SAWCyber

inténtalo una y otra vez

[Dhanian 🗯️ @e_opore]

𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗥𝗼𝗮𝗱𝗺𝗮𝗽 𝟮𝟬𝟮𝟲.

𝟭. 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗙𝘂𝗻𝗱𝗮𝗺𝗲𝗻𝘁𝗮𝗹𝘀

Start by building a strong foundation in computer systems, networking, and security principles.

🔹 CIA Triad: Confidentiality, Integrity, and Availability
🔹 Security Principles: Authentication, authorization, least privilege, and defense in depth
🔹 Threats & Vulnerabilities: Malware, phishing, ransomware, exploits, and social engineering
🔹 Risk Management: Identifying, assessing, and mitigating security risks
𝟮. 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆
Understanding how networks communicate is essential for protecting modern infrastructure.
🔹 TCP/IP: Core networking protocols
🔹 DNS: Domain name resolution and security
🔹 HTTP/HTTPS: Web communication and TLS
🔹 Firewalls: Controlling network traffic
🔹 VPNs: Secure remote connectivity
🔹 IDS/IPS: Detecting and preventing malicious traffic
🔹 Wireshark: Network traffic analysis
🔹 Nmap: Network discovery and security assessment

𝟯. 𝗟𝗶𝗻𝘂𝘅 & 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆

Learn how operating systems work and how to secure them.

🔹 Linux: Users, permissions, processes, services, logs, and hardening
🔹 Windows: Active Directory, Group Policy, PowerShell, and security controls
🔹 File Permissions: Access control and privilege management
🔹 System Hardening: Reducing attack surfaces
🔹 Security Logs: Detecting suspicious activity
𝟰. 𝗣𝗿𝗼𝗴𝗿𝗮𝗺𝗺𝗶𝗻𝗴 & 𝗦𝗰𝗿𝗶𝗽𝘁𝗶𝗻𝗴
Security professionals need automation and programming skills.
🔹 Python: Security automation and tooling
🔹 Bash: Linux automation
🔹 PowerShell: Windows security automation
🔹 JavaScript: Understanding web application security
🔹 SQL: Understanding database attacks and defenses
🔹 APIs: Securing modern application interfaces
𝟱. 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 & 𝗔𝗰𝗰𝗲𝘀𝘀 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁
Identity has become a central part of modern security architectures.
🔹 IAM: Identity and access management
🔹 MFA: Multi-factor authentication
🔹 RBAC: Role-based access control
🔹 SSO: Single sign-on
🔹 PAM: Privileged access management
🔹 Secrets Management: Protecting credentials, API keys, and tokens
🔹 Machine Identities: Securing service accounts and workloads
𝟲. 𝗪𝗲𝗯 & 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆

Learn how modern applications are attacked and how to defend them.

🔹 OWASP Top 10: Common web application risks
🔹 Authentication Security
🔹 Authorization & Access Control
🔹 Input Validation
🔹 SQL Injection
🔹 Cross-Site Scripting (XSS)
🔹 CSRF
🔹 SSRF
🔹 API Security
🔹 Secure Software Development

𝟳. 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆
Modern applications increasingly run across cloud environments, making cloud security essential.
🔹 AWS Security
🔹 Azure Security
🔹 Google Cloud Security
🔹 Cloud IAM
🔹 Network Security Groups & Firewalls
🔹 Encryption & Key Management
🔹 Cloud Logging & Monitoring
🔹 Cloud Security Posture Management
🔹 Shared Responsibility Model
𝟴. 𝗖𝗼𝗻𝘁𝗮𝗶𝗻𝗲𝗿 & 𝗞𝘂𝗯𝗲𝗿𝗻𝗲𝘁𝗲𝘀 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆
Cloud-native environments require security throughout the workload lifecycle.

