Rose Mwangi👩🏻‍💻

Penetration Tester at ~/🧪👩🏻‍💻 |
On a journey😎 |
Defining possibilities⚡

[International Cyber Digest @IntCyberDigest]

‼️ Hugging Face built an interactive replay of the OpenAI agent that breached them. It includes 17,613 logged attacker actions across the 4.5-day campaign, with the live command stream and more.

https://t.co/y7dD9n8QTy

[Huntress @HuntressLabs]

Attacker tradecraft has evolved way past "check the URL."

Here are the 5 most common techniques we're seeing. 👇

[Lukasz Olejnik @lukOlejnik]

And here’s an awesome and informative as usual @wired writeup https://t.co/hH3JxDzp0i

[Rose Mwangi👩🏻‍💻 @_Ros3y]

@kacieahmed Hello Kacie, great class. Kindly, add me to the group.

[JS0N Haddix @Jhaddix]

Day FIVE of FIVE days of celebrating our 2 year ARCANUM-VERSARY! @arcanuminfosec

Giveaway = FOUR seats to our ONE OF A KIND course on Pentesting and Red Teaming AI Systems:

!! Attacking AI !!

New giveaway rules 👀 We are pumped about a new project we released today. The likes and shares need to be applied to this post for entry!

https://t.co/3DzQLs0omV

👍 1 Like = 1 Entry!
♻️ 1 Share = 3 Entries! (yes, THREE entries)

Winners announced 1/23! Syllabus link below 👇

[Phillip Wylie @PhillipWylie]

To help celebrate @arcanuminfosec Information Security's two-year anniversary, @Jhaddix gave me 5 codes good for any Arcanum course to give away!

Winners will be announced on 1/22.

👍 1 Like = 1 Entry!

♻️ 1 Share = 2 Entries!

[JS0N Haddix @Jhaddix]

Day THREE of FIVE days of celebrating our 2 year ARCANUM-VERSARY! @arcanuminfosec

4th Giveaway = FOUR seats to our FLAGSHIP course on modern application assessment and recon:

The Bug Hunter's Methodology!

👍 1 Like = 1 Entry!
♻️ 1 Share = 2 Entries!

Winners announced 1/21! Syllabus link below 👇

[Rose Mwangi👩🏻‍💻 @_Ros3y]

Fear, the worst of all enemies, can be effectively cured by forced repetition of acts of courage.

[Cloudflare @Cloudflare]

On November 18 Cloudflare experienced a service outage, triggered by an issue with a Bot Management feature, impacting multiple Cloudflare services. Here's a detailed breakdown of what happened. https://t.co/7WArlr5ghI

[Baptiste Robert @fs0c131y]

New research reveals detailed analysis of DPRK VPN infrastructure used by North Korean operatives abroad.

According to technical analysis published by NK Internet Watch, "Hangro" appears to be a specialized VPN client that enables North Koreans overseas to establish secure connectivity back to domestic networks, potentially including the Kwangmyong intranet.

📍 Infrastructure spans multiple countries with servers in Russia (188.43.136.115/116) and North Korea (175.45.176.21/22)

📍 Requires mutual TLS authentication with certificates signed by internal CA "hrra2024"

📍 Uses embedded GOST cipher references suggesting Russian cryptographic influence

The research traces connections through Jo Myong Chol, a sanctioned DPRK national who registered supporting domains using the email [email protected]. This same email was used for other regime-affiliated sites including https://t.co/AWR6q5rx8B and https://t.co/qk5AgCtEuC.

1️⃣ Radio Free Asia reported North Korean trading companies pay $350 to the Shenyang consulate for Hangro access

2️⃣ Technical analysis reveals the client is derived from SoftEther VPN with custom authentication mechanisms

3️⃣ The service recently appeared on DPRK-affiliated websites as "service for visitors away from home" before disappearing in July 2025

This infrastructure represents a sophisticated method for maintaining regime connectivity with overseas operatives and commercial entities.

Source: https://t.co/ELYfnfELTZ

[mRr3b00t @UK_Daniel_Card]

If you have a SharePoint (hosted or on-premise) please read this!
https://t.co/E80ibHPoS3

[Ars Technica @arstechnica]

Future Android phones could warn you about data-stealing fake cell towers https://t.co/5dQUNyL36L

[Wangari Mwenda @________ClaireW]

I made a website that sends your live location to your contacts of choice once the panic button is pressed. For Maandamano, for your loved one’s.
#AlbertOjwang #June25th

[Tib3rius @0xTib3rius]

Recruiters: "Do you have AWS experience?"

Me: "/?file=http://169.254.169.254/latest/meta-data/iam/security-credentials" 👀

[Davey Winder @happygeek]

By me @Forbes: Snitches don't always get stitches, sometimes they get a share of $250,000. #kudos @HalcyonAi

#infosec

https://t.co/LHyOprkmqJ

[4n6lady @4n6lady]

@MalwareJake We use Threat List and Trust List. It's that easy, folks.

[Kieran Drew @ItsKieranDrew]

2025 is a great year to read more good books and less bad tweets.

[Pratham @Prathkum]

We all thought AI would replace humans. But now it’s becoming a fight of AI vs AI.

[Rose Mwangi👩🏻‍💻 @_Ros3y]

Remind yourself that aside from the
choices you make, your fate is not entirely up to you. The
world is spinning and we spin along with it whichever
direction, good or bad.

[Rose Mwangi👩🏻‍💻 @_Ros3y]

@Jhaddix @arcanuminfosec Thank you for this giveaway. I have seen your interviews and the way you explain concepts is so inspiring that I know your sessions must be awesome, I honestly wouldn't want to miss this chance.