Deva

Blue Teamer// Cyber security//, Travel hog, PCgamer!
View are my own!

[spencer @techspence]

CISO: We need to defend against agent swarms!

Meanwhile…Suzie in accounting, with admin on the finance server where a scheduled task is running as a Domain Admin, runs her 7th clickfix payload of the day.

[Christopher Ahlberg @cahlberg]

There is a lot of panic in the world right now. My experience tells me that when everyone else panics, stay very calm. The one that remembers the core objective, retains clear thinking, and stays the course wins.

[Deva @deva1992]

@RURALINDIA @mybmc What reason will you give after a week this as subsides

[Deva @deva1992]

@pranavcodes_ Yamaha 125 .. just 99 kg and smooth engine. Preferable if mom or wife will be using .

[Deva @deva1992]

@abhinavguptaIAQ Seems to US only?

[Chirag Barjatya @chiragbarjatya]

@dj_ts https://t.co/nO5oP3aR6h

https://t.co/q5sfnOmLNX

https://t.co/73Do1i1C7D

[Chirag Barjatya @chiragbarjatya]

Right now your priority should be to get an Air Purifier for each room. If you cannot afford get it on 12 month EMI or something else. It is okay to get in debt for clean air, especially where you sleep and spend most of your time.

Block anyone who says air purifier are of no use. Skip 2kg whey isolate for this month, cancel all your outings, cancel all your vacations, start drinking instant coffee and cutting chai, skip all cafes, but get a machine for your home.

[Eric Zimmerman @EricRZimmerman]

1/ EZ Tools 2026.10 is out, all on .NET 10 (LTS)

✅ More accurate: 331K more event log records, hive logs replayed as Windows does, every test hive loads
⚡ Faster: up to 9x; EvtxECmd and Registry 2x
📉 Less memory: up to 82% less

Update with Get-ZimmermanTools 🧵 #DFIR

[Huntress @HuntressLabs]

A token “spray-and-replay” campaign set the stage for business email compromise at dozens of orgs. Across nearly 500 M365 sign-ins, we saw:

📱rogue Entra devices
🧼 wiped and replaced MFA
📩 email hiding rules

How tradecraft evolved over 10 weeks: https://t.co/s9abGAfiMC

[Vineeth K @DealsDhamaka]

Waited for 40 mins for an Uber

Finally someone accepted and told he will need to stop for CNG

Never thought this would be the best conversation in the recent past

JUST WOW 😭

- He moved from Nanded 480 kms, to Pune to settle and it’s not working.
- He shared that CNG prices have increased, they stopped pure CNG / mixing Biogas etc.
- Earlier his Celerio was giving 280 kms per full tank of CNG, now it doesn’t even give 180 kms per full

Then I asked how are your managing …
- He is learning FOREX Trading for the last 3 years. He believes in Learning is earning
- He had some setbacks over the first 2 years and have lost and gained some money. Experiences thought
- He believes he is the SNIPER in the game, having the aim and the reaction time to find the trade
- His friends are settled in Dubai. His friends started earning 2-3L/month in trading after learning for years. Couldn’t pay the income taxes etc. for this lifestyle … they can do this job from anywhere in the world and hence moved.
- He chose to stay in India … how can a middle class person stay ? 400 ka recharge hoga - 1 day earning, 6000 ka rent - 15 days of earning, 2000 ka rice - 5 days of earning … tax on income, tax on purchase … how to live .?
- If one person bounced an EMI, it will shatter his entire payment cycle. People don’t have savings anymore sir.
- Spending so much on education, getting small jobs, paying heavy taxes once they start earning… I work 14-16 hours a day sir, I also pay a TDS of Rs.15000/month. Uber says I will get the certificate and can claim, sir it’s a big mess … the govt never responds.

No one has savings sir, it’s a struggle… what’s the value of we being a young nation ? Other countries are taking benefit of our talent sir.

THE PAIN OF MIDDLE CLASS IS REAL MAN

#Uber

[CMO Maharashtra @CMOMaharashtra]

मुख्यमंत्री देवेंद्र फडणवीस यांच्या निर्देशांनुसार सामाईक नावे असलेल्या 7/12 जमिनीच्या हिस्सा विक्रीच्या नोंदणी प्रक्रियेत सुस्पष्टता आणण्यासाठी महसूल विभागाने महत्त्वपूर्ण शासन परिपत्रक जारी केले आहे.