🔹 Docker Security
🔹 Kubernetes Security
🔹 Container Image Scanning
🔹 Runtime Security
🔹 Kubernetes RBAC
🔹 Network Policies
🔹 Secrets Management
🔹 Admission Controls
🔹 Supply Chain Security

𝟵. 𝗗𝗲𝘃𝗦𝗲𝗰𝗢𝗽𝘀

Integrate security directly into the software development and deployment lifecycle.
🔹 Secure CI/CD Pipelines
🔹 SAST: Static application security testing
🔹 DAST: Dynamic application security testing
🔹 SCA: Software composition analysis
🔹 IaC Security: Securing Terraform and CloudFormation
🔹 Container Security Scanning
🔹 SBOM: Software Bill of Materials
🔹 Dependency Management
🔹 Secret Detection
𝟭𝟬. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗠𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴 & 𝗦𝗢𝗖
Learn how security teams detect, investigate, and respond to threats.
Tools:
🔹 SIEM: Security information and event management
🔹 Splunk: Security analytics and monitoring
🔹 Microsoft Sentinel: Cloud-native SIEM
🔹 Elastic Security: Security analytics
🔹 Wazuh: Open-source security monitoring
🔹 EDR: Endpoint detection and response
🔹 XDR: Extended detection and response

𝟭𝟭. 𝗧𝗵𝗿𝗲𝗮𝘁 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 & 𝗧𝗵𝗿𝗲𝗮𝘁 𝗛𝘂𝗻𝘁𝗶𝗻𝗴

Learn how to identify attacker behavior and proactively search for threats.

🔹 MITRE ATT&CK: Adversary tactics and techniques
🔹 IOC Analysis: Indicators of compromise
🔹 TTPs: Tactics, techniques, and procedures
🔹 Threat Hunting
🔹 Malware Analysis
🔹 Detection Engineering
🔹 Security Research
𝟭𝟮. 𝗣𝗲𝗻𝗲𝘁𝗿𝗮𝘁𝗶𝗼𝗻 𝗧𝗲𝘀𝘁𝗶𝗻𝗴
Understand offensive security techniques in authorized environments so systems can be tested and strengthened.
🔹 Reconnaissance
🔹 Vulnerability Assessment
🔹 Web Application Testing
🔹 API Testing
🔹 Network Penetration Testing
🔹 Privilege Escalation
🔹 Active Directory Security
🔹 Reporting & Remediation
𝟭𝟯. 𝗜𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲
Learn how organizations respond when security incidents occur.
🔹 Incident Detection
🔹 Incident Triage
🔹 Containment
🔹 Eradication
🔹 Recovery
🔹 Digital Forensics
🔹 Evidence Collection
🔹 Post-Incident Analysis

𝟭𝟰. 𝗭𝗲𝗿𝗼 𝗧𝗿𝘂𝘀𝘁

Modern security architectures increasingly emphasize identity, continuous verification, and minimizing implicit trust.

🔹 Zero Trust Architecture
🔹 Least Privilege
🔹 Continuous Authentication
🔹 Device Verification
🔹 Microsegmentation
🔹 Identity-Aware Access
🔹 Continuous Monitoring
𝟭𝟱. 𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆
AI security is an increasingly important area in 2026 as organizations deploy LLMs and AI agents.
🔹 Prompt Injection
🔹 Data Poisoning
🔹 Insecure AI Outputs
🔹 LLM Application Security
🔹 AI Agent Security
🔹 Model & Data Protection
🔹 AI Supply Chain Security
🔹 AI-Assisted Threat Detection
🔹 Secure AI Governance
𝟭𝟲. 𝗖𝗿𝘆𝗽𝘁𝗼𝗴𝗿𝗮𝗽𝗵𝘆
Understand the technologies used to protect data and communications.
🔹 Symmetric Encryption
🔹 Asymmetric Encryption
🔹 Hashing
🔹 Digital Signatures
🔹 PKI
🔹 TLS
🔹 Key Management
🔹 Post-Quantum Cryptography
𝟭𝟳. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗚𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲 & 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲
Technical security needs to be connected to organizational risk and regulatory requirements.
🔹 Security Policies
🔹 Risk Assessment
🔹 Security Audits
🔹 Privacy
🔹 Compliance
🔹 Business Continuity
🔹 Disaster Recovery
🔹 Security Frameworks

𝟭𝟴. 𝗛𝗮𝗻𝗱𝘀-𝗼𝗻 𝗟𝗮𝗯𝘀 & 𝗣𝗿𝗼𝗷𝗲𝗰𝘁𝘀

Theory alone is not enough. Build practical experience through labs and real-world projects.

