The 2016 Mirai botnet attack was a wake-up call: IoT security is nonexistent at scale. Default creds & unpatched firmware turned cameras into DDoS cannons. Lessons? Harden IoT or expect more botnet chaos. #CyberSecurity #History #DDoS #IoT #Infosec #Mirai

Book Recommendation: Mastering post-exploitation? 'The Hacker Playbook 3' 👌 by Peter Kim is a must-read, as it covers: a. Actual Attack Chains, b. Evasion Techniques, c. Red Team Strategies. Practical over theory. Link: digtvbg.com/files/books-... #RedTeam #OffSec #infosec

Inline hooking too noisy? Use hardware breakpoints via 'SetThreadContext' to hijack execution flow without modifying code. Silent, reversible & hard to detect. #RedTeam #Malware #infosec #cybersecurity #bugbounty

Turn your Raspberry Pi into a 𝐩𝐨𝐜𝐤𝐞𝐭-𝐬𝐢𝐳𝐞𝐝 𝐩𝐞𝐧𝐭𝐞𝐬𝐭𝐢𝐧𝐠 𝐩𝐨𝐰𝐞𝐫𝐡𝐨𝐮𝐬𝐞 with Kali. ⚡Stealthy, portable & packed with offensive tools, as real security pros test anytime, anywhere. 🔍 Topic: medium.com/@mawgoud/bui... #KaliLinux #CyberSecurity #Infosec

Goodbye Skype Once the king of VoIP, now just a ghost in the digital graveyard. ☠️ From P2P-powered resilience to Microsoft's EDR-infested bloat, it never stood a chance. Source: mybroadband.co.za/news/interne... #Skype #Tech #VoIP #EDR #Teams #Zoom

Three VMware zero-days exploited in the wild. CVE-2025-22224, CVE-2025-22225, CVE-2025-22226. Attackers with admin access can chain these to escape VM sandboxes & control the hypervisor. #VMware #ZeroDay #CyberSecurity #Infosec #Cybersecurity Source: www.infosecurity-magazine.com/news/vmware-...

EDRs love API hooking? PatchGuard doesn’t. Instead of unhooking, do this ... redirect execution using Heaven’s Gate (switching to 64-bit from 32-bit in WoW64) / indirect syscalls. Stay ahead, stay silent. 🕵️‍♂️ #RedTeam #Malware #infosec #cybersecurity #bugbounty #EDR #WoW64

Process injection via Atom Tables is an underrated stealth tactic. Store shellcode in an atom, retrieve it in a remote process, and execute via callback. Avoids common memory scanning detections. #RedTeam #EDREvasion #Infosec #CyberSecurity

🔧Transform your Raspberry Pi into a portable pentesting powerhouse with a 3.5-inch touchscreen & Kali Linux! --Ideal for on-the-go cybersecurity assessments. 🔍Details: mobile-hacker.com/2025/02/26/b... #Pentesting #Infosec #KaliLinux #RaspberryPi #cybersecurity

🔍Leaked code reveals a token refresh script used in adversary-in-the-middle (AITM) attacks. If you're not monitoring OAuth token activity, you're flying blind. Stay vigilant. #CyberSecurity #AITM #OAuth #infosec #MiTM github.com/zolderio/AIT...

⤼ Early Grok-3 ('chocolate') leads the 'Chatbot Arena ELO rankings' edging out top-tier models Are novel training paradigms (e.g., retrieval-augmented generation, improved instruction tuning) playing a larger role? Feb, 2025 #AI #MachineLearning #LLMs #NLP #DeepLearning #Grok

🔍If you’re analyzing malware, forget static AV scanners. Use 𝐅𝐥𝐚𝐫𝐞𝐕𝐌, 𝐂𝐀𝐏𝐀 & 𝐱𝟔𝟒𝐝𝐛𝐠 for real insights. Pair with 𝚜𝚢𝚜𝚖𝚘𝚗 + 𝚂𝚒𝚐𝚖𝚊 𝚛𝚞𝚕𝚎𝚜 for tracking execution flow as a pro. 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 > 𝐆𝐮𝐞𝐬𝐬𝐰𝐨𝐫𝐤. #Malware #infosec #Bug #CVE

Morning / Evening all ☕️ Let's talk about Active Directory (AD) security. Attackers 'love' targeting AD for domain admin privileges. Here's a thread on the top techniques they use! Image Credit: (cyber.gov.au, 2024) A Thread 1/10🧵 #CyberSecurity #infosec #CVE

You will enjoy reading this ☕ 🔬What IF: Scientists Choose Rust Over Python for AI Development. 📖 Read the full story .. 🔗https://mawgoud.medium.com/earth-72-scientists-adapted-rust-instead-of-python-for-artificial-intelligence-development-84b705459613 #AI #Rust #Python #Tech #Multiverse #ML

🚨 DeepSeek's iOS app is sending sensitive user data to a ByteDance (TikTok) .. affiliated cloud platform without encryption. 👉 Full Report: thehackernews.com/2025/02/deep... #Cybersecurity #Privacy #Bug #Encryption #Tech #News #Security #TikTok #DeepSeek #OpenAI

Ups and downs of #redteam engagements. When the standard payloads don’t cut it, innovation wins. Learn how we misused a screenshot tool to load shellcode… at the fifth attempt!… blog.compass-security.com/2024/12/a-ni...

