Mohammed CHERIFI (@mcherifi) header
Mohammed CHERIFI (@mcherifi) profile picture

Mohammed CHERIFI

@mcherifi

Life enthusiast. Technologist, Cyber Security Consultant

 Rabat, Morocco
mcherifi.org
Joined June 2009
  • Tweets14.7K
  • Following2.3K
  • Followers8.2K
1KMedia
Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)Photo by Mohammed CHERIFI (@mcherifi)
‼️ An unknown APT group likely poisoned the supply chain of a custom Windows 10 build for Asian governments, Kaspersky says. Its NetamLoader malware hid in a Windows Update folder among real Patch My PC files and ran via Microsoft-signed .NET code.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
11
72
3
498
35,684
Mohammed CHERIFI retweeted
Octave Klaba (@olesovhcom) profile picture
Octave Klaba
@olesovhcomOct 21
Nous sommes actuellement en cours de déploiement des versions fournies par PHP après build & tests sur offre web hosting .
Les versions qui arrivent : 
 •7.4.33 •8.0.30 •8.1.34 •8.2.35 •8.3.36 •8.4.27 •8.5.12
php-net (@php_net) profile picturephp-net
@php_netOct 21
PHP 8.5.12 released - 90 fixes in 29 components, including security fixes (CVE-2026-109618, CVE-2026-109619). Changelog + downloads: php-net.pro/news/php-8-5-12-…
PHP 8.5.12 released with security fixes | The Dev Dispatch

PHP 8.5.12 released with security fixes | The Dev Dispatch

The PHP project has released PHP 8.5.12: 90 fixes across 29 components of the 8.5 branch.

