Darknet Demystified
In Episode 7 of Darknet Demystified, we break down the case that links ten darknet vendor accounts JoyInc, LaFarmacia, WhiteDoc, JanesAddiction, DaShop, WhiteRepublic, Tomorrowland, PlanetHollywood, DopeValley, and Major2Minor all controlled by the same crew.
OpenAI
OpenAI open-sourced BrowseComp, a benchmark built to test whether AI can find obscure, verifiable facts buried across the internet. It's intentionally hard, and most models fail—unless they can reason, persist, and browse like a human researcher.
Microsoft
Microsoft claims Edge 134 is 9% faster, but it’s still lagging behind Brave. The numbers look good on paper—until you realize Brave outpaces it even after the update.
cyberattacks
In a closed-door Geneva summit, Chinese officials admitted—albeit indirectly—to orchestrating Volt Typhoon cyberattacks on US infrastructure. The move signals escalating covert conflict over Taiwan and exposes the US grid’s vulnerability to prolonged foreign infiltration.
data leak
Western Sydney University has admitted to another major data breach, compromising personal data from over 10,000 students. This follows an alarming history of security failures that signal systemic negligence in protecting sensitive student records.
TweetFeed converts Twitter timelines into RSS feeds without using the Twitter API. It’s a decentralized intel-gathering tool that bypasses authentication, tracking, and rate limits.
robot
A hidden remote access tunnel in Unitree Go1 robot dogs enables full control by Chinese servers, compromising networks at universities and companies worldwide.
osint
Voyage is a subdomain enumeration tool written in Rust that merges active and passive scanning to maximize discovery with minimal noise.
Windows Vulnerabilities
Microsoft credited a cybercriminal known as EncryptHub—responsible for over 618 breaches—for responsibly disclosing two Windows vulnerabilities.
Mark of the Web bypass
A flaw in WinRAR versions prior to 7.11 allows attackers to bypass Windows' Mark of the Web (MotW) security checks using symlinks, enabling silent execution of malicious code. This vector, CVE-2025-31334, reflects a broader pattern of systemic failure in Microsoft’s layered security model.
AI cybersecurity
Google’s launch of Sec-Gemini v1 signals a push toward AI-dominated cybersecurity, but beneath the PR polish lies a deeper power grab cloaked in benevolence.
Akira ransomware
A security researcher reverse-engineered the Akira ransomware's encryption scheme by exploiting timestamp-based key generation and brute-forcing with GPU clusters. His $1,200 solution...