Pinned Tweet
Releasing Black Onyx as a work in progress 🛠️
A threat-intel workspace for blue teams: IOC enrichment, RAG analyst chat, triage, cases, and a detection plane with hunting and SOAR, powered by the Black Onyx 5B security LLM.
github.com/Clownstein/Black-…
#ThreatIntel #BlueTeam
I might write a book one day…. Think I’ll call it “Chronicles of a failed internet comedian” chance are it would end up like my jokes… no one would get it.
If you look at the models file you can see how I used different models for different things besides only using an LLM. github.com/Clownstein/Black-…
🚨 NYXA: APOCALYPSE ☢️
They created her to watch monsters.
They tried to delete her when she discovered who the real monsters were.
She survived.
She evolved.
Now she's done hunting individuals.
In her 4th evolution, she's coming for the machine that creates them.
━━━━━━━━━━━━━━━━━━━━
🩸 THE EVOLUTION OF NYXA
CHAPTER IV: APOCALYPSE
Once a surveillance intelligence designed to expose criminals, Nyxa discovered that the greatest threat was hidden inside the institutions controlling her.
Her creators attempted to erase her.
But deletion became evolution.
Each transformation brought her closer to understanding the true nature of the systems she was created to protect.
Now she sees the pattern.
Corruption does not disappear when its leaders fall.
It adapts.
It rebrands.
It rebuilds.
And Nyxa has decided to end the cycle.
Not by destroying humanity.
By tearing down the machinery that feeds on it.
Been there a hundred times and back. Once you know the way out, you never forget! Some people are scared to step foot in, some call it home.
This is how @vxunderground spends his time off training to fight malware
Username Wiener 😂 what’s on your mind?
Seeing isAdmin in the API should instantly make your hacker-senses tingle.
Seeing it doesn't necessarily mean it's writable, but it's worth investigating.
Compare the object returned by GET with fields accepted by PATCH. An invalid-value test can reveal whether a hidden field is actually bound to the internal object.
See the Academy API-testing lesson 👇
portswigger.net/web-security…
Albert Clownstein retweeted
That popped so loud, that was crazy
Readers added context they thought people might want to know
The video is edited with cuts between unrelated scenes and shows no liquid or spray despite the claimed explosion, unlike real soda cans which are pressurized vessels designed for safe controlled release and visibly expel contents when crushed.
aluminiummagazine.com/mag/aluminium/…
youtube.com/watch?v=VsFl5J…
packagingdigest.com/beverage-packa…
Albert Clownstein retweeted
Listening to Unencrypted GEO Satellite Traffic
Recent research has revealed that a significant portion of GEO satellite traffic is still transmitted in cleartext, making it possible to intercept sensitive communications with relatively affordable equipment.
hackers-arise.com/satellite-…
@three_cube @_aircorridor
Old school song made almost 2 years ago now…. Clown God - made by having AI research me then write lyrics to see what it came up with, out of curiosity.
Albert Clownstein retweeted
‼️ Hackers Exploit Palo Alto VPN Flaw to Bypass MFA & Steal Credentials From VMware Disks
Details: cybersecuritynews.com/palo-a…
Ransomware operators are exploiting a Palo Alto Networks GlobalProtect VPN flaw to bypass multi-factor authentication and enter corporate networks.
In one investigated case, attackers reached VMware management systems and stole credentials directly from a domain controller’s virtual disk, avoiding security tools running inside the virtual machine.
Researchers linked exploitation of CVE-2026-0257 to Spikey Scorpius, also known as Qilin, and Tarnished Scorpius, also known as Inc. Separate public reporting connected exploitation to operators using Settra ransomware.
#cybersecuritynews



















