@_ChezDaniela

Somewhere in between foodie, wine lover and security geek Python 💙| B4C2 - profiling web injects | ~ I CAN HELP WITH WEB INJECTS CAMPAIGNS DETECTIONS ~

 APD
Joined December 2014
  • Tweets16.3K
  • Following6.4K
  • Followers2.6K
2.3KMedia
There is a difference between posting IOCs and TTPs for behaviors found and investigated. Not querying a hunting platform who collected data or from platforms indexing past occurrences. Go follow behaviors, discover GENUINELY NEW INTEL! That is the joy of the hunt!
2
9
592
AI-developed malware is fucking amazing because it leaves us a shit ton of comments in the code, so whenever I search for strings, I get exactly what it's doing and why 🙃 You should update your .md accordingly.
4
3
1
31
1,657
Varys retweeted
spencer
@techspence5h
CISO: We need to defend against agent swarms! Meanwhile…Suzie in accounting, with admin on the finance server where a scheduled task is running as a Domain Admin, runs her 7th clickfix payload of the day.
23
31
5
234
6,692
Varys retweeted
FactBuff
@FactBuff7h
Hurting someone and expecting them to still be kind to you afterwards is truly absurd.
24
55
3
171
2,194
3
21
33
1,456
when Claude reports you to feds and you have no idea.
63
82
15
974
39,314
IMHO, the Brotli bug (think zlib 20 years ago) is a bigger deal than PHP2Shell and all the "oooh, AI found it! AI found it!" hype. Node2Shell is a terrible name. I’m calling it Broccoli. 🥦
6
22
1
131
15,320
PHPのWebフレームワーク「Laravel」で、TokenGuardによる認証の回避と、読み取り用APIからのデータ消去につながる2件の脆弱性が公表されています。特に「CVE-2026-114509」は、MySQL／MariaDBを使う特定の構成で、有効なAPIトークンを知らなくても既存ユーザーとして認証される問題。2件とも対処するには、13系は13.29.0、12系は12.68.0以降への更新が必要です。 【要点の整理】 ・対象は、組み込みのTokenGuardを標準のトークン方式のAPI認証に使い、MySQLまたはMariaDBを組み合わせた特定の構成。攻撃者が文字列ではない型の認証情報を細工して送ると、ユーザーを検索するクエリーが意図しない既存ユーザーに一致するおそれ ・攻撃者の事前認証や被害ユーザーの有効なトークンは不要。深刻度はCritical（CVSS v4：9.2）で、修正版は13系が13.29.0、12系が12.68.0 ・同時に公表された別の脆弱性「CVE-2026-114508」は、読み取り用APIで関連テーブルのデータを取得する要求を細工すると、特定の条件で取得の代わりにデータを消去するクエリーが実行される問題。書き込み権限のないユーザーでも関連テーブルを空にできるおそれがあり、13.27.0と12.68.0で修正済み 詳細は以下を参照： github.com/laravel/framework… github.com/laravel/framework… (※可能な範囲でファクトチェックは実施済なものの、元記事の精度依存や速報・要約の性質上漏れもありうるため、正確な情報は一次情報を直接参照のこと)

Token-based API guard Auth Bypass

Laravel's built-in TokenGuard, **when configured with a standard token-based API guard**, may be bypassed to authenticate as an arbitrary existing user without knowledge of their valid API toke...

github.com
5
1
9
1,430
Varys retweeted
Glytch@GlytchTechOct 23
the s in php stands for security
9
59
3
849
7,312
This is all just a very aggressive Cybersecurity Awareness Month campaign
14
294
19
2,044
25,840
So these guys are smishing heavily today, but their nginx backend is not working. Where can I submit a complaint? 🤔
1
6
502
Varys retweeted
Myrtus@Myrtus0x0Oct 22
threat intel is really just an excuse to become a data hoarder
2
7
33
1,681
Ruby’s turn 😅 Remember the GitLab bug? Well now it moved upstream into Ruby. Multiple 10.0 CRITICAL exploits. Patch now 🚨 Happy Friday 🤠 ruby-lang.org/en/news/2026/1…

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and...

We have released Ruby 4.0.9, 3.4.12 and 3.3.13. They fix several bugs in Ruby’s regular expression engine (Onigmo) that GitLab found could be used for remote...

ruby-lang.org
40
248
77
1,896
134,887
1
24
1
88
771
Lack of consideration will kill whatever bond you have
20
1,134
29
5,032
63,989
‼️ StealC's seller is back, four months after Europol's Operation Endgame took the infostealer down. The new remote access trojan, Stadia, reuses StealC's code and adds hidden desktop control and a live shell, Varonis says. Former customers get a free month on the $900 tier.
3
8
2
70
12,971
Varys retweeted
sophie
@netcapgirlOct 22
trying to tell offline friends that the internet apocalypse is happening rn
79
549
27
8,895
112,613
Varys retweeted
Words
@itswords_Oct 22
30
3,463
109
10,908
149,645
Project Swarm from @GreyNoiseIO let's you get ground truth on exploitation in the wild. You can deploy your own honeypots to collect reconnaissance, exploitation, and post-exploitation artifacts. It's a dollar. greynoise.io/project-swarm

Project Swarm | GreyNoise Intelligence

Project Swarm is a research initiative that opens the GreyNoise deception platform to the global security community. When you deploy a GreyNoise sensor through Project Swarm, you get visibility into...

greynoise.io
3
12
76
3,804
One of your production certificate keys is just the number 4.
2
18
132
3,398
the beatings will continue until the labs give independent researchers easy access to SOTA uncensored models
55
77
9
1,306
43,103
Load more