Eben

🛡️Cybersecurity Engineer || SOC Operations || AI || AI Security & Governance @NeuralysLtd || AI Agents || LLMs || RAG || ManCity 💙 ⚽

[Eben @Eben_a_u]

A Subtle Dichotomy Of Threat Modeling in Cybersecurity & Artificial Intelligence

Threat modeling itself is a continuous process of identifying, analyzing, prioritizing threats, then defining mitigations/controls before those threats are exploited.

🧵 🧵👇🏾

[Eben @Eben_a_u]

@_DeejustDee 😂

[Eben @Eben_a_u]

I'll be back 🔙

[Eben @Eben_a_u]

Don't you ever cap about Rodri. Ever!

[Fabrizio Romano @FabrizioRomano]

🚨⭐️ OFFICIAL: Rodri wins BEST PLAYER OF THE TOURNAMENT Award at 2026 World Cup. 🇪🇸

[Eben @Eben_a_u]

Rodri 🫡

[Manchester City @ManCity]

World Cup 🏆
European Championship 🏆
Nations League 🏆
Club World Cup 🏆
Champions League 🏆
Super Cup 🏆🏆
Premier League 🏆🏆🏆🏆
FA Cup 🏆🏆
EFL Cup 🏆🏆🏆
Community Shield 🏆
Ballon d'Or 🏅

Rodri.

[Eben @Eben_a_u]

❗❗❗

[The Hacker News @TheHackersNews]

🛑 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.

CVE-2026-42533 affects specific regex map configurations.

F5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.

Read how the bug works: https://t.co/r0FYOqw61D

[The Hacker News @TheHackersNews]

🚨 Two SonicWall SMA 1000 zero-days were exploited before disclosure to gain root access.

Researchers link the activity to UTA0533, which planted custom malware and sniffed unencrypted LDAP credentials from compromised VPN appliances.

Full attack chain: https://t.co/YoyRiTQME3

[Eben @Eben_a_u]

Hmmmmmm

[International Cyber Digest @IntCyberDigest]

‼️ LG monitors are silently installing adware on computers through an LG app because Windows allows to automatically fetch apps for connected devices with full system access.

Once an LG monitor is connected to a Windows PC, it triggers Windows Update to fetch the LG Monitor App Installer, an app whose store listing grants access to "All system resources," with no consent screen and McAfee trial ads following shortly after.

Microsoft's role deserves scrutiny too. The Windows feature was built for drivers and companion utilities, not for ad software with full-resource permissions.

The same behavior was found by YouTuber Gamers Nexus on monitors up to three years old, including ones already in use at its own office. LG has not publicly responded, and the first consent screen you ever see is the ad.

[Eben @Eben_a_u]

Tuchel just dey pray

Cause it'll be better if France had won clean than come back 4-0 and still win. You're a dead man 😂

[The Hacker News @TheHackersNews]

⚡ UPDATE: #wp2shell now has two CVEs, and a working proof-of-concept is public.

> CVE-2026-63030 breaks REST batch routing
> CVE-2026-60137 injects SQL

Chained, they give an anonymous attacker code execution on affected WordPress sites.

[Eben @Eben_a_u]

@TemitopeSobulo Check again 😂 4-3

[Eben @Eben_a_u]

Which kin match I dey watch so

[OpenAI @OpenAI]

GPT-5.6 Sol sets a new state of the art in cybersecurity on “The Last Ones” cyber range.

We’re already seeing that capability translate into defensive outcomes: helping teams find, validate, and fix vulnerabilities in real-world code.

Put it to work with Codex Security: https://t.co/Fvz9wpLjrt

[Claude @claudeai]

Beginning July 20, Claude Fable 5 will be included in all Max and Team Premium plans, at 50% of limits.

Pro and Team Standard users will continue to have access to Fable via usage credits, and will receive a one-time $100 credit.

Demand for Fable has been challenging to predict, which is why we rolled it out to subscription plans in stages, extending access several times as we secured additional capacity.

[Eben @Eben_a_u]

❗❗❗

[International Cyber Digest @IntCyberDigest]

🚨 CRITICAL: WordPress has force-pushed emergency updates 6.9.5 and 7.0.2 to kill "wp2shell," a pre-auth RCE chain in core that lets anonymous attackers run code on default installs, no plugins required. No exploitation observed yet, per Searchlight Cyber, but sites on 6.9.0 to 7.0.1 should verify they're patched today.

WordPress rarely overrides an administrator's choice to disable updates. On July 17 it did. Spending that mechanism is the clearest signal of how seriously the project is treating the flaw.

[Cyber Security News @The_Cyber_News]

🚨 EY Data Breach - Hackers Gain Access to IT Support System and Download Documents

Source: https://t.co/c79lfnj4yb

Ernst & Young LLP (EY) is notifying clients that an unauthorized third party breached a support ticket platform used by its IT staff, downloading documents containing client tax data during a roughly two-week window this spring.

The Big Four accounting and consulting giant filed breach notifications with the California Attorney General's office on July 15, 2026, confirming the incident's scope.

According to EY's notification letter dated July 13, 2026, the firm uses a third-party IT service management platform to help its information technology personnel support internal teams handling tax-related client work.

#cybersecuritynews #Databreach

[Eben @Eben_a_u]

Lol

[Fabrizio Romano @FabrizioRomano]

🚨🔵 BREAKING: MORGAN ROGERS TO CHELSEA, HERE WE GO!

Club to club agreement reached today with Aston Villa to anticipate Arsenal official bid.

£117m proposal has been accepted, as @David_Ornstein reported.

Agreement done with Morgan Rogers on personal terms until June 2032. 🫱🏻‍🫲🏼

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: AWS users are in shock as the company shows them wildly inflated cost estimates running into billions of dollars per account. AWS has confirmed a global billing console bug as the cause.

In some reported cases the estimates run as high as $1 trillion.

AWS blames a unit pricing error in its estimation subsystem and stresses that the phantom numbers do not reflect actual usage or charges.

[Eben @Eben_a_u]

❗❗❗

[The Hacker News @TheHackersNews]

Microsoft patched a SharePoint flaw after attackers had already exploited it as a zero-day.

CVE-2026-58644 affects every supported on-premises SharePoint version and can lead to remote code execution.

CISA has now added it to KEV.

[The Hacker News @TheHackersNews]

🛑 Claude for Chrome still lets another extension running on claude[.]ai trigger tasks that read Gmail, Docs, and Calendar.

One approval click remains by default. With “Act without asking” enabled, the same task runs silently.

Eight releases later, the path is still open.

How it works: https://t.co/VD2IkSIZIR