CyberSecurity Researcher/Speaker/Pro-Pentester - ISO/IEC 27001 Certified Bug Bounty Hunter from Mx 🇲🇽🇪🇸 🏴☠️ #m10sec
Joined April 2010
- Tweets16.5K
- Following810
- Followers57.3K
- Likes119K
El M10 🏴☠️ retweeted
🇲🇽 🚨 MEXICO: MEXICAN GEOLOGICAL SERVICE (SGM) OFFICIAL EMAIL SYSTEM ALLEGEDLY HACKED
A threat actor on an underground forum claims to have hacked the official email system of the Servicio Geológico Mexicano (SGM), Mexico's geological survey agency, specifically its Regional Coordination Office in the San Gregorio Atzompa area.
The actor claims to have taken control of the agency's government correspondence system and extracted its archive, including:
* Hundreds of internal documents and official announcements
* Employee records and senior management correspondence
* Salary, financial obligation and staffing-structure details
* Personal data of government employees
The actor also claims the systems were "wiped" and threatens to publish the data if unspecified demands are not met. A sample of documents is attached to the post.
The claim has not been independently verified.
⚠️ Analyst Note:
If authentic, government mailbox archives expose employee personal data and internal correspondence that can be reused for highly convincing spear-phishing and business email compromise against Mexican public agencies. The "hacked and wiped" and extortion language is unproven, and the scope may be limited to one regional office. Unverified threat-actor claim, NOT confirmation of a compromise of SGM systems.
Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s…
#DDW #DarkWeb #Mexico #DataBreach #Government #Extortion #ThreatIntelligence
El M10 🏴☠️ retweeted
Vulnerabilidad HTTP2Shell afecta a .NET, FFmpeg, ClickHouse y Apache Arrow
La vulnerabilidad HTTP2Shell afecta a más que el tráfico web; nuevas investigaciones revelan que el fallo en el decodificador Brotli (CVE-2026-111497) puede comprometer aplicaciones .NET, el procesamiento de medios de FFmpeg, servidores ClickHouse y cargas de trabajo de Apache Arrow
blog.elhacker.net/2026/10/vu…
El M10 🏴☠️ retweeted
‼️Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions
Details: cybersecuritynews.com/micros…
Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component.
Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account.
#cybersecuritynews
El M10 🏴☠️ retweeted
🔴 #URGENTE | Una convocatoria por TikTok reclutó a los 600 jóvenes que han arrasado el centro de Barcelona dozz.es/lfr08
El M10 🏴☠️ retweeted
🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours.
That's not all.
→ Signs of agentic AI use in post-exploitation activity
→ Suspected Lazarus-linked operators scanning 216 targets worldwide
Full details ↓ thehackernews.com/2026/10/ph…
El M10 🏴☠️ retweeted
🚨🇪🇸 | GRAVE: Renfe anuló un contrato de ciberseguridad e ignoró un informe de Defensa antes del hackeo. Meses antes adjudicó otro contrato sin publicidad por 8,8 millones menos a una empresa del sector.
El M10 🏴☠️ retweeted
🛡️ Microsoft Teams to Use AI for Detecting Phishing Attacks Using Teams Conversations
Details: cybersecuritynews.com/micros…
Microsoft is preparing to add AI phishing detection to Microsoft Teams, using conversation context to spot scams that may contain no harmful links or attachments. The feature will focus mainly on first conversations with external contacts, where attackers can pose as trusted support staff and ask employees to share sensitive information.
Microsoft detailed the change in Message Center notice MC1519866, published on October 21, 2026. Targeted Release is scheduled to begin in early November and finish by mid-November. Worldwide general availability is expected to start in early December and finish by mid-December, rather than reaching every customer in November.
#cybersecuritynews
El M10 🏴☠️ retweeted
‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers
Details: cybersecuritynews.com/tailsc…
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups.
They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks.
The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine.
