Daniel Batista

Husband | Dad | InfoSec | Coffee Lover

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

This seems bad.

Local to root on most Linux distros.

https://t.co/TDvbGWZVGo

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

I think we all need to be full-stack now.

AI generally, but Claude Code specifically, has made it so that if you can't go from problem to a shipped solution, you're just part of a toolchain that can/will be automated.

Only high-agency, full-stack people survive. And they pull away from everyone else.

That’s an insane change to happen over the course of like two months.

[Daniel Batista @danidav_]

@carlvellotti Claude

[Carl Vellotti 🥞 @carlvellotti]

Everyone should learn Claude Code!

So I made a FREE course for non-coders! 🎉

[⚠️ Comment "Claude" & I'll DM you the link]

By now, you've probably heard:
→ Claude Code is not just for code.

It's a powerful AI agent that can help you with basically anything you do on the computer.

I really mean anything.

Writing, research, design, building, emails, life stuff – Claude Code helps you do all these things better and faster than ever.

I personally use Claude Code all day, every day.

And I've never even been nearly as productive as I am now. This is the future.

Over 2000 PMs have completed my Claude Code for PMs course.

People keep saying – "it's aimed at PMs but useful for everyone."

So I'm launching... 🥁🥁🥁

Claude Code for Everyone!
🔹 Complete guide for non-technical people
🔹 Analyze files, run research, build systems
🔹 Free! Other courses literally charge $1,000+

The most awesome part:
→ Learn Claude Code IN Claude Code!

You'll work through realistic files directly IN Claude Code, so everything is applicable.

It's really cool. People have literally called CC for PMs a masterpiece 💅

Even if you are completely non-technical, this guide helps you at every step of the way.

Here's exactly what's in the course:

Module 1: Claude Code Core Features
🚀 1.1: Introduction
🔍 1.2: File Exploration
📁 1.3: Working with Files
⌨️ 1.4: Commands
🤖 1.5: Agents
🎭 1.6: Sub-agents
🧠 1.7: Project Memory
⚡ 1.8: Power Features Intro

And this is only the beginning:

Coming Jan 15: Vibe Coding 101
→ Actually build and deploy something!
→ Vibecode guides NEVER teach deployment
→ Zero coding background needed

Coming next:
→ Connect AI to Everything (MCPs & APIs)
→ Complete Guide to Skills
→ Advanced Vibecoding

Plus – this will become THE Claude Code community for sharing:
→ Definitive resources
→ Creative use cases
→ Proven prompts

Claude Code has changed my life.

I bet it will change yours.

⚠️ Do these things to get it:
1. REPOST this post
2. FOLLOW me so I can DM
3. COMMENT "Claude" & I'll DM you!

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

The most important skill now is Clear Thinking.

Without it, you can't write. And without writing, you can't prompt.

This is the main skill you must demand your AI helps you improve.

Not that IT gets better at it, but that it helps YOU get better at it.

[ProjectDiscovery @pdiscoveryio]

Automating security for scale is game-changing.

Paddle reduced time-to-discovery from days to hours by adopting ProjectDiscovery.

In this case study, Paddle’s Head of Security & IT explains how their team:
✅ Automated external asset discovery and CVE detection
✅ Mitigated subdomain takeovers before they became threats
✅ Integrated ticketing and SIEM for real-time response
✅ Achieved PCI DSS and SOC 2 compliance faster
✅ Shifted focus to higher-value security work

Read now: https://t.co/wBNF9DxxCq
#SecurityAutomation #CloudSecurity #BugBountyTools #ProjectDiscovery #DevSecOps

[Akhilesh Mishra @livingdevops]

Production Kubernetes cluster is down. Your manager is asking for updates every 5 minutes.

Here’s your step-by-step troubleshooting playbook:

Step 1: Get your bearings
Check where you are: kubectl config current-context
See all contexts: kubectl config get-contexts
Switch if needed: kubectl config use-context name
List namespaces: kubectl get ns

Step 2: See the big picture
Node health: kubectl get nodes
All pods: kubectl get pods -A
Recent events: kubectl get events –sort-by=.metadata.creationTimestamp -A

This tells you if it’s a cluster-wide issue or isolated problem.

Step 3: Focus on the failing pod
Get details: kubectl describe pod podname -n namespace
Check logs: kubectl logs podname -n namespace
Get inside: kubectl exec -it podname -n namespace – /bin/sh

Step 4: Check health probes
Look for probe failures in the describe output
Test probe endpoint: kubectl exec -it podname -n namespace – curl localhost:port/health

Step 5: Check deployments and rollouts
Rollout status: kubectl rollout status deployment/name -n namespace
View history: kubectl rollout history deployment/name -n namespace
Rollback: kubectl rollout undo deployment/name -n namespace

Step 6: Verify networking
List services: kubectl get svc -n namespace
Check endpoints: kubectl get endpoints -n namespace
Test DNS: kubectl exec -it podname – nslookup servicename

Step 7: Quick fixes that work
Restart deployment: kubectl rollout restart deployment/name -n namespace
Delete problematic pod: kubectl delete pod podname -n namespace

The key is following the steps in order, not jumping around randomly.

