Informático. Soporte Tec a PC y Servidores. Hablo de TI, videojuegos, Windows, Linux, ciberseguridad. Para servicios, consultas y asesorías el link de telegram.
Caracas, Venezuela
Joined October 2015
- Tweets21.4K
- Following1.3K
- Followers3K
- Likes31.1K
Yo uso su repositorio y wow, muchísimos le debemos.
Le Web a découvert cette semaine qu’une partie de ses correctifs PHP passait par le travail bénévole d’Ondřej Surý, qui prépare des paquets pour Debian et Ubuntu.
Dans un nouvel entretien à la BBC, il raconte avoir reçu plus de 10 000 dollars de dons en quelques jours, soit environ une année habituelle de contributions.
bbc.com/news/articles/cw30ej…
Posible ataque al sistema de registro civil del municipio Girardot del Estado Aragua 🙃
⚠️ 🇻🇪 🏛️ PREVENTIVE ALERT - ALLEGED UNAUTHORIZED ACCESS TO THE CIVIL REGISTRY SYSTEM IN GIRARDOT MUNICIPALITY, VENEZUELA (ACTORS: TERROAHOVER / TERROAHGROUP)
[STATUS: ALLEGED / UNCONFIRMED / THREAT ACTORS: TERROAHOVER / TERROAHGROUP / DATE: OCTOBER 24, 2026]
The centralized cyber-intelligence system has detected a social media post disseminated by the threat actor TerroahOver, in conjunction with TerroahGroup. The report claims an alleged cyber-intrusion into the digital platform of the Civil Registry of Girardot Municipality (Maracay, Aragua State, Venezuela).
It is strictly noted that the veracity of this compromise, the actual intrusion into the municipal system's databases, and the true extent of any data manipulation have not been officially confirmed by the Girardot Municipal Government, Civil Registry authorities, or Venezuelan state cybersecurity agencies. Given that these are social media posts originating from threat actors, the definitive status of the infrastructure remains unconfirmed.
Victim / Target: Civil Registry Appointment Request and Certified Records System of Girardot Municipality (SSCAC-RC GIRARDOT / Maracay, Aragua State) — 🇻🇪 Venezuela.
Sector: 🏛️ Public Sector, Municipal Government, Civil Registry, Identity Documentation, and Citizen Services.
Nature of the Incident: Alleged unauthorized access to a user panel or administrative modules used for issuing birth, death, and marriage certificates, as well as records of stable de facto unions.
🖥️ CENTRALIZED THREAT MONITORING SYSTEM
Intelligence System: analyzer.vecert.io
Quickly check your security at: monitor.vecert.io
Quotes and services: vecert.io/contact
#Venezuela #Aragua #Maracay #GirardotMunicipality #GirardotMayoralty #CivilRegistry #GirardotCivilRegistry #SSCAC #DigitalGovernment #GovSec #PublicSector #DataLeak #DataBreach #Hacked #CyberAttack #TerroahOver #TerroahGroup #AccountTakeover #Cybersecurity #ThreatIntel #ThreatIntelligence #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert #CyberDefense #CyberRisk #CybersecurityVenezuela
No te has terminado de tomar tu café cuando ya salió otra vaina y esta mitigación debes aplicarla MANUAL, mientras esperas el parche.
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details → thehackernews.com/2026/10/ur…
Parece chiste, pero hay empresas publicas y privadas, e instituciones públicas del Estado que están así, no solo en Venezuela sino a nivel mundial.
Xq? Malas prácticas de documentación de inventario IT; burocracia interna qué impide modernizar y aplicar cambios críticos; tener la falsa creencia que nadie los va a atacar; priorizar el ingreso inmediato sin pensar en el gasto multiplicado por no aprobar presupuestos al momento.
Mala administración en cualquier momento y departamento.
