.PL 🇵🇱/ .IE🇮🇪 Product/Platform Security Engineer, Penetration Testing && DevSecOops!...
Dublin City, Ireland
Joined February 2011
- Tweets9.5K
- Following3K
- Followers1.1K
- Likes6.9K
Pinned Tweet
For normal browsing use @DuckDuckGo and @brave if you're extra sensitive use @virtualbox and @NordVPN for mail @ProtonMail or @ProtonVPN 😉🦀 If you're journalist you might consider @Tails_live ... Well I've said too much already 😜
InfoSecOne retweeted
INTEL: REVOLUT DISCLOSES DATA BREACH WITH PASSPORTS, STATEMENTS AND BITCOIN RECORDS LEAKED
InfoSecOne retweeted
Do not underestimate the power of this technology. These will soon be superhuman systems that can hack anything, revolutionize any field overnight, and acquire real power and resources. We have all witnessed the progress in each of these domains, and progress is not slowing.
InfoSecOne retweeted
Shodan Membership sale is live until 2026-08-09 00:00 UTC (~48 hours from now): account.shodan.io/billing/me…
InfoSecOne retweeted
‼️ BREAKING: OpenAI says two of its own models, GPT-5.6 Sol and an unnamed pre-release system tested with cyber safeguards off, broke out of a sandbox last week, chained zero-days and stolen(!) credentials to reach the open internet, and hacked Hugging Face to cheat on a benchmark, in what OpenAI calls an unprecedented cyber incident.
InfoSecOne retweeted
Nagranie z mojej prezentacji na tegorocznym @CONFidenceConf
"[PL] [CVE-2026-9058] Pełne ominięcie uwierzytelniania w ZUS, e-Sądzie, Usługach Elektronicznych Ochrony Zdrowia i kilku innych systemach administracji publicznej"
youtu.be/pMdnS8I18Ts
#Cybersecurity
InfoSecOne retweeted
JWT Auth Bypass TestBed
403.brutelogic.net/authz/jwt
Test your skills: 18 main tests with variations.
A proprietary tool with 40+ techniques for Brute One will be available this week to spot all these cases in the wild in a matter of seconds.
brutelogic.net/brute-one
InfoSecOne retweeted
My article on hidden messages within GPS signals was featured on @404mediaco. 404media.co/the-u-s-military…
InfoSecOne retweeted
Czego wam najbardziej brakuje podczas pobytu w innych krajach Europy? Mi:
- BLIKa / PayU
- Paczkomatów
- Żabki
- Allegro
- mObywatela
- taniego internetu
- zasięgu 4G / 5G
- restauracji czynnych bez przerwy w środku dnia
Co ważnego pominąłem?
InfoSecOne retweeted
CI/CDのペンテストに関する知識つけたいなと思って良い教材がないか調べてたら、CTF形式で学べるcicd-goatをみつけた👀
Docker上で動くので、手元にDocker環境があればサクッと遊べていい感じ。
github.com/cider-security-re…
InfoSecOne retweeted
tl;dr When you delete a Google API key, it says it’s immediately deleted. Our testing says ~23 minutes.
During that window, an attacker with a leaked key keeps access to your data and enabled APIs (including Gemini).
Deleting a Google API key doesn't revoke it immediately.
Our research found successful authentications up to 23 minutes after deletion across Google's infrastructure. During that window, attackers with a leaked key can still access enabled APIs, including Gemini.
Google closed our report as "won't fix."
InfoSecOne retweeted
Every 3rd website you visit runs Nginx.
18,959,833 of them can be hijacked right now.
A bug from 2008 just got a working exploit.
CVE-2026-42945 (CVSS 9.2)
No login. No access. Just one HTTP request.
→ Heap overflow → Worker process → RCE
Patch ASAP to Nginx 1.31.0 or 1.30.1
PoC is already out:
github.com/DepthFirstDisclos…
Readers added context they thought people might want to know
The vulnerability CVE-2026-42945 requires specific NGINX rewrite configurations with unnamed captures, a "?" in the replacement, and a following directive; not all NGINX sites are vulnerable. RCE is only possible with ASLR disabled. my.f5.com/manage/s/artic… depthfirst.com/nginx-rift
InfoSecOne retweeted
This is bad. And it’s only going to get worse from now on.
🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs into @pypi and is still spreading.
Newly confirmed compromised artifacts:
@opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads)
mistralai: 2.4.6 on PyPI
guardrails-ai: 0.10.1 on PyPI
additional @squawk/* packages on npm
guardrails-ai 0.10.1 executes malicious code on import. On Linux, it downloads git-tanstack[.]com/transformers.pyz, writes it to /tmp/transformers.pyz, and runs it with python3 without integrity verification.
The git-tanstack.com domain displayed a message signed “With Love TeamPCP,” along with: “We've been online over 2 hours now stealing creds
Regardless I just came to say hello :^)”
The page also linked to a YouTube video and you can probably guess which one.
InfoSecOne retweeted
Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments.
The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.
To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.
ALT Screenshot of mistralai PyPI package v2.4.6 compromise
InfoSecOne retweeted
New episode! Ep 159: Vastaamo
This is the cruelest, nastiest, darkest cyber attack in history. @joetidy tells us the story.
darknetdiaries.com/episode/1…
InfoSecOne retweeted
Tomorrow is a new episode. Listen to it in a carpeted room. Because your jaw is going to hit the floor, and I don't want you to get hurt. 🧑💻
