@disintegr8te

disintegrating security problems..

[@disintegr8te @disintegr8te]

@ImLunaHey yes same here , started a few min ago.

[tmctmt @tmctmt]

Mullvad exit IPs are surprisingly identifying
https://t.co/JJzrTTG7Uc

[mRr3b00t @UK_Daniel_Card]

when the IT admin install Advanced IP scanner and the SOC lights up like an xmas tree!

[spencer @techspence]

Defenders should be checking out https://t.co/qZmECaF3DF And then blocking all RMMs not used in their environment. Easy win.

[Claude @claudeai]

Dreaming reviews your agent's past sessions, extracts patterns, and curates memories so your agents learn over time.

Request access: https://t.co/MY2soiuUl3

[@disintegr8te @disintegr8te]

@UK_Daniel_Card As it looks the two flagged roots are mostly used for cross‑signing legacy clients and Authenticode (code signing), not modern HTTPS. (Not in the Top Majestic Million)

[@disintegr8te @disintegr8te]

Without Confirmation Defender signature 1.449.424.0
looks to detect two DigiCert public root CAs as Trojan:Win32/Cerdigent.A!dha — thumbprints
DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 (DigiCert Trusted Root G4) and
0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 (DigiCert Assured ID Root CA).

[mRr3b00t @UK_Daniel_Card]

Anyone seeing this: 'Cerdigent' high-severity malware was detected

[mRr3b00t @UK_Daniel_Card]

I need like 50 people to read this at least :D

[mRr3b00t @UK_Daniel_Card]

EDR is a baseline capability not an advanced optional feature.

Not having it is like not having a firewall or antivirus in 2004

It doesn't replace dedicated logging (SIEM) but its the bare minimum an org should have.

[mRr3b00t @UK_Daniel_Card]

some things on paper look great... but when they are based on assumptions that have a foundation of sand they tend to fall flat in the face of reality....

evidence based
data based
test based

is usually better than guessing...

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Mike Rundle @flyosity]

--dangerously-skip-permissions

[Taalas Inc. @taalas_inc]

24 dedicated people.
$30M spent on development.
Extreme specialization, speed, and power efficiency.

Today we launch Taalas’ first product. Check it out:
Details: https://t.co/88CA0XAL71
Demo chatbot: https://t.co/ec4ladcKnw
API: https://t.co/M3EkaxEqPj

[@disintegr8te @disintegr8te]

@AuswaertigesAmt Die Registrierung bei ELEFAND (https://t.co/4xK7zsVhC1 ) gibt nen 500 Internal Server Error zurück, da scheint nen Service nicht zu laufen. Unterschiedliche Verbindungen und Clients ausprobiert…

[@BrennpunktUA 🇩🇪🇺🇦 @BrennpunktUA]

Told you yesterday. The average people in the U.S. and around the world have no clue what’s going on with the massive USAF🇺🇸 & US Navy build up related to Iran 🇮🇷. They will wake up the next morning and suddenly the U.S. is at war. That’s why I yesterday showed my respect and thanked the OSINT Community on X!

[The AI Doc @theaidocfilm]

"The most urgent film of our time."

THE AI DOC: OR HOW I BECAME AN APOCALOPTIMIST is only in theaters March 27. Watch the trailer now.

[Florian Roth ⚡️ @cyb3rops]

Everyone freaks out that AI can build beautiful websites in seconds

But what only a few people see: we’re heading into a world where you don’t need websites anymore. Who needs a website when an agent can book a table, reserve cinema seats, fill out forms, pull facts and just get stuff done ..straight from markdown, APIs or MCP servers?

People think „AI = prettier UI“ and “AI writes code a human can read and debug”. That’s still the human-in-the-loop phase.

The final phase is: human isn’t in loop anymore. Agents will use different inputs, different protocols, different paths from problem to solution. A lot of the software we built mainly to be usable for humans in the middle - it’s gone in five years. Maybe sooner

[Haakon Wibe @HaakonWibe]

Look.. it's a Conditional Access policy simulator built by an infra architect guy who got tired of squinting at What If results 🫠 Shiny graphs yay! 🔗https://t.co/hqKKVDnBFV No sign-in needed, click Sample Data and play around. Or connect to your own data - all's in browser.

[AISecHub @AISecHub]

OpenAI now requires government ID verification to use GPT-5.3-Codex for cybersecurity work. - https://t.co/X6rTCVDPXb

GPT-5.3 and Opus 4.6... AI cybersecurity capabilities have reached the critical point where they need to be properly safeguarded.

OpenAI built a tiered trust system with automated classifiers monitoring for suspicious cyber activity in real-time, an invite-only tier for researchers, and $10M in API credits for defensive teams.

Prediction:

1️�� Google DeepMind and Anthropic will follow and implement KYC to access the risky capabilities of their frontier models.

2️⃣ Today's frontier models will become just a model in 6 months, with open access to everyone. But they won't become less capable.

3️⃣ The labs will continue doubling down on safety guardrails and making AI able to protect from AI

Source: Ilya Kabanov