Prof3ssorx86

Mini-Myth, W605, Hacker, tinkerer, Whisky Taster, Beer Drinker

[Prof3ssorx86 @prof3ssorx86]

Arch Linux AUR just got owned 400+ (now 1,500+) packages compromised in “Atomic Arch” supply-chain attack.

Orphaned packages hijacked, steals SSH keys, browser creds, GitHub tokens and escalates to rootkit persistence if you build as root like a legend

[Prof3ssorx86 @prof3ssorx86]

@hetmehtaa Security awesomeness plus processes could help, but still takes a culture change.

[Prof3ssorx86 @prof3ssorx86]

I can see the logic, but the SOC is the true cornerstone that makes everything else possible.

It’s a maturity journey: without a solid SOC foundation, the rest of the org can’t effectively do the advanced work.

[Prof3ssorx86 @prof3ssorx86]

Unpopular opinion: deploying a SIEM isn't a security program. It's a noise machine with no one to tune it.
SOC → Detection Eng → Threat Hunting → Red Team.
You don't skip layers. You earn them. Here's what that looks like:
https://t.co/YihHd4YpYC

[Prof3ssorx86 @prof3ssorx86]

@RedPacketSec How would you order it?

[Prof3ssorx86 @prof3ssorx86]

Another week, another ‘zero-day’

We keep building critical systems on software that’s perpetually one exploit away from collapse, then act shocked when advisories walk right in

[Prof3ssorx86 @prof3ssorx86]

Oracle knew about CVE-2026-35273 (a no-auth RCE rated 9.8) and did not publish their advisory until after Mandiant caught active exploitation. Vendors hiding vuln details to protect PR is a feature, not a bug.

[Prof3ssorx86 @prof3ssorx86]

The scariest gap in OT security isn't a CVE.

It's a professional who's never walked the floor.

You can't hunt what you don't understand.
You can't defend what you've never seen.

How to close the IT/OT knowledge gap
https://t.co/mvjm60uBif

[Prof3ssorx86 @prof3ssorx86]

@shenetworks Based on your experience and other things that you can credit will make the resume more than 1 page is acceptable.

[Prof3ssorx86 @prof3ssorx86]

This guy @Nightmare-Eclipse just keeps dropping Exploits 🔥

Fresh today: MiniPlasma - PoC for a LPE in cldflt.sys (old CVE-2020-17103 apparently never fixed or silently rolled back).

Already YellowKey,GreenPlasma, RedSun, BlueHammer, UnDefend... more?

https://t.co/QQFGHgkbQz

[Prof3ssorx86 @prof3ssorx86]

Check out my latest article: AI Is Discovering Vulnerabilities Faster Than Ever Before But Panic Is Not The Answer Building a Layered Defense That Actually Works https://t.co/ZU14s1nG6i via @LinkedIn

[Prof3ssorx86 @prof3ssorx86]

@IntCyberDigest AI spotting an 18-year-old heap buffer overflow in NGINX’s rewrite module (CVE-2026-42945) is a wake-up call.

RCE possible with ASLR off.
Patch to 1.30.1+ immediately, especially on anything internet-facing. PoC is already public. Check your configs and version now.

[Prof3ssorx86 @prof3ssorx86]

@MsftSecIntel AI dependency supply chains are officially a contact sport.

[Prof3ssorx86 @prof3ssorx86]

Sometime Shadow IT can be worse than threat actors.

[Prof3ssorx86 @prof3ssorx86]

A good day for tinkering

[Prof3ssorx86 @prof3ssorx86]

6/ Last thing: Stick with it.
There will be days you feel dumb. Days you get ghosted on applications. Days nothing works.
Every good hacker has been there. The ones who make it are the ones who keep showing up.
You got this.
Now stop reading — go build that lab 🔥

[Prof3ssorx86 @prof3ssorx86]

1/ Want to break into cybersecurity but graduated with no real IT experience?
Don’t get discouraged. I’ve been there. That shiny degree won’t hand you a job on day one. Most hiring managers want you to actually understand how systems work first. It’s okay. This path is normal.

[Prof3ssorx86 @prof3ssorx86]

5/ Yeah, you can skip IT experience and go straight cyber… but it’s way harder. You’ll have to learn 10x faster and eat more rejection. Possible? Absolutely. Easy? Nope.