Joel Vázquez Ortiz

Systems/Network Administrator, Information Security Professional and Graphic Designer
#infosec #privacy #linux #artistshop 🇵🇷🪶

[Joel Vázquez Ortiz @_substrg_]

#infosec #art #manga

I'm finally finished with one of my new designs.

Manga/Anime style art of a young taino warrior holding a ceremonial axe.

Go check it out!

https://t.co/QI30m8WHa0

[Joel Vázquez Ortiz @_substrg_]

@cb_doge Why don't we just use the good old fashioned think tanks of human imagination instead of an AI system that can go rogue and destroy the world? 🤔🫪

[Joel Vázquez Ortiz @_substrg_]

#infosec #socialmedia

Welcome back. 😀

[Nightmare Eclipse @ChaoticEclipse0]

I'm back (maybe), new drip (blog), got some interesting stuff that might be worth reading,
https://t.co/1tTNdd147c

[Joel Vázquez Ortiz @_substrg_]

@elonmusk I agree. The US is also following that same path. 🫪

[International Cyber Digest @IntCyberDigest]

‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required.

Microsoft has patched it as CVE-2026-42824, rated critical.

[Joel Vázquez Ortiz @_substrg_]

#infosec #vulnerability #vpn

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

https://t.co/nU9T1LV9Jl

[The Hacker News @TheHackersNews]

🚨 Hackers found a way into Palo Alto’s GlobalProtect VPN without a password.

The flaw, tracked as CVE-2026-0257, lets attackers bypass PAN-OS authentication and establish unauthorized VPN sessions.

Palo Alto says it’s already being used in real attacks.

If you run GlobalProtect, check this now.

Details ➝ https://t.co/OSarZ4i9jF

[Joel Vázquez Ortiz @_substrg_]

#infosec #security #privacy

Don't forget Facebook and WhatsApp. 😁🫪

[International Cyber Digest @IntCyberDigest]

Dear US government,

Since you've just blocked Fable and Mythos on critical national security grounds, here are some other tools that pose a similar threat to the American people:

- Microsoft Teams
- SAP
- Salesforce
- Jira
- Outlook

Please do what you must to save America 🇺🇸

[Joel Vázquez Ortiz @_substrg_]

#infosec #privacy #browsers

You should definitely use Brave. 😀

[Brave @brave]

◀️ Not this ad blocker

[Joel Vázquez Ortiz @_substrg_]

#imfosec #scammers #artificialintelligence

Scammers are in hot pursuit of your finances, personal data, and other important data.

They are now using generative AI and Voice cloning to deceive you.

Here is a link for more info.

https://t.co/ZcCvSDfrId

[Joel Vázquez Ortiz @_substrg_]

#infosec #linux #opensource

Thank you. 👍

Happy birthday. 🥳

[It's FOSS @Itsfoss]

Here's to 14 years of serving Penguin-related content. 🥂 🐧

Oops, I mean Linux and open source. 🤧

[Joel Vázquez Ortiz @_substrg_]

#infsec #scammers #artificialintelligence

Scammers are using AI to blackmail victims by calling your number using facetime.

Be careful out there.

https://t.co/8RgntqDLL4

[Joel Vázquez Ortiz @_substrg_]

#infosec #scammers #wellbeing

😴🥱

Whenever you receive a phone call from an unknown number whether foreign or local and it's a robot or automated message of a suspicious activity on your bank account. Just ignore it

Take note of the number block and report it as a scam. 🥱😴

[International Cyber Digest @IntCyberDigest]

‼️🚨 Unauthenticated attackers are gaining SYSTEM on domain controllers with crafted packets.

The vulnerability being exploited is CVE-2026-41089, a CVSS 9.8 hole in Windows Netlogon, and exploitation in the wild has been confirmed.

A patch has existed since May 12. Every DC still behind is not just vulnerable, but according to the Centre for Cybersecurity Belgium are also actively being pwnd.

[Joel Vázquez Ortiz @_substrg_]

#infosec #misinformation

Have you ever noticed the things that people upload on YouTube lately?

A lot of misinformation about the foods we eat, the places we go, history, even about Christianity.

You can't believe everything you see and hear.

Stay safe. 👍😀

[Joel Vázquez Ortiz @_substrg_]

#infosec #privacy #HumanRights

I wonder who they are? 🤔

I'm going to visit this site before it gets taken down. 😀

[Naomi Brockwell priv/acc @naomibrockwell]

The data broker industry is a web of secret companies, investors, and government clients. I spoke with the activist behind https://t.co/6m7mrt9tRV -- a fantastic website that watches the watchers.

It's time to reveal who they really are.

[Joel Vázquez Ortiz @_substrg_]

#infosec #Microsoft #Browsers

CVE-2025-14372: Edge Patch Ingestion for Chromium Password Manager UAF

https://t.co/mtHeQNAntw

[Joel Vázquez Ortiz @_substrg_]

@Proton_Pass Do people still use a notebook to write down their passwords and put it away in a cabinet?

Or are password managers unreliable?

[Joel Vázquez Ortiz @_substrg_]

#infosec #adblocker #browsers

Instead of using a browser which doesn't respect your privacy you can use others that do. For example, Mozilla Firefox, Brave allows you to add extensions which help block ads and sometimes help prevent certain types of attacks.

[International Cyber Digest @IntCyberDigest]

‼️ Google is about to disable all adblocker extensions in Chrome. Instead of letting the adblocker inspect traffic itself, extensions now have to hand Google's browser a limited list of filtering rules and hope for the best. This leads to weaker blocking and more ads getting through.

Google makes the vast majority of its money selling ads. The company that profits from every ad you see also controls the browser most people use, with Chrome 149 being the last version supporting adblockers.

For example, under the new rules, uBlock Origin cannot exist. For millions of people, that extension is the only thing standing between them and a wall of ads, trackers, and autoplay garbage. One user put it bluntly: "The web is literally unusable without uBlock Origin."

[International Cyber Digest @IntCyberDigest]

‼️ Google is about to disable all adblocker extensions in Chrome. Instead of letting the adblocker inspect traffic itself, extensions now have to hand Google's browser a limited list of filtering rules and hope for the best. This leads to weaker blocking and more ads getting through.

Google makes the vast majority of its money selling ads. The company that profits from every ad you see also controls the browser most people use, with Chrome 149 being the last version supporting adblockers.

For example, under the new rules, uBlock Origin cannot exist. For millions of people, that extension is the only thing standing between them and a wall of ads, trackers, and autoplay garbage. One user put it bluntly: "The web is literally unusable without uBlock Origin."

[Joel Vázquez Ortiz @_substrg_]

#infosec #poc #vulnerability

Staying strong and not giving up. 👍😁

[International Cyber Digest @IntCyberDigest]

‼️🚨 He's back: Nightmare Eclipse just dropped RoguePlanet, a new Windows Defender local privilege escalation 0day PoC. The RCE paths broke after Microsoft's Defender patch. NE suspects the BitLocker bypass may still work but isn't certain.

He has a new GitHub btw, let's see how long the account will last: https://t.co/NjgfycFgMC