Cesar Chavez Martinez

🏴‍☠️ Speaker 🇵🇪 🇵🇦 🇲🇽 🇧🇴 🇨🇷 🇨🇴 🇨🇱 🇪🇦 🇭🇳 🇵🇷 🇨🇴 🇱🇹 🇵🇦 🇵🇾
🕵#Hacking #Forensic
🎓+4000 face-to-face conferences //500 online conf.

[Cesar Chavez Martinez @peruhacking]

Todo esta consumado, información de la SBS liberada https://t.co/hktJHjEiVe

[Cesar Chavez Martinez @peruhacking]

ALERTA: El Grupo de #Telegram STAR ha liberado muestras de la base de datos de la #SBS, burlándose del comunicado de la SBS, iniciando la venta publica de la información de sus sistemas. Seguiremos informando de este tema

[Cesar Chavez Martinez @peruhacking]

Conforme les anticipe, es momento de la revelación, mas de 32K de credenciales de cuentas filtradas de entidades gubernamentales, compañías aseguradoras, entidades bancarias entre otras
https://t.co/S0ikjOe29S

[Cesar Chavez Martinez @peruhacking]

Conforme a lo previamente anunciado. Está es la información de @SBS que estan ofreciendo los del grupo STARs en Telegram. En fin es cosa de cada uno.

[Infobae Perú @infobaeperu]

Cae presunto hacker que habría vulnerado información del Estado para obtener datos de los familiares su víctima https://t.co/o2cLqziGes

[Cesar Chavez Martinez @peruhacking]

Presente en la presentación de soluciones de emergencia de NETSCOUT ante vulnerabilidades PHP. Las pasarelas de comunicación son esenciales en revisar las interacciones.

[Madison Mills @MadisonMills22]

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.

The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.

Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.

Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.

Read my latest for Axios here: https://t.co/Q3bda5In8q

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: Trend Micro posted several unpatched Linux kernel flaws to public mailing lists.

Two are critical remote code execution bugs in the kernel's SMB server, and one includes proof-of-concept code.

Linux maintainer Greg told them to "fix your submission process."

[Dark Web Informer @DarkWebInformer]

🚨 Oracle patches critical unauthenticated Java vulnerability; CVE-2026-91403

A critical vulnerability in the Java Secure Socket Extension component affects Oracle Java SE and multiple GraalVM releases.

The flaw carries a CVSS score of 9.1 and can be exploited remotely without credentials or user interaction.
⠀
Successful exploitation could allow attackers to access, create, delete or modify critical data available to the affected Java or GraalVM deployment.

Affected products include:

• Oracle Java SE 8, 11, 17, 21, 25 and 27 releases listed by Oracle
• Oracle GraalVM for JDK 17.0.21 and 21.0.13
• Oracle GraalVM Enterprise Edition 21.3.20
⠀
Oracle released a security patch on October 21 and recommends applying the available updates.

Source:
https://t.co/RgWHnAFGqc

[Cesar Chavez Martinez @peruhacking]

Ahora los desarrolladores

[sagitz @sagitz_]

Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP

WordPress pre-auth RCE: ✅
Drupal pre-auth RCE: ✅
Joomla pre-auth RCE: ✅
Remote memory disclosure of any PHP application: ✅

Read more ⬇️🧵

[Dhiyaneshwaran @DhiyaneshDK]

🚨 PHP2Shell (CVE-2026-109618/CVE-2026-109619)

Nuclei Template : https://t.co/gGhrsBq5KX

Reference: https://t.co/AI7cruXnbh

#hackwithautomation #php2shell

[Dark Web Intelligence @DailyDarkWeb]

🇵🇪 🚨 PERU: THREAT ACTOR LEAKS ALLEGED ESSALUD PATIENT DATABASE

A threat actor on a dark web forum has published a database they claim was stolen from EsSalud, Peru's public social health insurance agency, which covers millions of insured workers and their families.

The actor claims the data includes:
* Full names, DNI (national ID) numbers, gender and addresses
* Contact details
* Medical record details and consultation notes
* Patient complaints, internal system codes and user identifiers

⚠️ Analyst Note:
National ID numbers combined with medical history are high-value material for identity theft and health-themed phishing. The internal codes described could point to access to backend or administrative systems, but that is not confirmed. Unverified threat-actor claim, NOT confirmation that EsSalud was breached.

#DDW #DarkWeb #EsSalud #Peru #DataBreach #Healthcare #ThreatIntelligence

[Cesar Chavez Martinez @peruhacking]

Con mucho pesar se les comunica que un reconocido actores de amenaza con el nick DEADM4N, ha subido la venta de información de los asegurados de ESSALUD. Seguiremos informando al respecto.

[Cesar Chavez Martinez @peruhacking]

Este 21 de Octubre en foro de actores de amenazas ponen a disposición brecha de seguridad en la API de la empresa peruana Claro que lograría extraer información relativa a los usuarios, facturas electrónicas, y las credenciales de acceso a los sistemas de empleados

[Mathieu Flaig @MathieuFlex]

Vouloir Maj le PHP de son site -> l’hébergeur t’envoie un SMS de 2FA -> Orange est down et donc pas de SMS

[br1 @brunotorossi]

PHP: 2 RCE críticas.

TLS: 8 certificados con claves comprometidas.

Node.js: 10 CVEs.

Oracle: 1.295 parches.

GitLab: RCE 10/10.

Acabo de desenchufar el Ethernet y tirar el módem por la ventana

[Jordy Rodríguez 👨‍💻 @jordy_4sd]

🚨 Oracle publicó hoy una alerta de seguridad para Java: CVE-2026-91403, CVSS 9.1.

Está en JSSE (el TLS de Java) y es explotable por red sin credenciales.

Versiones afectadas que lista: Java SE 8u511, 11.0.33, 17.0.21, 21.0.13, 25.0.5 y 27.0.1, y GraalVM.

https://t.co/Uda1HhCrAz

[Pirat_Nation 🔴 @Pirat_Nation]

eMudhra, an Indian certificate authority, has had 8 private security keys compromised with half the internet is cooked

The keys were incredibly weak. One of them was literally just “4”

The keys could have been used to create fake HTTPS certificates and make malicious websites appear legitimate.

Chrome, Firefox, Apple and Microsoft have blocked the affected certificates. Older devices, software and apps may still need updates.

[Matthew Prince 🌥 @eastdakota]

Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.