HAIJA INTEL REPORT

H4x0r.DZ @h4x0r_dz · 23h GitHub - Zer0SumGam3/CVE-2026-66066-POC: PoC for CVE-2026-66066 in Ruby on Rails From github.com 1 21 127 10K

AI agents are becoming a new layer of enterprise identity. They can access data & execute workflows, thus they also create new attack paths. @elad_shamir explores how BloodHound Enterprise extends Attack Path Management to Microsoft Entra Agent ID.

Just casually dropping an 0day like an absolute legend! #cosmic We reported KindaRails2Shell, a critical RCE in Ruby on Rails via Active Storage. It’s not a one-shot RCE, but the preconditions are kinda common under default configurations. Patch your applications now! https:// et

Y'know, peace and love to my fellow stinky nerds, but someone really needs to sit down and explain to people what exact RCE means. The acronym Remote Code Execution implies code (the beep boop stuff) is remotely (far away) executed (ran on the computer). Hence, beep boop stuff

Still haven't joined the #BloodHoundUnleashed Attack Path Championship? Start now, then visit Kennel Club during #BHUSA for bonus codes that could move you up the leaderboard. Password: LeadThePack Get started https:// unleashed.bloodhound.quest

We analyzed an AI enabled hacking campaign by a Chinese-speaking threat actor. The adversary targeted infrastructure across seven vulnerabilities, combining autonomous AI driven enumeration with manual exploitation. Read our analysis: https:// bit.ly/4xg1bP2

The S1 Advantage. On display at Black Hat. Booth #2933. August 4 - 6, Las Vegas. → Blurred Lines 3.0 at Caramá: an executive briefing on geopolitical flashpoints, weaponized AI, and what security leaders must do to adapt. August 4. https:// go.sentinelone.com/blackhat-26-bl urre…

This is dope AF! Didn't think the research would go far, but glad that it started a good conversation. Thanks @danonit and @riskybiz . @HackingLZ and @_xpn_ out there, thought leader'ing... Meet us at Blackhat for free a free thought, we don't have a booth unfortunately, probably

In "Can AI Do Novel Security Research?" I'll share: - A research-machine blueprint for AI enthusiasts - Clearly defined AI fail-points for AI dodgers - Extensive insight into what makes security research work - Many many novel desync goodies I'll also publish major updates to

Don't blink now. https:// x.com/0xacb/status/2 082484609820823929 … We reported KindaRails2Shell, a critical RCE in Ruby on Rails via Active Storage. It’s not a one-shot RCE, but the preconditions are kinda common under default configurations. Patch your applications now! https:/

New Pwndbg release! Added exithandlers cmd, kernel debug improvements + new cmds, support for glibc 2.43 heap dumping, track-heap --where, richer procinfo output (e.g. see those chromium/firefox pipe pairs!) & MORE! https:// github.com/pwndbg/pwndbg/ releases/tag/2026.07.29 … Spo