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Jesús Andrade - Tecnochui retweeted
An urgent notice from the Railway team
blog.railway.com/p/security-…
Jesús Andrade - Tecnochui retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Verga como coño ese idiota va a cruzar ahí así, menos mal no le pasó nada al Motorizado
#ÚltimoMinuto Alcalde de Chacao Gustavo Duque difundió video sobre un accidente en la avenida Francisco de Miranda donde “la imprudencia de un conductor casi cobra la vida de un motorizado”. Duque llamó a tener prudencia a la hora de conducir (+VIDEO. Imágenes sensibles)
Jesús Andrade - Tecnochui retweeted
Leo aquí que alguien aplicó a su propia compañía y esa misma compañía lo rechazó.
El culpable, un ATS que pedía como requisito obligatorio "React.js" en vez de "React". Entonces el sistema estaba rechazando currículums que tenían solamente "React".
Si usan sistemas ATS, asegúrense de configurarlos correctamente.
Jesús Andrade - Tecnochui retweeted
Qué hace la gente de @asilodigital a mitad del hackaton? Echar una partida de @pjvallenilla (Cashea) vs @metavarce (Yummy) 🥊
El juego lo desarrolló @0bkevin y quedó brutal
A veces uno se siente como Hades, respiras, te "fumas un cigarro" (darse un break) y dices "bueno, ya que, sigamos con otro tópico"
Jesús Andrade - Tecnochui retweeted
🇻🇪 🚨 VENEZUELA: THREAT ACTOR CLAIMS NETWORK COMPROMISE OF INTECH (OIL & GAS SUPPLIER)
A threat actor claims to have compromised the network of InTech Instrumentos y Equipos, C.A. (Intech-ie[.]net), a Venezuelan supplier serving Oil & Gas, Petrochemical, Food & Beverage, Pharma, and Power Generation sectors.
The actor claims:
* Network compromise of InTech Instrumentos y Equipos, C.A.
* Initial access via an insecure file-upload vulnerability in a web app
* PHP webshell dropped for remote code execution
* Multi-sector industrial customer base (Oil & Gas, Petrochemical, Food, Pharma, Power)
No numeric record volume was stated in the listing. The claim has not been independently verified.
⚠️ Analyst Note:
Named industrial suppliers with alleged RCE/webshell access are high-value CTI even without a row count, because operational and customer data can support supply-chain and sector-targeted abuse. Access vector, scope of exfiltration, and authenticity remain unconfirmed. We assess this as an unverified threat-actor claim, NOT confirmation of a compromise.
Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s…
#DDW #DarkWeb #Venezuela #OilAndGas #Industrial #DataBreach #ThreatIntelligence #CyberSecurity
Jesús Andrade - Tecnochui retweeted
🚨 OPENCODE CONFIRMS SECURITY BREACH HITTING 1.4% OF CONSOLE USERS WITH LINKED AI PROVIDERS
AI coding-agent platform OpenCode said on X on Oct 17, 2026 that it suffered a security breach overnight, tied to what it calls a "large scale distillation attack."
What OpenCode says:
• 1.4% of OpenCode Console users were impacted, a subset who had external AI providers linked
• All affected users were notified by email on the morning of Oct 17; users who got no email were not impacted
• The incident is ongoing, and OpenCode is working with Anthropic, OpenAI and Google to remediate
⚠️ Analyst Note:
A distillation attack uses someone else's access to a large AI model to harvest its outputs, often to train a competing model, which makes linked provider API keys the prize. Affected users are reporting unexpected spend alerts and charges on keys they used only in OpenCode. If you received the email, revoke and regenerate any keys linked to OpenCode at each provider and review usage logs. OpenCode has not yet said how access was gained or how many accounts the 1.4% represents.
Source:
xitter.cf/opencode/status/211151…
#DDW #OpenCode #AISecurity #APIKeys #DataBreach #CyberSecurity #ThreatIntelligence
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
Aquí ando 😋
Sábado de coding en Caracas 🇻🇪
Espacio presencial del Hackaton de 30X, hosteado por @asilodigital y @Wave_TechHub