Red Teamers: do NOT neglect SNMP like sysadmins usually do! SO many networks have granted me very quick wins through SNMP enumeration, which can be done with Metasploit, snmpwalk, and onesixtyone: Enum Windows accounts (spray?): snmpwalk -c public -v1 $TARGET 1.3.6.1.4.1.77.1.2.25 #hacking #redteam

Dumping LSASS? Ditch 'MiniDumpWriteDump'—too noisy. Use NtReadVirtualMemory via direct syscalls or use (COM+ LRPC abuse) for stealthier creds extraction. EDRs hate this one trick. 😉 #RedTeam #Malware #EDR #IncidentHandling #infosec #DFIR

Bypass 'FindWindow' anti-debug checks by hooking 'NtUserFindWindowEx' & returning a fake handle. 🕵️‍♂️ Malware loves to check for debuggers this way ... feed it garbage & watch it fail. #ReverseEngineering #Malware #infosec #bug #exploitation #pentesting

🔍 Think your browser extensions are harmless? A rogue extension with 'activeTab' or 'all_urls' permissions can: - steal cookies, - inject scripts, - or track everything you do. Audit them. Less is more. #Privacy #CyberSecurity #infosec #browser #chrome #firefox #opera

Everyone's worried about DeepSeek stealing data, but what about AI tools like ChatGPT? 🤔 your sensitive data is likely going to the USA. Do you know where it's stored & how it's used? Time to think about AI data security! #AI #Privacy #OpenAI #ChatGPT #DeepSeek #Tech #data

This worth the time to read for your time today ☕ I believe the 'formal' title for that can fit in this case: Salt Typhoon Cyberattack 2024: The Largest Telecom Hack in the US History. A Thread 🧵 + 📎Sources ↷

So .. this is how it feels like #OpenAI vs #DeepSeek ! #AI #Copyright #DataPrivacy #Privacy #OpenAI #Google #Microsoft #Tech #Meme #BigTech #Privacy #MachineLearning #ML #DeepSeekR1 #ArtificialIntelligence

Want to detect malware abusing 'CreateRemoteThread'? Hook 'NtMapViewOfSection' instead. Most payloads get mapped before execution, making it a solid choke point for EDR logic. Timing is everything. ⏳ #ThreatHunting #Malware #Infosec #EDR

Worth time reading 👌 🗞️ Don't miss Nextron Systems' latest piece: 'Cyber Security 2025: Practical Trends Beyond the Hype.' They cut through the noise to highlight threats like supply chain attacks and token abuse. Link: www.nextron-systems.com/2025/02/03/c... #CyberSecurity #SupplyChain #Infosec

If you're serious about offensive security, Master ROP chains👌 Start with ROPgadget & ROP Emporium before moving to manual device hunting in IDA. #DEP & #ASLR are jokes once you chain the right pivots. 😌 #ExploitDev #Binary #Exploitation #Infosec #ROP #Cybersecurity

Remember when Flame used a rogue Microsoft cert to sign its payloads? That was some next-level OPSEC. Shows how supply chain trust can be the weakest link. Signed != Safe. Always verify. 🔥 #Infosec #APT #SSO #MFA #Microsoft #DDoS #Privacy

📊 #DeepSeek-R1 and R1-32B are making waves! Crushing benchmarks across #AIME, #Codeforces, MATH-500 & more. From #GPQA precision to SWE-bench prowess ... It’s clear: DeepSeek isn’t here to compete; it’s here to lead. #AI #DeepSeek #Benchmarks #MachineLearning #OpenAI #ML

Use 𝙴𝚗𝚞𝚖𝙳𝚎𝚟𝚒𝚌𝚎𝙳𝚛𝚒𝚟𝚎𝚛𝚜 + 𝙶𝚎𝚝𝙳𝚎𝚟𝚒𝚌𝚎𝙳𝚛𝚒𝚟𝚎𝚛𝙱𝚊𝚜𝚎𝙽𝚊𝚖𝚎 to scan loaded kernel modules. 💣 Spot unsigned drivers? Could be your entry point for privilege escalation. Combine with 𝙽𝚝𝚀𝚞𝚎𝚛𝚢𝚂𝚢𝚜𝚝𝚎𝚖𝙸𝚗𝚏𝚘𝚛𝚖𝚊𝚝𝚒𝚘𝚗 for max stealth. #Infosec #RedTeam #Cybersecurity #Bugbounty #Kernel #Linux

