Cybersecurity researcher: I found that Flock did not require their clients to use multi-factor authentication. This led me to find Flock law enforcement accounts for sale by a Russian vendor on a dark web marketplace. In addition to this, we found insufficiently protected sensitive information stored on Flock cameras, including photos, license plate data, logs, API keys, passwords, and communications.

The Empire C2 has come a long way with the help of @bcsecurity and I was able to grab time from Jacob Krasnov, co-maintainer of the Empire C2 open-source framework, to run through the Hack Smarter Labs cyber range, DarkHaven. We focus on using a real red teaming mindset as Jake shares his perspective on how he would approach the range as a true assessment. We also go through the capabilities of the Empire C2 framework showing how it's evolved into a stable and capable environment for red team operators. Special thanks to @Tyler_Ramsbey for giving us access to the range. piped.video/cq15PWfOrYE

Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time. His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with. "If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri He loved Microsoft. I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him. They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below. According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again. Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence. So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case. All while Abdel was releasing zero-days. Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000. He says Microsoft refused to reveal any details about the security breach and went another direction. If you are reading this, and you can offer him a LEGAL job, this is his e-mail: msnightmare@proton.me

Empire 7.0 is live! 🔥 What’s new: • Full crypto rewrite (AES-GCM, PBKDF2) • Pivots on all agents • Multi-tab terminal & dedicated shells • 75+ new BOFs • New Starkiller UI & Agent Graph github.com/BC-SECURITY/Empir…

Microsoft has failed to properly patch ShieldBreak CVE-2026-69414 - msrc.microsoft.com/update-gu… ShieldCrash demonstrates a full bypass of the patch - github.com/MSNightmare/Shiel… Works with latest September 2026 patch

Microsoft’s September 2026 Patch Tuesday is a massive one, fixing 966 security flaws, including two zero-days that are already being exploited. -966 vulnerabilities fixed, the largest Patch Tuesday update Microsoft has released so far. -105 are rated Critical, including 81 remote-code-execution flaws. -2 zero-days are being actively exploited, both affecting Windows and allowing attackers to gain SYSTEM-level privileges. -One affects the Windows Update Stack, while the other targets Windows ALPC. Microsoft says the increase in reported vulnerabilities is partly linked to its use of an AI-powered vulnerability discovery system. The September total only counts flaws released on Patch Tuesday itself, 204 additional vulnerabilities were fixed earlier this month. This is one of those updates where installing the latest security patches is especially important, given that two of the vulnerabilities are already being used in attacks.