NetworkChuck

Believer. Beard. Coffee. Tech. Youtube.

Check the link in my bio to see my latest video!

[NetworkChuck @NetworkChuck]

The #1 Danger Isn't Roblox

Ryan Montgomery on the #1 thing parents get wrong about protecting kids from online predators.

 Check out the FULL VIDEO here: https://t.co/b1YQYKYx0k

[NetworkChuck @NetworkChuck]

The last CCNA summer arc was definitely INSANE and a massive W on getting your CCNA

[NetworkChuck @NetworkChuck]

@NickMilo @obsdmd dude, that looks sick.

[NetworkChuck @NetworkChuck]

Dude, can we please stop publishing vulns before they are disclosed to the vendor!?!?!?!??!

[International Cyber Digest @IntCyberDigest]

‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.

In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.

[NetworkChuck @NetworkChuck]

Congrats @rez0__ !!!

[Joseph Thacker @rez0__]

I got second overall at the Google Bugswat in Singapore!! 🎉☺️

It was a talented group of almost 50 hackers so I am really proud of the findings and thankful to have been invited!

[NetworkChuck @NetworkChuck]

I want to type faster than I talk.

I know that the move now is voice, typing is legacy...blah blah blah.

But I still really enjoy typing. It's just a different way to get your thoughts out.

What's your favorite site/app for getting faster at typing?

[NetworkChuck @NetworkChuck]

Right now my favorite way to talk with my agents is through iMessage.

Claude code, Hermes, codex -----> all setup to talk via text.

It's so simple and doesn't rely on me having a remote session or anything. I'll often talk to my agents via a terminal app on my iPhone but there is this one dead zone on my morning walks that kills the connection. iMessage just works.

Setting it up is relatively easy.
- Use photon
- Hermes has a built in way to connect
- Claude Code and other terminal-based harnesses will need a bridge that you can have your agent put together pretty quick.

[NetworkChuck @NetworkChuck]

Imagine an AI agent that grows with you and continuously upgrades itself in the background⚡

——-> That’s exactly what the Curator feature in Hermes does. It helps you refine and improve your skills, removing the ones that don't work and creating new ones automatically.

Check it out! 👇

https://t.co/dBkBjzPYNB

[NetworkChuck @NetworkChuck]

Rule of thumb for MOST of you right now ———-> don’t expose anything to the internet.

- Close all those ports
- Put everything behind a firewall
- Use VPN for access

Keep coding all that personal software but keep your attack surface small.

[NetworkChuck @NetworkChuck]

@allietheicon There’s still room. :)

[NetworkChuck @NetworkChuck]

Windows doesn't save your real password... it saves an NTLM hash.

Grab that hash, feed it into a password cracker (like Hashcat), and crack it back into plain text

-----> Watch how easy it is to grab that hash.

[NetworkChuck @NetworkChuck]

lol, my daughter is very excited that her math is down.

But also...this is crazy.

[NetworkChuck @NetworkChuck]

You are going to walk into a business and face technical issues that neither you nor AI have ever seen before.

[NetworkChuck @NetworkChuck]

It's getting more intense!!

For you on the frontlines, how's it looking?

I know it sucks to wake up with your hair on fire. Praying for ya'll.

[Mudit Gupta @Mudit__Gupta]

🚨 Nightmare day for cybersecurity

Multiple major security incidents, active exploits, supply chain compromises...

If you run production systems, start patching NOW.

PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW

LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.

eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.

Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.

TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.

Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.

BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.

And that's not even the full list.

Patch. Audit. Rotate. NOW.

[NetworkChuck @NetworkChuck]

Want to hide yourself and become anonymous while hacking? -----> Use Proxy Chaining

#EthicalHacking

[NetworkChuck @NetworkChuck]

@0dayCTF https://t.co/b1YQYKYx0k

[NetworkChuck @NetworkChuck]

We were at DEF CON and found child predators just around us. We chatted with one. Hackers, listen up. We need your help. Watch the interview with @0dayCTF (link in the reply)

[NetworkChuck @NetworkChuck]

@CocaKova Had to reupload. Its up!

[NetworkChuck @NetworkChuck]

@0dayCTF https://t.co/b1YQYKYx0k

[NetworkChuck @NetworkChuck]

I got hacked, we found a predator 80 feet away....this was a crazy interview with @0dayCTF (link in the reply)