या निर्णयामुळे जमिनीच्या विक्रीवरून सहहिस्सेदारांमध्ये निर्माण होणारे वाद आणि न्यायालयीन याचिकांची संख्या कमी होण्यास मदत होणार आहे. भूमी अभिलेख विभागाची मोजणीची ‘क’ प्रत दस्तासोबत जोडल्यास इतर सहहिस्सेदारांची लेखी संमती किंवा ना-हरकत प्रमाणपत्र आवश्यक राहणार नाही. मात्र, ही प्रत जोडलेली नसल्यास इतर सहहिस्सेदारांची लेखी संमती किंवा ना-हरकत प्रमाणपत्राशिवाय दस्ताची नोंदणी करता येणार नाही.

@Dev_Fadnavis @cbawankule
#Maharashtra #DevendraFadnavis

[Deva @deva1992]

@ashishpol86 @chiragbarjatya With the beautiful air now a days how!? I’ve seen people allergic

[Zac @zackoch]

@IAMERICAbooted I believe so - second sentence: https://t.co/Ga14m4eE2s

How? First bullet under root cause: https://t.co/qWkMOqtKLl

Tl;dr - the app php doesn't have to run. Request is passed to engine, engine looks at the req, vuln triggered, then php runs (or doesn't run)

[高市早苗 @takaichi_sanae]

皆様に、今夜に対応して頂きたい大至急のお願いです。

多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。

公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。

修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。

国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X

[Deva @deva1992]

@mdubowitz All the reasons you mentioned seem to be the applied why other countries aren't allowing India to be in that place

[Florian Roth ⚡️ @cyb3rops]

Andrii and the SOC Prime team have just launched LogTotal and I find the concept quite interesting

You can upload a collection of security logs, run detection rules against the events, correlate the matches into potential attack chains, and use AI to help interpret the results.
What I particularly like is the architecture. Instead of throwing millions of log events at an LLM, it starts with detection rules and correlation, using AI later in the process to help investigate and explain the findings.

Another interesting detail is the approach to privacy. Sensitive identifiers can be pseudonymized locally before uploading the logs. The sanitizer is even available as open source, with a CLI that can run completely offline. So if you don't want to rely on JavaScript delivered by a website, you can inspect the code and sanitize your logs in your own environment before uploading.

Sanitizer: https://t.co/VpMx44CZC7

I think that's a sensible direction for AI-assisted security investigations. It also makes retrospective log analysis accessible without having to set up an entire SIEM infrastructure.

I haven't tested it myself yet, and I'd be more interested in the quality of the detections and correlations than the advertised rule count or processing speed.

But the approach makes sense to me. Definitely worth a closer look.

[Toofani 🇧🇩 @Ekattor_71]

They want a Bangaladesh style regime change in India?

Wrong country, wrong choice.

Those militant protesters in Bangladesh wanted to kill Sheikh Hasina by attacking the PM’s residence. It was documented.

So, Indian patriots should take seriously the possibility that the CJP and its entire ecosystem might want to kill Indian Prime Minister Narendra Modi?

Watch this video of US Secretary of Defense Pete Hegseth explaining what the Americans did when someone attempted to assassinate President Trump:

“Yesterday, the leader of the unit who attempted to assassinate President Trump was hunted down and killed.

Iran tried to kill President Trump, and President Trump got the last laugh.”

No seminars.
No NGOs.
No Amnesty.
No HRW.
No UN Human Rights Council circus.
No fucking excuses.

Just cold, sovereign justice.

India can take notes.✅

... If anyone still thinks they can storm the Indian Parliament building or the Indian Prime Minister’s residence, think again.

[Deva @deva1992]

@D70Finne @IAMERICAbooted Ability to see clipboard paste via browser extensions ? I have no doubt Chrome would some cut that too

[Nicole Hoffman @threathuntergrl]

May the odds be ever in your favor

[Deva @deva1992]

@chiragbarjatya Hoping to get walk pad now that AQI is through rough day and night.