Political Scientist, MA in Strategic Studies & International Security, Former Researcher & IT Soldier, Security Engineer
Joined October 2011
- Tweets27.3K
- Following1.5K
- Followers732
- Likes35.8K
Pinned Tweet
Comparto mi TFM, "La estabilidad en la región MENA horizonte temporal 2030": academia.edu/41743302/LA_EST… vía @academia
Bernardo Rodríguez retweeted
Esto 👇
A propósito de la intrusión de buques de la Marina de #Marruecos coincidiendo la entrada terrestre de decenas de miles en #Ceuta a finales de julio, conviene recordar q las estrategias #híbridas se llaman así porque entrañan el empleo coordinado de distintos instrumentos de poder
Bernardo Rodríguez retweeted
Huntress researchers Anna Pham (@RussianPanda9xx) & Ben Folland detail a multi-stage malware execution chain, originating from a ClickFix lure, that leads to the delivery of infostealing malware, including LummaC2 & Rhadamanthys. huntress.com/blog/clickfix-m…
Bernardo Rodríguez retweeted
Shai-Hulud 2.0: A new npm-focused campaign is significantly wider in scope than its previous iteration, affecting tens of thousands of GitHub repositories. Read our updated report:
bit.ly/4pHJOng
ALT Pictorial representation of the npm packages supply chain attack. A blurred image focusing on a person typing on a laptop with lines of code visible on the screen, illuminated in blue and red lights, suggestive of intense coding or cyber activities.
Bernardo Rodríguez retweeted
Caída mundial de Amazon Web Services: está provocando fallos en diferentes plataformas
Servicios afectados: Amazon, Alexa, PrimeVideo, Perplexity, Canva, Duolingo. Además, de otras redes como Snapchat y videojuegos como Fortnite, Clash Royale o Roblox
downdetector.es/problemas/aw…
Bernardo Rodríguez retweeted
Someone said GLOBAL AWS OUTAGE? Because it seems like everything is down.
Major AWS outage disrupts several services like Amazon, Alexa, Snapchat, Fortnite, Perplexity, Airtable, MyFitnessPal, Canva, and McDonald's app due to high error rates and latencies. AWS is investigating; no confirmed cause or resolution timeline.
Video taken by @Pirat_Nation
Bernardo Rodríguez retweeted
We identified a malvertising campaign targeting users searching for legitimate software, leading to the download of a trojanized WinSCP installer that deployed Broomstick/OysterLoader.
All files involved in the initial access phase were signed with valid certificates.
Bernardo Rodríguez retweeted
Regarding F5 network compromise (see my.f5.com/manage/s/article/K…):
We are sharing daily IP data on F5 exposures in our Device Identification report shadowserver.org/what-we-do/… (device_vendor set to F5).
~269K IPs seen daily, nearly half in US.
Geo breakdown: dashboard.shadowserver.org/s…
Bernardo Rodríguez retweeted
🚨 A self-replicating worm known as Shai-Hulud has compromised over 500 packages in the world’s largest JavaScript registry npm—causing widespread supply chain issues. Review detection and remediation recommendations in our alert 👉 go.dhs.gov/iAY
Bernardo Rodríguez retweeted
Healthcare is a top five most targeted industry in M-Trends 2025.
In our latest blog post, Mandiant Red Team shares key observations on how attackers exploit healthcare systems.
Read more ➡️ goo.gle/46yHplQ
Bernardo Rodríguez retweeted
ByteCaster 🔥 – my new tool for payload encryption, obfuscation, and conversion to byte arrays.
github.com/Print3M/ByteCaste…
- 14 output formats: C, Rust, C#, Nim, Go...
- AES-256, RC4, XOR supported
- IPv4Fuscation, MACFuscation, base64/32
#malware #redteam #security #infosec
Bernardo Rodríguez retweeted
We can exploit the #securityvulnerability of Windows Error Reporting to put EDRs and #antimalware into a coma-like state.
By using the EDR-Freeze #redteam tool:
Github: TwoSevenOneT/EDR-Freeze
ALT EDR-Freeze can suspend MsMpEng antimalware
Bernardo Rodríguez retweeted
"On the eleventh day, the threat actor began a ransomware deployment. This final stage included the preparatory steps to deploy across the network. The process started with the execution of a batch script named SETUP.bat, which created a staging file share..."
Bernardo Rodríguez retweeted
NEW THREAT REPORT 🚨 We're tracking the spread of a new malware loader we have named “CountLoader,” that is strongly associated with Russian ransomware gangs. 🇷🇺
Read: hubs.ly/Q03JNJMJ0
#countloader #threat #russia #ukraine #cybersecurity #ransomware
Bernardo Rodríguez retweeted
🚨A casino suffered a cyberattack through a smart aquarium installed inside its facilities.
bitlifemedia.com/2025/09/cas…
Attackers exploited a vulnerability in the aquarium’s internet-connected thermostat, which was originally designed to regulate water temperature and salinity.
From this entry point, they moved laterally into the casino’s internal network and exfiltrated around 10 GB of data, believed to include customer records.
Citing @mikko's book: If it's smart, it's vulnerable.
Bernardo Rodríguez retweeted
Fileless attacks are the new norm. 👻 Traditional security misses them because there's no malware to detect. Our new blog explains how attackers abuse the Windows Service Control Manager & how Trellix NDR catches what others can't. bit.ly/3HQdQUN
Bernardo Rodríguez retweeted
Zscaler ThreatLabz has published a new technical analysis of the North Korean-aligned threat group APT37 and their evolving TTPs. The analysis covers the group’s latest tooling, including a new Rust-based backdoor we named Rustonotto, alongside Chinotto and FadeStealer. ThreatLabz also uncovered that all three tools are managed via a single command-and-control (C2) server.
Read our technical analysis here: zscaler.com/blogs/security-r…
Bernardo Rodríguez retweeted
''DLL Sideloading for Initial Access – Red Team Operator's Guide''
#infosec #pentest #redteam #blueteam
print3m.github.io/blog/dll-s…
Bernardo Rodríguez retweeted
Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025 | by Kevin Beaumont
doublepulsar.com/citrix-forg…
