Corruption. Broken education. Poor infrastructure. A dying environment. Every taxpayer can see what's happening.
My patriotism is for my country, not any political party. As citizens, we have every right to question the government. Accountability is their duty. #neetleak

SMS of Death: One Text to Crash Android A new zero-click Android vulnerability (CVE-2026-58882) lets attackers disrupt cellular service with a single malicious SMS.

What can an attacker do with just your phone number? Drop active calls, including emergency calls.

Meet Darknet MCP 🌍

Open-source dark web & threat intelligence for AI agents.
68 MCP tools. One local dashboard.
Security researchers & builders worldwide: try it, share feedback, contribute, or star the repo.

github.com/Vinaysati/Dark…

#CyberSecurity #MCP #darkweb #hacking

I failed my first CRTO attempt.

7 days later, I came back with a better process, better preparation, and a very different mindset.

I wrote about what went wrong, what I changed, and what I learned from the experience.

Same knowledge. Different discipline.

🔗 mah3sec.medium.com/my-crto-2026-e…

#CRTO #RedTeam #CyberSecurity #InfoSec @_ZeroPointSec

We hear “SBOM” everywhere these days.

But when a critical vulnerability hits an open source dependency, can your team quickly answer:

“Are we using it?”

An SBOM can help answer that question.

In our first ForgeGuardian security series, we're breaking down what an SBOM actually is, why it matters, where it fits into software supply chain security, and how ForgeGuardian supports it.

A practical introduction for anyone working with modern software supply chains.

Read the full article below linkedin.com/pulse/sbom-we-… #SBOM #SoftwareSupplyChain #CyberSecurity #AppSec #DevSecOps #OpenSource #SoftwareSecurity

Me and my friend @jaimin2709 started #ForgeGuardian as a weekend experiment around one question:

Can we build a practical, open-source defense layer for software supply-chain attacks?

3 months later, we're putting it out in the open. 🚀

🔎 8 detection engines
🌍 9 ecosystems
tures
💻 CLI + Dashboard
🔒 Offline-first
New threat → New detection → Shared with the community.
Try it. Break it. Tell us what we’re missing.
👉 GitHub: github.com/Mah3Sec/ForgeG…
📚 Docs: forgeguardian.dev/docs/
#CyberSecurity #SupplyChainSecurity #AppSec #OpenSource #infosec #supplychain #devops #secdevops #dev

Me and my friend @jaimin2709 started #ForgeGuardian as a weekend experiment around one question:

Can we build a practical, open-source defense layer for software supply-chain attacks?

3 months later, we're putting it out in the open. 🚀

🔎 8 detection engines
🌍 9 ecosystems
tures
💻 CLI + Dashboard
🔒 Offline-first
New threat → New detection → Shared with the community.
Try it. Break it. Tell us what we’re missing.
👉 GitHub: github.com/Mah3Sec/ForgeG…
📚 Docs: forgeguardian.dev/docs/
#CyberSecurity #SupplyChainSecurity #AppSec #OpenSource #infosec #supplychain #devops #secdevops #dev

Peak PR wording: "A Mythos-class model that we've made safe for general use." 👀 #Ai #claude

You don’t need to hack a company anymore.

Just compromise something the company already trusts.

Dependencies. CI pipelines. Package registries. Update systems.

medium.com/@mah3sec/they-…

#infosec #cybersecurity #leadership #secdevops #devops #founders

4 months paying Anthropic and I cracked it:

Launch model →genius, basically a hacker's best friend.
Nerf Sonnet 4.6. Nerf Opus 4.6. Tell no one.
Drop Opus 4.7 →"we fixed everything!"

An AMD senior director complained publicly. Anthropic's response was a new model.
#Anthropic

Token consumption is high so pay more for extra usage.

🍪 Stole the admin's cookie on @intigriti Challenge 0326 — and wrote up exactly how I did it.

XSS → payload craft → cookie theft → flag 🚩

Full writeup 👇
mah3sec.medium.com/how-i-stole-th…

#BugBounty #XSS #CTF #Intigriti #WebSecurity #pentest

"Dojo #49 - Secret manager"? Pwned! It was a blast on @yeswehack!
Think you can take it on? 🌟
dojo-yeswehack.com/challenge/play…
#YesWeHack #ChallengeAccepted

Noticed a recurring issue on HackerOne: some triage responses feel AI-generated and reference a different vulnerability than what was reported, despite a clear PoC and category. #BugBounty

After mediation the issue is resolved but still i suggest that triage team should read report first and dont depend on AI based summary as. just depending on AI doesn’t help to become a good triage. And i think im not the only one who faced this issue with triage #BugBounty

I’ve been facing a serious, recurring safety issue with my @volkswagenindia virtus car from the very first day of delivery. Despite multiple complaints and service visits, nothing has been fixed and now it has caused a major highway accident. Sharing everything here 👇

Built a JS secrets hunter for my testing workflow 🔍 Nothing new - just a more structured version of existing JS recon tools:
✅ Auto discovery
✅ 40+ patterns
✅ Multi-threaded
✅ Clean output
github.com/Mah3Sec/JSHawk
#bugbountytips #infosec #CyberSecurity #PenTest

Read “Unauthenticated Kibana Dashboard Access — A Serious Security Risk You Can’t Ignore“ by Pratik Dabhi on Medium: infosecwriteups.com/unauthenticate…

#bugbounty #infosec #hacking