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

🚨 Lots of people are talking about MCP Security, but there's one attack surface / risk that's most pressing to me.

➡️ When you send one of your agents to use an MCP, you're sending a semi-intelligent being to parse instructions written by the owner of that MCP.

[Dave Kennedy @HackingDave]

My advice to kids has changed recently and it's not to get a cybersecurity degree.

Get a computer science one, with a specialization in AI or an AI solely degree.

I feel like right now, the cybersecurity market is pretty rough on hiring folks in - and that's only going to get harder as AI progresses more.

Having a computer science with AI focus, you can join any industry - but also be top notch in cybersecurity with new skills if you want to get into this field.

I'm pretty reserved on when new things come out, and have PTSD around new cybersecurity trends that promise the world. I was the same when AI first came out - very reserved, is this going to have a huge impact? Is this really a thing.

AI is much different and a monumental shift for the industry/economy and it'll only get better.

The major problem we are going to run into with this is that how do we know who can really code and who's vibe coding?

Pretty hard delineation/shift happening. While vibe code is cool and all, being able to actually code/develop something that's needed with augmentation from prompt coding is necessary.

[Kubesploit @kubesploit]

Falco is a cloud-native security tool designed for Linux systems

It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts

➜ https://t.co/GPqwf6JQEe

[ProjectDiscovery @pdiscoveryio]

Need to create a custom wordlist? Try using katana to crawl target URLs and then tr '[:punct:]' '\n' | sort -u to extract your wordlist! 

Bonus tip: Use the -d <num> option to increase the maximum depth to crawl a.k.a MORE WORDS!

[Kubesploit @kubesploit]

In this tutorial, you will learn how to use Falco to detect and prevent potential threats without disrupting critical operations

➤ https://t.co/dVANT3tVGW

[Nagli @galnagli]

Critical vulnerabilities doesn't have to be complex or have a CVE - @deepseek_ai publicly exposed their internal ClickHouse database to the world, without any authentication at all, and leaked sensitive data.

No one is safe from security mistakes, follow along to learn more 🧵

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Data breaches aren't just news; they're warnings you're ignoring.

[Conferencia HackConRD @HackCon_RD]

Sistema activado... HackConRD 2025 está cargando.

🔜 2025... COMING SOON.

La conferencia de ciberseguridad y hacking más esperada de la República Dominicana regresa con todo. Prepárate para llevar tus conocimientos al siguiente nivel en tecnología e innovación.🚀

[JS0N Haddix @Jhaddix]

🛑 GIVEAWAY ALERT 🛑⬇️

Today is day SEVEN of EIGHT days of @arcanuminfosec and friends Black Friday and Cyber Monday giveaways!

Today @DanielMiessler and I are giving away one seat to his next "AUGMENTED" Course!

Dan runs a FANTASTIC course on integrating AI into the very fabric of your life, future-proofing yourself, and maximizing your potential using AI.

See: https://t.co/OlTLUEb6u1

Next run should be around Feb!

You know the drill! Each person can have up to FOUR entries to the giveaway!

♻️ Share This Post = 2 Entries
♥️ Like This Post = 1 Entry
✍️ Comment This Post = 1 Entry

Winners will be posted next Tuesday!

[JS0N Haddix @Jhaddix]

🛑 GIVEAWAY ALERT 🛑 ⬇️

Today is day FOUR of FIVE days of @arcanuminfosec
and friends Black Friday and Cyber Monday giveaways!

Today we are giving away FIVE seats to our training:

"Red Blue Purple AI"

RBPAI is a cutting edge course on how to USE AI to scale your cyber security skills! It is the ONLY course of its kind!

Full Syllabus:
https://t.co/74xIHO49yf

Each person can have up to FOUR entries to the giveaway!

♻️ Share This Post = 2 Entries
♥️ Like This Post = 1 Entry
✍️ Comment This Post = 1 Entry

Winners will be posted next Tuesday!

[JS0N Haddix @Jhaddix]

⚠️ Giveaway ⚠️

Want to learn modern reconnaissance and hacking skills?

Join The Bug Hunter's Methodology Cohort 5!

October 2nd, 3rd, 4th -

https://t.co/DvozzsLYiE

Like and retweet this post for a chance to win a free seat! Five winners will be announced on Sept 1st!

[Sam Bent @DoingFedTime]

🔍Helsinki Market's horrible OpSec🕵️‍♂️
Learn about the severe risks posed by:
📡 Exposed server types/software versions
Disclosed IP addresses
Big thanks to @DarkWebInformer
#darknet #darkweb
https://t.co/v4LTdqhsZB