Danu van Deventer

Enthusiastic

[IDSECCONF @idsecconf]

Halo semua, Kami dari komite IDSECCONF 2026 memberi kesempatan pada rekan-rekan penggiat Keamanan Teknologi Informasi di seluruh Indonesia ataupun di luar Indonesia untuk dapat berpartisipasi dalam kegiatan #IDSECCONF2026 lewat penyerahan paper .. https://t.co/Don5DjCRgq

[Dark Web Intelligence @DailyDarkWeb]

🇮🇩 A threat actor on a cybercrime forum is claiming to have leaked sample data allegedly with Indonesia’s state electricity company PLN (https://t.co/jfyYatYuKl).

According to the post, the exposed sample allegedly contains:
• NIK (Indonesian national identity numbers)
• Phone numbers
• Email addresses
• Employee IDs (NIP)
• Bank account numbers
• NPWP tax identification numbers

The actor also shared snippets of SQL-style insert statements as proof-of-claim samples.

At this time, the claims remain unverified, and there is no official confirmation regarding the authenticity or scale of the alleged data exposure.

If confirmed, exposure of national identity and financial-related records could create elevated risks including:
• Identity theft
• Financial fraud
• SIM swapping and phishing attacks
• Credential stuffing campaigns
• Targeted social engineering against employees and customers

#DDW #Intelligence #Indonesia #CyberSecurity #DataLeak #DarkWeb #InfoSec

[GangExposed RU @GangExposed_RU]

De-anonymization of the Conti group

[Hunter @HunterMapping]

🚨Alert🚨 CVE-2025-52970:Authentication Bypass Via Invalid Parameter in Fortinet FortiWeb
🧐Deep Dive :https://t.co/5wbY2a9CbK
📊56.3K+ Services are found on the https://t.co/g3tSyh1Boc yearly.
🔗Hunter Link:https://t.co/7tzJlsATBh
👇Query
HUNTER : https://t.co/yFFcJwegJK="FortiWeb"
📰Refer:https://t.co/rbmaDJIls7
#hunterhow #infosec #infosecurity #OSINT #Vulnerability

[Harshleen @0xharshleen]

🔍 Malware Analysis & Reverse Engineering

📌 Awesome Malware Analysis
🔗 https://t.co/MXtXzvZyz0

📌 malware-study
🔗 https://t.co/aIpGRXp713

📌 RPISEC Malware Course
🔗 https://t.co/4w9hk5vyFd

📌 Reverse Engineering Roadmap
🔗 https://t.co/PsqYj6Aypl

📌 Lynis (Security auditing tool)
🔗 https://t.co/jL1k3Cii5r

📌 Security Onion (Network security monitoring)
🔗 https://t.co/EDI75hpmUe / GitHub

📌 Semgrep (Static analysis tool)
🔗 https://t.co/NSN8GMNOsR

📌 CRAKEN agent (NYU CTF AI agents)
🔗 https://t.co/xMO635kebc

[Fusion Intelligence Center @ StealthMole @stealthmole_int]

Statistical Trends in the Growth of Ransomware Victims on the Dark Web

Ransomware groups specializing in exfiltrating and leaking victims’ data first emerged on the dark web in 2019. Since their initial appearance, we have been continuously tracking their activities. By Q1 2025, more than 220 distinct groups have been identified as having operated or remaining active. Collectively, these groups have claimed responsibility for exfiltrating and exposing the data of over 20,000 victims worldwide.

[Will @BushidoToken]

First we saw APT28 using an LLM to generate commands in their malware and now, a ransomware is using an LLM to start file system encryption 👀

[Sumanth @Sumanth_077]

Microsoft launched the best course on AI Agents!

AI Agents for Beginners

This Free 11 lesson course is available on Github and will teach you everything you need to get started with building AI agents.

