rootsecdev

Senior Security Consultant @TrustedSec | Military grade meme poster, researcher, cloud penetration tester, voider of warranties. My thoughts are my own.

[rootsecdev @rootsecdev]

Just wanted to remind everyone. Azure Cloud training does not need to be super expensive. You just need to know where to look. Because that is what hackers do.
#Azure #Cloud #Hacking

Books:
https://t.co/7yZhT0zujy

Labs:
https://t.co/e3wz9R50EX

Free SANS Courses (on demand):
https://t.co/Kvm3eXZDNO

https://t.co/r5h99OQ7gO

(Jun8th 2023..live!)
https://t.co/icnhj7GEm5

Need more training. Feel Free to check out my blog on this topic:
https://t.co/aRIZ6IpE1D

[CyberScoop - @cyberscoop.bsky.social @CyberScoopNews]

Oracle still hasn't patched the vulnerability the group has been using in its attacks since late May. https://t.co/40sp9wRjjG

[rootsecdev @rootsecdev]

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) https://t.co/SYEICGFJgk

[rootsecdev @rootsecdev]

You can only get so far before you start fighting your own biology. It takes time, patience, and a lot of effort. Another day down at the gym ✌️

[rootsecdev @rootsecdev]

@_JohnHammond Hey you didn’t violate the terms of service. Congratulations 😂

[Programmer Humor @PR0GRAMMERHUM0R]

vibeCodedAppSecurity

[Polymarket @Polymarket]

JUST IN: Trump administration moves to block foreign governments, companies & individuals from accessing Anthropic's Fable & Mythos models.

[rootsecdev @rootsecdev]

No further context

https://t.co/Ob7zP0B8pu

[NewsWire @NewsWire_US]

META MOVES TO LIMIT EMPLOYEE AI USAGE AS COSTS REACH BILLIONS

[James 🏴󠁧󠁢󠁷󠁬󠁳󠁿 @two06]

Talk is over and reel is finally public. https://t.co/bSKor8glJJ

[TrustedSec @TrustedSec]

JavaScript escaped the browser. JS-Tap v3 followed it. In our new #blog, Principal Security Consultant @hoodoer introduces three new beacons targeting the Electron apps, browser extensions, and Node runtimes running on corporate workstations. Read it now! https://t.co/grPGL6iBKA

[Hugow @hugow_vincent]

Releasing DCOMIllusionist as part of our talk on DCOM at @x33fcon with @k3vinTell. It's a remote in memory fileless lateral movement technique based on some research of @tiraniddo
https://t.co/XLljazKmnH

[rootsecdev @rootsecdev]

👀

[Retro Recall (☥𝐃𝐁) @RetroMoviesDB]

I wish kids today knew how hard this intro truly went...

[rootsecdev @rootsecdev]

Wow

[Police Incidents @PoliceIncident]

Pasadena Officer Shot by Fellow Officer During "Horseplay," Chief Says

PASADENA, Calif. — The Pasadena Police Department has released a Critical Incident Video concerning an officer-involved shooting that occurred on September 7, 2025, inside the department's parking structure at 240 Ramona Street in Pasadena. The incident resulted in injuries to one Pasadena police officer, who has since recovered.

Pasadena Police Chief Gene Harris said the incident involved "unsafe, out-of-policy horseplay involving loaded firearms" between department personnel. Chief Harris stated that one officer was wounded as a result of the shooting and emphasized that the conduct depicted in the video did not reflect the department's standards or expectations.

The injured officer was transported for medical treatment and has since recovered from the injuries sustained during the incident. Pasadena police have not publicly identified the officers involved, and no members of the public were injured.

The case remains under investigation and review by the Pasadena Police Department and the Los Angeles County District Attorney's Office.

Sources: Pasadena Police Department; City of Pasadena; Los Angeles County District Attorney's Office.

#police #cops #crime #policia #polizei #Police_Incidents #CrimeNews

[rootsecdev @rootsecdev]

I promise it wasn’t me

[Microsoft 365 Status @MSFT365Status]

We're looking into a potential problem impacting Microsoft 365 Copilot chat. For more information, please see CW1387674 in the Microsoft 365 admin center.

[rootsecdev @rootsecdev]

My talk on weaponization of token theft is ready for viewing along with tons of other fantastic talks from #SmileyCon

I know its been a hot minute since I spoke at a public con. I'll get there eventually. But for now baby steps. Still doing what I love at a company I truly believe in.

Great Scott enjoy the talks!

[TrustedSec @TrustedSec]

Wait a minute, Doc 👀 Are you telling me this year's #SmileyCon sessions are available for everyone? Check out the latest #cybersecurity insights and expert perspectives from the Doc Browns of TrustedSec—watch now! https://t.co/tp75HnK0rq

[Gizmodo @Gizmodo]

Congress Fails to Reauthorize America's Most Powerful Surveillance Law, Which Expires at Midnight Friday https://t.co/RGvRJMWQQC

[TrustedSec @TrustedSec]

Now that we've identified the blind spot, here's how to fix it. In Part 2 of our two-part series, @Carlos_Perez delivers a phase-based implementation guide to hardening Microsoft #Intune across 11 critical controls. Read it now! https://t.co/sHB1zd6JmN

[rootsecdev @rootsecdev]

👀

[Polymarket @Polymarket]

JUST IN: Engineer uses Claude to build a “coworker stress leaderboard” showing who caused him the most stress by syncing his WHOOP & calendar data.

[Signal @signalapp]

Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.

https://t.co/VdWe9uhi8p

[🕳 @sekurlsa_pw]

⚠️Be aware: this makes the account unusable.

From the original research by @tiraniddo:
"user is sacrificial, it might be hard to login using a password afterwards. If you can't immediately reset the password due to the domain's policy the user might be completely broken."