🇮🇨 Libraman

Seguridad Informática y 'sus alrededores'. Con salitre en mi piel y volcanes en mis entrañas.

[ForoAntispyware @FAntispyware]

El FBI desmantela un servicio masivo de phishing impulsado por IA que utilizaba un millón de URL
https://t.co/hs8Mw1wTs8

[Nav Toor @heynavtoor]

You paid $1,000 for a Samsung phone.

Samsung pre-installed dozens of apps you never asked for.

Facebook. Microsoft Office. Netflix. Samsung's own browser. Samsung's own email. Samsung's own calendar. Samsung's own notes. Samsung's own cloud. Samsung's own payment app. Samsung's own voice assistant.

Duplicates of apps you already use. Running in the background. Eating your battery. Using your storage. You cannot delete them. The delete button is greyed out.

You paid for the hardware. They control the software.

Xiaomi is worse. Pre-installed games. Shopping apps. Some serve full-screen ads on your phone.

Carriers add more. T-Mobile, Verizon, AT&T each pre-install apps you will never open. Uninstall button? Greyed out.

Someone built a tool that removes every single one. No root needed.

It's called Universal Android Debloater. Written in Rust. Cross-platform GUI. Plug your phone in. Click. Gone.

→ Remove any pre-installed app. Samsung, Xiaomi, OnePlus, Oppo, Vivo, Huawei, Motorola, Nokia.
→ Remove carrier bloatware. T-Mobile, Verizon, AT&T, and carriers worldwide.
→ No root required.
→ Restore anything you removed. One click.
→ Battery life improves immediately.
→ Storage freed. Gigabytes recovered.
→ Privacy improved. Fewer apps tracking you.
→ Community-maintained database of known bloatware.
→ Works on Windows, macOS, and Linux.

Here's the wildest part:

The phone you paid for is not yours. It is a billboard you carry in your pocket. The manufacturer sold you hardware and then sold your attention to their partners.

This tool gives you YOUR phone back.

GPL-3.0. Written in Rust. Community-maintained.

But DO NOT use Universal Android Debloater.

We should all keep running dozens of apps we never installed on the phone we already paid for.

[Utkarsh Sharma @techxutkarsh]

If you have a Gmail account, you need to read this.

Google's AI now scans your emails and attachments, bank statements, tax files, medical letters, all of it. It turned on by default, and there's a class-action lawsuit over how.

Here are 5 moves to shut it off, the switch is hidden in two places:

[🇮🇨 Libraman @JFNoda]

@TurismoLZT 😟😟

[Dios @diostuitero]

Yo del Papa sólo voy a decir lo que decía mi amigo @Evocador : Qué envidia que lo primero que ve al levantarse por la mañana es a su jefe crucificado.

[CERT Polska @CERT_Polska]

📧 Link do „weryfikacji” konta może prowadzić do utraty danych logowania

📬 Obserwujemy kampanię podszywającą się pod dostawcę usług pocztowych. W treści wiadomości znajduje się informacja o rzekomym planowanym wyłączeniu lub dezaktywacji konta.

⏳ Taki komunikat ma wywołać poczucie pilności i skłonić odbiorcę do szybkiego działania. Link zawarty w wiadomości prowadzi do strony przypominającej panel logowania poczty. W rzeczywistości jest to fałszywa witryna służąca do przechwycenia loginu i hasła, które cyberprzestępcy mogą następnie wykorzystać https://t.co/xfD9SCfzGk. do przejęcia skrzynki oraz innych powiązanych usług 🖥️🔐

W tego typu sytuacjach warto zweryfikować adres strony oraz sprawdzić, czy komunikat jest widoczny także po zalogowaniu do usługi oficjalnym kanałem. Warto również zwrócić uwagę na domenę, z której została wysłana wiadomość. 🔍

Podejrzane wiadomości e-mail i strony internetowe zgłaszaj do CERT Polska za pośrednictwem serwisu https://t.co/NNUSNq6zKr lub w aplikacji mObywatel w usłudze „Bezpieczni w sieci”. 📱

[AzuParaiso @AzuParaiso2]

Canción para el @policia que empujó a una mujer tirándola al suelo, el abuso de poder es el recurso de los cobardes…👇🏻escuchen