[Harshleen @0xharshleen]

Resource for Active Directory Penetration Testing📝🔥
🔗https://t.co/2kxOmRJqY8

[Hackmanac @H4ckmanac]

🚨Data Breach Alert‼️

🇮🇩Indonesia - Bank Banten

A threat actor known as Jack_back has claimed responsibility for a data breach targeting Bank Pembangunan Daerah Banten (Bank Banten).

The actor is selling the stolen data on a cybercrime forum, stating that 16 million records were exfiltrated. The leaked data allegedly includes sensitive customer and ATM-related information such as:

- 4.5 million card details
- 357,000 individual records
- 1.3 million user data entries
- 125,000 ATM card records
- 5.2 million BPI logs
- 4.9 million ATM logs

Discover more at https://t.co/yiQ1nOhPjb

[0xor0ne @0xor0ne]

Windows kernel exploitation for beginners

Part 1: https://t.co/nNTKqtgmA4
Part 2: https://t.co/QwbNVNNyt2
Part 3: https://t.co/f1hRv93yrB
Part 4: https://t.co/vS1SUVUF0c
Part 5: https://t.co/2aDetUK8g1

#windows #infosec

[The Hacker News @TheHackersNews]

🚨 New Linux Root Exploits Discovered!

2 chained flaws (CVE-2025-6018 & 6019) let any local user become root in seconds—no zero-day needed.

The worst part? Most distros are vulnerable by default.

Details here → https://t.co/k8mvlHxMJF

[Swissky @pentest_swissky]

Introducing the Best EDR Of The Market Project ⚔️​
A Little AV/EDR Bypassing Lab for Training & Leaning Purposes - Part 1, 2 and 3
https://t.co/PZX7qlZgH2
https://t.co/bMGb6yfhWL
https://t.co/0ss2Wiqn8u

[Afiz ⚡️ @itsafiz]

The LLM Course literally takes you through the entire lifecycle of LLM applications for FREE!

The LLM course is divided into three parts

1. 🧩 LLM Fundamentals is optional and covers fundamental knowledge about mathematics, Python, and neural networks.
2. 🧑‍🔬 The LLM Scientist focuses on building the best possible LLMs using the latest techniques.
3. 👷 The LLM Engineer focuses on creating LLM-based applications and deploying them.

Find the course link 🧵

[Fusion Intelligence Center @ StealthMole @stealthmole_int]

🕵️‍♂️ Find Dark Web Leaks from France 🇫🇷 with OSINT

Looking for dark web leaks linked to France 🇫🇷? Use StealthMole to uncover exposed data using OSINT techniques. From breaches to insights — let’s explore how leaked data can become actionable intelligence.

Join us at the OSINT Workshop in Paris!

#OSINT #CyberIntelligence #DarkWeb #France #DataLeak #Paris

[CyberKnow @Cyberknow20]

While I do think it's flattering when people and organisations think my work is good enough to copy and paste...(they didn't even mix up the order of groups) It does still take me a long time to track, monitor, and report on hundreds of hacktivist groups.

I don't ask for money or anything like that, but a shout-out would be nice 😢

This is from linkedin. Now I see why @UK_Daniel_Card hates that app so much.

[The Hacker News @TheHackersNews]

⚠️ Critical flaw in Veeam Backup (CVSS 9.9) lets attackers execute code remotely—even after a prior patch.

Researchers warn: the old fix could be bypassed. New version out now.

Don’t wait. Update now → https://t.co/JoXEbNffl7

[Dark Web Informer @DarkWebInformer]

🚨CVE-2024-55591: Fortinet FortiOS Authentication Bypass

ZoomEye Link: https://t.co/dCnJAPVshB

ZoomEye Dork: app="Fortinet Firewall"

Results: 5,320,990

Advisory: https://t.co/9ljTwds7VA

PoC: https://t.co/pC94Vb0ljR

CVSS: 9.8

[GitHub Projects Community @GithubProjects]

90 days to cybersecurity mastery.
Day-by-day hands‑on lessons to transform theory into practice

[Hunter @HunterMapping]

🔥NEW EXP ：https://t.co/uB3jUD5PYN