, clearing the way for future missions.

RAID | 413 Regiment USF

29,510 Aufrufe • vor 6 Monaten

we get so distracted online today constantly context switching ------------------------------ The Browser Company's latest is a remedy for the chaos ------------------------ it's an in-app browser for *every website* on the internet --------------- meet "Peek" by Arc :-)
0:24

we get so distracted online today constantly context switching ------------------------------ The Browser Company's latest is a remedy for the chaos ------------------------ it's an in-app browser for *every website* on the internet --------------- meet "Peek" by Arc :-)

Josh Miller

315,182 Aufrufe • vor 3 Jahren

Hermes just made its in-app browser a whole lot more useful. You can now keep multiple browser tabs open inside Hermes Desktop instead of every new page replacing the one you were already using. And that matters more than it sounds. Because this is not just about “having tabs.” It means Hermes can work across multiple pages without forcing you to keep losing your place every time you open the next thing. Research one source, keep it open, open another tab, compare them side by side, and keep moving. Check a few products before buying something. Look at multiple hotel or travel options at once. Keep a YouTube tutorial open in one tab while Hermes looks through docs or another page in the next. And because this lives inside Hermes Desktop, you are not limited to one basic browser view either. You can keep multiple tabs open. You can view two pages side by side. You can stack them top and bottom. You can even run a four-panel view when you want several pages open at once. So the browser inside Hermes is starting to feel a lot more like a real workspace instead of one page you keep replacing. There is also some nice polish that comes with it. Browser tabs now label themselves based on the page, and the address bar behaves more cleanly while pages are loading. And remember, this is the same in-app browser Hermes can already read, click through, type in, scroll, and annotate. So this is not just a prettier browser. It is a more capable workspace for the browser Hermes is actually using. If Hermes is going to do more of your work on the web, this is exactly the kind of browser upgrade it needed.
0:33

Hermes just made its in-app browser a whole lot more useful. You can now keep multiple browser tabs open inside Hermes Desktop instead of every new page replacing the one you were already using. And that matters more than it sounds. Because this is not just about “having tabs.” It means Hermes can work across multiple pages without forcing you to keep losing your place every time you open the next thing. Research one source, keep it open, open another tab, compare them side by side, and keep moving. Check a few products before buying something. Look at multiple hotel or travel options at once. Keep a YouTube tutorial open in one tab while Hermes looks through docs or another page in the next. And because this lives inside Hermes Desktop, you are not limited to one basic browser view either. You can keep multiple tabs open. You can view two pages side by side. You can stack them top and bottom. You can even run a four-panel view when you want several pages open at once. So the browser inside Hermes is starting to feel a lot more like a real workspace instead of one page you keep replacing. There is also some nice polish that comes with it. Browser tabs now label themselves based on the page, and the address bar behaves more cleanly while pages are loading. And remember, this is the same in-app browser Hermes can already read, click through, type in, scroll, and annotate. So this is not just a prettier browser. It is a more capable workspace for the browser Hermes is actually using. If Hermes is going to do more of your work on the web, this is exactly the kind of browser upgrade it needed.

Hermes Release Watch

52,493 Aufrufe • vor 28 Tagen

I've contacted the creator behind Half-Life 2 webport (slant) and it turns out his work is based on Portal webport made by Weliveinhell, which is also fully playable in a browser, just open the site and play!
1:56

I've contacted the creator behind Half-Life 2 webport (slant) and it turns out his work is based on Portal webport made by Weliveinhell, which is also fully playable in a browser, just open the site and play!

‎Gabe Follower

648,268 Aufrufe • vor 3 Monaten

this is insane. just toggle this button and any coding agent can use your browser > no more Chrome extensions > One button, connect Claude Code to your browser all you need is the right harness... try it with the Browser Use CLI right now!
0:32

this is insane. just toggle this button and any coding agent can use your browser > no more Chrome extensions > One button, connect Claude Code to your browser all you need is the right harness... try it with the Browser Use CLI right now!

shawn

640,241 Aufrufe • vor 6 Monaten

One missing array entry started it all. then two WordPress core bugs chained through SQL injection, cache poisoning and an administrator identity switch -> ending in unauthenticated RCE. We reconstructed the path. CVE-2026-63030 kudos for discovering hashkitten Assetnote
0:38

One missing array entry started it all. then two WordPress core bugs chained through SQL injection, cache poisoning and an administrator identity switch -> ending in unauthenticated RCE. We reconstructed the path. CVE-2026-63030 kudos for discovering hashkitten Assetnote

BugBunny.ai - Continuous AI Pentesting System

15,935 Aufrufe • vor 2 Monaten