Cesar Chavez Martinez retweeted
JUST IN: 🇰🇵 North Korea responsible for $6 billion Binance hack, CNN reports.
Cesar Chavez Martinez retweeted
Ahora la app del BCP te pide que desactives las opciones de desarrollador de tu celular para poder seguir usandolo, eso quiere decir que su app no es segura frente a alguien con permisos de desarollador?
Cesar Chavez Martinez retweeted
subdominio de entidad .edu.pe #Peru
con redirección a landing(.)candynetwork(.)ai
ya 3 semanas ahí.
en este caso tuve que guardarlo con otra herramienta
y si la vulnerabilidad del subdominio "revistas" es 2024 pero así de olvidado están los .pe
#SEOhacking #UPC #Peru
Cesar Chavez Martinez retweeted
La investigación inicial de Binance sugiere que el incidente de seguridad podría involucrar una laptop comprometida de un ingeniero de DevOps, lo que permitió que un atacante obtuviera acceso a un contenedor de servicio y realizara transacciones de retiro no autorizadas. No hemos encontrado evidencia de ninguna filtración de claves privadas de billeteras. Compartiremos un análisis técnico detallado post-mortem una vez que la investigación esté completa y los hechos estén completamente verificados.
El impacto total estimado se sitúa en alrededor de $6.3 mil millones. Hemos trabajado con socios de blockchain para congelar los activos afectados, con ~$3 mil millones congelados en cadena hasta ahora.
Binance cubrirá todas las pérdidas del fondo SAFU y de los fondos de la compañía. Los fondos de los usuarios están seguros. También publicaremos una Prueba de Reservas actualizada una vez que la remediación esté completa.
Como precaución inmediata, Binance ha:
- Suspendido temporalmente los depósitos y retiros mientras se completan las verificaciones de seguridad;
- Revocado la autorización de la dirección afectada;
- Involucrado a las fuerzas del orden y socios de inteligencia blockchain para rastrear y recuperar fondos.
Nuestros equipos están trabajando las 24 horas para resolver este problema de manera segura y exhaustiva. Estamos colaborando estrechamente con nuestros socios de las fuerzas del orden para confirmar la identidad de estos criminales y llevarlos ante la justicia.
Por favor, confíe solo en los canales oficiales de Binance para actualizaciones. No dude en contactar al Soporte al Cliente de Binance si tiene alguna pregunta adicional.
Cesar Chavez Martinez retweeted
🚨 BINANCE HACK UPDATE
Attackers reportedly used a jailbroken version of Claude in an alleged attempt to exploit Binance. 🤯
AI is becoming powerful enough to uncover vulnerabilities that have gone unnoticed for years.
The scary part? This could be just the beginning.
The same technology that helps defend systems can also be weaponized against them.
⚠️ The cybersecurity game is changing FAST.
Anulan elecciones en la UNI por Fraude Informático.
youtube.com/live/FoeMg_QdYug – at Santiago de Surco, Peru
Hoy 29 de Octubre 2026
Multiples subdominios de la Universidad Nacional de Trujillo se encuentran vulnerables por vencimiento de credenciales, actores de amenaza vulneraron y generaron contenido de seohacking en subdominio – at Santiago de Surco, Peru
ALERTA INFORMATIVA
Comparten presuntas credenciales de acceso a paneles de FORTINET de servidores del privados y gubernamentales, las claves pertenecen a forticloud, realice una breve verificación del origen de las mismas y encontre que pertenecen a 4 parnerts locales – at San isidro, Peru
Cesar Chavez Martinez retweeted
COMUNICADO | El IRTP informa lo siguiente.
Consulta la información oficial aquí: contrataciones.papaleonenper…
Cesar Chavez Martinez retweeted
‼️ Researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers and chained them to run code on iOS.
He says he got past Telegram's server-side checks, and the flawed code still ships in its apps.
Telegram said in March its servers validate every sticker.
Los incidentes informáticos no tienen fecha, no lugar fijo. Un problema que sólo pocos podemos solucionar.
Ahora rumbo a solucionar una situación – at Barranco, Peru
Vulneran el Banco de la Nación youtube.com/live/jIHx-HSeusI… – at Miraflores, Peru
Cesar Chavez Martinez retweeted
BREAKING: Claude Code found 12,847 photos of my face on my iPhone that I never took.
It looked like the phone was taking them every time I picked it up. From the club. From home. At a red light while I was driving. Almost every time I took the phone in my hands there was a frame.
They were sitting in a system cache with timestamps and location data. None of them were in Photos.
I plugged the phone into my MacBook and asked Claude Code to scan for any front-camera files that weren’t in my Photos library or Recently Deleted. It flagged Private/var/mobile/Library/Caches/com.apple.faceid. Over 12,000 files. Mix of infrared frames and regular front-camera images. Each one had a timestamp and GPS coordinates attached.
I started scrolling. Most were from the last 14 months. Then I saw one from four seconds ago. I was still looking at the folder.
Apple says the TrueDepth system turns the capture into a mathematical model inside the Secure Enclave and discards the image. On this phone the raw frames were still in the cache. Several of the processes that wrote to the folder belonged to system diagnostics. A couple of old apps with camera permission also had access to the same directory.
