KS @ByteShell101

SOC Analyst . ambitious security person, AI Automation starksinfosec.com 127.0.0.1 Joined July 2016

Tweets

188
Followers

125
Following

645
Likes

2K

Steven Lim @0x534c

2 days ago

🚨 Upcoming Secure by Default Settings Changes for Exchange and Teams APIs Starting late October to November 2025, Microsoft will require admin consent for third-party apps accessing Exchange and Teams content via Microsoft-managed default consent policy. Finally!👏…

0 10 42 3K 28

Download Image

vx-underground @vxunderground

2 days ago

Dear Threat Actors, I need Robux. Give me Robux. I know you're all a bunch of fucking degenerates spending your drainer money on that fucking game. Don't be stingy. Found some bullshit Roblox game. There is Robux spent leaderboard. Someone spent over $100,000 in this game. I…

26 24 627 43K 49

vx-underground @vxunderground

3 days ago

cybersecurity

20 40 559 28K 44

Download Video

John Hultquist @JohnHultquist

a week ago

We are releasing details on BRICKSTORM malware activity, a China-based threat hitting US tech to potentially target downstream customers and hunt for data on vulnerabilities in products. This actor is stealthy, and we've provided a tool to hunt for them. cloud.google.com/blog/topics/th…

6 125 368 93K 162

Will @BushidoToken

a week ago

#ThreatHunting

2 31 166 19K 104

Download Image

vx-underground @vxunderground

3 weeks ago

The XOXO From Prague guy is back and he's compromising Lockbit ransomware group (again)

xoxofromprague @xoxofromprague

3 weeks ago

The XOXO From Prague guy is back and he's compromising Lockbit ransomware group (again)

20 58 304 102K 105

Download Image

5 32 395 47K 57

rekdt @rekdt

a month ago

Friendly reminder, having a CISSP doesn't make you a good job candidate for exactly the same reason as having a drivers license doesn't make you a good driver

48 62 806 54K 104

nc 🌐🕸️🐱 @thoughtfault

2 months ago

If you’re just stepping into cybersecurity, there are two brutal truths you must tattoo into your brain 1) No system is ever 100% secure. Once you accept this fact, you will be free. The name of the game is prioritization. If you're not sure, prioritize some more. 2) Jeffrey…

22 49 745 46K 124

Microsoft Threat Intelligence @MsftSecIntel

2 months ago

Update: Microsoft has released security updates that fully protect customers using all supported versions of SharePoint affected by CVE-2025-53770 and CVE-2025-53771.

Microsoft Security Response Center @msftsecresponse

2 months ago

Update: Microsoft has released security updates that fully protect customers using all supported versions of SharePoint affected by CVE-2025-53770 and CVE-2025-53771.

1 53 119 72K 31

2 184 417 59K 78

Microsoft Threat Intelligence @MsftSecIntel

4 months ago

Microsoft has continuously observed hybrid attacks leading to espionage, business interruption, and ransomware deployment that involve threat actors moving from on-premises environments to the cloud. Many organizations manage their resources across different realms, including…

3 27 73 11K 38

Download Image

Microsoft Threat Intelligence @MsftSecIntel

4 months ago

Microsoft and CrowdStrike are teaming up to create alignment across our threat actor taxonomies, mapping where knowledge of these actors align to enable security professionals to connect insights faster and make decisions with greater confidence. msft.it/6011SlOZ9

11 89 363 45K 90

Microsoft Threat Intelligence @MsftSecIntel

4 months ago

Microsoft has discovered worldwide cloud abuse activity by new Russia-affiliated threat actor Void Blizzard (LAUNDRY BEAR), whose cyberespionage activity targets gov't, defense, transportation, media, NGO, and healthcare in Europe and North America. msft.it/6011S9JpN

15 143 372 123K 143

Microsoft Threat Intelligence @MsftSecIntel

5 months ago

Over the past year, Microsoft Threat Intelligence observed the persistent growth and operational sophistication of Lumma Stealer, an infostealer malware used by multiple financially motivated threat actors to target various industries. msft.it/6010Sd2zi

3 54 147 14K 28

ANY.RUN @anyrun_app

6 months ago

🚨 Fake CAPTCHA Evolution: Homoglyphs & Unicode ⚠️ The user sees a #CAPTCHA that prompts to press a few buttons instead of just clicking a checkbox. Pressing the keys triggers code execution, leading to system compromise. 👨‍💻 Using #ANYRUN Sandbox, security teams can dive into…

2 47 200 15K 93

Download Image

Microsoft Threat Intelligence @MsftSecIntel

7 months ago

Microsoft Threat Intelligence observed a new and notable method used by the threat actor Storm-0249 for distributing the Latrodectus trojan, a malware loader designed to facilitate multi-stage attacks by downloading and installing additional payloads onto compromised devices.

4 103 260 26K 110

Download Image

Microsoft Threat Intelligence @MsftSecIntel

7 months ago

Microsoft Incident Response researchers uncovered a novel remote access trojan (RAT) that demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. msft.it/6013qVXAl

9 142 374 119K 134

Threat Insight @threatinsight

7 months ago

Proofpoint researchers have identified two active #accounttakeover (#ATO) campaigns, tracked as UNK_PanicPulse & UNK_MistyMirror, targeting #Microsoft365 accounts. Since March 2024, both clusters have affected 6K+ accounts across 1.4K+ orgs, using botnets & unique client agents.

1 13 44 11K 16

Microsoft Threat Intelligence @MsftSecIntel

7 months ago

The Kusto query language (KQL) query assistant capability in Security Copilot allows threat hunters to generate KQL queries for advanced hunting and reduces the time it takes to write a hunting query from scratch. msft.it/6017qR9Vb