php-net.pro
11
50
4
357
40,076
Replying to @Etsy
@Etsy @jgsilverman My shop was compromised: fake listings and ads I never created. I reported it to Support 3 times, fixed everything, warned buyers. Then my shop was suspended and my appeal denied with no reason given. I’m asking for a fair, human review of my case. #EtsySeller
3
1
111
Mohammed CHERIFI retweeted
HB (@hbelami1) profile picture
HB
@hbelami1Oct 17
Replying to @marouane53
Let’s hope it doesn’t become a public funding office for Mistral. Morocco needs to build its own AI industry not use taxpayers money to strengthen french tech companies while local talent struggles to find opportunities.
1
1
7
547
Mohammed CHERIFI retweeted
Tesla (@Tesla) profile picture
Tesla
@TeslaOct 16
Do a kickflip!
4,479
25,257
10,900
206,424
28,394,775
Mohammed CHERIFI retweeted
Zakaria (@zakariaornot) profile picture
Zakaria
@zakariaornotOct 15
Introducing overshoot, it will cut your GPU bill in half with zero quality loss, or you don’t pay. Over the past few months, we have forward deployed into AI teams to optimize their inference stacks. They have now cumulatively saved over $5M. Overshoot is software that bakes in our hard-earned inference learnings into a scalable solution. overshoot.ai
73
45
17
335
35,995
‼️ BREAKING: A zero-day has been released for Muse, Meta's new AI agent, and a Meta AI security engineering manager who left the company this month says he would never use it, citing security and privacy concerns. He was reacting to the zero-day a researcher posted, which lets malware hijack Muse for Mac. A local process with no special privileges can change an undocumented Muse setting and send dictated prompts to an attacker's server. This could allow for prompt capture, prompt injection and theft of Muse's authentication material. It can also get access to whatever the user has let Muse access, including files, Mail, Messages, Calendar and Notes.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
78
219
83
1,555
258,169
Mohammed CHERIFI retweeted
Hackmanac (@H4ckmanac) profile picture
Hackmanac
@H4ckmanacAug 27
🚨Cyber Alert ‼️ 🇦🇷Argentina - 𝗢𝗽𝗲𝗻 𝗦𝗽𝗼𝗿𝘁𝘀 Qilin hacking group claims to have breached Open Sports. Threat actor: Qilin Sector: Wholesale / Retail Data exposure (claimed): Not specified Data type: Not specified Observed: Aug 27, 2026 Status: Pending verification ESIX©: 5.40 Full details and impact assessment on HackRisk.io
Image from Hackmanac (@H4ckmanac)
7
18
9,262
‼️ BREAKING: A hacker breached AI music company Suno using the Shai-Hulud worm and released source code showing how its training set was built: - 113,879 hours of YouTube Music - 62,117 hours of Pond5 - 12,287 hours of Deezer - plus Genius lyrics and a plan to download roughly 1 million hours of podcasts The same intrusion reached customer emails, phone numbers, and Stripe payment data for what the hacker says is hundreds of thousands of users. Suno dates the incident to November 2025, calls it limited, and says individual notifications were not warranted. Customers are surprised to not have been informed about the breach.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
163
833
197
6,421
982,688
‼️🚨 Unauthenticated attackers are gaining SYSTEM on domain controllers with crafted packets. The vulnerability being exploited is CVE-2026-41089, a CVSS 9.8 hole in Windows Netlogon, and exploitation in the wild has been confirmed. A patch has existed since May 12. Every DC still behind is not just vulnerable, but according to the Centre for Cybersecurity Belgium are also actively being pwnd.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
16
213
12
1,058
110,164
‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products
Image from International Cyber Digest (@IntCyberDigest)
Readers added context they thought people might want to know
The exploit requires ASLR to be disabled, which is not default on practically all systems. This is seen in the exploit code. Source github.com/depthfirstdisc…
83
383
153
2,533
954,387
Mohammed CHERIFI retweeted
Hackmanac (@H4ckmanac) profile picture
Hackmanac
@H4ckmanacMay 13
🚨Cyber Alert ‼️ 🇶🇦Qatar - 𝗤𝗮𝘁𝗮𝗿 𝗡𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗕𝗿𝗼𝗮𝗱𝗯𝗮𝗻𝗱 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 (𝗤𝗡𝗕𝗡) The Gentlemen ransomware gang claims an attack on Qatar National Broadband Network (QNBN). Threat actor: The Gentlemen Sector: Telco Data exposure (claimed): Not specified Data type: Not specified Observed: May 12, 2026 Status: Pending verification ESIX©: 5.97 Full details and impact assessment on HackRisk.io
Image from Hackmanac (@H4ckmanac)
9
22
9,225
Mohammed CHERIFI retweeted
Mohammed Makulas (@makulas1913) profile picture
Mohammed Makulas@makulas1913Apr 8
أكبر معضلة تواجه المهندسين في استخدام الذكاء الاصطناعي لاختبار الاختراق (Penetration Testing) هي الخصوصية؛ لا يمكنك منطقياً إرسال تقارير ثغرات بنيتك التحتية لـ API سحابي. الرد العملي جاء عبر مشروع METATRON المفتوح المصدر. أداة مبنية بـ Python تعمل كـ CLI، تقوم بأتمتة أدوات الفحص المعتادة وربطها مع نموذج لغوي محلي (Local LLM) لتعمل 100% Offline على أنظمة لينكس. القيمة الهندسية: لا إنترنت، لا مفاتيح API، ولا اشتراكات مدفوعة. فقط أعطه الـ IP أو الدومين المستهدف، وسيقوم بالتحليل ذاتياً. خيار ممتاز لتدقيق الأنظمة برمجياً والحفاظ على سرية البيانات في نفس الوقت.
Cyber Security News (@The_Cyber_News) profile pictureCyber Security News
@The_Cyber_NewsApr 7
🚨 METATRON - Open-Source AI Penetration Testing Assistant Brings Local LLM Analysis to Linux Source: cybersecuritynews.com/metatr… A new open-source penetration testing framework called METATRON is gaining attention in the security research community for its fully offline, AI-driven approach to vulnerability assessment. Built for Parrot OS and other Debian-based Linux distributions, METATRON combines automated reconnaissance tooling with a locally hosted large language model (LLM), eliminating the need for cloud connectivity, API keys, or third-party subscriptions. METATRON is a CLI-based penetration testing assistant written in Python 3 that accepts a target IP address or domain and autonomously orchestrates a suite of standard reconnaissance tools. #cybersecuritynews
Image from Cyber Security News (@The_Cyber_News)
3
35
325
43,954
Mohammed CHERIFI retweeted
Hackmanac (@H4ckmanac) profile picture
Hackmanac
@H4ckmanacMar 27
🚨Cyber Alert ‼️ 🇲🇦Morocco - 𝗠𝗮𝗿𝗼𝗰 𝗧𝗲𝗹𝗲𝗰𝗼𝗺 Bashe hacking group claims to have breached Maroc Telecom. Allegedly, the attackers exfiltrated 30 GB of data. Threat actor: Bashe Sector: Telco Data exposure (claimed): 30 GB Data type: Internal documents, emails with attachments, contact lists, financial documents, and personal data Observed: Mar 26, 2026 Status: Pending verification ESIX©: 5.56 Full details and impact assessment on HackRisk.io
Image from Hackmanac (@H4ckmanac)
8
23
4
156
18,022
The article of the Australian security researcher: teapawt.net/Harrris0n/status/20141…
harry (@Harrris0n) profile pictureharry
@Harrris0nJan 22
How Waze quietly built the world's largest crowdsourced surveillance system

