AmmarSpaces

I am copypasting statement from @InternationalCyberDigest@infosec.exchange.

Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we (@InternationalCyberDigest@infosec.exchange ) had dinner together, and I've known him and his story for some time.

His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with.

"If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri

He loved Microsoft.

I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him.

They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below.

According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again.

Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence.

So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case.

All while Abdel was releasing zero-days.

Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000.

He says Microsoft refused to reveal any details about the security breach and went another direction.

If you are reading this, and you can offer him a LEGAL job, this is his e-mail: msnightmare@proton.me

Original x post: https://x.com/MSNightmare2000/status/2099082012996858204

#infosec #cybersecurity #nightmareEclipse #microsoft #msrc #jobsearch

Just a thought, isn't it sad that hackers (vuln researchers) nowadays need to give their KYC 'just' to access an AI model to help them in their job?

This post is intended for Indonesian audience only:

Tim @safenet@mastodon.social baru saja meluncurkan petunjuk apa yang harus dilakukan jika kalian mengalami gangguan jaringan atau terkena aktivitas pemblokiran di ranah digital ketika kalian sedang beraktivitas.

@indonesia@fedigroups.social

Guide bisa diakses di bawah:
https://drive.proton.me/urls/VECDDE2WV4#JiW2Jhapa71X

#infosec #digitalrights #hakdigital #petunjuk #guide #indonesia

Cat cat tv

#surveillance #memes #cctv #cat

Kemnaker (The Ministry of Manpower) leak December 2025.

The underground listing alleges tables and exports that include:
* Worker / labor-force profile tables (actor-stated tens of millions of rows)
* Training-participant and employment-program datasets
* Domicile and national-ID (KTP) address tables
* Employment social-security–related employee tables (actor-stated)

For this one, I have low confidence being real. Because of the data supposed amount which seems too big (1,208,702,746 unique rows).

But, still must be cautious.

Source: DailyDarkWeb

@indonesia@fedigroups.social

#cybersecurity #infosec #kemnaker #databreach #indonesia #indonesiaNews

Good morning Indonesian taxpayers (including me). Just FYI

DJP (Directorate General of Taxes) allegedly breached. The alleged exposed fields include:

* Taxpayer Identification Numbers (NPWP)
* Names and email addresses
* Phone numbers and physical addresses
* Passwords
* User IDs and account roles
* IP addresses
* Last-login information
* Authentication tokens
* Remember-me tokens
* Account creation and update timestamps

If true, we all fucked. Hahahha

Screenshot and info source: DailyDarkWeb

@indonesia@fedigroups.social

#cybersecurity #infosec #indonesia #indonesiaNews #pajak #databreach

Le fly is the machine
Note: meme not made by meme

#memes #technology #fly #neuralnetwork #funny #ihavenomouthandimustscream

Even your EV charger didn't save from CVE.

Anyway, I am no expert, but just asking, it possible in the future we can pwn a smart car just by hijacking the EV charger?

https://www.saiflow.com/blog/the-hidden-ccs2-attack-surface-on-ev-chargers

#cybersecurity #infosec #vulnerability #evcharger #iotsecurity

So there's a rumor that all Kimi AI Staffs arrested by the MSS, regarding recent Anthropic report.

NightmareEclipse posted this on their X.

I think we are now getting a glimpse of the real problem.

I hope they are okay moving forward.

Addendum 1: Yes, I deliberately not screenshotting the upper part properly.

Addendum 2: If you are someone who capable to giving them a support, please give them a support...

#cybersecurity #infosec #nightmareEclipse #mentalhealth #mentalhealthmatters

Team at Calif published a Writeup that demonstrate the first Zero Click Worm that can be spread through WeChat calls they call WeWorm

Writeup: https://calif.io/research/weworm

Below is their PoC video

#cybersecurity #infosec #computerworm #weworm #calif #wechat #vulnerability #vulnerabilityresearch

If you are in Europe, and you bought Steam's hardware products, you might want to check your e-mail from Steam.

There is a 3rd party logistic partner breach (CEVA Logistics) occoured, where your:

• Name
• Street address, city and postal code
• Country
• Phone number
• Email address linked to the Steam account
• Type and price of the hardware ordered

Might be exposed.

Stay safe out there.

#cybersecurity #infosec #databreach #steam #europe #valve #gaming

Recently there is a YT hack involving hundreds of artists account being 'compromised' to deliver random videos. Apperently the 'hack' were sourced from exploited 3rd party app that just too easy to fool.

https://www.youtube.com/watch?v=aiy4VyP5Eps

#cybersecurity #youtube #artist

Hey, hey, it's been a long time since the last huge supply chain attack (what about AUR? it's for nerds). NPM Supply Chain Attack returned again, this time infecting more than 444 packages with accumulation of 2B (yeah B for billion) downloads. The malware used is Shai-hulud again, but this time, the culprit is Copycat of TeamPCP.

What should you do?

• Check if you are affected, if so, downgrade your library version
• Rotate your keys and do 2FA
• Search for infected accounts in your system, if there is one, remove it... or kill it with cold blood.

More details: https://www.ox.security/blog/a-new-infostealer-worm-hits-npm-affecting-keyv-and-cacheable/

#cybersecurity #infosec #security #supplychainsecurity #supplychain #npm#shaihuludmalware

So, apperently there is a CodeIgniter RCE via file upload tracked as CVE-2026-63223.

Other than that there are also 3 more critical CVEs:

• SQL Injection (CVE-2026-63221)
• Path traversal (CVE-2026-63222)
• HTTP Header Spoofing (CVE-2026-63220)

Did people still use CodeIgniter?

Anyway, if your org still using it and it has anything related to file upload, might be a good time to update it.

https://securityonline.info/codeigniter4-rce-vulnerability/

#cybersecurity #infosec #codeigniter #vulnerability

Browser Exploit Surface Model, by Alisa Esage from Zero Day Engineering

#cybersecurity #infosec #browser #attacksurface #attacksurfacemapping #vulnerability

Call me optimist or anything, but even if ASI is a thing and somehow it become a threat. I believe human can still overcome it. With the caveat, that humans keep studying and not 'just let AI do it', even when ASI become a thing.

#opinion #ai

RE: @AmmarSpaces@infosec.exchange

To respect the guy decision, I will not post about him using that name anymore.