@eserror

Offensive Security & Web3 Security Researcher

eserror.xyz
Joined September 2010
  • Tweets1.7K
  • Following192
  • Followers192
26Media
Si piensas que las filtraciones de datos son un accidente, resultado de un ataque complejo, podrías estar equivocado. Más en 👇 eserror.xyz/posts/2025/filtr…

Tus datos han sido filtrados | educacion.gob.ec | Exploited Logic

Ninguna inyección SQL fue necesaria, solo un apellido y el checkbox indicado para explotar el registro de títulos de bachilleres del Ecuador

eserror.xyz
5
2
9
1,154
He venido usando la aplicación de @TakenosApp para hacer algunos pagos de forma local en Colombia y puedo decir que resuelve.
2
3
208
⚠️ TARGETED PREVENTIVE ALERT 🇪🇨: ALLEGED DATA EXFILTRATION FROM THE ECUADORIAN HEALTHCARE SYSTEM 6.6M patients [STATUS: UNCONFIRMED; VISIBLE EVIDENCE EXISTS BUT NOT YET VERIFIED / SOURCE: TELEGRAM CHANNELS / DATE: SEPTEMBER 18, 2026] Centralized cyber-intelligence monitoring has detected a post on Telegram "News" channels in which the threat actor "jarol488" claims to possess databases belonging to the Ecuadorian Healthcare System. To demonstrate the authenticity of the breach, the attacker has made a sample of 10,000 records publicly available. It is strictly noted that this has not been officially confirmed; although visible evidence exists— 🛡️ TECHNICAL PREVENTIVE CONTAINMENT RECOMMENDATIONS (SOC / CSIRT / FRAUD) Sample Forensic Analysis (Threat Hunting): Cyber-intelligence teams and EcuCERT must securely download the sample file (within a sandbox environment) from the provided link. Analyzing the data headers and structure will allow for the immediate identification of the specific database from which the leak originated (e.g., IESS AS400 system, MSP portal, etc.). 🖥️ CENTRALIZED THREAT MONITORING SYSTEM Intelligence System: analyzer.vecert.io Monitoring Console: monitor.vecert.io #Cybersecurity #ThreatIntel #DataLeak #Ecuador #jarol488 #EcuadorianHealthcare #IESS #MSP #DataBreach #FinancialFraud #IdentityTheft #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #AllegedIncident #VisibleEvidence #SecurityAlert
5
111
28
255
70,419
Qué miedo tener que depender del @BancoPichincha un sábado en la noche. Fácilmente es el banco que más se cae en Ecuador y vale la pena cambiarlo.
51
We’re also introducing Gemini 3.8 Flash Cyber, our most capable cybersecurity model. It shows frontier-level performance in discovering vulnerabilities and patching them at scale, with Flash-level speed & pricing. That includes achieving 86.2% on the important CyberGym industry benchmark, plus 47.2% on CWE-Bench for patching. We saw a 70%+ success rate in discovering vulnerabilities across 20 programming languages on our internal benchmark.
338
395
88
4,541
417,293
Even though I really like Rust, to this day I still don't understand why programmers like to create programming languages with syntax that's hard to read/learn.
Antonio Sarosi
@antoniosarosiAug 30
Rust's "ugly syntax" criticism is unfair. It often comes from C programmers or high level Python/Ruby/TS devs. They deliberately ignore that C is extremely minimal, it has no modules, no packages, no generics, no interfaces, no RAII, no iterators, not even methods on structs. To compensate, many C codebases rely heavily on custom macros or even C code generation from ad-hoc DSLs. Neither of those are particularly "beautiful syntax". How would C actually look like if it had at least the most basic features Rust has? On the other hand, comparing Ruby or Python to Rust is also unfair, because they don't even play in the same league. Python has no pointers, no references, no need to manage memory at all, heck your objects are not even real objects but bloated C objects instead. Your stack is not even a real stack, it's a bloated virtual stack in a C VM. So obviously, a language that offers lower level control will be more complex, and the syntax will one way or another reflect that. C++ developers are not even allowed to speak of ugly syntax, so I will not take them seriously.
193
La @ANT_ECUADOR pretende ser juez y acusado al mismo tiempo, y adivina qué? la única evidencia que tienen para demostrarte que no sucedió, es decirte que no hay evidencia.
ANT Ecuador
@ANT_ECUADORApr 28
🚨 ATENCIÓN Activamos nuestros protocolos de seguridad y realizamos verificaciones técnicas. 🔐 No hay evidencia de vulneración a los sistemas institucionales durante la actual administración. ⚠️ Infórmate por canales oficiales y no accedas a enlaces desconocidos. ¡Tu seguridad digital también es prevención! #ElNuevoEcuador
45
Claude code source code has been leaked via a map file in their npm registry! Code: pub-aea8527898604c1bbb12468b…
3,265
7,313
5,313
47,729
35,903,440
Introducing Starknet Academy 🎓 The official learning hub built for developers who want to master Cairo and build on the most powerful ZK stack.
11
28
15
136
11,113
