Ethical Hacker

You do not need an expensive setup to learn penetration testing. You can run serious security tools straight from your phone. TerminalTools is live. I am covering raw ethical hacking, mobile network analysis, and Termux environments. Full scripts and setup guides here: terminaltools.blogspot.com

A password manager helps you create and remember unique strong passwords for all your accounts. It's a key step in personal cybersecurity. #CyberSecurityTips #PasswordSecurity

Termux turns your Android device into a portable Linux environment. It's a great way to learn command-line basics and experiment with scripting on the go. #Termux #LinuxLearning #MobileComputing

Linux hardening? Essential. Ditch password auth for SSH keys; they're safer & stronger. Pro-tip: disable password login completely in `sshd_config`! Pair that with UFW's default deny rule for a robust perimeter. Lock it down! #LinuxSecurity #Cybersecurity #SSH

ASN: AS6167 Location: Tempe, US Added: 2026-10-05T20:49 #shodansafari #infosec

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls https://thehackernews.com/2026/10/webinar-how-to-stop-ai-driven-privilege.html #CyberSecurity #InfoSec

🛑 CVE-2026-104935 Ivanti Connect Secure KEV ✅ TL;DR: Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote una… https://cvesentinel.com/report/CVE-2026-104935?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel #infosec #CVE #vulnerability

CVE-2026-74043 - wazuh-manager The Wazuh manager (versions 4.1.1 through 4.14.7) lets anyone with the cluster key send specially crafted upload requests that include ".." in the filename. This lets the… Too many irrelevant or confusing CVEs? Use stackflag.com #wazuhmanager #wazuh #CVE #infosec

Use strong, unique passwords for every online account. A password manager makes this easy and secure. It's a fundamental step to protect your digital life. #CybersecurityTips #PasswordSafety

Stop sleeping on OSINT. Google Dorking finds exposed files, but Shodan maps the actual surface area of the internet. Pro-tip: Use "port:22" in Shodan to find publicly accessible SSH services. Don't leave your gates open! 🛡️ #OSINT #CyberSecurity #InfoSec

It may surprise people who started using Linux five years ago but some of the smartest people I have ever worked with preferred Windows or macOS even given the choice of Linux. Threat analysts, reverse engineers, network architects, you name it. It's not weird to be upset that it sucks now.

The most important software in the world isn't owned by a corporation. It's built in the open, tested by thousands, and given away. Linux, Wikipedia, the web itself. Open source didn't just survive capitalism. It improved it.

Linux governance exists, it just governs the substrate: maintainer tree, license, release cadence, one person who can say no. What we lack is runtime governance of the agent's authority. Bound the permissions, not the model. That part is engineering, and it

Aaron Powell on the @dot.net Blog: C# pattern that spots thread-pool starvation and captures a memory dump on Windows or Linux for debugging in @visualstudio.com. Worth reading the comments too, for production caveats. 🌐More Updates: dotnet.news 📖Read it here: devblogs.microsoft.com/dotnet/creat...

Stop manually parsing logs. Python’s `re` and `pandas` libraries can automate threat hunting in seconds, not hours. Pro-tip: Use `pathlib` for cross-platform log ingestion to avoid headache-inducing syntax errors. Code smarter, defend faster. 🐍 #Python #InfoSec

CVE-2026-23246 - linux Several Linux distributions, including Ubuntu 24.04, have released updates that close a security hole that could let an attacker run code on your server. The problem is… Too many irrelevant or confusing CVEs? Use stackflag.com #linux #canonical #Debian13 #CVE #infosec

CVE-2026-46325 - linux Several Ubuntu 24.04 kernel packages (including the standard, HWE edge, AWS, and Azure variants) contain a security weakness that could let an attacker gain access they… Too many irrelevant or confusing CVEs? Use stackflag.com #linux #canonical #Ubuntu1604LTS #CVE #infosec

Closes TODAY: DOE's bulk-power system RFI under EO 14421. Question B-7 asks how researcher vuln reports get triaged, fixed and communicated. www.govinfo.gov/content/pkg/... RSAC 2027 CFS closes Oct 15: rsaconference.com #VulnerabilityDisclosure #infosec

CVE-2026-46195 - linux Several Linux kernel packages, including bellsoft/linux-lts and several Canonical kernels, contain a flaw that could let an attacker take control of the operating… Too many irrelevant or confusing CVEs? Use stackflag.com #linux #canonical #Alpaquitastream #CVE #infosec

CVE-2026-43037 - linux Certain Ubuntu 24.04 Linux packages from Canonical had a security weakness that could allow a malicious user to obtain higher system privileges. This could affect… Too many irrelevant or confusing CVEs? Use stackflag.com #linux #canonical #UbuntuPro1404LTS #CVE #infosec

Pro-tip: Shodan isn't just for IoT. Use `http.html:"*sql.gz*"` to find leaked DB backups. Pair that with Google Dorks like `ext:sql "password"` for a lethal OSINT combo. Recon is 90% of the battle. 🎯 #OSINT #CyberSecurity #Shodan

thats not what linux is

"And while Linux has come a long way, it's still not ready for primetime." Completely meaningless thing people say sometimes. Requires zero engagement of neurons.

