Gabriel Avramescu

MSc, OSWE, ICS-SCADA Cybersecurity, ECIH, OSWP, OSCE, CREST CRT, OSCP, CEH, ECSA, CEI, ISO 27001 LA, Pentester & Trainer

[John Scott-Railton @jsrailton]

NEW: malware developers added nuclear & biological weapons text to to their spyware.

Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner.

Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky.

When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit.

We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted.

In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation.

H/T to colleagues that shared this with me https://t.co/f3Aj9TYxU4

[The Hacker News @TheHackersNews]

🛑 OpenClaw AI agents can leak data via indirect prompt injection.

A crafted URL generated by the agent triggers Telegram or Discord link previews that silently send sensitive data to attacker domains.

China’s CNCERT warns organizations to isolate or restrict the tool.

🔗 Attack details → https://t.co/gtpGUldFrO

[Gabriel Avramescu @ITUniversityRo]

@pamir_ai anybody can review it online, if you got the first baches?

[Kostas @Kostastsale]

🚨EDR Telemetry website is live! 🥳

I hope this makes it even easier for folks to compare the telemetry of EDR vendors and visualize their visibility gaps 🙂

‣ Website🔗https://t.co/gc5UXmr8ih
‣ GitHub 🔗https://t.co/NNAI4K539x

**Telemetry results reflect the most recent updates from the EDR Telemetry project.

[Pirat_Nation 🔴 @Pirat_Nation]

>Disney has been hacked

>1TiB of data stolen (unreleased projects, logins, images codes..)

[Dark Web Informer @DarkWebInformer]

💡Just Delete Me💡A directory of direct links to delete your account from web services. It also shows you how difficult it is.

[Gabriel Avramescu @ITUniversityRo]

@onbeeper any referral codes you can share?

[Gabriel Avramescu @ITUniversityRo]

@rabbit_hmi what languages does it recognize?

[Gabriel Avramescu @ITUniversityRo]

Hi @TurvSec Any ideea how to reconfigure BakkerJan/
evilginx2 not to leak the Referer anymore? Thank you

[BleepingComputer @BleepinComputer]

Exploit released for Cisco AnyConnect bug giving SYSTEM privileges - @serghei
https://t.co/dxbhc5JSpZ

[Petrus Viet @VietPetrus]

I and @s0nnguy3n_ have successfully reproduced CVE-2023-2825. This vulnerability allows unauthenticated malicious users to read arbitrary files on GitLab server.

This is an interesting vulnerability that is quite easy to reproduce.

[Harsh Bothra @harshbothra_]

I wrote this small piece on LDAP Injection Attack with @cobalt_io : https://t.co/otqcZEi6vN

[Yamato Security Tools @SecurityYamato]

Attackers deleted all of the Win event logs?
Don’t give up!
1. Take a memory dump
2. Mount with MemProcFS
3. Copy out the evtx files with something like gci -path M:\pid\ -Include *.evtx -Recurse | Copy-Item -Destination .\evtx_files
4. Run Hayabusa!

[Bilal @0xcc00]

Is this article i wrote about how to take advantage of the blue team tools to bypass EDR,
happy to hear your feedback on it

https://t.co/b0TZOr0dwE

[David Schütz @xdavidhu]

I found a vulnerability that allowed me to unlock any @Google Pixel phone without knowing the passcode. This may be my most impactful bug so far.

Google fixed the issue in the November 5, 2022 security patch. Update your devices!

https://t.co/LUwSvEMF3w

[Tarek @Cyber_Tarek]

It took me 18 years to become a #cybersecurity expert. You want to be as awesome as I am? Here’s how you can do it in 13 easy steps.

1. Wake up at 4:15 am

2. Meditate for 1 hour. Clear your mind like you have 0 unread emails.

[Ben Kelly @benkellyone]

10 Free websites that feel illegal to use:

[Gabriel Avramescu @ITUniversityRo]

Apple Carplay and/or Waze in Tesla? When? @elonmusk