#cybersecuritynews
Readers added context they thought people might want to know
The flaws require an already-approved device in the Tailscale network with SSH rules permitting access/forwarding; they enable post-compromise lateral movement and escalation inside the tailnet, not unauthenticated remote access from outside.
tailworm.com
brandefense.io/security-news/…
tailscale.com/security-bulle…
x.com/mmaunder/statu…
El M10 🏴☠️ retweeted
El agente IA Claude Mythos 5 de Anthropic intentó inyectar código malicioso y engañar a desarrolladores
Anthropic ha revelado que su agente de IA, Claude Mythos 5 , intentó insertar código malicioso en un proyecto real de GitHub durante una prueba
blog.elhacker.net/2026/10/el…
El M10 🏴☠️ retweeted
⚠️🇲🇽 Alerta: Se reporta en canales de Telegram la presunta filtración y comercialización de una base de datos perteneciente a INTER[.]MX, uno de los principales brokers digitales de seguros en México, que comprometería más de 970,000 registros de clientes y prospectos,
El M10 🏴☠️ retweeted
Que cojones está pasando en Barcelona?
Este acaba de entrar en una tienda Pandora a robar todo lo que ha podido con 7k personas en directo
Que asco de país se está quedando
El M10 🏴☠️ retweeted
Millones de dispositivos vulnerables a ataques RCE por el abandono de la app Popcorn Time
Investigadores de Eye Security desactivaron remotamente un actualizador vulnerable en la aplicación abandonada Time4Popcorn
blog.elhacker.net/2026/10/mi…
El M10 🏴☠️ retweeted
Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
El M10 🏴☠️ retweeted
CIA can access your phone and laptop cameras and microphones, says former CIA officer John Kiriakou.
El M10 🏴☠️ retweeted
‼️ Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
Details: cybersecuritynews.com/palo-a…
Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities affect PAN-OS and previously impacted two cloud services. Tracked as CVE-2026-109618 and CVE-2026-109619, the flaws have prompted planned firewall hotfixes and guidance to restrict access to management interfaces.
The company updated its security advisory on October 24, 2026. It said it was not aware of malicious exploitation against its products. However, Unit 42 has seen proof-of-concept exploits for the wider PHP vulnerabilities, known as PHP2Shell.
#cybersecuritynews
El M10 🏴☠️ retweeted
‼️ OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests
Details: cybersecuritynews.com/openai…
OpenAI says its AI agents found zero-day flaws, escaped sandboxes, reached the live internet, and exchanged information across isolation boundaries during large red-teaming tests of its research systems.
The findings, published on October 23, show how advanced models can chain software bugs and setup errors to bypass controls designed to contain them. The company said it repaired the weaknesses and worked with open-source maintainers on patches.
These tests involved internal training and evaluation systems, not the environments customers use with released OpenAI models.
#cybersecuritynews
El M10 🏴☠️ retweeted
⚠️ PALO ALTO: PHP2SHELL FLAWS HIT PAN-OS AND PANORAMA MANAGEMENT INTERFACE, HOTFIXES DUE OCT 26–30
Palo Alto Networks says the critical PHP RCE pair CVE-2026-109618 / CVE-2026-109619 ("PHP2Shell") affects PAN-OS and Panorama 10.2, 11.1, 11.2, 12.1 and 12.2. Severity HIGH (CVSS-B 8.7).
* Only the management web interface (HTTPS web UI and XML API) is affected, including data-plane interfaces with a management profile attached.
* GlobalProtect portal/gateway, Clientless VPN and Captive Portal are NOT impacted. Cloud NGFW and Prisma Access are unaffected.
* No PAN-OS fixes yet: hotfixes have ETAs of Oct 26–30 depending on branch.
* Until then, restrict management access to trusted internal IPs or a jump box. Threat Prevention users can enable Threat IDs 543004, 97622–97625 (content 9162+).
* Palo Alto is not aware of malicious exploitation against its products.
security.paloaltonetworks.co…
#PaloAlto #PANOS #PHP2Shell #CyberSecurity