🔹 Build a Home Security Lab
🔹 Configure a SIEM
🔹 Analyze Network Traffic
🔹 Build a Vulnerability Scanner
🔹 Secure a Web Application
🔹 Perform Authorized Penetration Tests
🔹 Build a Security Monitoring Dashboard
🔹 Secure a Kubernetes Cluster
🔹 Build a Threat Detection Pipeline
🔹 Create a Secure Cloud Architecture
𝗠𝗮𝘀𝘁𝗲𝗿 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻 𝟮𝟬𝟮𝟲 𝗯𝘆 𝗰𝗼𝗺𝗯𝗶𝗻𝗶𝗻𝗴 𝗳𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻𝘀, 𝗵𝗮𝗻𝗱𝘀-𝗼𝗻 𝗹𝗮𝗯𝘀, 𝗰𝗹𝗼𝘂𝗱 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝗔𝗜 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝗭𝗲𝗿𝗼 𝗧𝗿𝘂𝘀𝘁, 𝗗𝗲𝘃𝗦𝗲𝗰𝗢𝗽𝘀, 𝘁𝗵𝗿𝗲𝗮𝘁 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻, 𝗮𝗻𝗱 𝗶𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗿𝗲𝘀𝗽𝗼𝗻𝘀𝗲. Current 2026 roadmaps increasingly emphasize AI security, identity-first architectures, cloud-native security, and practical labs.

Grab 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗘𝗯𝗼𝗼𝗸:
https://t.co/KlncU5bTid

[Cyber_Racheal @CyberRacheal]

Be warned. Hackers can use fake pdf files to hack you through WhatsApp.

(For educational purposes)!

Phishing pro 😅.

[Monica @monicaa_AI]

