MUHAMMAD @muhammadhacker_

Interested in all things #AI,#RedTeam,#quantum The ghost in the shell Joined September 2014

Tweets

1K
Followers

553
Following

5K
Likes

5K

4n6lady @4n6lady

a year ago

🎉GIVEAWAY⭐️ I am giving away 1 print copy and 5 e-book copies of Mastering AWS Security! 🛡️☁️ 📚Book: packtpub.com/en-ca/product/… Enter before Tuesday, September 03, 2024 at 6PM EST by following, commenting, and RT! @PacktPublishing Author: linkedin.com/in/laurentm

127 163 450 50K 95

Download Image

CISA Cyber @CISACyber

a year ago

🚩Palo Alto Networks has released workaround guidance for a command injection vulnerability (CVE-2024-3400) affecting PAN-OS versions 10.2, 11.0 & 11.1. Apply workarounds asap 👉 cisa.gov/news-events/al…

16 102 169 33K 22

Kostas @Kostastsale

a year ago

Regarding the xz backdoored binary, see the one-liner below to check the version you have installed. **I wouldn’t suggest folks running the malicious binary with -v option🫠🫣 for xz_p in $(type -a xz | awk '{print $NF}' | uniq); do strings "$xz_p" | grep "xz (XZ Utils)" ||…

SANS.edu Internet Storm Center @sans_isc

a year ago

18 189 509 269K 202

11 183 752 175K 513

Andy Greenberg (@agreenberg at the other places) @a_greenberg

a year ago

Security researchers found flaws in Saflok hotel keycard locks, used on 3 million doors in 13,000 properties worldwide, that can be used to open them in seconds. The lockmaker Dormakaba has been working on a fix but told them only 36% of locks are updated. wired.com/story/saflok-h…

4 114 275 87K 63

Max Rogers @MaxRogers5

a year ago

Earlier someone asked if @HuntressLabs hires associate/junior levels: We love to hire folks who climb the leaderboards of hack the box and blue team labs online. A lot of our interview focuses on basic DFIR so I recommend consuming @13CubedDFIR content fanatically. Read and…

7 70 290 35K 240

Microsoft Threat Intelligence @MsftSecIntel

a year ago

Phishing campaigns, including ones related to known phishing-as-a-service (PhaaS) platforms such as Tycoon and NakedPages, are taking advantage of the tax season in the US for social engineering.

4 76 186 32K 48

Download Image

Google DeepMind @GoogleDeepMind

a year ago

Eight years ago, #AlphaGo made history by becoming the first AI to defeat world champion Lee Sae Dol in the game of Go. ⚫⚪ He spoke to @googlekorea to share his reflections on this milestone match and how it showed the potential of AI to the world. ↓ dpmd.ai/3Pplkyk

62 99 473 139K 52

Rob Fuller @mubix

a year ago

Intern, Junior, Senior, Principal, Sr Principal, Staff, Master, Artisan. These are the levels I believe best suites most of the fields of study in Cyber Security. I worked with @carnal0wnage to put some of this together one day and wanted to share my thoughts on it:

7 18 154 27K 85

Snort 🐷 @snort

a year ago

Over the past year, we have been prototyping and building a new machine-learning approach to detection, and today are open-sourcing a new detection engine for Snort called "SnortML." This is included in the latest Snort 3 release (version 3.1.82.0) cs.co/6019kkLdB

22 94 234 23K 61

Download Image

GCHQ @GCHQ

2 years ago

Version 10 of CyberChef is ready for exploring. Developed by GCHQ's very own software engineers, explore the latest features of the cyber Swiss Army knife ⬇️ github.com/gchq

5 44 135 15K 23

Download Image

Stephen Sims @Steph3nSims

2 years ago

Want to help aspiring security professionals from areas where the cost of living is extremely high, or those from marginalized communities? Consider a membership with the Off By One Security channel, and take a look at our goals and the benefits! youtube.com/@OffByOneSecur…

2 11 41 7K 10

Josh Stroschein | The Cyber Yeti @jstrosch

2 years ago

🔥 icymi - @Google has released #magika, an "AI powered file type detection tool that relies on .. deep learning" github.com/google/magika Curious what everyone's results have been if you're using it. I've done limited testing and so far looks promising :)

4 17 49 4K 16

Download Image

Deutsche Telekom CERT @DTCERT

2 years ago

🚨 On February 26th and 27th Telekom Security and Bayern-CERT observed threat actor #TA577 phishing campaigns. This time the actor is not spreading malware, but apparently uses NTLMv2 handshakes to steal user credentials/hashes. 🧵1/7

6 95 251 83K 97

John Hammond @_JohnHammond

2 years ago

CISA adds #ScreenConnect CVE-2024-1709 authentication bypass to the KEV, deadline Feb 29th.

3 29 150 30K 17

Download Image

Nicolas Krassas @Dinosn

2 years ago

Tool to remotely dump secrets from the Windows registry github.com/jfjallid/go-se…

2 66 239 17K 114

Drew @hoodoer @hoodoer

2 years ago

CSP causes app pentesters to curse heavily, which is a good thing. You should be using these.

TrustedSec @TrustedSec

2 years ago

CSP causes app pentesters to curse heavily, which is a good thing. You should be using these.

0 18 76 9K 15

2 2 13 1K 2

Jack Rhysider 🏴‍☠️ @JackRhysider

2 years ago

It's time!

Darknet Diaries @DarknetDiaries

2 years ago

It's time!

19 50 205 48K 18

Download Image

20 52 408 29K 7

ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler

2 years ago

After a few weeks of teasing, I'm happy to officially announce the launch of Fabric. Fabric is an open-source framework for augmenting humans using AI. 📄Tons of prompts for real-world use cases 🧱A free AI server for hosting your own APIs …much more! github.com/danielmiessler…

8 65 486 109K 145

Rob Fuller @mubix

2 years ago

You should take some time today and read all of @assume_breach 's post -> assume-breach.medium.com/im-not-a-pente… I could probably pick a few parts that I could counter on semantics but it's a fantastic post of the reality of pentesting. Forward this to your friends and students.