a6

[Censys @censysio]

🚨 FortiBleed Exposes Credentials Associated with Fortinet Infrastructure

Researchers report a dataset containing credentials tied to ~73,932 Fortinet firewall URLs across 194 countries. This is not a new vulnerability, the risk is exposed or compromised credentials.

Rotate credentials, enforce MFA, and validate internet-facing FortiGate assets.

Read our analysis: https://t.co/phaERJYS0R

[CyberSudo @Cyber_Sudo]

🔎 Fastest Way to Find Leaked Databases on the Internet

⚠️ Before anything: always use a virtual machine and keep it isolated from your main network. Also make sure to check the laws in your country before proceeding.

Now that’s out of the way 👇

The first step is simple: gather as much information as possible about the leaked database.

Look for news articles, blog posts, or forum discussions about the breach 👀

Try to identify:
• What data was leaked
• Possible filenames or aliases
• Where it was originally shared

A quick Google search often reveals useful details like:
📌 Where it was posted (Telegram, forums, etc.)
📌 The dataset name
📌 The file type (SQL, TXT, 7z, etc.)

This helps you narrow your search significantly.

🎯 Example:
Let’s say you’re looking for a file called leaked.7z mentioned on Telegram.

You can use:
site:https://t.co/fr5ddXnMYh "leaked.7z"

This helps you quickly find where the file is being discussed or referenced across Telegram channels.

If you want to learn much more Advanced methods,

Check out the course link: https://t.co/8O2VkAXBio

[Vivek | Cybersecurity @VivekIntel]

🛡️ Anthropic Cybersecurity Skills - The Largest Open-Source Cybersecurity Skills Library for AI Agents

Anthropic Cybersecurity Skills is a collection of 754 production-grade cybersecurity skills across 26 security domains, designed to give AI agents structured workflows for DFIR, Threat Hunting, Threat Intelligence, Cloud Security, Web Security, Pentesting, Malware Analysis, SOC Operations, and more.

Each skill is mapped to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, MITRE D3FEND, and NIST AI RMF, making it a powerful knowledge base for Claude Code, Copilot, Cursor, Gemini CLI, Codex CLI, LangChain, CrewAI, AutoGen, and other AI agent platforms.

🔗 https://t.co/SfV3E8nI0G

#CyberSecurity #ThreatIntel #DFIR #SOC #AIAgents #MITRE #InfoSec

[Vivek | Cybersecurity @VivekIntel]

🧰 𝗠𝗨𝗦𝗧-𝗛𝗔𝗩𝗘 𝗕𝗨𝗥𝗣 𝗦𝗨𝗜𝗧𝗘 𝗘𝗫𝗧𝗘𝗡𝗦𝗜𝗢𝗡𝗦
𝗙𝗢𝗥 𝗪𝗘𝗕 𝗣𝗘𝗡𝗘𝗧𝗥𝗔𝗧𝗜𝗢𝗡 𝗧𝗘𝗦𝗧𝗜𝗡𝗚

━━━━━━━━━━━━━━━━━━

🔐 𝗔𝗨𝗧𝗛𝗢𝗥𝗜𝗭𝗔𝗧𝗜𝗢𝗡 & 𝗔𝗖𝗖𝗘𝗦𝗦 𝗖𝗢𝗡𝗧𝗥𝗢𝗟

• BurpLay → replay requests to detect privilege escalation
• AuthMatrix → test access across roles
• Autorize → auto-detect authorization flaws
• Auth Analyzer → test with custom tokens
• Burp SessionAuth → session-based privilege issues
• Authz → quick authorization testing

━━━━━━━━━━━━━━━━━━

🔁 𝗥𝗘𝗤𝗨𝗘𝗦𝗧 𝗔𝗨𝗧𝗢𝗠𝗔𝗧𝗜𝗢𝗡

• AutoRepeater → automate request replay + diff
• IncrementMe Please → auto-increment parameters

━━━━━━━━━━━━━━━━━━

🔍 𝗥𝗘𝗖𝗢𝗡 & 𝗗𝗜𝗦𝗖𝗢𝗩𝗘𝗥𝗬

• LinkFinder → extract endpoints from JS
• JS Miner / JS Parser → find sensitive data in JS

━━━━━━━━━━━━━━━━━━

🔐 𝗧𝗢𝗞𝗘𝗡 & 𝗔𝗨𝗧𝗛 𝗧𝗘𝗦𝗧𝗜𝗡𝗚

• JWT Editor → test JWT vulnerabilities
• Turbo Intruder → high-speed attacks (race, brute)

━━━━━━━━━━━━━━━━━━

🧪 𝗙𝗨𝗭𝗭𝗜𝗡𝗚 & 𝗦𝗖𝗔𝗡𝗡𝗜𝗡𝗚

• ActiveScan++ → improved scanning coverage
• Backslash Powered Scanner → injection detection

