This is still funny and still rings true.

#JanelaRAT Delivery via PDQ [T1566.002] MSI (PDQ) ➜ PowerShell ➜ Defense Evasion ➜ JanelaRAT IoC: ssp3.rastreiouniao\.com Merl Ne0ne | Igal Germán Fernández

📄UNITED STATES OF AMERICA v. KAI WEST, a/k/a “IntelBroker,” a/k/a “Kyle Northern,” Defendant. darkwebinformer.com/content/files/…

🔥Actual DPRK instructional video on how to create their civil engineering profile(s). A guide provided for their DPRK team members! How helpful of them to make this. Thank you! ❤️ youtu.be/m4XmJUBorKU aptwhatnow Christophe Haubursin Narcass3 The Wall Street Journal DTEX Systems Mandiant (part of Google Cloud) CNBC

How tf did the FBI / NSA get a picture of North Korean IT workers working

⚠️ Anonymous sources confirm #Qilin #ransomware compromises Banco Nacional de Crédito (Banco Nacional de Crédito) in #Venezuela 🇻🇪, with ransom demands reaching $8 million. Follow this incident at #VenariX. Sign up free ➡️ venarix.com

The individual responsible for the Snowflake compromise has been extradited to the United States. In a bit of irony, he arrived on Independence day

POV: your Cybersecurity team securing your AI workloads

A few weeks ago, I was responding to a cybersecurity incident - $500,000 have been stolen from a #blockchain developer. The infected operating system was freshly installed, and the victim was vigilant about cybersecurity. How could this happen? New supply chain attack? [1/6]

Turns out you can just hack any train in the USA and take control over the brakes. This is CVE-2025-1727 and it took me 12 years to get this published. This vulnerability is still not patched. Here's the story:

Four more members of Scattered Spider were arrested July 10th, 2025. The NCA didnt publicly disclose the names of the individuals, only stating "two males aged 19, another aged 17, and 20-year-old female". KrebsOnSecurity was informed that one of the men arrested was Owen

I’m investigating the ongoing SharePoint compromises tied to #CVE-2025-53770 (#ToolShell). It’s crazy — I've observed a major tech company compromised. #ThreatHunting #CyberSecurity #SharePoint #ToolShell

North Korean(🇰🇵) malware developers are working in the Cyber Weapons folder.

Quck analysis of new #ToolShell payload observed by LeakIX: Paylaod is a .dll executed in memory. Sha-256: 3461da3a2ddcced4a00f87dcd7650af48f97998a3ac9ca649d7ef3b7332bd997 It collects System Info and the sensitive machine key. Sends back in response. Single Request takeover.

#BTMOB 🧠 Written in .NET 🛡️ Protected with NetShield Protector 🧩 211 overlays "Android Remote Administration, Control/Monitor/Manage your mobile anytime,anywhere" pastebin.com/vKPVLnPX Merl

Dejo publicadas varias slides de mi charla del año pasado: - Bases de los RATs 🇧🇷 - Cadena de ataque - Hunt ofensivo - Tools Link: github.com/merlax/Docs/bl…

I urgently seek a direct contact for IT Security at the Colombian Government. Anyone contacts there that can get shit done? Germán Fernández @

.Treasury Department just sanctioned Cartel de los Soles as a terrorist group. Run by the corrupt & contemptable Nicolás Maduro, it is responsible for trafficking drugs into the U.S. Help us take down Maduro and his cronies Diosdado Cabello Rondón & Vladimir Padrino López!

🏴‍☠️ ¡Mis charlas en DEF CON y BSides Las Vegas ya están en HackerTracker! 🇰🇵 Voy a analizar cuatro muestras de #malware norcoreano (¡una la descubrimos y bautizamos nosotros!). 💉 También voy a presentar un ransomware diseñado para encriptar bioimplantes. 👾 Y daremos dos

#Opendir 🇧🇷 Relacionado a investigación de Padawan Expone: - Credenciales - user+pass(cifrada) - Sites - Headers / Tokens de sesión + 12000 jsons + 1800 txt Dee Panels: hxxps://servidor2025.com/control/admin2/ hxxps://servidor2025.com/gpt.php