How Waze quietly built the world's largest crowdsourced surveillance system

Article · @Harrris0n
3
41
236
46,176
Mohammed CHERIFI retweeted
Hespress هسبريس (@hespress) profile picture
Hespress هسبريس
@hespressJan 15
أصدرت المحكمة التجارية بالدار البيضاء قرارًا يقضي بحجب عدد كبير من مواقع الرهان الأجنبية التي يمكن الولوج إليها من داخل المغرب، مع إلزام مشغلي الاتصالات بتقييد الوصول إليها تحت طائلة عقوبات مالية ثقيلة. وأفادت معطيات خاصة أن قرار القضاء الإداري جاء في إطار مكافحة أنشطة الرهان غير المرخص عبر الإنترنت، وذلك عقب دعوى قضائية رفعتها الشركة المغربية للألعاب والرياضة (MDJS)، حيث أمرت “تجارية البيضاء” بحجب جميع مواقع الرهان غير القانونية المتاحة من داخل التراب الوطني. وبموجب هذا الأمر الاستعجالي، ألزم القاضي متعهدي الاتصالات الثلاثة الرئيسيين في المملكة، وهم “اتصالات المغرب” و“أورنج المغرب” و“إنوي”، بحجب الولوج إلى جميع مواقع الرهان عبر الإنترنت التي تنشط دون ترخيص، إضافة إلى جميع النطاقات الفرعية وعناوين IP المرتبطة بها. التفاصيل: hes.press/4qplbM0 #الاتصالات #الرهان_الرياضي #المحكمة_التجارية #المراهنات_الإلكترونية #cmz
Image from Hespress هسبريس (@hespress)
1
4
1
22
3,335
Mohammed CHERIFI retweeted
Marouane Lamharzi Alaoui (@marouane53) profile picture
Marouane Lamharzi Alaoui
@marouane53Jan 2
Hi @grok can you remove the puppet ?
Image from Marouane Lamharzi Alaoui (@marouane53)
67
46
7
690
277,975
⚠️ ALERT — A critical RCE flaw (CVSS 9.9) was found in the n8n workflow automation platform. CVE-2025-68613 lets authenticated users execute arbitrary code, enabling full instance takeover, data access, and system-level actions. More than 103k exposed instances are observed globally. 🔗 Details → thehackernews.com/2025/12/cr…
Image from The Hacker News (@TheHackersNews)
28
336
81
1,530
299,003
Mohammed CHERIFI retweeted
Hackmanac (@H4ckmanac) profile picture
Hackmanac
@H4ckmanac22 Dec 2025
🚨Pornhub tells users to expect sextortion emails after data exposure Source: malwarebytes.com/blog/news/2…
Image from Hackmanac (@H4ckmanac)
Hackmanac (@H4ckmanac) profile pictureHackmanac
@H4ckmanac16 Dec 2025
🚨 Cyber Alert - PornHub PornHub has been extorted by the ShinyHunters extortion gang following the alleged theft of search and watch history belonging to its Premium members in a recent Mixpanel data breach. Source: bleepingcomputer.com/news/se…
Image from Hackmanac (@H4ckmanac)
5
38
5
128
45,139
Mohammed CHERIFI retweeted
Abdelkader Boudih (@seuros) profile picture
Abdelkader Boudih
@seuros9 Nov 2025
Last week i released my project in GitHub. Today i'm posting it here after i raised money to fund it. Enjoy. seuros.github.io/kaunta

Kaunta - Analytics without bloat

Privacy-focused analytics without bloat. Lightweight visitor tracking solution with real-time analytics and a clean dashboard interface.

seuros.github.io
3
2
22
1,847
Load more