I feel like @benjedwards.com has written one of the best explanations of how AI coding agents work. The article breaks it down into easy to understand terms that developers new to agents can really grok. arstechnica.com/information-...

ALWAYS validate proof-of-concept exploit code before you use it. "The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-concept exploits for recently disclosed vulnerabilities." www.bleepingcomputer.com/news/securit...

I hate scammers.

What do I do on the weekend? I install Game of Active Directory Ninja Hacker Academy on AWS of course! 😂 I'm running through the install so I can learn more about the range deployment on cloud services. Always be learning something new. @orangecyberdefense.bsky.social github.com/Orange-Cyber...

Black Friday and Cyber Monday deals are out! I review some of them and link to a community GitHub page for you all to get discounts on courses, tools and services! Deals from @rastamouse.me, OffSec, EvilGinx, @antisyphontraining.bsky.social and a whole lot more. youtu.be/hkJfhM1T5bI

Seeking video camera advice for content creation. I've gotten back to creating tutorial & teaching videos on YouTube. Currently using a Brio MX but interested in the @elgato Facecam 4K. It looks to offer a lot more software features. Has anyone used it & can give their thoughts?

After getting a scam email saying someone tried to access my Twitter account, I decided to look into it a little. The first of many new videos to come as I work to share more information with the community. youtu.be/IFy_96Dg__E?...

The end of an era. For so many people, AOL was the internet. arstechnica.com/gadgets/2025...

RubyGems & PyPI under attack: 🔸 60 fake RubyGems stole social media logins (275K+ downloads) 🔸 PyPI fakes hijacked crypto staking wallets Both hide credential-stealing code in legit-looking packages. #CyberAlerts thehackernews.com/2025/08/ruby...

Hi @defcon.bsky.social

Picked up this very cool @crowdstrike.com t-shirt for my son and the action figure that goes with it. He’s going to love it.

@crowdstrike.com says they’re seeing threat actors are targeting GenAI workloads to try poison the models. The inherent trust being built as we continue to use AI systems will lead to threat actors becoming an insider threat.

Walking back to my room I passed the Google Cloud Security party at Blackhat and it looked jumping. Almost considered social engineering my way in. 😈😈

Great analysis by @SentinelOne on a threat actor working out of Vietnam to target users in 62 countries. Starts with a phishing campaign that leads to DLL sideloading of legitimate and signed software, including Office 2013, for persistence. www.sentinelone.com/labs/ghost-i...

😂😂kerberoasting 4eva amirite @timmedin.bsky.social

Hashcat v7.0.0 released with speed and GPU support improvements hashcat.net/forum/thread...

theonion.com/trump-still-... The Onion just straight-up reporting real news, again.

Unfortunately @broadcom.bsky.social still hasn't fixed the VMWare Workstation update server link so be sure to upgrade to 17.6.4 to fix a security issue found at Berlin Pwn2own www.bleepingcomputer.com/news/securit...

"Wo unto you rich men, that will not give your substance to the poor, for your riches will canker your souls; and this shall be your lamentation in the day of visitation, and of judgment, and of indignation: The harvest is past, the summer is ended, and my soul is not saved!"

“This isn’t 'The Hunger Games’ for immigrants,” Worsoff told the newspaper This absolutely disgusting and a pathetic way of taking advantage of immigrants by this producer. www.nytimes.com/2025/05/16/u...

When you play an internal CTF against 10 other teams and win! Booyah! 😈

"Malicious VSCode extensions infect Windows with cryptominers" A set of ten VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer for Monero. www.bleepingcomputer.com/news/securit...

"Google and Mozilla on Tuesday announced the release of Chrome 135 and Firefox 137 to the stable channel with patches for nearly two dozen vulnerabilities, including high-severity memory safety bugs." Time to update! www.securityweek.com/chrome-135-f...

"New Phishing Attack Combines Vishing and DLL Sideloading Techniques" Initial access thru vishing on Teams, drop a signed TeamViewer binary and then DLL sideload that for persistent C2 access. I haven't seen JavaScript-based C2s. @hoodoer.bsky.social www.infosecurity-magazine.com/news/phishin...

“Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service” by @GossiTheDog.cyberplace.social.ap.brid.gy doublepulsar.com/oracle-attem...

Nice find by @reversinglabs.com "Malware found on npm infecting local package with reverse shell" 2 interesting packages were published on npm: ethers-provider2 & ethers-providerz. These were simple downloaders whose malicious payload was cleverly hidden www.reversinglabs.com/blog/malicio...

Cobalt Strike Abuse Dropped 80% in Two Years www.securityweek.com/cobalt-strik...

VMWare guest to host escape. Time to update several Broadcom packages. www.theregister.com/2025/03/04/v...

More research emerging about VS Code extensions as an attack vector, this time by Cas van Cooten. casvancooten.com/posts/2025/0...

Microsoft has removed two popular VSCode extensions, 'Material Theme – Free' and 'Material Theme Icons – Free,' with 9 million installs from the Visual Studio Marketplace for allegedly containing malicious code. www.bleepingcomputer.com/news/securit...

For developers interested in secure software, the OpenSSF has released a security baseline document aimed at outlining best practices for secure software and mitigating supply chain attacks for open-source projects. www.infosecurity-magazine.com/news/openssf...

"Max-Severity Bug in Caldera Enables Attackers to Take Full Control of Systems" Real-life hackers could hack a platform used in red team exercises to simulate hacking.... www.databreachtoday.com/hackers-coul...

When you’re on an op, triggered EDR, and the IR team has sniffed you out.

We never forget our 17. ❤️

There are times in your life when you realize your friends have your back. <3 @tjnull.bsky.social

Malicious ML models found on Hugging Face. "The pickle serialization format used commonly for distributing ML models has been repeatedly found to be a security risk, as it offers ways to execute arbitrary code as soon as they are loaded and deserialized" thehackernews.com/2025/02/mali...

Bring it

Well this is not good. Nice find @offsectraining "CVE-2025-21298 is a zero-click vulnerability in Windows OLE, a technology that enables embedding and linking to documents and other objects." Exploitable by sending malicious email containing a harmful RTF document. www.offsec.com/blog/cve-202...

It’s like they had a camera taking video of my Cuban childhood 😂

I just started watching Grey’s Anatomy and it hit me that Denny is Negan from the Walking Dead!!!

Rise and shine!

Oh @shmoocon. Googley eyes strike again. 😂

Arrived at @shmoocon. Looking forward to meeting folks.

"Adobe has released out-of-band security updates to address a critical ColdFusion vulnerability with proof-of-concept (PoC) exploit code." www.bleepingcomputer.com/news/securit...

I’ll be at @shmoocon.bsky.social later this week. If anyone would like to connect let me know.

Call to Action: Search your source code, install scripts, Dockerfiles and other files for instances of azureedge.net and update them. More details here: devblogs.microsoft.com/dotnet/criti...