I turned off diagnostics sharing and revoked camera access from every app that didn’t need it.
If you want to check your own phone, plug it in, run a backup, and ask Claude Code to look for front-camera files outside the Photos library. The folder path above is where mine were.
Claude Code found 145,763 photos I permanently deleted from my iPhone.
Three years of deleted photos and videos still sitting in a hidden cache. Any app with file access can read them.
I plugged my iPhone into my MacBook to run a backup. Claude Code was doing the security audit from my last post and flagged a directory I wasn't even looking for.
PhotoData/Thumbnails. Over 146,000 files. Photos, videos, screenshots. Every single one was something I deleted.
Photos from 2023, 2024 and 2025. The ones I deleted the second after taking them. The ones I cleared from Recently Deleted. The ones I deleted three separate times because I wanted to be sure they were gone. All still there.
Passport photo I took for a visa application in 2023.
Screenshots of my bank app with full account numbers visible.
Private photos I sent someone and immediately deleted after a breakup.
Screenshot of my crypto seed phrase I took temporarily in 2022.
Photo of my ID and credit card I took to remember the numbers and deleted 5 seconds later.
Screenshots of my ex's private Instagram stories I saved and permanently deleted in 2023.
Some were full resolution. All organized by date going back to 2021.
When you delete a photo on iPhone, iOS removes it from your camera roll and Recently Deleted. It keeps a compressed copy in a Spotlight search index cache so your phone can find things when you search. Apple never clears it. Not after 30 days. Not after a year. Never.
They told you it was permanently deleted. It wasn't.
I checked which apps on my phone had Files and Folders access. 23 apps. Weather apps. QR code scanners. PDF readers. A flashlight app I downloaded in 2022. Any one of them could have been reading every photo I ever deleted this entire time.
Went from 23 apps to 3 in about two minutes.
Full step by step below. Takes 2 minutes. Save it so you don't lose it and send it to anyone with an iPhone.
Readers added context they thought people might want to know
The author is posting AI-generated engagement bait text with various random claims of deleted photos or videos on a daily basis.
1. x.com/coolerwave/sta… - "BREAKING: Claude Code found 12,847 photos of my face on my iPhone
2. x.com/coolerwave/sta… - "Claude Code found 214,856 photos and videos I permanently deleted
Cesar Chavez Martinez retweeted
🚨Cyber Alert ‼️
🇯🇵Japan - 𝗦𝗼𝗻𝘆 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀
Sony Network Communications confirmed a data breach affecting 2,585,481 So-net and plala customer records following unauthorised access on October 19, 2026.
The exposed information included personal details, account credentials and banking information.
Threat actor: Not specified
Sector: Telco
Data exposure (claimed): 2,585,481 customer records, including 54,401 email addresses and passwords, 16 bank account records and 7 password-reset notification records
Data type: Personal details, contact information, account IDs, email addresses, passwords, bank account records, password-reset notification records
Observed: Oct 27, 2026
Status: Confirmed
ESIX©: 7.17
Full details and impact assessment on
HackRisk.io
Cesar Chavez Martinez retweeted
🚨 Virtualine: An offshore hosting provider offering bulletproof hosting services has reportedly been seized by the FBI. There is no press release at this time.
Cesar Chavez Martinez retweeted
PHP just issued security update to fix a 9.2 (Critical) vulnerability related to Brotli (CVE-2026-111497). This affects Windows systems only.
Update to these versions if you're on Windows:
- 8.5.12-1
- 8.4.27-1
- 8.3.36-1
- 8.2.35-1
php.net/archive/2026.php#202…
Debido al último fallo de PHP el portal de actores de amenazas LEAKBASE ha sufrido un ataque de SeoHacking.
Ni los foros de actores de amenazas están libres de estas situaciones.
Cesar Chavez Martinez retweeted
❗️ Google's privacy policy no longer rules out ads based on your Gmail, Drive and Photos.
A 16 October update makes an exception if you let other Google services, like Search, access that data.
Search may process it to "personalize content, including ads", the policy now says.
Cesar Chavez Martinez retweeted
A developer left a PHP server vulnerable to the new PHP2Shell flaws and put a Bitcoin key on it, challenging hackers to steal the funds.
After around 19 hours, a researcher known as KillaBoi successfully exploited the vulnerability and extracted the private key.
The wallet contained around $2,000, but the key turned out to be linked to the wrong wallet, so the funds couldn’t actually be taken.
The dev still confirmed the exploit worked and paid the researcher the prize.
Cesar Chavez Martinez retweeted
UPDATE: UNIT 42 RETRACTS PHP2SHELL EXPLOITATION UPDATE
Unit 42 has retracted its Oct 23 update that tied a European government intrusion to PHP2Shell (CVE-2026-109618 / CVE-2026-109619). It says it is unable to confirm that initial access was associated with those CVEs.
The CVEs remain critical unauthenticated RCE (CVSS 9.2). Patching guidance and the ~22.6M exposed-instance figure still stand. Our Oct 24 “UNIT 42 CONFIRMS…” post is superseded by this correction.
unit42.paloaltonetworks.com/…
#DDW #PHP2Shell #Unit42 #CyberSecurity #ThreatIntelligence