━━━━━━━━━━━━━━━━━━

📦 𝗔𝗗𝗩𝗔𝗡𝗖𝗘𝗗 𝗔𝗧𝗧𝗔𝗖𝗞𝗦

• HTTP Request Smuggler → find smuggling bugs
• Content Type Converter → bypass filters

━━━━━━━━━━━━━━━━━━

🧠 𝗣𝗥𝗢𝗗𝗨𝗖𝗧𝗜𝗩𝗜𝗧𝗬

• Logger++ → advanced request logging
• Flow → visualize request flow

━━━━━━━━━━━━━━━━━━

⚠️ 𝗥𝗘𝗔𝗟𝗜𝗧𝗬

Installing tools ≠ finding bugs
Understanding logic = finding bugs

━━━━━━━━━━━━━━━━━━

🎯 𝗨𝗦𝗘 𝗧𝗛𝗜𝗦 𝗟𝗜𝗞𝗘 𝗔 𝗣𝗥𝗢

Start with recon → test auth → fuzz → automate → verify

━━━━━━━━━━━━━━━━━━

🔗 𝗕𝘂𝗿𝗽 𝗘𝘅𝘁𝗲𝗻𝘀𝗶𝗼𝗻𝘀 (𝗢𝗳𝗳𝗶𝗰𝗶𝗮𝗹)
https://t.co/UrWqcuPRJe

━━━━━━━━━━━━━━━━━━

#BurpSuite #WebSecurity #Pentesting #BugBounty #InfoSec

[Navaporn @tdokdak]

ดี!

[☀️🍀💵Tikkie วัยรุ่นสร้างตัว 💵🍀☀️ @econtikkie]

สรุปหนังสือ think and trade like a champion จากเพจสรุปให้ค่ะ 🙇🏻‍♀️

https://t.co/4KqJiLjtYi

[mineharu𖧷˚ ༘ @mineharukung]

การที่ Will Smith เข้าไปตบ Chris Rock เป็นเรื่องที่ไม่ถูกต้องก็จริง แต่การที่ Chris Rock เอาอาการป่วยของภรรยาของ Smith มาเมคฟันมันโคตรแย่ เพราะความเจ็บป่วยมันไม่ใช่เรื่องตลก ก็ไม่แปลกที่จะโดนตบสั่งสอน ไม่ได้สนับสนุนความรุนแรงแต่กับบางคนก็สมควร

#Oscars 

[Sahil Bloom @SahilBloom]

If you’re building your career…

Prioritize these core principles:

[Adisorn P. @jackie14AP]

ใช้นิ้วขยายภาพนี้ให้ใหญ่ขึ้น จะเข้าใจครับ
ว่าเหตุใดภาพนี้จึงเป็น National Geographic Picture of The Year.

[Bitcoin Archive @BitcoinArchive]

Just received this book on #Bitcoin by our friend and human rights activist Alex @gladstein

Can’t wait to read it.
Get your copy now 👇

https://t.co/hS8da7Oqxt

[a6 @KanC_66]

@AFP Maybe they will practice lockdown to prepare for some crisis in the future? 🙄

[vitalik.eth @VitalikButerin]

@ioveamg1 说一个国家的人必须支持自己国家的政府并不是爱国，而是一种奴隶制。真正的爱国有时候需要对抗自己国家发出的邪恶，因为这样才能帮自己国家变得更美

[Ming Zhao @FabiusMercurius]

10 Investing Books That Changed My Life & PnL

Here's how I learned to understand markets.

Start by learning the trading strategies & decision-making building blocks of:
- macro
- value
- quant
- high frequency

The market is literally the sum of their actions.
🧵
👇

[หมาอ้วง 🐶 @arthsarun]

ร้านโคตรลับจริง อยู่รังสิต อร่อยจริง อาแปะ อาซิ่มทำกันอยู่ 2 คนต้องใจเย็น ๆ ร้านไม่มีคนเลยแต่อร่อยจริงพ่อออออออ ข้าวผัดโคตรดี

[Sam Raimi Updates @SamRaimiUpdates]

The impact of Sam Raimi’s Spider-Man 3.

[Olya @olya_borderless]

The Russians were thinking Ukrainians would meet them with flowers but they meet them with Molotov cocktails.

[naiive @naiivememe]

#Bitcoin https://t.co/JxTyZj2EMg

[Investing.com @Investingcom]

⚠️BREAKING:

*EUROPEAN STOCKS, U.S. FUTURES ERASE GAINS AS KREMLIN SAYS BIDEN-PUTIN SUMMIT NOT A DONE DEAL - https://t.co/cfGydvw7tr