invalid (@dedsecx01) header
invalid (@dedsecx01) profile picture

Half Life 3 & Infosec memes enjoyer

Greater KL
Joined December 2020
Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)Photo by invalid (@dedsecx01)
"It's not getting easier, you just getting better at it"
1
10
2,079
“We’ve patched every single vulnerability, we don’t understand why we’re still getting breached?”
8
34
1
299
5,653
invalid retweeted
new quickhack idea
151
3,310
51
41,071
282,445
invalid retweeted
群晖 #NAS 安全预警:部分用户未及时更新系统或软件被勒索软件全盘加密数据。 360 反勒索团队近日处置多起涉及 C3RB3R 勒索软件的案例,黑客使用的是 9 月群晖已经修复的漏洞。 如果用户未及时更新 #DSM 且暴露在公网,就有可能被攻击。 黑群晖用户通常无法及时更新版本,这种情况下更不应该将 NAS 暴露在公网上。 建议使用群晖 NAS 的用户开启 DSM 自动更新,以及如无必要请不要将 NAS 暴露在公网、定时备份数据到云盘或其他位置,避免被一锅端。
8
53
22
169
200,668
invalid retweeted
MyCERT Advisory - Fake Financial Documents Distributed via WhatsApp Deliver a Windows Trojan. mycert.org.my/portal/advisor…
27
31
984
invalid retweeted
High priority: AI Firewall AI Endpoint Protection AI SIEM AI Identity Low priority: Firewall Endpoint Protection SIEM Identity
In a single year, AI has rewritten the security priority list for CISOs. Attackers are moving faster. Bain estimates AI compresses a typical cyberattack from about four weeks to about 18 hours, and models keep getting better at finding and exploiting weaknesses. There's also more to protect, with employees shipping apps they couldn't have built a year ago and agents getting access to source code, documents, and production systems. In a survey of 100 CISOs at companies with 1,000+ employees, all seven of the most-selected 2027 priorities involve AI. The biggest jumps since 2026: - Internal AI agent security (+28 pts) - AI SOC (+26 pts) - AI offensive security (+24 pts) - AI code security (+23 pts) - AI vulnerability remediation (+22 pts) Last year's staples: - Exposure & vulnerability management (-21 pts) - SIEM / security data (-18 pts) - Privileged access management (-18 pts) From a16z's @OwenColby and @steph_zhang on The New Security Agenda: a16z.news/p/the-new-security…
14
23
5
262
17,336
invalid retweeted
Patched isn't the same as closed. PHP2Shell exploitation started 4 days before the fix. For MSSPs, the IR case ends when you can prove what happened, not when the patch lands. New blog from Jeremy Leasher: binalyze.ai/blog/patching-cl… #Binalyze #MSSP #CyberSecurity #SOC
3
8
336
Just got a reward for a critical vulnerability submitted on @yeswehack - الله لا يعطيكم عافية عالاقل قدرو وقت وجهود الباحثين
63
8
5
242
22,990
just one more patch (trust me)
AWWWWOOOOOOOGAAAAAAA 9.8 severity use-after-free vulnerability in the kernel’s IPv4 TCP stack just landed Time to patch! ubuntu.com/security/CVE-2026…
1
2
133
People kept asking me for “ARTEX signatures” and “Cairn indicators”, so I wrote this We found useful fingerprints and wrote rules. But identifying the framework isn’t the same as covering the attacks it orchestrates. I wanted to explain that distinction, why attribution gets harder, and how noisy attacks can still succeed by moving fast. I expect these frameworks to have a much bigger impact in the coming months. It’s worth understanding the technology behind the current attack waves, because I suspect they’ll build into a flood. #ARTEX #Cairn nextron-systems.com/2026/10/…
🤖 Made with AI
12
35
2
141
12,875
'Cukai Syarikat Rsit-003.iso' seen from Malaysia @abuse_ch c3424b5b968d07d979e9b3cb46cc7c42718bd4e96fbc8e77e051264d67faf625 bazaar.abuse.ch/sample/c3424… FUD IP: 81.2.24(.)0
5
1
6
677
Brunch and snaking(mengular)
2
8
338
Everyone else: max stat Roman: reflex +1
A walking-talking tank on the edge, a synapse-frying Nomad netrunner, a corpo-born/Maelstrom-raised agile solo, or... someone who clips all the crazy stuff others do? 🤔 Bring the skillset of the Cyberpunk: Edgerunners 2 crew into Cyberpunk 2077 with our build guide essentials. 👑👾🦿📸
1
160
Roman is like free rider in your assignment group(get carried)
38
Buy cybersecurity insurance Get breached Procure tools and MSSP Get breached again
4
215
Different Stages of OpSec: Stage 1 - Blissful Ignorance: Believe Everything Stage 2 - Growing Awareness: Question Everything Stage 3 - Healthy Skepticism: Trust, but Verify Stage 4 - Zero Trust: Never Trust, Always Verify Stage 5 - Constant Vigilance: Trust No One, Verify Everything Stage 6 - Total Paranoia: Assume Everything Is Compromised
27
43
9
271
17,557
Context : notes.netbytesec.com/2026/10… Credit to netbytesec
They are very active in Malaysia right now. Take note everyone
1
2
6
400
About to get breach? Just buy cybersecurity insurance +15 INT
5
151
Sharpen your threat hunting skills! 🔎 Join us Nov. 17–18 (EMEA hours) for our virtual Threat Hunting with Google workshop. Hunt simulated threats, explore key MITRE ATT&CK techniques, and learn from frontline experts. goo.gle/4ezaClu
11
51
5,499
They are very active in Malaysia right now. Take note everyone
10
368
26
924
76,121
‼️ Researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers and chained them to run code on iOS. He says he got past Telegram's server-side checks, and the flawed code still ships in its apps. Telegram said in March its servers validate every sticker.
95
90
36
713
218,519