50 websites you’ll wish you knew sooner 👀

1. https://t.co/aP0gG5HeDV — Discover useful AI tools
2. https://t.co/9E6yoYai2s — Find AI tools for almost anything
3. https://t.co/oOGxZ4LJZI — Explore AI tools & apps
4. https://t.co/53cuA3logs — Try community-built AI demos
5. https://t.co/2LUr5F5RGm — Run AI models online
6. https://t.co/7mZHXJei1C — AI video & creative tools
7. https://t.co/csFuPz6mRZ — AI image generation
8. https://t.co/9PinMwGl5e — Create images with strong text rendering
9. https://t.co/3WOqKu80pN — Generate AI music
10. https://t.co/1wfT3g3paS — AI voice generation
11. https://t.co/YS3kBWGBRW — Create presentations with AI
12. https://t.co/Qp2Xq9Fpej — Turn ideas into visual diagrams
13. https://t.co/aps8nNA5Vf — Collaborative online whiteboard
14. https://t.co/75uJHDJF8r — Simple hand-drawn style diagrams
15. https://t.co/uIx5iYVvn8 — Create diagrams & flowcharts
16. https://t.co/SOxbkQugYm — Open-source design platform
17. https://t.co/Lv0CAJvVgx — Generate color palettes
18. https://t.co/CSzhisGgH2 — Find font combinations
19. https://t.co/vfCVE1mNyC — Identify fonts from images
20. https://t.co/fob010p2Jp — Create favicons quickly
21. https://t.co/JkYjAz9XcM — Create QR codes
22. https://t.co/f0HfX5sRoo — Compress JPEG images
23. https://t.co/P0J9y7PlgM — Compress PNG & WebP images
24. https://t.co/XzS0NNEdMf — Convert files between formats
25. https://t.co/dIue7cIvDt — Convert almost any file
26. https://t.co/mFLRoZwEzx — Edit & optimize images
27. https://t.co/X2VpADxMdW — Create vector graphics online
28. https://t.co/dHfpUE1Kwx — Free high-quality photography
29. https://t.co/PdBdqfCGhS — Free stock photos & videos
30. https://t.co/V2Sj3183zV — Free images, videos & illustrations
31. https://t.co/ztnNlirA7e — Free stock videos, music & templates
32. https://t.co/mqKOxkXm9x — Free stock videos for creative projects
33. https://t.co/hbiBNhx1ao — Build customizable human illustrations
34. https://t.co/pcZyMroTJs — Free customizable illustrations
35. https://t.co/zXXnrO3UTq — Animated illustrations for projects
36. https://t.co/st8WUr9r2T — Learn how sitemaps work
37. https://t.co/CXiHR3SXSr — Build & test regular expressions
38. https://t.co/6Fiu2t3rkF — Format & validate JSON
39. https://t.co/iSg4TlCTRK — Decode and inspect JWT tokens
40. https://t.co/fC3anx5mJy — Test & explore APIs
41. https://t.co/6m5a2s7zOC — Send HTTP requests online
42. https://t.co/4XI1ozDPef — Create beautiful code screenshots
43. https://t.co/Sg0oJJeK8o — Turn code into beautiful images
44. https://t.co/2IdeR9QnNS — Check JavaScript package sizes
45. https://t.co/66M9IqA1Vz — Developer roadmaps & learning paths
46. https://t.co/RtQdKa7Tgk — Explore career roadmaps
47. https://t.co/2r1P5gJ52O — Discover visual learning paths
48. https://t.co/PuwKufsH5M — Learn programming concepts quickly
49. https://t.co/vCYN0dkQhX — Cheat sheets for developers
50. https://t.co/oad2uR4gMB… — Explore aircraft & satellites flying over you in real time

The internet isn’t just social media.

There are thousands of tools quietly making work, learning, creativity and everyday life more interesting.

🔖 Bookmark this. You’ll thank yourself later.

Follow @monicaa_AI for more useful websites & AI tools.

[liam. @liambraus]

PALANTIR COBRA A LOS GOBIERNOS MILLONES AL AÑO POR SU SALA DE GUERRA.

un tipo la recontruyó y la regaló en github. gratis.

se llama Elie. clonó lo que palantir vende a gobiernos y ejércitos, lo empaquetó en un solo repo y lo dejó abierto para cualquiera.

se llama World Monitor.

globo terráqueo 3D en vivo con más de 500 fuentes de noticias
15 categorías, todas resumidas por ia en cuanto llegan
56 capas de mapa que puedes superponer unas sobre otras
app de escritorio nativa para windows, macos y linux

puntúa a 31 países en un índice de estrés y lo actualiza en tiempo real.

→ movimientos militares
→ choques económicos
→ desastres naturales
→ incidentes cibernéticos
→ rutas de vuelo y marítimas

vigila 29 bolsas de valores, materias primas y cripto en un solo panel.

ejecuta ia local con ollama sin una sola clave api.

25 idiomas. 73,000 estrellas en github. funciona de inmediato después de un solo clon.

os dejo el repo abajo para que lo podáis probar.

[Zakir Hossain @zakiraicoder]

