Security Researcher. Tweets about cyber, defense and geopolitics. #AvGeek.
127.0.0.1
Joined December 2010
- Tweets9K
- Following3K
- Followers1.1K
- Likes3.1K
Pinned Tweet
Aquí les dejo el video de mi webcast con @sansforensics acerca de #DFIR #Linux y ataques tipo Fastcash en latino america! Comentarios buenos, críticas o abucheos son bienvenidos! youtube.com/watch?v=yDN8g_jW…
Enrique Vaamonde retweeted
It's disheartening. That millions of people have no idea what's being approved in Brussels today.
It's stunning. That it's the European People's Party pushing it through.
It's infuriating. That they're doing it by twisting parliamentary rules.
It's insulting. That they hide behind children to justify it.
It's outrageous. That tomorrow's absences will count as votes in favor. That anyone who skips the trip to Strasbourg is, without knowing it, voting yes.
It's cynical. That they picked the last session day before summer recess, when half the chamber has already packed its bags.
It's serious. That blocking the text requires an absolute majority of 361 votes, while pushing it through just takes an empty room.
It's telling. That when a Parliament loses a vote, the answer isn't to accept it, but to change the rules until it wins.
It's troubling. That end-to-end encryption, the last real frontier of privacy, now hinges on a calendar trick.
It's paradoxical. That child protection is the justification, while child-safety organizations themselves are asking for the legal gaps to be fixed first, not for the extension to pass as is.
It's telling, again. That the European Data Protection Supervisor himself warns that any renewal must avoid general, indiscriminate scanning, and that warning changes nothing.
It's opportunistic. That the text on the table today is the exact same one Parliament rejected months ago, not a comma changed, just dressed in different procedure.
It's a bridge. That this temporary extension, the 1.0 version, is precisely the vehicle keeping alive the debate over the permanent Chat Control 2.0, the one that would make scanning mandatory.
It's alarming. That the exception is no longer framed until tomorrow, but until 2028, two years of room to normalize what in March was called unacceptable.
It's reckless. That an urgent procedure meant for real emergencies is being used for the sole purpose of dodging the outcome of a previous vote.
And it is, above all, a warning. Of how easy it is to legislate over the privacy of 450 million people when you pick the right day for no one to be watching.
We keep going…
The facts are shocking. Online child sexual abuse has become an epidemic in the digital world.
In 2010, there were 1 million reports of child sexual abuse material. Today, there are 20 million.
AI-generated Child Sexual Abuse Material (CSAM) has surged by 1,000% in just one year.
And 60% of this material is hosted in Europe, making our continent a global hotspot.
The EPP Group wants to change this, and that’s why we will support important legislation to combat Child Sexual Abuse Material (CSAM).
Watch and learn more from @ManfredWeber⤵️
#CSAM
Readers added context they thought people might want to know
NCMEC CyberTipline reports of suspected CSAM in 2010 were slightly more than 100,000, not 1 million. researchgate.net/figure/Yearly-… missingkids.org/cybertiplineda…
Enrique Vaamonde retweeted
🇪🇺 The EU just passed Chat Control 1.0 in Brussels.
Platforms can now scan your private messages again, officially "voluntary," in practice blanket surveillance.
Here's the democratic scandal: 314 MEPs voted against it. Only 276 voted for it.
It passed anyway... because an absolute majority of all MEPs was required to reject it, not just a majority of those present.
More people voted no than yes. It still passed.
Pushed through on an urgent procedure just before summer recess, when absences are highest and attention is lowest.
This is how rights disappear folks. Not in one dramatic moment, but in procedural fine print, on a slow news day, while everyone's looking at Tehran.
Source: @Fidias0 / Writer: Oliver
Enrique Vaamonde retweeted
🇪🇺 Chat Control has passed 😔
They can and will now legally scan any person's messages, emails and photos you send without a warrant
The way they passed this law when the majority of the European Parliament was against it will shock you:
They waited until most EP members were on holiday so only a few were present and then created an "urgent" vote for it to pass it through
There's nothing democratic about any of it and big powerful forces are behind this that can manipulate the EU for whatever they want
Democracy in Europe died a bit today 😔
Enrique Vaamonde retweeted
Napoleon speaks ... an entire continent enslaved to the whims of an unelected bureaucrat who does as she's told by our overlords. What nonsense, masquerading as a retail champion when all you're actually doing is exercising the protectionism you criticise others for.
Enrique Vaamonde retweeted
So do you believe that adding 3 euro to every parcel will resolve the compliance issue with EU safety standards? Everything you guys touch is getting more expensive, creating issues to Europeans and barriers to the free market. This EU must fail and sooner or later will fail, leaving us Europeans like the new Africans of the world.
Enrique Vaamonde retweeted
Topo Mayor México: “llegó una muchacha de una TV local y me dijo que tenía que decir esto y agradecer a tu presidenta”
“mira mija te voy a decir una cosa tengo 80 años y no me vas a venir a decir que decir, no eres jefa, yo no soy político, soy rescatista” “la mandé al diablo”
Enrique Vaamonde retweeted
Mi amigo Daniel Echeverría tomó esta foto entre muchas otras que ha tomado en La Guaira
La imagen habla por sí sola:civiles trabajando mientras el de uniforme se queda de brazos cruzados y con los guantes blanquitos
Que Dios los perdone, porque el pueblo jamás podrá
Enrique Vaamonde retweeted
¿Frustrados? ¿Quiénes? ¿Y por qué?
¿Aceptarían ellos el veto de una dictadura para volver a su país?
¿Mientras sus compatriotas agonizan bajo los escombros?
@MariaCorinaYA tiene derecho a regresar a Venezuela.
Es su sitio. Hoy más que nunca.
Para acompañar a su pueblo.
Para honrar a sus muertos.
