François Hector

[GitHub @github]

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

[spencer @techspence]

Active Directory is dead. Finished.

I vibe coded an AI powered AD hardening engine in 6 minutes.

It auto generated 147 new GPOs.
Rewrote delegation across 38 OUs.
Disabled NTLM.
Enforced smart card only logon.
Tiered the environment… spiritually.

Now no one can RDP.
The ERP app is broken.
Half the service accounts can’t authenticate.
And the CEO can’t print.

But technically… it’s zero trust.

Checkmate.

/s - thanks for the tweet ChatGPT

[Fred Cuiller @fcuiller]

How it started: Cisco AGS+, 1990s
How it's going: Cisco 8223-64EF-M, 2026

From 533 Mbps to 51.2 Tbps routers.

Pictures taken during private #NANOG 96 (no) beer and gear.

[ANSSI @ANSSI_FR]

📚 L'ANSSI publie un nouveau document présentant les fonctions de sécurité attendues sur un poste de travail destiné à faire cohabiter différents environnements, aussi appelé « poste de travail multi-environnements ».

🔗https://t.co/6atiPl6E0x

[Low Level @LowLevelTweets]

lol we broke fortigate firmware encryption with AI.

the future is crazy

[ANSSI @ANSSI_FR]

📢 Face à une menace intense et étendue, la nouvelle stratégie nationale de cybersécurité vise à faire changer d’échelle le dispositif national de #cybersécurité au service d’une meilleure résilience de la France.

Plus d'informations sur :
🔗 https://t.co/ICS5vnrE27

[François Hector @FHectorPM]

@bortzmeyer @PatriceAuffret @pseudonyme_ovb Les éditeurs d'EDR Français, dont certains certifiés par l'ANSSI, et les EDR FOSS versent une larme.

[ksa 🏴‍☠️ @kosa12m]

okay, this is getting chaotic

[mRr3b00t @UK_Daniel_Card]

https://t.co/BVmX99RjVz

[nixCraft 🐧 @nixcraft]

Me at 8 AM: I'm going to automate all the things!

Me at 4 PM: Did I just `rm -rf /` on the wrong directory using Ansible? 😭

[nixCraft 🐧 @nixcraft]

vibe coders have slowly discovered "coding" and “using expert senior human devs” 🤣

[rekdt @rekdt]

Have you ever fucked up so incredibly magnificently, an OS vendor changed their kernel design??

Respect.

Happy 1 year outage anniversary, Crowdstrike

[rekdt @rekdt]

POV: your Cybersecurity team securing your AI workloads

[rockyluke @rockyluke_]

ℹ️ @Scaleway recrute plusieurs sysadmin / SRE (low level) pour travailler sur notre stack hyperviseur (FOSS+homemade) 🚀 si vous cherchez un challenge technologique dantesque, c’est maintenant sur rockyluke[@]scaleway[.]com 🙂

[vx-underground @vxunderground]

Had a conversation with someone I met in late 2019, early 2020. In 2019 they were a complete noob and were trying to get started in cybersecurity

Fast forward to 2025... They still haven't done shit. Bros been browsing YouTube and playing video games for 6 years 😂😂😂

[François Hector @FHectorPM]

Hey @BrewDog, opening an old Paradox Heaven Hill.
Am I the only one still having a few of thoses in stock ?

[spencer @techspence]

Everyone wants to spend $100k for EDR but no one wants to take away local admin rights from Suzie in accounting…

[Aura @SecurityAura]

Whenever I see these now

[LetsDefend @LetsDefendIO]

Forced to be a member of cybersecurity