🛡️ A List of Top 10 Penetration Testing Tools on GitHub (2024 Edition) ⤏ Discover the highly-rated tools on GitHub in 2024. ⤏ Strengthen you arsenal with tools that are redefining the Pentesting Art. 🔖 Bookmark for later! (Thread 🧵👇)

🕵️‍♂️ Thinking of evading sandbox detection? Time to get creative with direct syscalls + ZwQueryInformationProcess. Query the 'ProcessDebugPort' or 'ProcessHeapInformation' to sniff out a controlled env. #Malware #RedTeam #Infosec #Cybersecurity #Sandbox #DFIR

A high-severity vulnerability in the 7-Zip file archiver allows attackers to bypass the Mark of the Web (MotW) Windows security feature and execute code on users' computers when extracting malicious files from nested archives. #CyberSecurity #infosec www.bleepingcomputer.com/news/securit...

Cloudflare fixed a bug/characteristic in its CDN that could reveal the coarse location of someone by sending them an image and testing where that image was cached on Cloudflare's CDN. By @404media.co. #infosec www.404media.co/email/fff76e...

⚠️ Developers and IT folks, please be careful when installing Homebrew on your macOS. Google is showing sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site. Stay safe. #infosec #security #unix

Juniper routers targeted in the 'JAMMING' campaign? Persistence on edge devices = silent data siphoning. If you’re not segmenting & auditing router firmware integrity, you’re playing defense in the dark. Details: securityaffairs.com/173408/secur... #Malware #Infosec #networksecurity #bug

Remember: AMSI bypasses are old news ... but 'in-memory patching' of `AmsiScanBuffer` with runtime checks for integrity enforcement? That’s the next level. Use indirect syscall chains for stealth. 🛠️ #Malware #Dev #Evasion #Patch #Infosec #RedTeam

Advanced Phishing Trick: Embed 'Windows URI handlers' like `ms-officecmd://` in emails to trigger app-specific behavior. Pair with HTML smuggling for payload delivery. Sandboxes choke; users click. Stay sharp. 🎣 #RedTeam #Phishing #Infosec #Bugbounty #Cybersecurity #sandbox

Subaru’s STARLINK vuln reminds us: connected cars are just rolling attack surfaces. Poor API auth & exposed debug endpoints? Classic oversights, deadly in IoT. 🚗 Harden before the road hardens you. Details: gbhackers.com/subarus-star... #IoT #CyberSecurity #IncidentHandling #Infosec

🕵️‍♂️Need stealth for C2 ? a. Skip the noisy HTTP(S). b. Go for DNS over HTTPS (DoH) tunneling. c. Blend exfil into legitimate traffic. d. Pair with domain fronting for the ultimate cloak. e. Let defenders try to unravel that mess. #RedTeam #C2 #CyberSecurity #Infosec #DNS

Memory corruption is old-school ? Think again ! Modern heap exploitation uses techniques like tcache poisoning in glibc. Combine it with ASLR bypass tricks then .... You’re back to popping shells in 2025. 🎩 #Exploitation #ASLR #CyberSecurity #Infosec #tcache #Memory

🚨 Advanced Persistence: ↣ Ever implanted a hidden bootkit via UEFI variable manipulation? ↣ Modify the DXE driver flow & you’re in before the OS even breathes. #Malware #Firmware #Infosec #CyberSecurity

🚨 Advanced Persistence: ↣ Ever implanted a hidden bootkit via UEFI variable manipulation? ↣ Modify the DXE driver flow & you’re in before the OS even breathes. #Malware #Firmware #Infosec #CyberSecurity

Looking for lateral movement during a pentest? Abusing MSRPC (e.g., EFSRPC via srvsvc) is still underrated. Pair it with Kerberos delegation abuse & you're owning environments faster than they can patch. 🕶️ #RedTeam #PenetrationTesting #ActiveDirectory #Infosec #bugbounty

ESP32-based smart home device: reverse engineering and security analysis jmswrnr.com/blog/hacking... Blog post by James Warner (@jmswrnr) #esp32 #infosec

--> Ever tried ELF binary patching with 𝑝𝑎𝑡𝑐ℎ𝑒𝑙𝑓 to inject custom sections for payloads ? Combine that with .𝑖𝑛𝑖𝑡_𝑎𝑟𝑟𝑎𝑦 hijacking for execution flow control. Because why stick to PE files when Linux binaries are equally fun ? #Infosec #CyberSecurity #BugBounty

📋 In incident handling .. Don’t just hunt for IOC hashes, focus on behavior. TTPs (Tactics, Techniques, and Procedures) outlive any one toolset or malware sample. MITRE ATT&CK isn’t just a framework; it’s your blueprint. #Infosec ##DFIR #ThreatHunting #CyberSecurity