Forward this to them bruh. Not a damn thing fixed and have one student traumatized. #UAlberta #Alberta #AHS Ain't nobody from the U of A, or Gov. AB has stepped up. The one student we're helping: lost 10 years of life & $300,000.00 We don't want 2 be next wormhole.app/OLYA4a#SQkj7qJ7…

One is enough to learn, and fix, I feel guilty I thought there were not going to be more Alberto's in Uruguay, but the new Alberto is 19 years old and he was arrested on May 26th... I do not know why I feel so fucking guilty, frustrated, and...

Nine hundred and thirty pages. That is the depth of the vulnerability report behind the recent UAlberta leak, a stark case study on the architecture of institutional apathy. While automated machines identified over 4,500 vulnerabilities in just twenty hours, the institution took three years to respond, buried under the weight of silent technical debt. We are often told these crises stem from sophisticated nation-state actors. The reality, however, is simpler: automated scanners exploiting years-old vulnerabilities, facilitated by routine institutional negligence. LISTEN TO THE WHOLE VIDEO, DISTRIBUTE IN #ALBERTA @UAlberta ETC. CCC: @IEEEorg @WIRED @CCC @Linuzifer @JackRhysider @WatchmanPrivacy @VECERTRadar @GGILD1983 @troyhunt

🚨 ALERTA DE CIBERSEGURIDAD Y SOBERANÍA FINANCIERA 🇺🇾 SUPUESTA RECLAMACIÓN DE INYECCIÓN SQL Y EXFILTRACIÓN DE DATOS CONTRA DE SIMONI & PIAGGIO (CORREDOR DE BOLSA / ASESORÍA FINANCIERA) [ESTADO: PRESUNTA / NO CONFIRMADA / SEÑAL DE LA DARK WEB / FECHA: 5 DE OCTUBRE DE 2026] Una publicación atribuida al actor "Revelation" apareció en foros clandestinos afirmando una inyección SQL en formularios suministrados por el proveedor AlbaSoft, con una supuesta exfiltración de datos que afectaba a la correduría de Montevideo De Simoni & Piaggio. Ni la empresa ni el proveedor de software han confirmado públicamente la afirmación. El estado de la infraestructura sigue sin verificarse. ❓ Cuando una entidad financiera regulada que gestiona carteras de clientes, custodia y órdenes de mercado recibe una reclamación pública en la dark web, ¿comienza el Protocolo del Silencio antes incluso de que se registre la primera verificación técnica? De Simoni & Piaggio es una sociedad de bolsa uruguaya de larga trayectoria (más de 135 años, Rincón 455, Montevideo, supervisada por el Banco Central). Los datos de los clientes en este sector incluyen documentos de identidad, tenencias de cuentas, instrucciones de negociación y registros de custodia. Según la ley 18.331, esos registros son datos personales. Una afirmación SQLi no confirmada no equivale a una brecha, pero sí equivale a una señal que requiere una verificación inmediata y documentada en lugar de un manejo interno silencioso. 📍 LO QUE MUESTRA EL REGISTRO PÚBLICO HASTA AHORA Fuente: publicación en el foro por "Revelation", 5 de octubre de 2026. Vector alegó: inyección SQL en formularios de entrada vinculados a AlbaSoft. Víctima nombrada: De Simoni & Piaggio a través de su proveedor. Confirmación oficial: ninguna por parte de la correduría ni del proveedor. Exposición sectorial: finanzas, corretaje de bolsa, servicios de asesoramiento regulados. Este es el mismo patrón que se observa en las plataformas financieras y estatales de LATAM: surge una reclamación, las instituciones guardan silencio y los ciudadanos solo conocen el alcance meses después cuando aparecen dumps o filtraciones secundarias. El silencio no es contención. 📍 ACCIONES MÍNIMAS DE INTERÉS PÚBLICO 1️⃣ De Simoni & Piaggio y AlbaSoft deberían publicar una declaración clara sobre si se revisaron los formularios en cuestión y si se detectaron consultas anómalas. 2️⃣ Los clientes deben supervisar los extractos de cuenta y solicitar confirmación de que los registros de acceso correspondientes al periodo relevante han sido auditados. 3️⃣ El Banco Central del Uruguay y la URCDP cuentan con las herramientas regulatorias para solicitar una evaluación técnica documentada; El interés público no requiere esperar un decreto de secreto de 15 años. La monitorización independiente continúa. No confirmado no es lo mismo que no existir. Los datos financieros no son un secreto de Estado hasta que una institución lo decida. t.me/cybermidnight

