Amateur cyclist and swimmer. Security Researcher in Microsoft. Tweets are mine.
Switzerland
Joined February 2016
- Tweets1K
- Following331
- Followers1.1K
- Likes1.9K
Great analysis of the CaptiveCrunch campaign! Midnight Blizzard is weaponizing hospitality Wi-Fi infrastructure to manipulate travelers’ traffic and deliver fake updates, malware, and phishing. ultimately stealing credentials, browser cookies, etc.
aka.ms/captivecrunch
Pawel Partyka retweeted
🏴Attention Investors! Our Black Friday Special is LIVE! 🏴
Take pole position in the market with our biggest sale of the year. For a limited time, you can get 50% OFF EVERY ANALYSIS available on our website.
Tap the link below to claim your discount before the checkered flag drops! 👇
🔗 polepositioninvesting.com
Pawel Partyka retweeted
New feature live on my website! 🚀
My LLM-based solution now automatically allocates revenue from signed contracts and, for #Synektik, tracks quarterly deliveries of da Vinci and APOTECAchemo robots, linking them to both sales and recurring revenues from services and disposables.
In the pilot phase 3 Polish companies are covered:
$SNT.WA Synektik – in-depth analysis available on my website.
$PAS.WA Passus – small cap previously discussed in my blog posts.
$BAC.WA B-Act – micro cap with potential upside tied to Ukraine’s post-war reconstruction.
polepositioninvesting.com/co…
Great to see #MicrosoftSwitzerland opening most of AI jobs in Information Technology sector in Switzerland 🇨🇭 according to #HSLU AI Jobs report (July2024-June2025)
1
146
Unpopular opinion: Grok's Tasks feature works even worse than Perplexity's Tasks, when it comes to generating daily update on specify topics. Grok reports on older news which took place weeks ago and also misinterprets them.
1
63
Attackers are now using AI to obfuscate phishing - embedding payloads in fake SVG “PDFs.”
The twist? Microsoft’s AI caught it.
Verbose naming, over-engineered code & odd structure gave it away.
It’s officially AI vs AI in cybersecurity. 😀
microsoft.com/en-us/security…
1
83
Pawel Partyka retweeted
Microsoft has released a security update for SharePoint Server 2019 in addition to SharePoint Subscription Edition. We are actively working on updates for SharePoint 2016. See updated customer guidance and detection details:
Microsoft has released security updates that fully protect customers using SharePoint Subscription Edition and SharePoint 2019 against the risks posed by CVE-2025-53770, and CVE-2025-53771. These vulnerabilities apply to on-premises SharePoint Servers only. Customers should apply these updates immediately to ensure they’re protected.
We are actively working on updates for SharePoint 2016.
Full guidance and detection details are available in our blog: msft.it/6010sDzSE
🚨 Critical SharePoint RCE (CVE‑2025‑53770) 🚨
Microsoft confirms active attacks against on‑premises SharePoint Server—SharePoint Online (M365) isn’t impacted .
✅ No patch yet — interim fixes available. Protect your environment:
• Enable AMSI integration on SharePoint
1
1
276
⚠️ Mitigations include:
– Defender AV signatures “Exploit:Script/SuspSignoutReq.A” & “Trojan:Win32/HijackSharePointServer.A”
– Defender for Endpoint alerts for web‑shell installs, IIS anomalies & suspicious worker processes
1
130
Hunting tip: look for new spinstall0.aspx under …\16\TEMPLATE\LAYOUTS\ via advanced hunting queries
msrc.microsoft.com/blog/2025…
305
Pawel Partyka retweeted
Quick valuation of Text S.A. open.substack.com/pub/polepo…
Pawel Partyka retweeted
As part of our Secure Future Initiative and to further the security of our customers, ourselves, and the world, today we are introducing the most transparent security research event in history: The Zero Day Quest. This new hacking event will be the largest of its kind, with an additional $4 million in potential awards for research into high-impact areas, specifically cloud and AI.
Starting today, the quest kicks off with a research challenge where vulnerability submissions in targeted scenarios are eligible for multiplied bounty awards. Submissions can also qualify researchers for a spot in the onsite hacking event in Redmond, WA, in 2025. Learn more in our blog post: msrc.microsoft.com/blog/2024…
#ZeroDayQuest
🎯
Wciąż wiele redakcji mylnie informuje że dzisiejszy "komputerowy armageddon" to wina Microsoftu/Windowsa. Otóż ❌ NIE ❌
Padły tylko Windowsy w tych firmach, które były klientami CrowdStrike. Bo bug crashujący Windowsa jest w oprogramowaniu CrowdStrike, a nie w Windowsie.
Fakt, Microsoft miał dziś w nocy problem z usługami 365, ale to był brak dostępności niektórych apek chmurowych na niektórych obszarach, a nie brak możliwości włączenia komputera. Nic nie wskazuje żeby ten incydent był powiązany z fuckupem w CrowdStrike.
214
Pawel Partyka retweeted
🚨 Last chance! Today is the final day to grab your #x33fcon ticket. Don't miss out on this incredible event! Hear from @0gtweet @CaptnBanana @Flangvik @Idov31 @Jonas_B_K @MarcOverIP @MoritzLThomas @Oddvarmoe @SecEagleAnd1 @ShitSecure @_wald0 @craigbalding @danielhbohannon @dsec_net @ethicalhax @eversinc33 @klezVirus @lawsecnet @mbrg0 @mrexodia @mrgretzky @naugtur @pawp81 @rad9800 @thefLinkk @wlesicki @znanyproblem @zyn3rgy and more!
Get your ticket now: x33fcon.com/#!conference.md#…
