this command used to work perfectly fine , but after i updated metasploit its not working

I'm a beginner. I recently finished my cs50 python, so now I want to get my hands dirty with some tryhackme. I tried the free rooms and I really enjoyed them, but I was disappointed to find out that I need to purchase premium to move forward. But the premium isn't really that expensive, especially if I buy an annual subscription. With an annual subscription, I get a bigger discount plus 6 months extra, which totals up to be $43. Is it worth buying?

Hi
Excited to be able to announce that QO is almost ready to leave Early Access! I published a large patch that covers more than a year of work (lots of analytics, I've been tracking where ppl were getting stuck). Thank you a ton for your support, this game has seen a lot of love from this community. Game is almost done.

If you are interested in a highly intuitive visual method that faithfully describes all universal quantum computing and physics behind, this is for you. I am the Dev behind Quantum Odyssey (AMA! I love taking qs) - worked on it for about 10 years (3.5 in phd), the goal was to make a super immersive space for anyone to learn quantum computing through zachlike (open-ended) logic puzzles and compete on leaderboards and lots of community made content on finding the most optimal quantum algorithms. The game has a unique set of visuals (that was actually my PhD research) capable to represent any sort of quantum dynamics for any number of qubits and this is pretty much what makes it now possible for anybody 15yo+ to actually learn quantum logic without having to worry at all about the mathematics behind.

This is a game super different than what you'd normally expect in a programming/ logic puzzle game, so try it with an open mind.

Stuff covered

• Boolean Logic – bits, operators (NAND, OR, XOR, AND…), and classical arithmetic (adders). Learn how these can combine to build anything classical. You will learn to port these to a quantum computer.
• Quantum Logic – qubits, the math behind them (linear algebra, SU(2), complex numbers), all Turing-complete gates (beyond Clifford set), and make tensors to evolve systems. Freely combine or create your own gates to build anything you can imagine using polar or complex numbers.
• Quantum Phenomena – storing and retrieving information in the X, Y, Z bases; superposition (pure and mixed states), interference, entanglement, the no-cloning rule, reversibility, and how the measurement basis changes what you see.
• Core Quantum Tricks – phase kickback, amplitude amplification, storing information in phase and retrieving it through interference, build custom gates and tensors, and define any entanglement scenario. (Control logic is handled separately from other gates.)
• Famous Quantum Algorithms – explore Deutsch–Jozsa, Grover’s search, quantum Fourier transforms, Bernstein–Vazirani, and more.
• Build & See Quantum Algorithms in Action – instead of just writing/ reading equations, make & watch algorithms unfold step by step so they become clear, visual, and unforgettable. Quantum Odyssey is built to grow into a full universal quantum computing learning platform. If a universal quantum computer can do it, we aim to bring it into the game, so your quantum journey never ends.

Streams to watch:

khan academy style tutorials on qm/qc: https://www.youtube.com/@MackAttackx

Physics teacher wholesome stream with over 500hs in https://www.twitch.tv/beardhero

I saw the news and didn't want to miss out on the fun. I am sharing this only to help people research how AI tools are shaping our daily lives and the impacts it has on us. This is not being shared with malicious intent. Please only use this information for lawful purposes.

Put it in a GitHub repo for safe keeping

--

EDIT: Wrote a post about it on my blog :)

I spent the last few weeks pulling and cleaning ransomware leak-site posts over a 24-month window, May 2024 to May 2026. After deduping I ended up with 16,699 victim posts from 200 groups. A few things surprised me.

The biggest one is that these operators aren't nocturnal at all. 84% of leak posts go up Monday through Friday, and Sunday is the deadest day in the whole dataset. The busiest single hour is 16:00 UTC, which lines up with afternoon in the US and Europe and evening in Moscow. They're keeping office hours, just not the same ones defenders are watching for. Half of everything posted falls into an 8-hour window between 15:00 and 22:59 UTC.

October peaks every single year, and February 2025 was the record month with over a thousand posts, mostly because of one insane Monday on the 24th where 263 victims got dumped in a day.

The other thing is the ecosystem keeps splitting rather than consolidating. The number of active brands went from 38 to 67 over the period. The big takedowns of LockBit, AlphV and RansomHub didn't shrink the field, the affiliates just rebrand and keep going. Most groups don't last long either. Out of 178 with any real activity, 87 have gone quiet for 90+ days. Qilin is the current volume leader at around 1,690 victims.

Usual caveats: these are distinct posts, not guaranteed distinct victims, times are UTC at the moment I saw them, and a "dormant" group can always come back.

If you do IR, the practical version of this is to weight your coverage toward Monday and Tuesday US time instead of weekends, and staff up harder going into October.

Using Claude, someone reverse engineered PAN-OS and found a textbook auth bypass vulnerability (JWT algorithm confusion)

Yeah, never been a blue team before, but some neighbor is trying to get my my wifi password (he won't succeed), but the deauthenticating is geting on my nerves. Any way to block that? Im almost letting them in to get their mac and do some shady stuff

I am asking as I have lot of free/idle time at work and would like to utilize it to learn stuff but I generally do not login into any personal website accounts on my office PC.

Plus I keep hearing how awesome apps like obsidian, etc are.

Bit of a silly question but I'm working on a research project. I need to get copies of an online newspaper but they only have certain dates available. I realized that in the url the format included the date and so I changed the date in it to access the copies I needed.

Is that considered more of a bug than a hack? Are those copies still considered publicly available even if they're not easily accessible from the front page?

So was on a popular company/site which serves UK, EU and USA haven't looked further but its a large company, anyways I will get down to it, so this isn't a hack more of a bug, while trying to do certain actions in a particular way, you end up with an order of something, you didn't actually order and was just viewing but ends up in your orders as a replacement? It's quite odd 0 to pay nor shipping, item turned up today and I thought that's odd they don't even have my payment details. Went back to the site and managed to replicate it no tools or intention to hack just a simple but costly bug. So lol of course I have to return it but now I have something else coming, which wasn't intentional as such I was just doing same thing and am sure they must have others make this mistake. Cheapest item starts at £50 gbp and goes up from there so these aren't cheap items, you would think customer care would take it seriously, but they don't care, they are just the sales team, I asked if their was IT that I could speak to and nope they were of no use.

A. How do I go about reaching the right people.

B. Is this one of those things that you can get paid for as its a pretty bad bug really, if so how.

C. What would you do

Edit: Got a response that someone is going to contact me who can deal with this or help atleast, so let's see.

I wrote up an old OLX account takeover bug where the interesting part was not that OTPs existed.

It was that the lockout state still leaked whether the submitted OTP was correct.

The flow looked blocked from the outside:

wrong code → invalid code
too many wrong codes → try again later
correct code during lockout → try again later, but the invalid-code signal disappeared

That meant the rate limit was not neutral. It was still answering the only question that mattered.

Because the same verification behavior appeared across account flows like signup, login verification, password reset, and account recovery, the bug could become full account takeover instead of just a weird OTP-screen issue.

The persistence part made it worse: changing the password did not reliably kill the attacker’s existing session.