Santiago Carrancá

tech geek. building · gigstack
500 global · forbes méxico 30u30

[Santiago Carrancá @s_carranca]

@openshipio Nice! I have been all weekend migrating from railway!

[Santiago Carrancá @s_carranca]

@OpenAI @bot remind me to give this a try

[Santiago Carrancá @s_carranca]

@cvolzer @posthog Finally!!!

[Santiago Carrancá @s_carranca]

@beco Y donde dan click sus agentes

[Santiago Carrancá @s_carranca]

@richiemcilroy Cool! I’m using it right now

[Santiago Carrancá @s_carranca]

@gigstackpro Definitivamente ya estoy esperando más el gta VI

[Santiago Carrancá @s_carranca]

@woakin @bot content para gigstack con @zernio conectado

[Santiago Carrancá @s_carranca]

@gigstackpro Quiero mi factura de hace 4 meses 🤡

[Santiago Carrancá @s_carranca]

@pablostanley excited to test duet!!

[Santiago Carrancá @s_carranca]

the future is global

[Santiago Carrancá @s_carranca]

@rpenacastro Congrats !!! 🎈🍾🎉

[Santiago Carrancá @s_carranca]

@JasonDClinton What’s your advice for small companies across the globe?

[Santiago Carrancá @s_carranca]

@googlecloud @Firebase Since ~21:16 UTC, new instances of Node 22 Cloud Run functions fail to start (500, 0s, no logs) in us-central1. Warm instances fine, Node 20 fine. Looks tied to today's nodejs22 22.23.4 base image. Others seeing it in us-west1 too: https://t.co/NOQjxQejZ0

[Santiago Carrancá @s_carranca]

This is too much..

[Mudit Gupta @Mudit__Gupta]

🚨 Nightmare day for cybersecurity

Multiple major security incidents, active exploits, supply chain compromises...

If you run production systems, start patching NOW.

PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW

LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.

eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.

Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.

TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.

Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.

BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.

And that's not even the full list.

Patch. Audit. Rotate. NOW.

[Santiago Carrancá @s_carranca]

@pablostanley Awesome!!! Congrats Pablo, excited to test duet!

[Santiago Carrancá @s_carranca]

@viilla_ En @gigstackpro te ayudamos a mudarte para que no dejes de operar

[gigstack @gigstackpro]

Qué pasó con los PAC revocados y qué hacer si timbrabas con uno 🧵

El 18 de octubre, la Secretaría Anticorrupción y Buen Gobierno (Comunicado No. 121) informó que detectó 7 PAC con operaciones con EFOS. A 5 ya se les revocó la autorización y 2 siguen en procedimiento.

[Santiago Carrancá @s_carranca]

@dominikmartn cool!!

[Santiago Carrancá @s_carranca]

Si tu negocio timbraba con alguno de estos PAC's y no estás detenido, escríbeme desde gigstack, podemos ayudarte a seguir con tu operación.

[Buen Gobierno México 🇲🇽 @BuenGobierno_mx]

#ComunicadoBuenGobierno

La Secretaria Anticorrupción y #BuenGobierno fortalece el combate a las factureras, coadyuvando para la revocación de la autorización de 7 Proveedores de Certificación de Comprobantes Fiscales Digitales por Internet, quienes realizaban operaciones con Empresas que Facturan Operaciones Simuladas (EFOS)

🔗 https://t.co/tTSCMSfw1P

[Santiago Carrancá @s_carranca]

@matsiiako @opencode Good times comming for products like yours! big fan of @infisical