50 websites that feel like the internet’s hidden toolbox 🧰

1. https://t.co/IF0e93Vsik — Free research papers
2. https://t.co/hJt2YM0nzp — Borrow books online
3. https://t.co/VEPPx9b4Jw — Free academic journals
4. https://t.co/BdlNvpK4nQ — App alternatives
5. https://t.co/XyhBiTbzTH — Find where to stream
6. https://t.co/KDjOuBVmft — Internet archives
7. https://t.co/9Y8pcXCzKu — 70K+ free books
8. https://t.co/wYZrW6O9C0 — Free textbooks
9. https://t.co/Bobq0w1hyR — Free courses
10. https://t.co/evZc7gnIRO — Solve complex problems
11. https://t.co/siSTGmfU8y — Photoshop alternative
12. https://t.co/HpcKqPbpyZ — Compress images
13. https://t.co/viSOVfImJd — Remove backgrounds
14. https://t.co/YzQ27OlQ2m — Remove objects
15. https://t.co/eebiOp0kCd — Remove video backgrounds
16. https://t.co/spsEfKcCzi — Beautiful code images
17. https://t.co/r8rxbML0O9 — Code screenshots
18. https://t.co/xXhy4Iacmd — Product mockups
19. https://t.co/YlRUmjvxuI — Create mockups
20. https://t.co/HUfTXu5MjB — Check data breaches
21. https://t.co/J5nf7cVzgN — Scan files & URLs
22. https://t.co/JwqMSHZ311 — Self-destructing notes
23. https://t.co/zSKCYd0ViU — Temporary email
24. https://t.co/ekKTp2Uksd — Temporary file sharing
25. https://t.co/5HALmVhiN0 — Save webpages
26. https://t.co/1LgssfQ1z7 — Find similar websites
27. https://t.co/7JjneNRlN5 — Explore global radio
28. https://t.co/I3bd7ERxxl — Discover music genres
29. https://t.co/dLZYENDpkU — Find songs from shows
30. https://t.co/pBcnacpBD8 — Focus music
31. https://t.co/sMHB2bOHEq — Custom background sounds
32. https://t.co/UHoFN2OLIw — Café ambience
33. https://t.co/9Q3muzXKRO — Research assistant
34. https://t.co/UNJRIStN25 — Research-backed answers
35. https://t.co/yS5IABTRNh — Research connections
36. https://t.co/6ZduOfAU1p — Academic search
37. https://t.co/e0pHZRAc7r — Understand research papers
38. https://t.co/oGs5Rw3OnH — YouTube summaries
39. https://t.co/a4gnOX6DPv — AI for developers
40. https://t.co/DWO81MQyqe — Test regex
41. https://t.co/3b1OAJQlrn — Format code
42. https://t.co/DhBWOvxNYH — Format JSON
43. https://t.co/9v0uL8DCzG — Understand terminal commands
44. https://t.co/dRO90EfwYJ — Bookmark manager
45. https://t.co/MSjW4Fe1JF — Check outages
46. https://t.co/pdSYz9s99p — Reverse image search
47. https://t.co/mOEq7HaMX8 — Internet speed test
48. https://t.co/U9L4qe5fIY — PDF tools
49. https://t.co/q35tv4QVSL — Merge/split PDFs
50. https://t.co/tHSNS9bUnh — Temporary email

Save this. You’ll definitely need some of these later. 🔖

Follow @zakiraicoder for more useful websites, AI tools & tech resources.

[Shubham Sharma @Shubham_pen]

Infrastructure and Operational Security Workflow.
Credit to @e_opore
#cybersecurity #cybersecurityawareness #infosec #SOC #Networks #cheatsheet

[The Hacker @theprocracker]

Auto-generate Web Recon Reports - EyeWitness Tool

[Dark Web Intelligence @DailyDarkWeb]

🔎 21 EMAIL ADDRESS TOOLS FOR OSINT INVESTIGATIONS

An email address can be one of the strongest pivot points in an investigation.

From a single address, investigators may be able to uncover linked accounts, breach exposure, domain relationships, professional identities, reputation signals, and other infrastructure clues.

Useful tools include:

* GHunt — Google-account OSINT
* Castrick — reverse email lookup
* EmailRep — email reputation
* BreachDirectory — public breach search
* LeakCheck — leak exposure search
* https://t.co/qB9qF32x09 — professional email finder
* SimpleLogin — email alias privacy
* Epieos — email reverse lookup
* Holehe — linked-account discovery
* Have I Been Pwned — breach lookup
* Whoxy — WHOIS / reverse WHOIS
* theHarvester — email & domain discovery
* That’s Them — people-search pivot
* Proton Mail — secure email service
* OSINT Industries — real-time email lookup
* Mailcat — email by username
* DeHashed — credential & breach search
* XposedOrNot — exposure check
* SignalHire — business email finder
* Skymem — company email finder
* Intelligence X — email data search

The important part is not using all 21 tools.

