After seven years of discussing malware, collecting malware, archiving malware, writing malware, reversing malware, reading about malware, and searching for malware, ... my brain is deep fried like some gump.

When I made this website and social media profile, I was initially very formal, I used dark-art, I tried to be all professional.

Fast forward seven years and I'm writing incomprehensible nonsense and spamming pictures of cats. I'm unironically thinking things like, "Microsoft confirmed their glumpies got slermied. The goop detonated on the frumpest was written by Russian gwumpnessicas".

I have no idea what this website is doing to my brain, bro. My mind is slowly imploding.

Yeah, so pretty much this guy is releasing an exploit in solidarity with Nightmare Eclipse guy. He said he notified GitHub about the exploit 60 minutes before releasing this paper.

I don't do web stuff, and I'm not a VSCode nerd, so I'm confused by the underlying technologies.

If you're a stinky GitHub and VSCode nerd maybe you'll understand.

tl;dr click github dev, github dev opens editor, in github dev editor have javascript, javascript does shortcuts automatically. github treats javascript shortcuts as real human input, or something. use javascript shortcut stuff to automatically install vscode extension. the vscode extension steals your data

tl;dr tl;dr user clicks 1 link, 1 click steals all data from your github

https://blog.ammaraskar.com/github-token-stealing/

I was sniffing around trying to learn more about this FOIA (Freedom of Information Act) gumpy I found on the internet.

*I didn't find it, someone else found it and sent it to me

It's from Bloomberg and (currently) behind a paywall as part of their "FOIA News", or whatever silly name they're calling it to make it interesting.

> lists victims (but redacted)
> interviews witnesses
> big shenanigans
> solarwinds was precise in what doing
> nicknamed "Lazy Fortnite" by government (???)
> victim 1 is v v v important

https://assets.bwbx.io/documents/users/iqjWHBFdfxIU/ry9xLM9wJMxA/v0

Pretty slow couple of days in cybersecurity, only 15 companies hit by ransomware, only 18,000,000 malwares noted in the wild, only three or four North Korean and Russian cyber operations discussed, and only two new Microsoft 0days

Oh, and only 32 supply chain attacks

Malware

Microsoft introduces Microsoft Scout, also known as Autopilot.

Scout is always on and has file system and application access "based on your corporate policy".

Best news for Threat Actors in a long time

https://www.microsoft.com/en-us/microsoft-365/blog/2026/06/02/introducing-microsoft-scout-your-always-on-personal-agent/

This thing can have full access to your file system and is always on.

I can't imagine a better thing to abuse on Windows. Imagine all the cool malware and system components we can abuse, oh my lord

In other news, MalwareTechBlog released a Comodo Internet Security exploit.

It's a remote DoS

I love all these silly shenanigans

https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html

The people crave malware and malware accessories

> see someone discussing position independent code
> "no need to walk peb"
> look inside
> invokes VirtualQuery
> ???

My goofy ass website gets 142,000+- unique visitors a month. Dawg, I have GOT to find a way to monetize this without dropping to my knees and begging like a dirty scoundrel on the internet.

I've worked on this gunkie slermie everyday for 7 years. I gotta do something

Ah ha! I've got an idea! I cover every inch of the website with big dick pill advertisements.

I've got a backstreet boys song stuck in my head I haven't heard since 1999

Meta is still having some minor security problems. Instagram is currently exposing phone numbers and email addresses associated with accounts when trying to perform a password reset

This is cool and badass because everyone is sharing Mark Zuckerbergs phone number right now

I considered sharing the screenshot, but from what I've seen and heard, Instagram are severing the heads of people who post Marks phone number. I've seen a few X accounts get suspended

Silly shenanigans indeed

> be Zuckerberg
> needs AI everywhere (apparently)
> lays off a bunch of employees
> replaces with AI
> fast forward
> AI is dog shit
> AI tricked into stealing accounts
> try to fix
> fail like 5 times
> product now leaking CEOs PII

AI truly is the future, wow

I don't know the whole lore, but nine crypto drainers and/or sim swappers have been apprehended in the UAE.

According to Threat Actors, cryptocurrency nerds (including ZachXBT), the people in the UAE are being tortured.

The full extent is currently unknown, however it's been reported the UAE government has broken their fingers, pulled their teeth out with pliers, and beating them in detention cells. They're still locked away.

These nine individuals have been in Dubai flexing expensive watches, partying with models, showing off expensive cars, etc. None are citizens of the UAE.

I don't know what they did to make the UAE so angry, but they're extremely angry. I also don't know if prisoners have the same rights in the UAE as you would countries like the UK or USA.

Anti-malware companies vs me doing malware analysis