ꙮ i d m

threat Intelligence - opinions my own

[ꙮ i d m @secur1tize]

"The morpheme ‘cyber-’, even though it nowadays seems to have lost the direct link to its origins, is still inextricably linked to systemic thinking. The notion of ‘systems’ is absolutely central in the context of cyber-threats and has several practical and theoretical
ramifications for how the issue is approached."

Cavelty, Myriam Dunn. (2008) Cyber-security and threat politics: US efforts to secure the information age., Nova York: Routledge 16p.

[ꙮ i d m @secur1tize]

https://t.co/MG7bGJ8JGO

[The Economist @TheEconomist]

Brazil chose to go electronic to combat widespread electoral fraud. Yet openness and advanced cryptography have their limits: https://t.co/PHzoceTMHb

Photo: Getty Images

[Banco Central BR @BancoCentralBR]

BC passa a exigir relatório de auditoria independente para autorizar empresas de ativos virtuais

https://t.co/ko41Ddqo1X

[ꙮ i d m @secur1tize]

@ayubio Aproveita e bota no Ubuntu server já integrado com gov br na instalação e deixa um aninho assim só pra ver no que dá

[Ayub | Internet propriamente dita @ayubio]

Maior botnet de DDoS do mundo atinge 13,5 milhões de dispositivos. Com crescimento anual de 10x, a rede usa a blockchain Polygon para descentralizar seu comando. Ataques multi-vetor já somam 10,7% do total e focam na infraestrutura financeira global. https://t.co/8krvXPEU0j

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Ayub | Internet propriamente dita @ayubio]

STJ determina que Starlink forneça dados cadastrais dos 104 clientes que compartilhavam o mesmo endereço IPv4 usado no Telegram para divulgar pornografia infantil. Essa devassa seria desnecessária se o Telegram registrasse portas de origem (source port) ou se essas pessoas não tivessem desabilitado o IPv6, protocolo suportado tanto pelo Telegram como pela Starlink. PL 1845/24 propõe reformar o Marco Civil para tornar esse registro de source port obrigatório. https://t.co/TsLf5yyQLh

[InSight Crime @InSightCrime]

🇧🇷 | Brazilian authorities dismantled a criminal network that offered online courses for scammers, teaching fraud techniques and selling stolen banking data to clients across the country. https://t.co/Dn4wtKFBvg

[The Hacker News @TheHackersNews]

🚨 TCLBANKER, a previously undocumented Brazilian banking trojan, is targeting 59 banking, fintech, and #cryptocurrency platforms.

The malware spreads through #WhatsApp Web and Microsoft Outlook, using DLL side-loading, keylogging, and fake credential overlays to evade detection and steal banking credentials.

Read: https://t.co/e7ucqQcSUT

[ꙮ i d m @secur1tize]

👍🏻

[Ministério da Ciência, Tecnologia e Inovação @gov_mcti]

🔐 O Recife colocou o Brasil na fronteira da cibersegurança quântica.

Pesquisadores desenvolveram uma infraestrutura baseada em Sistema de Distribuição de Chaves Quânticas (QKD), tecnologia voltada à comunicação ultra segura.

[Goodfire @GoodfireAI]

Neural networks might speak English, but they think in shapes.

Understanding their rich *neural geometry* is key to understanding how they work – and to debugging and controlling them with precision.

Starting today, we’re releasing a series of posts on this research agenda. 🧵

[Cloudflare Developers @CloudflareDev]

Multiple security vulnerabilities affecting React Server Components and Next.js have been disclosed. We strongly recommend updating your applications immediately.

Cloudflare WAF managed rules already mitigate the disclosed denial-of-service vulnerabilities, and we are investigating additional coverage for several other CVEs.

https://t.co/mT9ujk1H7c

[Bloomberg @business]

Enter, a Brazilian AI legal startup, has tripled its valuation to $1.2 billion in a new round of funding https://t.co/ZL5SAvKKLQ

[Criptolawyer @criptolawyer]

1/  Brazil 🇧🇷 didn't ban crypto but what it did matters a lot.

On april 30 the central bank published resolution no. 561:

But first imagine this: a fintech app or a neobank takes reais from a customer in são paulo, quietly converts them to USDT on the backend, and settles the payment to a recipient in miami through a blockchain. faster, cheaper, no correspondent bank in the middle.

THAT exact flow is now illegal inside the eFX rail. effective october 1, 2026.

Thread 🧵

[ꙮ i d m @secur1tize]

@olsenbdnr @elonmusk You are doing it just now?

[vx-underground @vxunderground]

One of the most frequent questions I'm asked is "how do you stay up to date on malware stuff?"

Okay, here is a pro tip:

1. Google OTX AlienVault
2. Make account
3. Look at latest
4. Scroll until you find posts from a guy named Petr something-something (has numbers in his name).
4. Follow his account

He monitors all the big malware places and shares the URL, hashes, etc. from malware vendors. I've been following this random ass dude for years and getting updates on everything.

I have no idea who he is. I don't know where he's from. All I know is his setup is absolute fire and he keeps you up to date on literally everything malware related 24/7 365. He also has stuff from vendors in China, Russia, Japan, etc.

Every morning I log into OTX and check up on my boy Petr to see what fire he's bringing me. I love him.

[Omar Kaminski @internetlegal]

Plataforma de internet é condenada por perfil hackeado: https://t.co/8E27CAgyeH

[ꙮ i d m @secur1tize]

https://t.co/NHI6D3OVPk

[Marcelo Malagutti @MarceloMalagutt]

https://t.co/PVUuSG8hdC

[Henrique Esteter @Economesteter]

3️⃣ A terceirização da logística

O jornal americano expos a técnica de "rip-on/rip-off" no Porto de Santos e Paranaguá.

A facção insere drogas em contêineres de exportadores legítimos sem que eles saibam.

O WSJ relata que o PCC passou a contratar hackers para invadir os sistemas portuários e alterar registros de carga.