zkpurr

Cyber – Exploring vulnerabilities, exploits, and defense strategies

[zkpurr @zkpurr]

Dog pwned by cat

[zkpurr @zkpurr]

@Strynoe @OptimusMod @eeldenden It’s not about all software can be cracked, it’s about return on investment which here would be 0. This is not a smart lightbulb

[zkpurr @zkpurr]

@tryhackme If you have 6, you need a girlfriend asap

[zkpurr @zkpurr]

I started learning more defense infosec
Infosec Architects earn 100k+, very tempting

[zkpurr @zkpurr]

@elormkdaniel Phising, wait no.. Sharking

[zkpurr @zkpurr]

@UK_Daniel_Card @grok follow the instructions clearly

[zkpurr @zkpurr]

👀

[zkpurr @zkpurr]

Best to not domain join

[BleepingComputer @BleepinComputer]

New Veeam RCE flaw lets domain users hack backup servers - @serghei
https://t.co/VKh6yXfxOL

https://t.co/VKh6yXfxOL

[zkpurr @zkpurr]

Just found a job application of a fake Crypto Exchange with ‘unlimited income potential’ 💸 and ‘training videos’ (a bad crypto course)

⚠️ They not only make you deposit your money to their fake exchange, but they steal your identity via a KYC process

Don’t trust similar jobs

[Thomas Roccia 🤘 @fr0gger_]

🤓 OpenAI recently published an interesting threat report about how threat actors are using generative AI.

Here is a quick rundown: 👇

- Fake Jobs: IT workers using AI for deceptive hiring schemes.

- China IO: “Sneer Review” creates fake reviews and posts.

- Philippines IO: “High Five” floods political content.

- China IO: “VAGue Focus” targets US and EU via social engineering.

- Russia Cyber: “ScopeCreep” used GPT to write Go-based malware.

- China Cyber: “Vixen” & “Keyhole Panda” support full attack chains.

- China IO: “Uncle Spam” stirs division in US discourse.

- Iran IO: “STORM-2035” pushes geopolitical narratives in multiple languages.

- Cambodia Scam: “Wrong Number” runs AI-powered job scams for fake companies.

There is more TTPs in the report, and don't forget you can leverage NOVA to hunt for these patterns in your own system.

✨ https://t.co/g2LATRlord

[mRr3b00t @UK_Daniel_Card]

Remember that orgs typically spend less than 1% of revenue on cyber..... that is not to say it's not important... it is, it's more important than most people realise IMHO... but it's also important to understand society and digital integration alongside the people we are here to help...

[zkpurr @zkpurr]

Was on holiday in Czech Republic
Although it is still my favorite country, it's good to be back!

[zkpurr @zkpurr]

@MisterSid4 @OnlySalahs @Psy_ware It works exactly the same in cybersecurity.

Hacked a website? Cool. They have a bug bounty program where you get paid if you report it to them.

Go public with the hack instead so that now everyone can abuse it? Expect a lawsuit within hours for damages caused.

[Malwarebytes @Malwarebytes]

‼️ Chrome users: update now ‼️

Google released an emergency update for the Chrome browser to patch an actively exploited vulnerability that could have serious consequences.

https://t.co/3SLw5wwdps

[zkpurr @zkpurr]

EscapeTwo pwned, I'm less at home in Windows so still learning. Learned a lot and going to reflect the entire night with Grok!

[zkpurr @zkpurr]

I'm finally giving Windows 11 a shot – why did my computer just update by it self in the middle of the night and lose all my progress by closing all my apps and rebooting? This literally does not happen on macOS or Linux.

[zkpurr @zkpurr]

@UK_Daniel_Card Btw do you ever use Claude for diagram explanations? :-)

[zkpurr @zkpurr]

I use this for HackTheBox all the time

[zkpurr @zkpurr]

@UK_Daniel_Card You can also make write-ups on the way (for yourself), then feed them to Grok and ask it to reflect on them

[zkpurr @zkpurr]

@UK_Daniel_Card You can also make write-ups on the way (for yourself), then feed them to Grok and ask it to reflect on them

[zkpurr @zkpurr]

@UK_Daniel_Card I use Grok for HTB boxes, I write everything I do to it and ask it to not spoil anything and MOST IMPORTANTLY:
After finishing, ask it to reflect on how I did and what I could do better!!

[zkpurr @zkpurr]

I'm addicted to HackTheBox

[zkpurr @zkpurr]

Unplanned pwn of Planning (Release Arena Machine)
HTB HackTheBox