Instagram still hasn't (correctly) patched their AI goop account reset thingy. Accounts are still being stolen and Instagram hasn't said anything about it. Nerds continue to find ways to convince AI to reset accounts for them.

People on social media are freaking out because some of these profiles apparently are big sources of revenue for them.

Meanwhile, rumors are floating around that a few weeks ago Instagram laid off a large percentage of their Trust & Safety department and had it replaced with AI.

Very cool

This is a very silly photo.

WeezerOSINT shared a photo of someone speaking with Instagram Trust & Safety. They told him what he is describing is "impossible" and denied the existence of the AI bug thing

"It doesn't exist, nerd. AI is never wrong" - Zuckerberg, probably

I have something to share, but it would be such an absurdly long write-up I'm not sure if it's even worth it.

tl;dr FOIA (Freedom of Information Act) request on the SolarWinds compromise. Government sharing details on SolarWinds compromise and impact

Hello, I'm sorry to the people I kept hanging. I'm dealing with my baby right now.

I'll be doing a little write-up later today and sharing it on vx-underground if you want to read it yourself.

In summary, the FOIA request discusses a high level summary of SolarWinds malware payload and a few government employees who were targeted provide some information on stuff. It also unveils some cool and badass secret government code names.

I did not place the FOIA request. Although FOIA requests can be made public, for reasons I don't understand the person who initially placed it didn't make it explicitly public (unless I missed something, somewhere).

It was fun reading it. Moving forward I may archive FOIA stuff related to cybersecurity.

I've been really behind on many things. Working from home and having a 14 month is challenging. I am hoping when he starts school in a few years I will have more free time (around 2030?).

As someone who enjoys malware and malware accessories, I for one believe this to be incredible news and I applaud Satya Nadella for this

As someone who deals with malware defensively, I for one believe this is terrible news and I hate Satya Nadella so much right now it's unreal

It's funny. Last night I was going pee-pee and I had an idea for a schizo post that would be written something like, "Just got off the phone with the CEO of malware (Satya Nadella). He said don't even trip, dawg, we've got tons of new features coming to the Windows ecosystem so you and your group of nerds can continue to discover new things to abuse".

The idea then was posting it with a picture of a cat on a cell phone.

I didn't post it because I was like, "Nah, Microsoft is having a bunch of problems right now, no way Satya Nadella gives the approval to add more gumpie to their slermie frumpy machines".

I was wrong. He has plenty of gumpies for the slermies.

After seven years of discussing malware, collecting malware, archiving malware, writing malware, reversing malware, reading about malware, and searching for malware, ... my brain is deep fried like some gump.

When I made this website and social media profile, I was initially very formal, I used dark-art, I tried to be all professional.

Fast forward seven years and I'm writing incomprehensible nonsense and spamming pictures of cats. I'm unironically thinking things like, "Microsoft confirmed their glumpies got slermied. The goop detonated on the frumpest was written by Russian gwumpnessicas".

I have no idea what this website is doing to my brain, bro. My mind is slowly imploding.

Yeah, so pretty much this guy is releasing an exploit in solidarity with Nightmare Eclipse guy. He said he notified GitHub about the exploit 60 minutes before releasing this paper.

I don't do web stuff, and I'm not a VSCode nerd, so I'm confused by the underlying technologies.

If you're a stinky GitHub and VSCode nerd maybe you'll understand.

tl;dr click github dev, github dev opens editor, in github dev editor have javascript, javascript does shortcuts automatically. github treats javascript shortcuts as real human input, or something. use javascript shortcut stuff to automatically install vscode extension. the vscode extension steals your data

tl;dr tl;dr user clicks 1 link, 1 click steals all data from your github

https://blog.ammaraskar.com/github-token-stealing/

I was sniffing around trying to learn more about this FOIA (Freedom of Information Act) gumpy I found on the internet.

*I didn't find it, someone else found it and sent it to me

It's from Bloomberg and (currently) behind a paywall as part of their "FOIA News", or whatever silly name they're calling it to make it interesting.

> lists victims (but redacted)
> interviews witnesses
> big shenanigans
> solarwinds was precise in what doing
> nicknamed "Lazy Fortnite" by government (???)
> victim 1 is v v v important

https://assets.bwbx.io/documents/users/iqjWHBFdfxIU/ry9xLM9wJMxA/v0

Pretty slow couple of days in cybersecurity, only 15 companies hit by ransomware, only 18,000,000 malwares noted in the wild, only three or four North Korean and Russian cyber operations discussed, and only two new Microsoft 0days

Oh, and only 32 supply chain attacks

Malware

Microsoft introduces Microsoft Scout, also known as Autopilot.

Scout is always on and has file system and application access "based on your corporate policy".

Best news for Threat Actors in a long time

https://www.microsoft.com/en-us/microsoft-365/blog/2026/06/02/introducing-microsoft-scout-your-always-on-personal-agent/

This thing can have full access to your file system and is always on.

I can't imagine a better thing to abuse on Windows. Imagine all the cool malware and system components we can abuse, oh my lord

In other news, MalwareTechBlog released a Comodo Internet Security exploit.

It's a remote DoS

I love all these silly shenanigans

https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html

The people crave malware and malware accessories

> see someone discussing position independent code
> "no need to walk peb"
> look inside
> invokes VirtualQuery
> ???

My goofy ass website gets 142,000+- unique visitors a month. Dawg, I have GOT to find a way to monetize this without dropping to my knees and begging like a dirty scoundrel on the internet.

I've worked on this gunkie slermie everyday for 7 years. I gotta do something

Ah ha! I've got an idea! I cover every inch of the website with big dick pill advertisements.

I've got a backstreet boys song stuck in my head I haven't heard since 1999

Meta is still having some minor security problems. Instagram is currently exposing phone numbers and email addresses associated with accounts when trying to perform a password reset

This is cool and badass because everyone is sharing Mark Zuckerbergs phone number right now