Ali Faraj

InfoSec - Coffee Addict - Gamer - All Tweets Are My Own

[0xMarioNawfal @RoundtableSpace]

THE NEW SENIOR ENGINEER SKILL ISN'T WRITING MORE CODE

IT'S KNOWING HOW TO MANAGE 5 CLAUDE AGENTS WITHOUT LOSING CONTROL

[Qwen @Alibaba_Qwen]

🚀 Introducing the Qwen 3.5 Small Model Series
Qwen3.5-0.8B · Qwen3.5-2B · Qwen3.5-4B · Qwen3.5-9B

✨ More intelligence, less compute.
These small models are built on the same Qwen3.5 foundation — native multimodal, improved architecture, scaled RL:
• 0.8B / 2B → tiny, fast, great for edge device
• 4B → a surprisingly strong multimodal base for lightweight agents
• 9B → compact, but already closing the gap with much larger models
And yes — we’re also releasing the Base models as well.
We hope this better supports research, experimentation, and real-world industrial innovation.
Hugging Face: https://t.co/wFMdX5pDjU
ModelScope: https://t.co/9NGXcIdCWI

[Tom Dörr @tom_doerr]

Library of skills for AI agents

https://t.co/DVRYNIT4mS

[Prukalpa ✨ @prukalpa]

https://t.co/sapkGNCqaB

[Uncoiled Firearms and Gun Range @Uncoiledrange]

🔥 JUGGERNAUT EVENT – MAY 30–31 | 10AM–6PM 🔥
Hosted at Uncoiled Firearms, Livonia, MI
Get ready for two action-packed days featuring:
✅ Daniel Defense, Trijicon, Predator Armor, USCCA – All Under One Roof
🎯 FREE Trijicon MRO HD with select Daniel Defense purchases
💰 10% OFF Trijicon, Predator Armor & SilencerCo
🛡️ Exclusive USCCA/Uncoiled Membership Offers
🎟️ Raffles • 🎁 Giveaways • 🧢 Swag Bags • 💥 Live Demos • 🍔 Food Truck & More!
📍 Be there and experience the ultimate gear + training event of the year!

[Lukas Beran @lukasberancz]

Microsoft Graph logs store a wealth of information that could prove to be crucial in your cloud investigations.

To help you navigate and interpret this data in your investigations, Microsoft IR has developed a blog on threat hunting in Microsoft Graph activity logs, providing an overview, real-world examples, and pre-built KQL queries: https://t.co/k1OoP1TMh5

#MicrosoftIR #ThreatHunting #MSGraph #KQLtotherescue

[rootsecdev @rootsecdev]

Just a fun reminder about MFA and emergency break glass admin accounts. You must back them with FIDO2 keys prior to enforcement. Please use 2 keys per account in case one fails.

https://t.co/ycPmJHNzfw

[rootsecdev @rootsecdev]

The cloud is becoming a more interesting place of abuse each day.

[vx-underground @vxunderground]

Looking forward to the local file that can be exfiltrated to a remote host so you can use AI, or whatever, to closely review every single thing someone has done.

tl;dr Redline "recall" coming soon

[Binni Shah @binitamshah]

New XZ Backdoor Scanner Detects Implants In Any Linux Binary : https://t.co/LljYnNOyX2 credits @binarly_io

[The Hacker News @TheHackersNews]

🚨 Urgent: Critical Jenkins RCE #vulnerability (CVE-2024-23897) discovered.

Hackers can remotely control your CI/CD pipelines. Patch immediately to prevent malicious code in builds.

Details here: https://t.co/AdrFH8Yl5P

#cybersecurity #informationsecurity

[Ali Faraj @InfoSecAli]

Shoutout to @FN_America for excellent customer service!

Full transparency on issues found/resolved and a video of everything working as expected.

[Ali Faraj @InfoSecAli]

Looking forward to reading @AliAbdaal book this break.

May actually be the first book I read end to end this year 😂

[Ali Faraj @InfoSecAli]

@squigglymips @shmoocon Not sure, I clicked the link and kept getting a 404. They sold out quickly.

[📔 Michael Grafnetter @MGrafnetter]

Windows Server 2025 #ActiveDirectory might introduce a 3rd type of service accounts called Delegated Managed Service Account (dMSA). The msDS-DelegatedManagedServiceAccount class has been added to the schema and their creation is already supported in PWSH. Details not public yet.

[vx-underground @vxunderground]

August 2023 (version 1.82) of Visual Studio Code now supports Port Forwarding to allow easier access from Threat Actors.

inb4 Visual Studio Code as a C2?

Very cool 👍

More information: https://t.co/zZuqHAZkdY