平 aRT 🤖ॐ

🌐Aequᾶm memeηto rebus in arduis servare mentem Tech Developer | cyber geek guy | systems €n6!n33Я #developer

[Third Column @ThirdColumn]

A contractor linked to Super Micro Computer has pleaded guilty to illegally exporting advanced Nvidia AI servers to China in violation of U.S. export controls.

Prosecutors allege the broader scheme sought to divert approximately $2.5 billion worth of American AI technology to China.

[blindma1den @blindma1den]

Estaba muy bloqueada en un pentest a un entorno Active Directory de 478 usuarios y 5 DC’s todo montado en Azure. Te comparto las 2 herramientas que me han salvado 🙏

1. Group3r: https://t.co/WuFA1eVJB8
2. LaZagne: https://t.co/uYtbQTpsag

[Alerta Mundial / Terremotos y Desastres @AlertaMundial19]

🌊 ALERTA EN ECUADOR Y COLOMBIA 🇪🇨🇨🇴 | ADVIERTEN SOBRE POSIBLES OLAS DE TSUNAMI
Un potente terremoto de magnitud 7,6 sacudió Panamá este viernes 9 de octubre de 2026 y activó una advertencia por posibles olas de tsunami en zonas costeras de Ecuador y Colombia.
El movimiento telúrico provocó alarma en la región y llevó a las autoridades a vigilar la evolución del fenómeno, ante la posibilidad de que se generen olas peligrosas en sectores del océano Pacífico. 🌊
La advertencia implica un riesgo potencial para las comunidades costeras, por lo que se recomienda mantenerse alejados de las playas, puertos y zonas bajas expuestas al mar, mientras se esperan actualizaciones oficiales.
Las autoridades piden a la población seguir los comunicados de los organismos de emergencia de cada país y cumplir de inmediato cualquier instrucción de evacuación. La situación continúa bajo vigilancia y las condiciones pueden cambiar conforme se reciban nuevos datos.

[The Hacker News @TheHackersNews]

‼️ Citrix patches another critical NetScaler flaw as three separate bugs face active exploitation.

CVE-2026-107406 (CVSS 9.5) could enable RCE or DoS in affected SAML IdP/SP configurations. No evidence this flaw has been exploited.

Read > https://t.co/rncjZJngWC

[Steven Lim @0x534c]

🚨 Threat Alert: A newly registered domain, 𝘁𝗲𝗮𝗺𝘀-𝗼𝗻𝗹𝗶𝗻𝗲[.]𝗰𝗼𝗺, created just 𝟰 𝗱𝗮𝘆𝘀 𝗮𝗴𝗼, is actively mimicking the full Microsoft Teams login and user interface.
​
At the time of analysis, 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗿𝗲𝗽𝗼𝗿𝘁𝗲𝗱 𝘇𝗲𝗿𝗼 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻𝘀, so don't rely solely on endpoint protection. Consider proactively adding this domain to your tenant's block list and web filtering policies immediately.
​
#threathunting #threatdetection 🫡

[CyberInsider @CyberInsidercom]

Google blocks rogue HTTPS certificates after domain registry hijacks

#Google #Chrome #CyberAttack

https://t.co/6wlt3mm3AF

[NSA Cyber @NSACyber]

China-based AI companies are illicitly distilling U.S. frontier AI capabilities. Read NSA’s new report, co-sealed with @FBI, @CISAgov, highlighting AI knowledge distillation, TTPs used, and recommended mitigations: https://t.co/IgBFOnjXeg

[chum1ng0/security research @chum1ng0]

AUDIT Team: ransomware disfrazado de “auditoría de seguridad” y primeras víctimas en Latinoamérica. #ransomware #ciberseguridad

https://t.co/Fjt2lDIYLI

[FBI Cyber Division @FBICyberDiv]

Today, the @FBI and @TheJusticeDept announced the disruption of hacking tools used by the cyber threat group Flax Typhoon. We seized multiple domains and blocked access to platforms used to scan, and in some cases infiltrate, U.S. critical infrastructure.

Flax Typhoon is associated with Integrity Technology Group, a company linked to the Chinese government that targets U.S. and foreign networks with a combination of large-scale botnets, living-off-the-land techniques, and various other tools.

