Jorge alvarez retweeted
'One of my favourite cyber security maxims is Halvar Flake’s observation that “All offensive problems are technical problems, and all defensive problems are political problems”' ncsc.gov.uk/blogs/one-does-n… (spotted at @unpromptedconf and reshared here)
Jorge alvarez retweeted
For years government officials have been telling us how sophisticated and stealth China's Volt Typhoon hackers are, without providing details that support this assertion. Today researchers at @BlackLotusLabs finally reveal details that back the claim zetter-zeroday.com/silent-tr…
Jorge alvarez retweeted
A compromised workstation shouldn’t give an attacker a path to production.
JPMorganChase’s cyber resilience guidance calls for removing standing privileges & excessive access held by service accounts & machine identities.
Agreed. Cut those Attack Paths. ghst.ly/4iATiil
Jorge alvarez retweeted
⚠️php2shell (CVE-2026-109618 and CVE-2026-109619): we’re seeing “P2SB” multipart probes hitting our Palo Alto GlobalProtect honeypots.
The requests carry a PHP_SESSION_UPLOAD_PROGRESS marker (“p2s-rider”) and a dummy file upload with no payload, which points to someone checking for the vulnerable upload-progress behavior and likely building a target list of Palo Alto devices.
Source is a known mass-exploit IP: 204.76.203.]7 (AS51396 Pfcloud UG, NL)
Track php2shell exploitation on Defused 👉 console.defusedcyber.com/sig…
Jorge alvarez retweeted
We tried all the agent harnesses, frameworks, and commanders under the sun… and none was right for us. So we built our own, Armada. Here’s what we focused on:
Specialized for offsec (deep skill engineering)
Engineered to fight competition bias Performs on long running tasks
Web, recon, LLM, Internals
Auto scaling
Auto learning (skills)
Deep logging
90% browser based for max success
Local and remote model compatible
Mutator proxy to enhance injection testing
Separate review agent
Next up:
Mobile client
Phone alerts
Model routing
Web Dashboard
Jorge alvarez retweeted
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Jorge alvarez retweeted
And it's worse than it looks... EntraScopes data is gathered through discovery - not comprehensive, not all tenant types, not future-proof
To better understand risk and find potential ways around Graph consent, I bulit an MCP server for EntraScopes 😎
github.com/nathanmcnulty/mcp…
Jorge alvarez retweeted
We've just published a behind-the-scenes look at the process of finding, analysing and disclosing the MikroTrick vulnerability.
With the rapid development of AI agents in the field, we expext to see more of such cases every month. Details on our website: cert.pl/en/posts/2026/09/mik…
Jorge alvarez retweeted
It's a webpage at myactivity.google.com that shows you everything Google has recorded about you.
Every search you've typed into Google. every YouTube video you've watched. every place you've navigated to in Maps. every website you visited while signed into Chrome. every voice command you gave Google Assistant. every app you opened on Android. your location history. timestamped. logged. going back years.
if you signed into a Gmail account on someone else's computer, your searches from that session are in their Activity too. that's a real thing Google confirmed.
These data feeds into a profile. not just for ads. Google infers your age range, income bracket, relationship status, political leanings, and interests and uses those inferences across every Google product and every site that runs Google ads.
So go to myactivity.google.com. look at what's there. it will surprise you.
then go to myaccount.google.com/data-an… and turn off:
— Web & App Activity
— Location History
— YouTube History
those three switches dramatically reduce what Google collects going forward.
You can also delete everything already stored. Google Takeout at takeout.google.com lets you download and then delete your entire history.
Jorge alvarez retweeted
What happens when CISA's zero trust playbook meets a 25-year-old DCS. Daniel Buhmann, @Fortinet on what holds up and what doesn't.
📍 3 - 4 Nov, Munich
go.sans.org/vEwrs7
#ICSSecurity #OTSecurity
Jorge alvarez retweeted
#AI is already in #DFIR workflows. The governance usually isn't.
SANS DFIR released two AI frameworks, one for Digital Forensics and one for Incident Response, showing where AI helps, where humans stay in control, and where it should never be trusted. go.sans.org/RNQ1SL
Jorge alvarez retweeted
🤖 AI agents are changing the SOC, but greater autonomy brings new security challenges.
Join SANS Senior Instructor @aboutsecurity for our webcast exploring how to defend with, and against, autonomous AI.
📅 8 September
⏰ 3 PM GST
Register free 👉 go.sans.org/LTbBqd
Jorge alvarez retweeted
No rubric existed for grading an autonomous forensic agent. So 90 judges built one.
1,775 evaluations across 123 finalist harnesses, corrected for grader severity, every finalist re-verified. Winners announced Aug 26: youtube.com/watch?v=ITmc7GoR…
#DFIR
Jorge alvarez retweeted
Tomorrow: go beyond the MFA headline and examine how token-theft attacks actually work.
Maxim Deweerdt breaks down AiTM phishing, refresh token replay, Storm-0558, & the controls that change whether stolen tokens stay useful.
📅 Aug 13 | 9:30 AM ET
🔗 buff.ly/RNpPSOV
Jorge alvarez retweeted
Next hacker summer camp giveaway!
3 seats to our “The Bug Hunters Methodology” course!
Like and share to be entered!
arcanum-sec.com/training/the…
Jorge alvarez retweeted
Black Hat has posted the video of the OpenAI team explaining how their model hacked Hugging Face.
youtube.com/watch?v=87DyyMV0…
Jorge alvarez retweeted
Cloudflare OS is an open-source platform that lets everyone in your company build apps, automate work, and safely access internal systems, shaped around what your organization knows and how it operates. cfl.re/4w6ViT0