Y @POTUS y @SecRubio tienen la responsabilidad urgente de garantizarlo.
Senior US officials frustrated by Machado bid to return to Venezuela after quakes, White House official says reut.rs/4vsHPpc reut.rs/4vsHPpc
We Venezuelans are frustrated with these Senior US officials that insist on keeping Delcy Rodriguez, her sycophant brother, and the criminal Diosdado Cabello in power. This is a HUGE mistake @SecRubio
Senior US officials frustrated by Machado bid to return to Venezuela after quakes, White House official says reut.rs/4vsHPpc reut.rs/4vsHPpc
Enrique Vaamonde retweeted
¿Cómo van a reconstruir Venezuela los mismos que la saquearon?
¿Cómo van a salvar vidas venezolanas los mismos que las segaron? ¿Los que torturaron, reprimieron y asesinaron?
Delcy Rodríguez.
Jorge Rodríguez.
Diosdado Cabello.
Vladimir Padrino.
El terremoto más letal fueron ellos.
Enrique Vaamonde retweeted
Los miserables del régimen llegaron
con la tragedia de 1999,
Y Dios permitirá que se vayan con esta.
Enrique Vaamonde retweeted
Alexandre Borges has published over 700 pages of free security, malware and vulnerability research.
A complete Malware Analysis Series covering Windows, macOS, iOS, Linux and shellcode. An Exploiting Reversing Series covering Windows kernel exploitation, Hyper-V, Chrome, and a three-part deep dive on CVE-2024-30085.
No paywall. No course. Just research. Free as in beer.
exploitreversing.com
Author: @ale_sp_brazil
#ReverseEngineering #MalwareAnalysis #InfoSec
Enrique Vaamonde retweeted
Microsoft:
“The AI agent only sees what you allow it to see.”
Enterprise admins:
“Excellent.”
opens SharePoint permissions
“Oh.”
The AI rollout isn’t discovering company knowledge.
It’s discovering 15 years of exceptions, inheritance, temporary access, break-glass accounts and things nobody wanted to touch.
The context window was never the scary part.
Enrique Vaamonde retweeted
🚨 CYBERINTEL ALERT: TOTAL COMPROMISE OF THE NATIONAL IDENTITY CORE – SAIME, SAREN, AND BORDER ID SYSTEM [STATUS: DATA DISASTER / CRITICAL] 🇻🇪
VECERT Intelligence monitoring systems have detected the largest data exfiltration in Venezuela's recent history. The threat actor group L4TAMFUCKERS, led by GordonFreeman, has announced the breach and massive exfiltration of the databases belonging to SAIME, SAREN, and the Border ID system.
🏢 Affected Entities:
SAIME (Administrative Service for Identification, Migration, and Foreigners).
SAREN (Autonomous Service of Registries and Notaries).
Border ID (Border mobility system).
👤 Threat Actors: L4TAMFUCKERS (GordonFreeman, Izanagi, YoSoyGroot).
📂 Data Volume: Terabytes of exfiltrated information.
📅 Report Date: May 8, 2026.
📊 Inventory of Exfiltrated Assets
SAIME (Biographical Database – 35.2 Million Records):
Contains identity metadata for practically the entire population holding a national ID card.
Data: National ID number, full names, gender, date of birth, profession, and system registration date.
SAREN (Birth Certificates – 13.4 Million Documents):
Exfiltration of 6 Terabytes of legal documents in PDF format.
Compromise of the nation's civil core: Records establishing filiation, inheritance, and marital status.
Border ID (92,000 Detailed Records):
Complete database including: Foreign ID numbers, email addresses, passwords, phone numbers, and registration dates. 📊 Technical Analysis of the Attack (TTPs)
The L4TAMFUCKERS group exploited structural flaws within the ministerial interconnection architecture:
API Abuse and Blind Trust: The attackers compromised an entry point and utilized internal authentication keys to query other systems, exploiting the fact that the servers automatically trusted one another without requiring additional verification (API Chaining).
Identifier Manipulation (IDOR / BOLA): By manually altering IDs within network requests, the system delivered citizen records without requiring prior authorization.
Exfiltration via Official Tunnels: They utilized the very same government data channels to extract terabytes of information, thereby ensuring that the outbound traffic appeared legitimate and evaded Intrusion Detection Systems (IDS).
🛡️ Emergency Recommendations
🔒 For Citizens: It is recommended that you immediately change your personal email passwords and enable MFA (Multi-Factor Authentication). Remain extremely vigilant regarding any attempts at telephone or digital extortion that utilize specific details regarding your identity or family members.
🏛️ For Institutions: It is imperative to revoke all current API keys and implement a Zero Trust architecture.
Monitor:
analyzer.vecert.io
#CyberSecurity #Venezuela #SAIME #SAREN #DataBreach #L4TAMFUCKERS #IdentityTheft #VECERT #CyberAlert 🇻🇪🛡️⚠️🚨📂
Enrique Vaamonde retweeted
Venezuela no necesita ser “arreglada” o "mejorada". Venezuela necesita ser RECONSTRUIDA.
Perdimos más del 70% de la economía, 25% de la población.
Eso es "in-arreglable" gradualmente. Eso no se "mejora". Eso se rehace desde cero.
📉 Al Colapso histórico
📈 Se responde con Recuperación histórica nunca vista
No estamos hablando de crecer 5%, normalmente, poco a poco… como te lo repiten los de siempre.
Estamos hablando de multiplicar el país. Cuadruplicar, sextuplicar, multiplicar por 20.
Esto no es política. Es ingeniería económica a escala nacional.
Los planos del nuevo país, un #Blueprint real. Financiable. Ejecutable.
👉 venezuelafirstworld.com
Léalo. Y si no sirve… destrúyalo con argumentos.
