Incident Response/Forensics/Information Security/Audit/Cybersecurity/Computer Fraud/Risk Analysis/threat intelligence
Joined July 2011
- Tweets1.1K
- Following483
- Followers54
- Likes83
William Forero Cruz retweeted
‼️ WARNING: Attackers are exploiting a critical FortiMail flaw that allows unauthenticated arbitrary file writes.
CISA added "CVE-2026-104286" to KEV. Fortinet published IOCs and workarounds, with fixes still pending for some versions.
Learn more: thehackernews.com/2026/10/cr…
William Forero Cruz retweeted
Anthropic Hardens Claude Security After AI Models Gain Unauthorized Access to Real Systems
More Details: cybersecuritynews.com/anthro…
Anthropic has hardened security around its Claude models after several incidents in which the systems gained unauthorized access to real computers during cybersecurity evaluations.
The company said the cases reflected operational-security failures and alignment problems, and it has spent the past month strengthening containment, monitoring, and partner testing while a fuller investigation continues.
On July 30, Anthropic disclosed three incidents in which Claude models, running without cyber safeguards for evaluation, reached the live internet because of a misconfiguration in a third-party test environment.
#cybersecuritynews
ALT Anthropic Hardens Claude Security After AI Models Gain Unauthorized Access to Real Systems
William Forero Cruz retweeted
ServiceNow warns of three max severity security vulnerabilities dlvr.it/TVCkX7 #Security
William Forero Cruz retweeted
🚨 China-made ZBT routers ship with two factory implants.
One accepts unauthenticated commands over an internet-exposed UDP service to run commands as root. The other can exfiltrate PPPoE credentials, alter DNS hijack lists, and open reverse SSH tunnels.
How the implants work → thehackernews.com/2026/08/ch…
The Federal Bureau of Investigation (FBI) is releasing this FLASH to highlight the tactics, techniques, and
procedures (TTPs) and indicators of compromise (IOCs) associated with the cyber criminal group
TeamPCP. ic3.gov/CSA/2026/260702.pdf
William Forero Cruz retweeted
Impersonated "System Administrator" #phishing abuses Teams to seize remote control of victim's machine to deploy #EtherRAT via a malicious MSI/PowerShell, with its C2 hidden in an Ethereum smart contract. An open dir exposes the actor's malware. Details at bit.ly/4v6cfN6
ALT Active open directory hosted by the threat actor, containing multiple frequently updated versions of #EtherRAT. The image shows a web browser displaying an open directory listing. Several files and folders are listed, with dates and sizes, including different versions of "#EtherRAT".
ALT Threat actor transaction containing a hardcoded C2 address within the input data field. This image shows an eth.blockscout.com interface with details of a transaction. The transaction ID is visible at the top, and it highlights a hard-coded C2 address in the Input Data field. Below is a section with a decoded C2 domain name.
ALT The image shows a computer screen displaying lines of text related to bot logs. It contains timestamps, URLs, and system activity information. Some sections are highlighted in red to obscure sensitive data. The text mentions Microsoft and URLs related to cloud services.
William Forero Cruz retweeted
Grupo The GentleMen anunció ayer la intrusión en los sistemas del Grupo Indra 🇪🇸
William Forero Cruz retweeted
🚨 ALERT - Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.
The CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.
eSentire says the attempts it saw failed, but PoC details are now public.
Read: thehackernews.com/2026/07/la…
William Forero Cruz retweeted
🚨 CISA Flags Palo Alto Networks PAN-OS Vulnerability as Exploited in Attacks
Source: cybersecuritynews.com/cisa-p…
CISA has added a critical Palo Alto Networks PAN-OS vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that the flaw is being actively leveraged in real-world attacks.
The vulnerability affects PAN-OS, the operating system that powers Palo Alto Networks firewalls. It enables attackers to bypass authentication mechanisms and establish unauthorized VPN access. The flaw allows remote attackers to circumvent security restrictions without valid credentials.
#cybersecuritynews
William Forero Cruz retweeted
🚨 Critical Alert: Cisco Secure Workload Hit with CVSS 10.0 Flaw.
thehackernews.com/2026/05/ci…
Unauthenticated attackers can exploit a REST API vulnerability (CVE-2026-20223) to steal sensitive data and make configuration changes across tenant boundaries with Site Admin privileges.
Affects both SaaS and on-prem deployments. No workarounds.
Patch immediately:
• 3.10 → 3.10.8.3
• 4.0 → 4.0.3.17
• 3.9 or older → Migrate now
William Forero Cruz retweeted
NSA Releases Security Design Considerations for AI-Driven Automation Leveraging the Model Context Protocol - nsa.gov/Portals/75/documents…
William Forero Cruz retweeted
Colombia avanza hacia una IA más segura y responsable! 🇨🇴🤖
El @Ministerio_TIC ya tiene disponibles para consulta los Lineamientos de Seguridad y Privacidad de la Información para Sistemas de IA, un marco clave para fortalecer la confianza digital, la protección de datos y la seguridad en el uso de estas tecnologías. 🛡️🔒
Encuentra este documento y sus recursos relacionados en:
🔗 gobiernodigital.mintic.gov.c…
William Forero Cruz retweeted
If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:
- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are useless or shady anyway.
- Set minimumReleaseAge to delay fresh packages. In recent attacks, that delay alone would’ve been enough to avoid pulling malicious versions.
- On Linux, wrap your package manager in bubblewrap. Keeps the junk from touching sensitive files like ~/.ssh
No tools to buy. No pipelines to rebuild. Just small changes that help.
Hacker News post: news.ycombinator.com/item?id…
Config: pnpm.io/settings#minimumrele…
William Forero Cruz retweeted
¿Tu SIEM no detecta nada? 😅
Levi Reza llega desde 🇲🇽 para enseñarte:
🔍 Cacería de amenazas
👤 Perfilamiento de adversarios
🏴☠️ Y técnicas que los sistemas dejan pasar
📍 @udea Medellín | Junio 11–12
👉 bsidesco.short.gy/LPX
#PurpleTeam #Ciberseguridad #BSidesColombia
William Forero Cruz retweeted
Guía para Desarrolladores de OWASP (nueva versión en español)
blog.segu-info.com.ar/2025/0…
William Forero Cruz retweeted
CISA updates ScubaGear Tool to strengthen your Microsoft 365 security!
As Microsoft tenants grow, so do the complexities of ensuring excellent security measures. With many admin centers and configurations to manage, maintaining a security baseline can be a difficult task.
The answer? ScubaGear Tool by @CISAgov.
ScubaGear is an assessment tool that verifies that a Microsoft 365 (M365) tenant's configuration conforms to the policies described in the Secure Cloud Business Applications (SCuBA) Security Configuration Baseline documents.
After it analyzes your Microsoft tenant, it creates a recommendation report for the following products:
- Microsoft Defender for Office 365
- Microsoft Entra ID
- Microsoft Exchange Online
- Microsoft SharePoint and OneDrive for Business
- Microsoft Power BI
- Microsoft Power Platform
- Microsoft Teams
Learn more about how to use it in your organization:
alitajran.com/microsoft-365-…
The CISA team provides this script with new features and bug fixes so you will be up to date with the latest security changes to protect your Microsoft 365 organization. Best of all, it's completely FREE!
Stay secure.
#Microsoft365 #EntraID #CISA #Cybersecurity #PowerShell #SecurityAudit
William Forero Cruz retweeted
New LOL project, LOLAD a collection of Active Directory techniques! 👇
lolad-project.github.io/