Stop scrolling through thousands of packets! Use Wireshark’s "Apply as Column" feature to instantly isolate source/dest IPs or specific flags. Makes spotting anomalies in a noisy capture way easier. Work smarter, not harder. 🕵️‍♂️ #Wireshark #NetSec

CVE-2026-77900 - azure app service for linux A function in Azure App Service for Linux does not require authentication, so an attacker on the network could run their own code on the service. This could let them… Too many irrelevant or confusing CVEs? Use stackflag.com #microsoft #CVE #infosec

Two Point Campus #Windows #Mac #Linux #SteamDeck <SEGA> が、期間限定セールで90%OFFの最安値388円になりました。レビュー4590件で非常に好評。

[Linuxiac] Flathub Reverses AI-Generated App Ban, Now Requires Disclosure #Linux #OpenSource

Bilkins' Folly #Windows #Linux #SteamDeck (Armor Games Studios) が、SteamDeck対応になりました。

Stop relying solely on automated scanners for OWASP Top 10. They miss the complex logic flaws that humans catch. Pro-tip: Focus your manual testing on business logic—that’s where the real bugs hide. #CyberSecurity #WebSecurity #InfoSec

Klassik: Der KDE-3-Desktop kehrt auf Plasma 6 zurück #Linux #Plasma #OpenSource linuxnation.social/de/blog/klas...

Testing for OWASP Top 10? Don't just scan—think like an attacker. Pro-tip: Automated scanners miss broken access control (A01:2021) 9 times out of 10. Manual logic testing is still your best friend. Don't rely on the tool alone. #CyberSecurity #OWASP

Claude Intros Sonnet 5.5 with Model-Switching Cybersecurity Safeguards #EdTech #EduSky #Teachers #Educators https://thejournal.com/articles/2026/10/08/claude-intros-sonnet-5-5-with-model-switching-cybersecurity-safeguards.aspx

🟠 CVE-2026-107300 - High (7.5) msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streamin... https://www.thehackerwire.com/vulnerability/CVE-2026-107300/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack

7 cryptography failures that broke public trust #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime

A decryptor is not proof of recovery. Today\047s guide covers 7 checks to vet ransomware recovery vendors - from payment transparency to containment evidence. https://www.hexon.bot/blog/ransomware-recovery-vendor-fraud #Ransomware #Cybersecurity #IncidentResponse

🚨 #BREAKING : 🇺🇸 🇨🇳 US CYBERSECURITY AGENCIES WARN CHINA-BASED CYBERSECURITY CO ENABLING THREAT ACTORS TO TARGET MANY CRITICAL INFRASTRUCTURE SECTORS WORLDWIDE -CISA STATEMENT X

Stop treating the OWASP Top 10 like a checklist and start treating it like a threat model. Pro-tip: Injection isn’t dead, it just evolved into complex API logic flaws. Focus on input validation at every layer. Trust nothing. #CyberSecurity #InfoSec

Pricing your bad days and how to build an economic model for security decisions 📖 Read more: www.helpnetsecurity.com/2026/10/08/i... #cybersecurity #cybersecuritynews #CISO #riskmanagement #cyberinsurance #infosec @qualys.bsky.social

The test site that holds your real customers. Somebody needed to test a change, so they copied the live customer database into a test site. That was months ago. The test site is still running, still reachable, and still full of real… Read the filing #testdata #staging #infosec #cybersecurity

CVE-2026-105841 - lrzsz The lrzsz file transfer program on Debian allows a remote sender to trick the receiving computer into executing any command by sending a specially crafted filename. This… Too many irrelevant or confusing CVEs? Use stackflag.com #lrzsz #uweohse #Debian12 #CVE #infosec

Everybody Wants Your Data. Is your phone spying on you? Just a few years back this was the common question as smart phone adoption spread across the globe. netlibsecurity.com/blog/everybo... #infosec #cybersecurity

Stop relying on generic searches. Use Google Dorking (`filetype:pdf` + sensitive keywords) to find exposed docs, then pivot to Shodan to map vulnerable IoT devices. Pro-tip: Use `has_archived:yes` in Google to find deleted pages. #OSINT #InfoSec

ASN: AS4766 Korea Telecom Country: KR City: Chungju State: North Chungcheong Scanned: 2025-05-06T10:22:37 https://computernewb.com/vncresolver/browse#id/33586635 #vnc #infosec

🚨New ransom group blog post!🚨 Group name: BYOD Post title: Gate | Crypto Exchange Organization: Gate Location: 🇭🇰 HK Sector: Finance #ransomware #cti #threatintelligence #cybersecurity #infosec

Every Wednesday, Signal Acquired tracks the cybersecurity developments worth your attention: active threats, exploited vulnerabilities, identity and cloud risk, AI, policy changes—and what to do next. New and free by 12:15 p.m. CT: https://rickgregson.media/CySecBrief #Cybersecurity #InfoSec

🚨New ransom group blog post!🚨 Group name: BYOD Post title: TMobile Organization: T-Mobile Location: 🇺🇸 US Sector: Technology #ransomware #cti #threatintelligence #cybersecurity #infosec

Stop scrolling through endless packets. Use display filters like `http.request.method == "POST"` to cut the noise instantly. If you’re manually searching for bad traffic, you’re doing it the hard way. Work smarter, not harder. 🕵️‍♂️ #Wireshark #InfoSec

ASN: AS60784 "Iradeum Trading" Ltd. Country: BG City: Straldzha State: Yambol Scanned: 2025-05-07T15:59:58 https://computernewb.com/vncresolver/browse#id/25391781 #vnc #infosec

🟠 CVE-2026-107219 - High (7.5) Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.... https://www.thehackerwire.com/vulnerability/CVE-2026-107219/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack