Sentrinus

Helping businesses monitor & secure every employee device from a single dashboard.

[Aditya Anand @aditya12anand]

I didn't expect from my conversation with Parv to be so valuable for the people trying to get started in the field of cybersecurity.

For everyone in my DMs asking how to get started this is it.

We recorded the podcast last week, it went live this Sunday. Full episode below 🎙️

[SECUREU @secureu_in]

React apps are becoming secret vacuums.

Attackers are now weaponising React2Shell to rip credentials out of vulnerable Next.js servers at scale, fast, and with almost no manual effort. 🔴

[Sentrinus @sentrinus]

Endpoint agents that monitor CI/CD runtime behavior catch what static scanning misses.

Sentrinus detects anomalous process memory reads and unauthorized outbound connections in real-time. https://t.co/wTJewQJuop 🛡️

[Sentrinus @sentrinus]

Your security scanner just became the weapon.

CVE-2026-33634 (CVSS 9.4): Aqua Trivy was compromised.

Every scan silently stole your AWS keys, SSH creds, and Kubernetes tokens. 🔴

[Sentrinus @sentrinus]

1. Pin GitHub Actions to commit SHAs.

2. Rotate all CI/CD secrets.

3. Block scan[.]aquasecurtiy[.]org and 45.148.10.212.

4. Check for tpcp-docs repos in your org.

This one isn't over.

[SECUREU @secureu_in]

Zero-day, weaponised in 20 hours.

Langflow (CVE-2026-33017, CVSS 9.3) accepts malicious Python code → unauthenticated RCE.

One HTTP request. Game over. 🔴

[Sentrinus @sentrinus]

This isn't a new attack surface.

It's invisible — until you trace a redirect chain.

That's why endpoint security matters as much as perimeter defence.

[Sentrinus @sentrinus]

Your API just sent your private tokens to a stranger's server.

You didn't get hacked.

Your redirect handler did it for you.

CVE-2026-32913 🧵

[Sentrinus @sentrinus]

Fix it:

→ Update to OpenClaw 2026.3.7+
→ Audit your redirect handling now
→ Sentrinus catches these boundary violations before they become breaches

Full details: https://t.co/kiVmOUaHXg

[Aditya Anand @aditya12anand]

@sentrinus @openclaw @karpathy After configuring it over & over again and really fine tuning it to my workflows, lately it has been surprising me frequently with it's capabilities.

Especially now that it has started working along with the employees at @secureu_in & @sentrinus as their colleague.

[SECUREU @secureu_in]

You clicked "I'm not a robot."

That one click just installed ransomware.

No phishing link. No suspicious email. No hacked password.

LeakNet's new ClickFix attack turns a fake CAPTCHA into a full ransomware deployment & your antivirus won't catch it.

Here's how it works. 🧵

[Sentrinus @sentrinus]

Source:

https://t.co/YoafK6uAe9

[Sentrinus @sentrinus]

Critical file upload bypass hits @Microsoft 🚨

CVE-2026-21536 (CVSS 9.8) lets attackers upload anything → instant code execution.

No auth needed. Zero clicks required.

[Sentrinus @sentrinus]

Your endpoints need real-time upload monitoring

Sentrinus detects suspicious file behaviour in seconds, before execution.

Stop file-based attacks at the source.

→ https://t.co/30CmZyhB6O | See Everything. Stop Anything.