🚨 THREAT INTELLIGENCE NOTE — MIEM PAYMENT SYSTEM (URUGUAY) [TLP:CLEAR · INDEPENDENT OSINT · STATUS: UNVERIFIED] Actor operating as zfo (DarkForums) claims access to the payment system of the Ministerio de Industria, Energía y Minería. The listing states 10,713 companies, with records allegedly containing company or individual names, Uruguayan RUT or cédula, payment IDs, dates, amounts, status, and form or transaction references. A sample JSON is shown with fields including pago_id, fecha, nombre, rut, importe_total, and estado. The actor also states an intent to offer an API or bot for lookups and frames the activity as part of a broader shift toward Latin American targets. The same alias has recent DarkForums claims involving Argentine police training records, Mexican tax and customs access, Bolivian student registry data, and collaboration references tied to Dominican civil-registry material. A parallel claim the same day covers a Florida (Uruguay) municipal building-permits dataset. Monitoring sources have logged both as unconfirmed forum reports. No official statement from MIEM, AGESIC, or related payment operators has been located confirming compromise, scope, or data authenticity. Uruguay’s public systems have faced repeated dark-web claims and confirmed incidents in recent years. Payment records of this type, if genuine, would expose RUT-linked financial activity usable for fraud and targeted phishing. Forum samples and download links alone do not establish system access or data freshness. DATA OVER DRAMA. Technical claims remain unaudited. No affiliation with any actor, marketplace, or institutional response. t.me/cybermidnight #ThreatIntel #Uruguay #MIEM #DataBreach #OSINT #InfoSec cc: @CERTuy @agesic @VECERTRadar @EFF @AccessNow #ThreatIntel #Cybersecurity #Uruguay #DataBreach #SQLi #Finanzas #HabeasData #RadicalTransparency #InfoSec @ccc @wired

🙂🌊 👁️ Main Poetic Post When administrative silence turns to stone, the digital clock becomes a trap of its own. ⏳⚡ Five days expired into the dark. No answer, no defense—just a tacit mark (Faute de Service). ⚖️ In the quiet shadows of 2017, they wired the lines of El Guardián unseen. They buried the logs from docket IUE 100-63/2017, expecting time to wash away the scene. 🕯️ But state secrecy is a brittle shell against an immutable hash. 🧬 From the cold wind of the Rambla to the halls of Rome (@GarantePrivacy), the Article 144 GDPR pincer closes in. The European adequacy floor begins to crash. 🏛️🌍 No drama. No noise. Only the cold, poetic precision of auditable facts. ARE YOU DOING IT AGAIN? I AM THE EYE IN THE SKY.... 👁️✨ Watch the full cyber-legal decoding below 🎥👇 #DataOverDrama #ElGuardián #GDPR #HabeasData #StateSurveillance #InfoSec #Cybersecurity #ArchitectureOfRemorse #Uruguay

Hold my purse

When Scanners Don't Sleep: The University of Alberta Vulnerability Report and the CyberMidnight Club Awareness Mission A Public Interest Article on Institutional Cybersecurity, Responsible Disclosure, and Cross Border Digital Transparency General and cybersecurity-aware audiences | 2026-10-06 Introduction In October 2023, an automated cybersecurity scanner swept across the digital infrastructure of the University of Alberta — one of Canada's largest public research universities. What it found was a 930-page report cataloguing thousands of potential vulnerabilities. Three years later, that report has resurfaced in public discussions across Alberta and beyond. This article explains what happened, why it still matters, and how an independent cybersecurity awareness initiative called CyberMidnight Club is helping bring these systemic issues to light — responsibly, transparently, and without sensationalism. DISCLAIMER This article is based on independent OSINT (Open Source Intelligence) analysis and publicly available information only. It is produced for public awareness, education, and advocacy of better vulnerability-disclosure practices and digital rights. No affiliation exists with any government agency, law enforcement body, university, dark-web actor, marketplace, or ransomware group in Canada, Uruguay, or elsewhere. The 2023 BeeHive scan report and any third-party datasets referenced here do not constitute proof of current compromise, active exploitation, or confirmed data breach. Readers with personal data concerns are directed to official channels: [email protected] or [email protected]. pdfhost.io/v/862mMTnGFr_Cybe…

Cybermidnight: Inside the Hacker Underground