
(Grumpy Old) Hacker. Co-founder of @DIVDnl, https://teapawt.net/t.co/Gfgrg51IjY, and the https://teapawt.net/t.co/xQTXpG4nqM.
AS50559 (194.5.73.0/24)
Joined March 2015
- Tweets13.7K
- Following1.8K
- Followers43.9K
- Likes9.5K
Replying to @thekage75 @Guaxininsmo
Take a deep breath, because we’re about to spill the tea ☕️ Affinity is coming to Linux, it’s in active development, but we’ve got no ETA to spill just yet.
Victor Gevers retweeted
This is one of the funnest internet days of the year! You might not agree with me, but like these are the event we have the boring days for!
everyone pulls together, shares research, intel, puts in place WAF block rules etc. etc.
this is community going BRRRR time! #PHP2Shell
Victor Gevers retweeted
🚨 BREAKING: PHP is warning admins to prepare for emergency security updates tomorrow to fix two critical vulnerabilities rated CVSS 9.2.
However, security researchers at @watchtowrcyber rate the flaws CVSS 10.0 and say they are RCE vulnerabilities affecting PHP 5 through 8.
Information about the vulnerabilities has reportedly leaked ahead of disclosure.
No known exploitation in the wild.
🔗 bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Victor Gevers retweeted
We bought an $88 router on Amazon looking for the ENDLESSDOORS implant. We found two others instead
DARKLANTERN gives anyone on the Internet an unauthenticated root shell.
SPEAKINGSTONE phones home to ZBT infrastructure and supports remote surveillance.
vulncheck.com/blog/zbt-darkl…
Victor Gevers retweeted
Are you 40? If you are, it's time to finnally buy a WinRAR license! Thanks to @buraktuyan for creating this awesome video that no one asked for but that everyone needs! 🤣😎
Here's my 30-second spec ad for WinRAR (that nobody asked for).
Okay, perhaps Rourke Heath did.
He shared this fun brief with his GenHQ community last week, and I took it on.
In this experimental project, I wanted to turn one of the internet's longest-running jokes into a subtle family drama about WinRAR's 40-day trial that somehow lasted almost three decades.
Here's how I made it:
After writing the script (the old school way), I worked with ChatGPT 5.6 Sol Max to turn it into a 14,000-character prompt for Seedance 2.5 (yes, Dreamina allows prompts that long).
I used GPT Image 2 to create the reference image for WinRAR's trial screen, while Seed Audio 1.0 generated the audio reference for the full voiceover and dialogue. After 20+ Seedance 2.5 tests at 480p, with the prompt evolving throughout, I generated the final versions at 720p.
I then lightly edited the video and upscaled it to 1080p with Topaz Labs Astra Starlight Precision 2.6. However, the screenshot text didn't survive the upscale (I should have used Astra's scene detection feature and selected a different model for that particular shot), so I recreated it using Seedance 2.0 at 1080p. (I also tried Hailuo H3 and Kling 3.0, but in this particular case, Seedance 2.0 gave me the best overall result in one go.)
For the sound, I selected a solo-instrument soundtrack from Epidemic Sound and added extra sound effects to improve the overall sound design.
And here's the result.
I'm curious to hear what you think.
Did this bring back memories, or is this genuinely your first time hearing about WinRAR? I’d love to know.
No more black-box SaaS workarounds or spaghetti Python scripts brute-forcing Workspace API tokens. Orchestrating multi-tenant IAM through Gemini's native voice interface is an absolute game-changer for reducing my administrative overhead work. workspace.google.com/studio/… :-)
2
1,635
🎉 Haiku R1/beta6 has been released! haiku-os.org/get-haiku/r1bet…
57 years ago today, humans first landed on the Moon. The source code that helped get them there? It’s on GitHub.
Margaret Hamilton led the MIT team responsible for Apollo’s onboard flight software. The Apollo Guidance Computer software eventually grew to about 145,000 lines of code. 👀
Explore the original Apollo 11 guidance software for the Command and Lunar Modules. 🌕
github.com/chrislgarry/apoll…
Image credit: Draper Laboratory; restoration by Adam Cuerden, via Wikimedia Commons.
Sometimes the loudest statement isn’t where someone walks away from, but what they are walking toward.
1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.
Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.
Victor Gevers retweeted
We live in a world where cyberattacks are becoming easier and faster than ever. What once took weeks to hack can now happen in just hours. That’s why we do what we do: to educate, inspire and help build a safer digital future. 🧡
orangecon.nl/trainings/
Victor Gevers retweeted
🚨 Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitwarden-cl…
Victor Gevers retweeted
Mr. Titus Tech is correct. cpuid-dot-com is indeed delivering malware right now.
As I began poking this with I stick I discovered this is not your typical run-of-the-mill malware. This malware is deeply trojanized, distributes from a compromised domain (cpuid-dot-com), performs file masquerading, is multi-staged, operates (almost) entirely in-memory, and uses some interesting methods to evade EDRs and/or AVs such as proxying NTDLL functionality from a .NET assembly.
The C2 domain present in one of the binaries is a clear IoC. This is the same Threat Group who was masquerading FileZilla in early March, 2026. They've been busy.
HWInfo and CPU-Z both compromised. Millions about to be PWNED!
CPU Z:
hybrid-analysis.com/sample/e…
HW Monitor:
hybrid-analysis.com/sample/4…
Readers added context they thought people might want to know
The post mentions HWInfo, but the link is for HWMonitor. These are different tools from different developers. HWInfo is unaffected. CPU-Z and HWMonitor from cpuid.com are compromised with malware.
igorslab.de/en/warning-cpu…
reddit.com/r/pcmasterrace…
hwinfo.com/forum/threads/…






