[𝗧𝗶𝗺𝗲𝗹𝗲𝘀𝘀 𝗠𝘂𝘀𝗶𝗰 ✨🎵 @Hoang_HQ]

🎸 Brothers In Arms – An anthem of brotherhood and the deep scars of war. #MarkKnopfler

[ForoAntispyware @FAntispyware]

ChatGPT utiliza enlaces compartidos para alojar páginas falsas de interrupciones del servicio y distribuir malware
https://t.co/3eKnd1XSMC

[ForoAntispyware @FAntispyware]

Google Chrome añade protección contra el robo de cookies de sesión para todos los usuarios
https://t.co/IdwRse9ajg

[Brave @brave]

⚠️ Today's browser update (v1.90.128) contains a fix for a Chromium vulnerability that allows websites to plant hidden scripts via the Background Fetch API.

These scripts survive restarts and could be used to track users, run malicious code on their devices, or launch DDoS attacks on others.

You may have already received the automatic Brave update on desktop. If not, you can manually update by visiting 'About Brave' in the browser's settings.

The Android update is waiting on Google Play Store review and should be out soon.

[Cyber Security News @The_Cyber_News]

⚠️ Critical Notepad++ Vulnerabilities Allow Attackers to Execute Arbitrary Code

Source: https://t.co/iSort2Ikje

Notepad++, one of the most widely used open-source text editors for Windows, has released an urgent security update addressing three vulnerabilities, including two arbitrary code execution flaws that could allow attackers to silently run malicious programs on a victim's machine.

The most severe of the three is CVE-2026-48778, which targets the <GUIConfig name="commandLineInterpreter"> tag inside Notepad++'s config.xml file.

📌 CVE-2026-48770 - Crash via malformed XML structure

📌 CVE-2026-48778 - Arbitrary code execution via config.xml

📌 CVE-2026-48800 - Arbitrary code execution via shortcuts.xml

#cybersecuritynews

[Windows Update @WindowsUpdate]

The May 2026 Windows non-security preview update is now available for Windows 11, version 25H2 &amp; 24H2.

https://t.co/6vc9A5hgK7

(🧵1/5)

[Pirat_Nation 🔴 @Pirat_Nation]

Microsoft Defender can now automatically isolate compromised devices during a cyberattack, helping security teams stop threats faster without manual intervention.

If Defender detects a compromised device, it cuts the device off from the network automatically while still allowing remote investigation and remediation.
This prevents attackers from spreading across the network, stealing data, or deploying ransomware.

The new feature is part of Microsoft’s focus on automated threat response in Defender XDR.

Security tools now take real-time action beyond detection and alerts to limit damage:

>Automatically isolates compromised devices
>Helps stop ransomware and lateral movement
>Security teams retain remote access for investigation
>Currently available as a preview in Microsoft Defender for Endpoint

[Mysk 🇨🇦🇩🇪 @mysk_co]

On iOS and macOS, WhatsApp stores chat databases unencrypted in an app group container accessible to apps from the same developer. So all Meta apps on the same iPhone (e.g., Facebook) can read WA chats in plaintext without permission, and users wouldn't be notified. Demo👇

[Pirat_Nation 🔴 @Pirat_Nation]

A huge illegal streaming network operating across Europe has been shut down by authorities in Italy, France, and Germany.

The service reportedly provided unauthorized access to platforms like Netflix, Disney+, DAZN, and Sky.

What’s getting most attention is that Italy is now targeting subscribers as well as the people behind the service.

>Servers and infrastructure linked to the operation were seized during coordinated raids.
>Investigators say the network used offshore systems and rotating access methods to avoid detection.
>First-time subscriber fines reportedly start at around €154.
>Repeat violations could lead to penalties of up to €5,000.
>Italy’s “Piracy Shield” system is being used to quickly block illegal streams.
>Authorities are increasing cooperation with telecom providers and financial investigators.

[ForoAntispyware @FAntispyware]

El sitio web de ropa de Kash Patel está intentando engañar a los visitantes para que instalen malware
https://t.co/b8tSuMEfuN

[La Traumatóloga Geek @traumatogeek]

DONAS MEDIO LITRO DE SANGRE. Esto es lo que tu cuerpo hace después.