It is knowing which pivot to use next.

A practical workflow may look like:

* Start with reputation and breach exposure
* Look for linked accounts and usernames
* Pivot into domains, WHOIS, and infrastructure
* Enrich professional or organizational context
* Correlate results across independent sources
* Preserve URLs, timestamps, and evidence
* Separate confirmed facts from assumptions

Analyst Note:

No single OSINT platform should be treated as definitive.

The strongest findings come from correlation: multiple independent sources pointing to the same identity, relationship, or infrastructure.

Use these tools legally, ethically, and with appropriate authorization.

#DDW #OSINT #CyberSecurity #ThreatIntelligence #DigitalInvestigation #EmailOSINT #OpenSourceIntelligence

[Rıdvan Yağlı @ridvanyagli]

🔴 Bir güvenlik araştırmacısı, Tor ve tornet kullanarak IP adresini her 3 saniyede bir değiştirme yöntemini paylaştı.

[Tom Dörr @tom_doerr]

Awesome OSINT Arsenal provides a one-command installation for over 750 open-source intelligence tools across 50 security categories.

https://t.co/svB2CzyjB9

[OccupytheWeb @three_cube]

Artificial Intelligence (AI) in Cybersecurity, Part 23: Using Pentestcode for Pentesting and Bug Bounty Hunting

https://t.co/CmqOyrB9SV

[International Cyber Digest @IntCyberDigest]

New subdomain lookup tool just dropped.

https://t.co/8lD04pCf4i

[The Hacker News @TheHackersNews]

‼️ Attackers can weaponize Defender’s own signed driver to delete security software at boot.

BTR.sys runs from Ring 0 before Defender’s user-mode services start. Check Point showed it deleting the full Defender stack on Windows 11 25H2 with Tamper Protection enabled.

See how it works: https://t.co/yGscUq6xQH

[The Hacker News @TheHackersNews]

🛑 Attackers took over N-central servers.

N-able says they reached customer endpoints through Take Control and left Cloudflare tunnels for persistent access. The first fix missed an alternate exploit path.

What MSPs need to check: https://t.co/EJUrm26KN3

[CyberSudo @Cyber_Sudo]

👁️ How I Track Telegram Users With This Tool

Most OSINT investigations stop at the Telegram handle.

I don’t stop there. A Telegram account can still give you useful pivots, even if the username changes later:
🆔 Telegram ID
📅 Account creation date
🖼️ Current and previous profile pictures
🔁 Previously used usernames
📝 Previously used display names

One tool I use for this is UserSearch.

UserSearch can help you:
- Pull user information
- Pull a user’s old profile pictures
- Extract members from a Telegram channel
- Collect Telegram channel information
- Search public Telegram groups and channels

Once you have the current and previous usernames, run them through UserSearch, WhatsMyName or Sherlock.

This shows you every platform where those usernames appear.

Old profiles = old personal information.

🔗 Tool link: https://t.co/ZpZdrbtJlG
__________

P.S. ♻️ Repost if you found this helpful.

[Fox_threatintel @banthisguy9349]

Evilgpt[.]com
172.86.92[.]113
Aurologic, asn:30823

[The Hacker News @TheHackersNews]

🚨 Hugging Face Diffusers can run code it was told not to trust.

Three high-severity flaws let crafted model repositories bypass trust_remote_code during custom pipeline loading.

How FaceHugger gets past the check: https://t.co/HcArZI53kw

[Diego Ojeda @Diegoojeda95]

🚨 La empresa más grande de Colombia fue hackeada.

Los atacantes no solo lograron infiltrarse en los sistemas de Ecopetrol. También robaron información sensible que hoy podría estar circulando entre otros ciberdelincuentes.

¿Quiénes son "Los Caballeros" y cómo operan?

🧵👇