Joel Oliva

Alumnus, Carnegie Mellon University Information Security Policy and Management (MSISPM) - Cybersecurity Specialist

[Joel Oliva @master_vim]

Just got my Pwnagotchi up and running for the first time! I am so excited to take Lil'Pwn out into the world and feed him regularly!
#Pwnagotchi #wifi #handshakes #pcap #hackers #Hacked #raspberrypi4

[Co11ateral @co11ateral]

New Mimikatz

Researchers took an old version of Mimikatz and taught it how to dump credentials from the latest operating systems!

The research: https://t.co/JxZwg135Mr

The repo:
https://t.co/Lpsu09AMng

#redteam #pentesting

[Defused @DefusedCyber]

Actor exploiting CVE-2023-46747 (F5 BIG-IP Auth Bypass Vuln ) from 195.248.71.38 🇷🇺
( LLC Melt-internet )

VirusTotal Detections 0/95 🟢

Actor attempts to create a new admin user with full permissions

[Joel Oliva @master_vim]

Palo Alto Networks to Acquire CyberArk in $25 Billion Deal
By Guru Baran - July 30, 2025

https://t.co/aYNG04WZ6W

[Joel Oliva @master_vim]

0-Click Microsoft 365 Copilot Vulnerability Lets Attackers Exfiltrate Sensitive Data Abusing Teams
By Guru Baran - June 12, 2025
https://t.co/dYKxuMMk3A

[Joel Oliva @master_vim]

Fortinet 0-Day Vulnerability that Allows Remote Code Execution
By Guru Baran - June 9, 2025
https://t.co/fWpcGp4l4w

[Joel Oliva @master_vim]

https://t.co/IPNgtnF3mI

[vx-underground @vxunderground]

Hahahahhahahaha

Unironically a good idea. It's so unbelievably stupid and it works. Depending on explorer layout, the .exe might not be visible.

Filename.mp4 + ??? spaces + .exe

Hahahahahaha UNC6032 is wild as hell

[Joel Oliva @master_vim]

https://t.co/5XMQLZX93o

[Joel Oliva @master_vim]

Linux kernel SMB 0-Day Vulnerability Uncovered Using ChatGPT - By Guru Baran - May 22, 2025
https://t.co/nRudTEBRPP

[M4lcode @M4lcode]

just hunted down fresh undetected & low detected APT43 (kimsuky) infra by pivoting using HTTP header analysis and SSL JARM fingerprinting

162[.]220[.]11[.]84 --> 0/94
194[.]63[.]129[.]86 --> 0/94
3[.]89[.]115[.]251 --> 0/94
110[.]142[.]212[.]109 --> 1/94
More IOCs in replies

[Joel Oliva @master_vim]

👁‍🗨Nmap 7.96 Released With New Scanning Features & Upgraded Libraries
https://t.co/XeCErFZ5Sa

[Joel Oliva @master_vim]

OneDrive - New Default Sync Feature: Automatic syncing bypasses established security protocols, as it lacks inherent controls, logging mechanisms, and corporate policies that typically govern the synchronization of personal accounts on business devices.
https://t.co/rohdaVkCuo

[Lorenzo Franceschi-Bicchierai @lorenzofb]

NEW: CrowdStrike announced that it will lay off around 500 workers as part of "a strategic plan" to "to evolve its operations to yield greater efficiencies."

The cuts represent 5% of its global workforce.

https://t.co/WtPWU0c3vx

[Joel Oliva @master_vim]

https://t.co/d7zzOx6Fgr

[Phillip Wylie @PhillipWylie]

Cloud-Centric Permission Management: A Conversation with Ron Nissim https://t.co/7w5PcyGpfq

[Corey Lynch @coreylynch]

We are now having full conversations with Figure 01, thanks to our partnership with OpenAI.

Our robot can:
- describe its visual experience
- plan future actions
- reflect on its memory
- explain its reasoning verbally
Technical deep-dive 🧵:

[Joel Oliva @master_vim]

Check out my latest write-up summary on LinkedIn: RE#TURGENCE Campaign, Targeting MSSQL Servers for Ransom with MIMIC Payloads!
Big S/O to @Securonix Threat Research for the heavy-lift when it comes to threat research!
https://t.co/1TR342tlWx

[Joe Tidy BBC News @joetidy]

Scene in MGM Grand according to a TikTok user who said slots machines down and casino floor empty after cyber attack. She also says staff had to make and distribute physical room keys and an admin error caused her to walk in on another guest. Source: https://t.co/etNWW0S49y

[Dwyer @_Dwyer_]

Super stoked for speak at BSidesPGH. Really excited to share this story with everyone https://t.co/BgMUC3Aj1X