cry0g3nix

[cry0g3nix @arimoyal]

CrowdSec can detect an attack without blocking it.

The Security Engine watches.
A remediation component enforces.

Run this 60-second check: is your bouncer connected and is “Last Pull” updating?

#LinuxSecurity #CrowdSec

[cry0g3nix @arimoyal]

Ubuntu and Debian login audit: use who for currently logged-in users, last -i -n 10 for recent logins, sudo lastb -i -n 10 for failed logins, and sudo journalctl -u ssh.service --since "24 hours ago" for recent SSH activity.

#Linux #Linuxsecurity #Security

[cry0g3nix @arimoyal]

Do you know what your Linux server exposes to the internet ?
A listening port is only the first clue. Check the process, bind address, firewall and then scan from outside.
Local checks show intent.
External scans show reality.

#LinuxSecurity #SysAdmin

[TCM Security @TCMSecurity]

Join our YouTube livestream party on July 8th at 12 PM ET! 🥳

Heath Adams makes his grand return, Alex Olsen and Andrew Bellini get in on the fun, we'll be giving away 1 (one) ticket to DEF CON plus travel costs, and we'll also be announcing the 15 lucky winners who will be part of our mentorship program later this summer.

Make sure you sign up for the #DEFCON and mentorship giveaways ahead of time! https://t.co/oLPTKhqx5U

We're also in the thick of our Summer Sale! Get 20% off certs and live trainings in addition to 50% off your first payment to the TCM Security Academy when you purchase an All-Access Membership (use code CAMPTCM to redeem.)

🥵 It's shaping up to be one busy summer here! See you next week!

[cry0g3nix @arimoyal]

@mischavdburg Linux

[Cas van Cooten @chvancooten]

Always a blast to speak at @OrangeCon_nl, and amazing to see the maturity of the Dutch security community. 🍊

Of course my talk was about continuous purple teaming, catch the slides here 👇
https://t.co/FsiZbJTjuI

[Calif @calif_io]

Introducing HTTP/2 Bomb: a remote DoS in nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora. A single client pins 32GB of server memory in 10s. Found by Codex.

Blog post: https://t.co/WO9MeExoun

PoCs: https://t.co/NpVgEHBHPl

[vx-underground @vxunderground]

Hi

vx-underground is 7 years old, as of 2 days ago. I forgot my own website birthday.

Some of you who found vx-underground as early to mid teenagers are now adults.

Some of you who found vx-underground while attending university are now in the work force.

Some people who follow this account have unfortunately passed away.

Some followers have been arrested. Some followers have already been released from prison.

Some of you (including myself) have had children.

A lot has changed over the past 7 years.

The only thing that hasn't really changed is the website: free malware source code, samples, and papers, forever.

Thank you for letting me serve the community. It has been a pleasure. I look forward to serving all of you for another ... unknown duration of time, probably a long time, I don't know. I'm not sure how long I'll do this, but I'm already 7 years deep.

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

IDOR is the bug that pays beginners their first bounty. Most hunters walk straight past it.

Run this on any target today:

1. Make 2 accounts — A and B. You need a victim to prove real impact.

2. As account A, log every request that carries an ID: /api/user/1043, ?invoice=88, /orders/55.

3. Swap in account B's ID. Test all four verbs: read, update, delete, create.

4. Don't stop at numbers. Decode base64 IDs (often just integers in a costume), reuse UUIDs you leaked elsewhere, and check IDs buried in JSON bodies — not only the URL.

5. Hit the boring endpoints: export, PDF download, "email me a copy", avatar upload. Devs forget access control on features nobody demos.

6. Always escalate. Reading a user's data = finding. Changing their password or reaching an admin object = CRITICAL. Same root cause, 10x bounty.

Why it pays: scanners can't catch it. They don't know A shouldn't see B's data. Only a human with 2 sessions does.

Go find one. 🐀

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

Finally, someone exploited the https://t.co/1wIhRapJWd

[Bogdan Stashchuk @BogdanStashchuk]

🏷️ April Sale! Coupon code – APR2026SALE
Find and purchase the course you need at a discount here – https://t.co/gwXxLoLonW

For the next 5 days, each of my courses can be purchased at the lowest price – starting from $9.99 with discount coupon APR2026SALE

[Aman @Amank1412]

https://t.co/Y7m9D52uLF

[The Hacker News @TheHackersNews]

⚠️ WARNING - An unpatched critical telnetd bug (CVE-2026-32746) lets attackers gain full system access with no credentials.

One connection to port 23 is enough to trigger memory corruption and execute code as root.

No patch yet. Prior telnet flaw is already exploited in the wild.

🔗Read → https://t.co/qYE10CQNIR

[Daily CyberSecurity @Daily_CyberSec]

Researcher releases PoC exploit code for EventLogin, a TOCTOU flaw in Windows MS-EVEN RPC allowing remote file writes. Patch now.
https://t.co/BT94wqKe09

[Pentester Academy @SecurityTube]

FREE and actually worth your time. 🔥

Test drive real INE labs in your browser. No VPN. No setup. Just hands on learning across cybersecurity, networking, and cloud.

3100 plus labs. Zero friction. All skill.

Try one → https://t.co/eM65DWbNBB

#CyberSecurity #Networking #Cloud

[KIRNEILL @KIRNEILL]

Windows 11 is sending your gameplay data to Microsoft in real time.

It's called "Connected User Experiences and Telemetry" and it uses your CPU WHILE you game stealing FPS and resources from your game.

Services.msc → find "Connected User Experiences and Telemetry" → Disable

[TheMayor - Joe Helle @joehelle]

I was bored last weekend and built an Active Directory vulnerability scanner that will remain 100% free, forever. I've tested it as much as I can locally and would love to see some other folks get hands on. I call it ADPulse.

https://t.co/uFjnyE5iGG

[mRr3b00t @UK_Daniel_Card]

Nerds: check this out:

https://t.co/d0BhMJOzmy

[MajorGeeks @majorgeeks]

Run programs in a secure, isolated environment, ensuring that they can't make lasting changes to your other applications and important data with Sandboxie.

https://t.co/atBl6gLeRI
https://t.co/Cbg5QsDDK7

[Stefan Jacobs @stefanjacobs]

I built an app that fetches the latest Google Street View image from a historic Street View link. The goal is to crowdsource and document examples of South Africa de-developing in one place.

Try it out and let me know what you think.

https://t.co/2De1NuzztG