The PRC relies on contractors and enabling companies to expand the reach of its malicious cyber activity. By exposing and disrupting these enablers, we are making it harder for the PRC to target American infrastructure.

🔗 https://t.co/Ki3lcsso4m

[ともにゃん𓃠 @tomo1560_]

最近これになってる

[DragonJAR - Seguridad Informática @DragonJAR]

Empresas de pentesting con IA fundadas en menos de 1 año.

[The Curious Tales @thecurioustales]

Newton was wrong about gravity.
Einstein was incomplete.

What replaces them is stranger than both.

For a century, physicists have shoved gravity into the same box as electromagnetism and the nuclear forces, hoping to find a particle called a graviton, that carries it.

But, nobody has ever detected one. Every attempt to quantize gravity the way we quantized light has collapsed under its own math.

The new frameworks emerging from Queen Mary University and Physical Review X suggest we were staring at the wrong shelf the entire time.

Gravity behaves less like a force and more like pressure in a gas. An emergent statistical tendency, born from information trying to spread out.

Matter curves spacetime because the universe is running an entropy calculation, and mass is what happens when quantum information gets locally concentrated.

Gravity is like reality reorganizing itself toward states with more available microstates.

This quietly explains the deepest embarrassment in physics: why gravity is 10^40 times weaker than electromagnetism. Weak forces don't need a particle. They need a gradient. And a gradient across the entire observable universe would feel exactly as faint as gravity does.

Dark matter, dark energy, the cosmological constant and every ghost in the machine may just be entropy accounting we hadn't learned to read yet.

[Miguel Ángel Durán @midudev]

Comparte localhost a Internet pero controla quién entra. ¡Cloudflare lo añadió ayer gratis!

Sin coste y sin registros. Con el nuevo --allowed-mail:
✓ El invitado mete su correo y recibe un PIN
✓ Si no está en la lista, no entra

https://t.co/nmIbGZ7eFd

[NairoQuinCo @NairoQuinCo]

Mi último baile. Gracias

[Abdulkadir | Cybersecurity @cyber_razz]

This is How the FBI finds your deleted files.

[Cybersecurity and Infrastructure Security Agency @CISAgov]

🚨 UPDATE: We added a SIGMA detection rule to our Alert on actively exploited Citrix NetScaler ADC and Gateway vulnerabilities to help organizations identify suspicious activity. Learn more 👉 https://t.co/pDudecAuzQ

[elhacker.NET @elhackernet]

Usan exclusiones de Microsoft Defender para ocultar malware

Están aprovechando las exclusiones de Microsoft Defender Antivirus para evitar que los archivos maliciosos sean detectados en los análisis
https://t.co/qK0Hy7T1J6

[Homeland Security @DHSgov]

Here is a list of Latin American countries where law enforcement demand proof of identity under reasonable suspicion or during investigations:

Argentina
Bolivia
Brazil
Chile
Colombia
Costa Rica
Cuba
Dominican Republic
Ecuador
El Salvador
Guatemala
Haiti
Honduras
Mexico
Nicaragua
Panama
Paraguay
Peru
Uruguay
Venezuela

Here is a list of countries where leftists want this routine practice to end:

United States

[Ramin Farajpour Cami @realraminfp]

اجرای کد از راه دور در اپلیکیشن دیوار مربوط به پیامک امنیتی دیوار

در بررسی به یک زنجیره غیرعادی در کد Android رسیدم که در صورت دریافت یک Intent با الگوی مشخص، می‌تواند به دریافت و اجرای کد از یک منبع خارجی منجر شود.

جزئیات را مرحله‌به‌مرحله توضیح می‌دهم. 👇
#دیوار #سایبری

[wyck 📴 @wyckoffweb]

Scammers found a way to make people drain their own wallets without sending them a phishing link.

They uploaded YouTube tutorials showing people how to build an AI crypto trading bot with Claude.

People followed the tutorial themselves.

Copied the code.

Deployed the smart contract themselves.

Funded it from their own wallets.

And approved every transaction themselves.

Except the “trading bot” had no trading logic.

It was built to send their ETH straight to the scammers.

224 wallets lost 274.6 ETH, worth about $517,000 when it was stolen.

The median victim lost 1 ETH.

Some victims even got an error after getting drained telling them to deposit another 50% to fix the bot.

They literally got people to build, fund and approve their own wallet drainer.

You've got to be very careful this days