𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩

𝐄𝐬𝐬𝐞𝐧𝐭𝐢𝐚𝐥 𝐀𝐜𝐜𝐨𝐮𝐧𝐭 𝐃𝐚𝐭𝐚 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲 𝐒𝐞𝐫𝐯𝐢𝐜𝐞𝐬


[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

TIPS ON HOW TO PROTECT YOUR SOCIAL MEDIA ACCOUNTS LIKE A PRO : use unique passwords, enable two-factor authentication and stay alert for phishing scams or security breach via spamming. #StaySafeOnline

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

@NoahLopez17p9 @snapchatsupport Send me a DM

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

@PetroSChem Send a DM

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

@PetroSChem @Theo__clbb Send me a DM

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

@bigthreefanhub @TeamYouTube Send me a DM

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯��𝐫𝐲✩ @STACEY_NERD]

@AshokJangirLLB @fyel11 Send US a DM

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

@DreamMasterFTW @sagokaf35kef About?

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

@HendAbd1996 @hanoo_96 @TeamYouTube Send a DM

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

⚠️ Before clicking any login link, verify the website address carefully. Phishing websites are designed to steal your credentials.

Think before you click.
#StaySafeOnline #CyberAwareness #stacey_nerd

[𝐒𝐭𝐚𝐜𝐞𝐲 𝐐𝐮𝐢𝐧𝐧| 𝐏𝐫𝐨 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲✩ @STACEY_NERD]

💡 Daily Reminder:
Keep your recovery email and phone number up to date. They can make recovering your account much easier if you ever lose access.

#AccountRecovery #OnlineSecurity #stacey_nerd

[International Cyber Digest @IntCyberDigest]

‼️BREAKING: Telegram's core t[.]me domain has been placed on serverHold at the .me registry, a registry-level status that drops it from DNS worldwide and dead-ends every t[.]me link.

Domain records show the change happened today, with no public explanation yet from Telegram, the .me registry, or backend operator Identity Digital.

[Hacking Articles @hackinarticles]

Kerberos Constrained Delegation Exploitation

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Kerberos Constrained Delegation (KCD) can be abused to impersonate any domain user and access critical services when misconfigured.

⚡ Attack Highlights
🔍 Enumerate delegation settings (msDS-AllowedToDelegateTo)
🎯 Identify accounts with Protocol Transition enabled
🎟 Abuse S4U2Self + S4U2Proxy to impersonate users
🔐 Request service tickets as Administrator
🚀 Gain SYSTEM access & dump credentials

💡 With Protocol Transition enabled, attackers can generate service tickets for any user without knowing their password and access delegated services.

📖 Article: https://t.co/OLqJmZ61qp

#CyberSecurity #ActiveDirectory #Kerberos #RedTeam #Pentesting #PrivilegeEscalation #InfoSec

[Cyber Security News @The_Cyber_News]

Microsoft is retiring phishable SMS and voice-based multifactor authentication in Microsoft Entra ID, replacing them with passkeys as the default sign-in method starting September 1, 2026.

The move responds to a surge in AI-enabled phishing campaigns that Microsoft Threat Intelligence has observed achieving click-through rates as high as 54%, compared to roughly 12% for traditional phishing attempts.

Beginning September 1, 2026, users currently enabled for SMS or voice authentication will be automatically enrolled in passkeys, receiving a registration prompt the next time they perform multifactor authentication.

#cybersecuritynews

[ayesha @ayesha_fatiima]

Cybersecurity students the first time they open Kali Linux.

[Hacking Articles @hackinarticles]

Impacket for Pentester: Net Script

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Impacket is a powerful Python toolkit used by pentesters to interact with network protocols and perform advanced Active Directory attacks, lateral movement, and credential abuse.

⚡ Key Features of Impacket (.NET / Network)
🔍 Low-level access to SMB, RPC, LDAP & Kerberos
🧩 Multiple tools like psexec, wmiexec, smbexec
⚙️ Supports password, NTLM hash & Kerberos auth
🛡️ Enables remote command execution
📡 Automates AD attack techniques

🎯 Attack Capabilities
💥 Lateral Movement via SMB (psexec, wmiexec)
🧪 Credential Dumping (secretsdump, DCSync)
🧬 Kerberos Attacks (Pass-the-Ticket, PtH)
🌐 MSSQL exploitation & remote queries
⚡ ACL abuse & privilege escalation

📖 Article: https://t.co/vco73Kwrhn

#ActiveDirectory #Impacket #RedTeam #Pentesting #CyberSecurity #EthicalHacking #InfoSec

[Hacking Articles @hackinarticles]

Impacket DACLedit: Active Directory Privilege Escalation 🔥

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

Impacket-dacledit is a powerful tool used to modify Active Directory DACLs, allowing attackers to abuse permissions like WriteDACL, WriteOwner, and FullControl to escalate privileges and take over domain objects.

📚 Techniques Covered in This Guide

⚙️ Lab Setup
🧠 Understanding AD ACL & DACL
🔎 Enumerating Object Permissions
⚡ WriteDACL Abuse using dacledit
🔑 Granting FullControl over Users/Groups
👥 Adding User to Domain Admins
💻 WriteOwner Abuse & Ownership Takeover
🔄 Reset Password without Knowing Current
📡 Privilege Escalation using DACL Misconfigurations
🛠 Post-Exploitation with Impacket Tools

👉 Abuse of DACL permissions can lead to full domain compromise if misconfigured and not monitored properly.

📖 Article:
https://t.co/tnfgHLLGoq

#CyberSecurity #EthicalHacking #Pentesting #RedTeam #ActiveDirectory #Impacket #InfoSec

[Dark Web Informer @DarkWebInformer]

🚨🇧🇷 Colégio Dominus Vivendi dataset allegedly leaked

A forum actor claims to have uploaded data tied to Colégio Dominus Vivendi, a school management platform for K-12 private institutions, preparatory academies, and learning centers.

The listing says the exposed dataset contains 2,004 rows. The visible sample appears to show student-style records with IDs, names, dates, gender fields, class or group-like codes, timestamps, and related record references.

The post frames the leak as a downloadable dataset, with the actor claiming the data has been compromised and providing a public file link.

This claim is currently unverified.

💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://t.co/281Qjc6p2J

[AI at Meta @AIatMeta]

Alongside the release of Muse Image, we’re sharing an early preview of Muse Video. It offers competitive performance in prompt adherence, visual fidelity, and temporal consistency.

We’re investing in areas with current performance gaps, such as audio-video synchronization and physically accurate fast motion.