Es una pregunta estupenda, me la he hecho durante los años de carrera en los que donaba y luego como traumatóloga.

Te sientas en la silla. Te ponen el torniquete. La aguja entra. Diez minutos después sales con una galleta María en la mano y 450 mililitros menos. En los años buenos, te regalaban hasta una plantita.

Tu cuerpo acaba de perder el 10% de su volumen sanguíneo. Y aunque tú vayas tan tranquilo a por el café, dentro ha empezado una operación a contrarreloj.

Lo primero que el organismo nota es la caída de presión. El plasma (que es básicamente agua con sal y proteínas) ha bajado, y eso se arregla rapidísimo. Bebes, comes algo, y en 24 o 48 horas el depósito está lleno otra vez. Por eso te insisten tanto en beber al salir.
Si tuviste un mareo al terminar de donar, te recuperas en horas.

Pero pasan más cosas, esto va por fases.
También has perdido glóbulos rojos. Y eso no se arregla con un vaso de agua.
Tus riñones detectan que llega menos oxígeno y sueltan una hormona, la eritropoyetina. Viaja como un mensajero hasta la médula ósea con un recado muy claro: “fabrica, pero ya.”

Tu médula, que en condiciones normales produce dos millones de glóbulos rojos por segundo (sí, por segundo), acelera el ritmo.

Pero tiene un problema. Necesita hierro. Y con cada donación se te van entre 200 y 250 miligramos del que tenías. Sin hierro no hay hemoglobina. Y la hemoglobina es el núcleo del glóbulo rojo nuevo.

Por eso tu cuerpo tarda entre 4 y 8 semanas en reponer todo lo que ha perdido. En España no te dejan volver a donar hasta dos meses después.

Por eso los hombres pueden donar cuatro veces al año, y las mujeres, tres. Nosotras siempre vamos más justas de hierro por la menstruación.

Tu cuerpo es generoso. Sólo te pide a cambio: hierro y tiempo.
Y mientras tu médula trabaja en silencio, alguien, en algún sitio, sigue vivo el lunes. ¡Gracias por donar!

#LaTraumatologaGeek

[Ihtesham Ali @ihtesham2005]

A guy named nbatman on Reddit accidentally built the most useful website on the internet.

It's called FMHY (Free Media Heck Yeah).

This is the website Google delisted from search for DMCA violations, Reddit shadow-banned for promoting piracy, the Motion Picture Association flagged as a top piracy threat, and the RIAA pressured hosting providers to drop. It is still online. It is still updated every month.

Here's how it works.

FMHY is the index. The wiki itself hosts nothing. It just tells you where every free thing on the internet actually lives, organized into 14 categories with safety ratings on every single link.

→ Movies and shows in 4K from 50+ streaming sites
→ Music at Spotify and Apple Music quality
→ Adobe Creative Cloud, Microsoft Office, AutoCAD, JetBrains
→ Every paid course on every major learning platform
→ 100 million books and papers through Anna's Archive
→ Free alternatives to every paid AI tool
→ A SafeGuard browser extension that flags unsafe sites in real time

It started as a single Google Doc maintained by one Reddit moderator in 2018. Google killed it with a DMCA takedown in 2023.

The community rebuilt the wiki on its own domain, mirrored it to GitHub and IPFS, and now runs it across 12 backup domains simultaneously.

There is no company. No CEO. No central server. Six anonymous volunteers maintain the entire thing in their spare time. Donations through Ko-fi pay for the hosting. Nobody profits.

Hollywood can't shut this down. Spotify can't shut this down. Adobe can't shut this down.

The entire subscription economy is held together by you not knowing this wiki exists.

https://t.co/AAr2rLlqgy

[The Smart Ape 🔥 @the_smart_ape]

> install chrome in 2010 because it's faster
> let it save every password
> let it autofill cards, addresses, ssn
> google builds a file on you fatter than your therapist's
> "we don't sell your data" → FALSE
> data broker leak: 800m chrome profiles dropped on a torrent
> your meds, your porn, your debts, your affair: all of it
> insurance premium doubles
> loan denied, no reason given
> landlord ghosts you
> nobody owes you an explanation
> mfw "if you have nothing to hide you have nothing to fear"