Drayko Escobar

Cybersecurity consultant, perpetual student, mentor, trainer, continual incremental improvement. In love with Linux.

[Drayko Escobar @DraykoEs]

A bit late posting this, but I completed the #CRTE lab environment!
Huge thanks to @nikhil_mitt and @AlteredSecurity for the opportunity🫶🏻 the bootcamp package has already helped me apply new techniques in real-world engagements
Exam next. Hopefully I'll be sharing the cert soon!

[BleepingComputer @BleepinComputer]

🚨 Microsoft’s June 2026 Patch Tuesday fixes 200 flaws, including 3 publicly disclosed zero-days affecting Windows privilege escalation, HTTP.sys, and BitLocker.

⚫️33 flaws are rated Critical, including 28 RCE bugs.
⚫️Microsoft patched the new “HTTP/2 Bomb” DoS attack targeting HTTP.sys.
⚫️The BitLocker bypass dubbed YellowKey that allowed access to encrypted drives was also patched.

Read our full report: https://t.co/Vo4ygyOIt8

[Florian Roth ⚡️ @cyb3rops]

I don’t know what happened between Microsoft and #NightmareEclipse behind closed doors

Maybe Nightmare Eclipse was unreasonable. Maybe Microsoft was. Maybe both.

But I think Microsoft badly misjudged this situation.

When you’re the largest software vendor on the planet, you don’t get to behave like an angry individual in an internet argument.

You have to be the adult in the room.

Deleting repositories, talking about criminal investigations and turning the whole thing into a public fight was a mistake. The damage from that goes far beyond this one researcher.

What surprised me most is how quickly people started sharing their own MSRC stories afterwards.

- Months without responses
- “Working as intended”
- Bounty disputes
- Reports that went nowhere

People don’t suddenly start telling those stories for no reason. I think Microsoft broke a lot of porcelain here.

And for what exactly?
I don’t see much upside.

[Abdulkadir | Cybersecurity @cyber_razz]

A researcher found critical Windows zero-days.

Reported them to Microsoft.

Microsoft denied the bug bounty.

Deleted their account.

Banned them from GitHub.

Then threatened criminal charges.

The researcher dropped six zero-days in six weeks.

Three got used in real attacks within days.

Other researchers are now handing them free vulnerabilities as a gift.

Microsoft’s Digital Crimes Unit is considering legal action.

Against the person whose bugs they refused to pay for.

This is Microsoft’s bug bounty program.

[International Cyber Digest @IntCyberDigest]

@nyxgeek Nerds rule the world.

[vx-underground @vxunderground]

Microsoft: PowerShell is simple and easy to use.

Actual PowerShell command: Remove-MgIdentityAuthenticationEventFlowAsOnGraphAPretributeCollectionExternalUserSelfServiceSignUpAttributeIdentityUserFlowAttributeByRef

No, this isn't a joke. This was noted by @NathanMcNulty

[Sotiris Kaniras @CastAsHuman]

Could happen 😅

[TryHackMe @tryhackme]

Everyone wants to get into cyber security…but skips the basics like DNS 💀
Fix it in 45 minutes ✅ See the 🧵 on what it covers and share with someone who is starting in cyber!
🔗https://t.co/TQC4ch7u97

[TryHackMe @tryhackme]

If I had a dollar for every “hack my ex” request...

[mauforonda @mauforonda]

Archivé todos los datos geográficos que encontré sobre Bolivia e hice una página para que podamos buscar y descargarlos.

https://t.co/yZire5uBac

[Gabriela Ichaso @GabrielaIchaso]

Parte del contenido del nuevo decreto es lo mismo que el suscrito en 2018 por Evo Morales, sólo que con un Portal de Trámites en lugar de un Catálogo y "Bolivia, a tu servicio" en vez de "Tranca cero".
Precisamente mi principal observación es que nada de lo propuesto tiene plazo final de implementación ni sanción a quienes no lo hagan en un término razonable.

[Ivan Fioravanti ᯅ @ivanfioravanti]

Who takes from open-source should give something back to open-source.

[Benjamin Strick @BenDoBrown]

This investigation from @OCCRP, published a few weeks ago, uncovered how a person running two UK-registered crypto exchanges was actually a fake front linked to laundering for Iran's regime.

One of the links in the investigation relied on facial matching a cat. Brilliant.

[Drayko Escobar @DraykoEs]

@nikhil_mitt @AlteredSecurity Active Directory is still the backbone of most enterprises.
Learning to properly attack and defend it is critical.
Hoping to take the CRTE training soon.

[Nikhil Mittal @nikhil_mitt]

Giveaway - Our instructor-led advanced bootcamps for sharpening your Red Team skills start this weekend.

Attacking and Defending Active Directory - Advanced Edition (CRTE) starts this Friday.

Advanced Windows Tradecraft - Evasion Techniques for Red Teams (CETP) starts this Saturday.

I am giving away one seat for each of the bootcamps. To participate, please Follow @nikhil_mitt and @AlteredSecurity, Like, Comment and Repost.

We will announce the random winners on Wednesday.

https://t.co/Kd0RNoINWc

#RedTeam #Evasion

[GitHub Projects Community @GithubProjects]

Tap to uncover a Linus Torvalds classic.

[Drayko Escobar @DraykoEs]

@AlteredSecurity I want the CRTP certification because it validates the real world Active Directory attack skills. It's not about theory, it's about thinking like an attacker and executing with precision

[Altered Security @AlteredSecurity]

The wait is over.

Before anything else - this is not a sale, not a discount, and not a promotion.

For years, the Red Team community has helped shape how we think about labs, certifications, and real-world attack paths.
Today, we’re giving something back.

We’re opening access to 10 new enterprise-grade Red Team labs on our Red Labs & Challenges platform (BETA) as a community release.

These labs are built around real Azure security and red team scenarios, with:
⦁Dedicated enterprise-style environments
⦁Clear objectives with flags
⦁Full solutions and walkthroughs
⦁No gamification. No shortcuts.

This new lab category focuses on attacking Azure one RESTful API at a time, using BARK (BloodHound Attack Research Kit) - along with native REST API Calls - to help practitioners deeply understand offensive Azure tradecraft.

They’re built using the same standards and philosophy we apply to CARTP and CARTE: realistic systems, real attack paths, and lessons that translate directly to enterprise environments.

Red Labs is where we experiment, learn, and raise the bar - long before anything becomes a certification.

Opening this set is our way of supporting practitioners who want hands-on exposure to real enterprise environments, without noise or hype.

This one is for the community that keeps pushing red teaming forward.

Full details here: https://t.co/7XEELQeZqZ

[Simone Margaritelli @evilsocket]

People should not pay for the failed requests.