Mastering Ethereum (2nd Edition) — the go-to guide for Ethereum newcomers, builders, and even auditors. If you want to truly understand how Ethereum works under the hood, this is where you start. 📖 Read it for FREE: github.com/ethereumbook/ethe…
7
26
1
174
6,577
Meet VulnLLM-R-7B: a specialized AI that reads code like a security expert. It's trained to spot vulnerabilities before they become breaches. This isn't just another chatbot, it's a digital security guard for your codebase. The community is buzzing because it makes security accessible.
24
265
16
1,635
120,425
New Engineering blog: We tasked Opus 4.6 using agent teams to build a C compiler. Then we (mostly) walked away. Two weeks later, it worked on the Linux kernel. Here's what it taught us about the future of autonomous software development. Read more: anthropic.com/engineering/bu…
841
2,457
1,368
21,048
8,536,589
Guy retweeted
ollama
@ollamaJan 24
ollama launch is a new command in Ollama 0.15 to run Claude Code, Codex, Droid and OpenCode with Ollama! GLM 4.7 Flash is now optimized to use much less memory for longer context lengths (64k+). Need additional hardware? Ollama's cloud offers GLM 4.7 with full precision and context length.
104
362
55
2,968
208,247
AI Built for Law Enforcement
41
256
51
2,512
415,769
CVE-2026-24061: GNU InetUtils telnetd Argument Injection Authentication Bypass. Un atacante puede saltar la autenticación y convertirse en root simplemente ejecutando un solo comando. Más información 👇 nvd.nist.gov/vuln/detail/CVE…
123
Being in cybersecurity and not going to gym should be illegal.
53
119
10
3,771
192,775
Hot Update!!!🥳 See you Today! 🤖 The $250K Bug: AI Security Research Meets Bug Bounties Kicking off 2026 with two game-changers in Web3 security. Gabriel Balko, a top Security Researcher (Known as @ControlZ_1337), recently earned a $250,000 bug bounty - the highest ever awarded for a vulnerability discovered using AI. @MitchellAmador, CEO of @immunefi (The leading Web3 bug bounty platform), joins to share insights on how bug bounty programs work and what this AI breakthrough means for the industry. What happened?  • AI agent found a critical vulnerability (preventing $500M+ in potential losses) • 10 High/Critical bugs discovered in just 3 months • Research that would take a year manually - done in a day • 10,000x faster than traditional security research Join us for a double session: Part 1 – Mitchell Amador: Bug Bounties in Web3 ✅ How bug bounty programs work in crypto ✅ What makes a vulnerability worth $250K+ ✅ Getting started in Web3 security research ✅ AI's impact on the bug bounty landscape ✅ Industry insights from Immunefi Part 2 – Gabriel Balko: The AI Discovery ✅ How the AI agent was built ✅ Translating human security intuition into automation ✅ Real results and stopped attacks ✅ Technical approach and tools 📅 Today!!! (Wednesday, January 14, 2026) 🕔 17:00 Israel Time (15:00 CET · 08:00 EST) 🌐 Online & Free 🎟️ Register: luma.com/m69hd5sn 📺 Live on YouTube: youtube.com/watch?v=j7IdANma… This is where AI-powered security meets real-world bug bounties. 🔥 Powered by @MasterkeyVC 👾 Hosted by @Web3_Devs #AI #CyberSecurity #BugBounty #Web3 #SecurityResearch #MachineLearning #Blockchain #InfoSec #AIResearch #Web3Security #CryptoSecurity #Immunefi #Automation @AlonKivity @al23xyz , @ELuttenberg789, @Amit_Masterkey , @SHAP0W
2
8
1
36
2,843
First major hack of 2026, as @Truebitprotocol was drained for $26.2 million through an overflow in unverified bytecode. The same attacker hit Sparkle weeks prior. Old code keeps bleeding - the archives have clearly become a shopping list. rekt.news/truebit-rekt
8
16
1
77
12,212
A new report out from OX Security found that 900,000 users have had ChatGPT and DeepSeek conversations stolen by Chrome extensions. That means full chat logs exfiltrated every 30 minutes. Hackers want your AI history. Why? Because you've probably pasted in code, strategy, legal questions, personal information, health info, or other material that could be used for blackmail or extortion. A few takeaways: 1. Don't sign up for LLMs with your personal information if possible. 2. Don't input personal information into the LLM itself. 3. Be extremely careful with browser extensions. We already know that from wallet hacks.
8
5
1
72
5,101
Kali Linux 2025.4 Release (Desktop Environments, Wayland & Halloween Mode): Say hello to Kali Linux 2025.4! Expect updated tools, performance tweaks, and improved support - no fluff, just the essentials. The summary of the changelog since the 2025.3… kali.org/blog/kali-linux-202…
19
346
15
1,962
93,920
ATTACK UPDATE: A massive supply-chain compromise has affected packages with over 2 billion weekly downloads, targeting *CRYPTO* Here's how it works 👇 1) Injects itself into the browser Hooks core functions like fetch, XMLHttpRequest, and wallet APIs (window.ethereum, Solana, etc.). Ensures it can intercept both web traffic and wallet activity.
7
61
26
169
62,462
Load more