Pudica ART

Pudica Automated Remediations & Threat-Response

[Pudica ART @PudicaART]

Don't just score risk. Sever it. 🛡️

Introducing PUDICA Active Defense: The world's first CTIRM platform.

📡 SENSE the exposure.
⚡ REACT inside the isolated GoldenVault.
🛡️ RECOVER using patent-pending CaBC technology.

Explore: https://t.co/qKSVA5PLYM
#CyberSecurity #CTIRM

[Pudica ART @PudicaART]

In nature, survival requires instant adaptation. 🌿 Watch how the Mimosa Pudica plant instinctively folds to survive threats.

This is the biological blueprint behind our autonomous Risk Operations Center (ROC). Stop chasing alerts.

#CyberSecurity #ActiveDefense #InfoSec #vpilot

[Pudica ART @PudicaART]

Happy New Year! 🎆 Is your security ready for the 2026 horizon?

Stop flying blind. V Pilot Cyber Solutions presents the 5D Suite—5 specialized pilots for end-to-end protection:

See the full overview 👇Your Flight Plan is ready. ✈️

https://t.co/9sMy7Owv1G #VPilot #CyberSecurity

[DevopsCube @devopscube]

Most DevOps engineers focus on automation.

But,

DevOps today is much more than CI/CD pipelines.

It is also about understanding how systems actually work and how to design them to survive failures.

In that context,

One concept that every DevOps engineer should know is the Write-Ahead Log (WAL).

We recently shared a short post explaining how WAL works, with simple real-world examples.

👉 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: https://t.co/17AjRjHfqO

If you want to see how large-scale systems apply this concept in the real world, Netflix’s data platform is a great example.

They have built their resilient data platform around the WAL principle for data durability even in case of failures.

14000+ DevOps engineers read our Devops newsletter.

We send deep dives, practical tips, and guides straight to your inbox.

Architecture Source: Netflix Tech blog (added in blog)

#devops

[NullSecurityX @NullSecurityX]

Blind SQL injection
When an app hides query results, attackers extract data via side-channels: boolean-based (true/false) or time-based (delays). Redacted example: IF((SELECT SUBSTRING(secret,1,1)='a'), SLEEP(5),0)
Effective against blind/WAFed targets #BugBounty #Infosec #Sqli

[Dark Web Informer @DarkWebInformer]

🚨 CVE-2025-55177 & CVE-2025-43300: WhatsApp 0-Click Crash

CVE-2025-43300 GitHub: https://t.co/hmBnaQ0yxK

[Cyber Security News @The_Cyber_News]

🚨 WhatsApp 0-Click Vulnerability Exploited Using Malicious DNG File

Read more: https://t.co/WKNPWKfNmT

📌 WhatsApp 0-click remote code execution (RCE) vulnerability affecting Apple’s iOS, macOS, and iPadOS platforms, detailed with a proof of concept demonstration.

📌 The attack chain exploits two distinct vulnerabilities, identified as CVE-2025-55177 and CVE-2025-43300, to compromise a target device without requiring user interaction.

📌 The exploit, demonstrated in a proof-of-concept (PoC) is initiated by sending a specially crafted malicious (DNG) image file to a victim’s WhatsApp account.

📌 As a “zero-click” attack, the vulnerability is triggered automatically upon receipt of the malicious message, making it particularly dangerous as victims have no opportunity to prevent the compromise.

#cybersecuritynews #whatsapp

[Mashood K @fromcodetocloud]

📍Multi-Stage Docker build example

👉Stage 1 (Builder) → Install all dependencies and build the app.

👉Stage 2 (Production) → Copy only the built output and production

👉dependencies → smaller image, faster deploy.

👉Benefit → Keeps your final Docker image clean, light, and secure.

[TheCyberPatronNetwork © @TheCyberPatron_]

All listed SOC certifications are free:🚨

1. Coursera - Security Operations Center (SOC) Fundamentals
https://t.co/euZa0HA79L

2. Cisco SOC Analyst (CCST)
https://t.co/qgKhC28jTj

3. TryHackMe SOC Level 1
https://t.co/saqEns4ljy

4. LetsDefend SOC Analyst Path
https://t.co/He1TdqdOww

5. Splunk Fundamentals 1 (SOC focus)
https://t.co/qQGmocQs5k

Each program provides free training and an official certificate or badge at no cost.

[Hussein Nasser @hnasr]

WebSocket has their own Keep Alive mechanisms just like TCP, and it is called PING , PONG.

The main reason is to keep the connection alive, check if the other peer is still connected and I think you can send data inline as part of the PING or PONG (never tried it though).

Another important point is WebSockets can pass through intermediaries (proxies), so it may span multiple TCP connections. As a result TCP keep alive by itself isn't enough. By sending a PING, that web socket frame passes through multiple TCP connections through intermediaries refreshing them.

Wireshark decrypting TLS so we can see what's going on is always handy, thanks to Chrome allowing me to write the TLS keys to disk (SSLKEYLOGFILE env)

[AlexFx @itzalexfx]

21 dark web tools for OSINT professionals

[SecurityWeek @SecurityWeek]

160,000 Impacted by Wayne Memorial Hospital Data Breach https://t.co/n3kak0iBl0

[SecurityWeek @SecurityWeek]

Threat Actor Connected to Play, RansomHub and DragonForce Ransomware Operations https://t.co/Wdz75EvV6n

[Pudica ART @PudicaART]

https://t.co/REnyqR2BUj

[Pudica ART @PudicaART]

Is your organization prepared to respond to a security incident in your AKS environment?

Our 5-Pilot experts perform digital forensics and incident response (DFIR) on a compromised AKS cluster #5Pilot #VPilot #CloudForensics #AzureSecurity #AKS #CyberSecurity #PhoenixDR #SIFT

[Pudica ART @PudicaART]

#5Pilot #vPilot #CyberSecurity