Jose Manuel

Microsoft Paint has a security vulnerability that could let hackers run malicious code on your PC over a network. The flaw, tracked as CVE-2026-83844, is rated 8.1 (High) and could allow attackers to execute code over a network without permission. Microsoft has published a security advisory and a patch for the issue.

🛡️ Pasos inmediatos para frenarlo: • Entra a tu banca online: ve a Perfil / Configuración / Notificaciones y desactiva el envío mensual de estados de cuenta al correo. • Si vas a revisar movimientos pasados, usa el visor web en pantalla; no descargues el botón de PDF formal.

🚨 Jailbreakers are now actively warning for malware infected GitHub data and emulators. A new escalation in the PS5 jailbreak story.

⚠️ 🇻🇪 🛜 🗄️ PREVENTIVE ALERT - ALLEGED EXPOSURE OF VNET CONTRACT AND SUBSCRIBER DATA (ACTOR: X01X00) [STATUS: ALLEGED / UNCONFIRMED / THREAT ACTOR: X01X00 / VICTIM: VNET / DATE: OCTOBER 29, 2026] Centralized cyber-intelligence systems have intercepted a "proof of concept" (PoC) post, released on October 29, 2026, by the threat actor x01x00, targeting the Venezuelan telecommunications company VNET. The report contains JSON-formatted snippets that appear to expose internal records, including customer contracts, email addresses, phone numbers, and details regarding connectivity plans (VNET 200, VNET 600). It is strictly noted that the veracity of this compromise, the actual intrusion into the company’s servers, and the overall authenticity of the exposed records have not been officially confirmed. As this information appeared on clandestine platforms, the actual status of the infrastructure remains alleged and unconfirmed. Threat Actor: x01x00 Victim / Target: VNET (vnet.com.ve) — 🇻🇪 Venezuela. Sector: 🛜 Telecommunications, Internet Service Provider (ISP). Date of Publication: October 29, 2026. 🔍 TECHNICAL BREAKDOWN OF THE COMPROMISED INFORMATION Identifiers: Subscriber `contractId`. Personally Identifiable Information (PII): Email addresses (`email`, `accountEmail`) and mobile phone numbers (`telefono`, `accountMobile`). Service Details: Subscribed plans (plan, current plan, plan ID), account status, and notifications regarding system restrictions. 🛡️ PREVENTIVE TECHNICAL CONTAINMENT RECOMMENDATIONS (FOR SOC / CSIRT / ADMINISTRATORS) Perimeter Audit and Review: VNET’s technical teams must urgently review their access logs and databases to rule out any breaches or unauthorized data exfiltration. 🖥️ CENTRALIZED THREAT MONITORING SYSTEM Intelligence System: analyzer.vecert.io Quickly check your security status at: monitor.vecert.io Quotes and services: vecert.io/contact #VNET #Venezuela #Telecommunications #ISP #DataLeak #DataBreach #BreachAlert #DatabaseLeak #PII #X01X00 #DarkWeb #Hacking #ThreatIntel #ThreatIntelligence #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert #CyberDefense #CyberRisk

We were going to count how many times you asked about iPad, but we ran out of numbers somewhere around “iPAAAAAAAAAAAAAAD”. The truth? We were listening and we wanted to get it right 💚 Pre-orders for the brand new Affinity for iPad are open: affin.co/get-affinity-for-ip… 🔥

⚠️ 🇻🇪 📡 PREVENTIVE ALERT - ALLEGED EXPOSURE OF CUSTOMER/SUBSCRIBER DATABASE AT THUNDERNET VENEZUELA (ACTOR: X01X00) [STATUS: ALLEGED / UNCONFIRMED / THREAT ACTOR: X01X00 / DATE: OCTOBER 25, 2026] The centralized cyber-intelligence system has intercepted a post on social media (X / Twitter), published on October 25, 2026, at 7:54 PM by the account "x01x00." In the message—directed in a defiant tone toward the official account of Thundernet, a telecommunications and fiber-optic service provider in Venezuela—the actor shares a 42-second demonstration video displaying records of subscribers and residential customers in a structured JSON format. It is strictly noted that the veracity of this compromise, the actual intrusion into the company’s databases, and the overall authenticity of the total volume of records have not been officially confirmed by Thundernet’s management or by Venezuela’s telecommunications regulatory authorities (CONATEL / CSIRT-VEN). As this involves social media posts by threat actors, the definitive status of the infrastructure remains unconfirmed. Victim / Target: Thundernet Venezuela Sector: 📡 Telecommunications, Internet Service Providers (ISP), Fiber-to-the-Home (FTTH), and Digital Telephony. 🛡️ TECHNICAL PREVENTIVE AND CONTAINMENT RECOMMENDATIONS (SOC / CSIRT / TELECOMMUNICATIONS SECTOR) Audit of CRM and Billing Systems: Thundernet’s security and IT support team must immediately audit their customer relationship management (CRM/ERP) systems, self-service portals, and SQL databases to determine whether the data dump originated from a malicious query or an exposed API key. 🖥️ CENTRALIZED THREAT MONITORING SYSTEM Intelligence System: analyzer.vecert.io Quickly verify your security at: monitor.vecert.io Inquiries and services: vecert.io/contact #Venezuela #Thundernet #ThundernetVzla #Telecommunications #ISP #FiberOptic #FTTH #Caracas #Barquisimeto #Valencia #Maracaibo #DataLeak #DataBreach #BreachAlert #DatabaseLeak #JSONDump #PII #Cedula #x01x00 #Cybersecurity #ThreatIntel #ThreatIntelligence #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert #CyberDefense #CyberRisk #CybersecurityVenezuela

Pues la supuesta nueva web no da mucha confianza que digamos.

🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell! Researchers are reporting a successful double-free trigger on the newly patched release. ⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation. Don't assume you're safe just because you've patched. #php4shell #php #cybersecurity teapaw.org/_annieversary/status/2…

🚨Esto entendí sobre el temita: Una empresa que emite certificados de seguridad para páginas web cometió un error gravísimo, algunas de sus claves criptográficas secretas eran números ridículamente pequeños. Una de ellas era literalmente 4. xD ¿Y qué significa esto? 🧵👇

As a precautionary measure, MyAnimeList is temporarily in maintenance mode while our team assesses a potential security risk and makes any necessary updates. Service will be resumed as soon as possible. We apologize for the inconvenience and thank you for your patience.