Cyberkryption

CERT/CSIRT - Head of Cyber Defence
Tweets are my own and do not represent my employer.🇯🇪

[Miyakatz @the_art_of_nerd]

CI/CDのペンテストに関する知識つけたいなと思って良い教材がないか調べてたら、CTF形式で学べるcicd-goatをみつけた👀
Docker上で動くので、手元にDocker環境があればサクッと遊べていい感じ。
https://t.co/GvMjM2dPOf

[Trace Labs @TraceLabs]

We are happy to announce the release of Trace Labs OSINT VM 2026.05! This version migrates the build process to Debian 13 instead of Kali. There are VirtualBox and VMWare downloads as well. Read all about it at https://t.co/BrR3ozHQqy

#TraceLabs #OSINT

[Cyberkryption @cyberkryption]

@gadievron @Digits3c What would be super useful is an RSS feed or similar that is updated very frequently maybe every 20 mins.

One use case would be to download feed and modify siem rules to hunt for malicious extensions on dev machines.

It would also be useful for awareness

[tmuxvim @tmuxvim]

I put a prompt injection into my LinkedIn bio and recruiters are messaging me in Old English and calling me Lord.

[mRr3b00t @UK_Daniel_Card]

If you need some RSS feeds for cyber stuff check this out:

https://t.co/5CdSMMcpgj

[Het Mehta @hetmehtaa]

Urgent Security Alert:

Mistral AI npm packages compromised in the ongoing Mini Shai-Hulud supply chain attack.

Affected versions:
@mistralai/mistralai v2.2.2, 2.2.3, 2.2.4
@mistralai/mistralai-azure v1.7.1–1.7.3
@mistralai/mistralai-gcp v1.7.1–1.7.3

If you or your CI/CD pipeline recently installed any of these, treat your environment as fully compromised.

Immediate action: Rotate npm tokens, GitHub PATs, cloud credentials, and all secrets from a clean machine.

This is the same self-spreading worm (linked to TeamPCP) that just hit 80+ TanStack packages with millions of weekly downloads.

[gael @gaelcolas]

Yay! Microsoft is working on removing PowerShell v2 from Windows, and making PS7 default on Windows!
#PSConfEU

[Florian Roth ⚡️ @cyb3rops]

the official OpenSearch client for Node.js has also been compromised

[Johnny Xmas @J0hnnyXm4s]

Let’s Encrypt has suspended issuance due to an active incident

https://t.co/Y83fiMnVtD

[Cyberkryption @cyberkryption]

@mattpocockuk Have you seen this.
https://t.co/cRR7ywJBaZ

[Cyberkryption @cyberkryption]

@jedisct1 How do you know Mythos was used? Do you have any other sources that confirm the leak?
BTW i am not saying it did not happen, i just like multiple citations

[Florian Roth ⚡️ @cyb3rops]

Many of you know the Linux #auditd config I’ve maintained for years. It was always meant to be a simplified, detection-agnostic baseline for #Linux 🐧

We’ve now changed the way it works ⚡️

The core idea is:
audit.rules should act as the sensor, not the detection engine

That means:
- generic process_creation
- fewer brittle per-binary rules
- better portability
- CI validation

We preserved the old baseline as v0.1.0 and released v0.2.0 as the new streamlined model

https://t.co/LJAH9ONspo

co-op with @petri_ph

[Cyberkryption @cyberkryption]

@Zephyr_hg NEWS

[Marry Evan @marryevan999]

CLAUDE IS CONTROLLING MY PC!

New update from Claude and now you can allow Claude to fully use your computer

I gave Claude $200, said that you can do anything you want on my PC, but you need to profit on Polymarket

2 hours later, it monitored each wallet on Polymarket for the ability to copytrade them

It filtered 10 best wallets and started copytrading through this bot

Firstly, it lost $50 triyng each wallet to understand capability of copytrading it

Then, finally decided on 2 and copytraded each, resulting in ~10 hours, I had $3K

Now I reinvest it and continue copytrading cause it's insane now what you can do with that.

You only need Claude + laptop + 1 hour/day.

Giving This Free for 24 hours. To get it:

1. Comment the word 'OpenClaw'
2. Like and Retweet this post
3. Follow me @marryevan999 (so i can DM you)

[Center for Internet Security (CIS) @CISecurity]

Social engineering ... credential abuse ... Living off the Land techniques ... all common hallmarks of Iranian operational tradecraft.

Here's how to defend your organization: https://t.co/0byVddj8cf #cybersecurity #phishing

[丂卄ㄖᗪ卂几 - 👋 crack fingers @therealshodan]

OpenClaw users solving a problem with AI instead of a script

[Cyberkryption @cyberkryption]

@Evil_Mog That's a wide choice?

[Wazuh @wazuh]

Suricata IDS/IPS is affected by CVE-2026-22262, a critical stack buffer overflow that may allow DoS or code execution when large datasets are saved. Update to Suricata 7.0.14 or 8.0.3+ immediately.

Read more: https://t.co/Wd9BF1JxQT

[Cyberkryption @cyberkryption]

@cyb3rops Could you share the prompt / meyhodology to create ?

[Oliver Prompts @oliviscusAI]

I found the cheat code for mastering AI 🤯

This GitHub repo contains Google Colab notebooks to implement every Machine Learning algorithm from scratch.

100% Open Source.