Albert retweeted
¿Quién se suma a la Eko con una entrada de nuestra parte? 👀 Sorteamos una para #EKO2026, completá el form antes del lunes 5/10 👇
forms.cloud.microsoft/r/q57L…
Albert retweeted
¿Qué están construyendo hoy las StartUps de ciberseguridad? 🚀
La Startup Zone llega a la EKO para poner en el centro a quienes están creando nuevos proyectos, productos y herramientas para la industria. 🛠️💪
🎙️ El día 2, desde las 10 hs, la jornada arranca con un panel junto a referentes de la industria — Fede Nan, Fede Hombre, @famato y @cokilitvin — para hablar de todo lo que implica llevar una idea a un proyecto: cómo validar una idea, conseguir clientes, armar equipos, escalar una startup y enfrentar los desafíos de emprender en cyber.
Y eso no es todo: a las 11 HS llega el pitching de StartUps. Cada proyecto va a presentar sus ideas y compartirlas con CISOs y emprendedores de la industria, que podrán hacer preguntas, aportar ideas y darles feedback. 🧑💻
📅 Jueves 8 de octubre
🕙 Desde las 10 hs
📍 EKO Buenos Aires 2026
¡Vení a conocer los proyectos que están construyendo el futuro de la ciberseguridad! 🤓
Albert retweeted
Murió Andrés Blanco, hacker e investigador argentino de 44 años, muy querido por la comunidad.
Sus investigaciones, las clases de jiu-jitsu brasileño y charlas en DEF CON. Colegas, amigos y alumnos lo despiden con una misma palabra: "generosidad".
En @clarincom 🗞️
Albert retweeted
En DEF CON, el Deputy CISO de Anthropic les dejó un mensaje a todos los que trabajan en la industria de la ciberseguridad 🤖
Reportaje de uno de los mejores paneles que tuvo la edición 34 de la conferencia de hackers, en Clarín ✍️
Albert retweeted
EKOPARTY TRAININGS 2026 🚀
“Ghost in the Domain: Red Team Operations” dictado por Alberto Herrera, Nicolás Viegas & Tomás Rossi 🔥
🎯 Este training está diseñado para profesionales con experiencia en pentesting que quieren dar el salto al red teaming operacional. En dos días intensivos, los participantes van a desplegar y operar un C2 real (Mythic), comprometer un entorno Windows corporativo y moverse por él como lo haría un adversario sofisticado — tomando decisiones tácticas en cada etapa, no siguiendo un script. Cada módulo incorpora conciencia operacional, OPSEC básico y perspectiva de detección. Al terminar, los participantes van a poder ejecutar una cadena de ataque completa sobre un entorno con Active Directory y documentarla en un reporte de adversary emulation profesional.
📅 1 y 2 de octubre 2026
🎟️ Tené en cuenta que con tu inscripción a cualquier Ekoparty Training, recibís una entrada Legacy para la EKO Buenos Aires 2026.
🤓 Los cupos son limitados. ¡Conocé los programas en detalle y reservá tu lugar! >> ekoparty.org/trainings
💳 Elegí la forma de pago que mejor se adapte a vos:
- Tarjetas de crédito bancarias 3 y 6 cuotas sin interés (Visa / Mastercard).
- Transferencia bancaria
- Criptomonedas
📩 Escribinos a [email protected] o por WhatsApp al +54 11 3447-9336 para acceder al pago en cuotas y despejar todas tus dudas.
Albert retweeted
What if I told you that most (if not all) of these devices could be pwned Over-The-Air?
Next week @GastonAznarez and I will be sharing our adventure into AirMax hacking. If you share our obsession with antennas and RF swing by our @BlackHatEvents & @defcon lectures 🏴☠️
Albert retweeted
Anthropic reveals its cybersecurity domination strategy. Claude and Gemini scored equally on cybersecurity tasks, but Claude Code scaffold showed its superiority. wiz.io/cyber-model-arena
Wiz just launched the AI Cyber Model Arena. 257 real-world challenges across five offensive categories: zero-day discovery, CVE detection, API security, web security, and cloud security.
Highlights:
🔹 Scaffolding matters. Gemini 3 Pro on Claude Code scores 84% on API security and drops to 38% on OpenCode.
🔹 Performance is domain-specific. Opus 4.6 scores 84% on API security but 27% on 0-days. Gemini 3 Pro leads in cloud security (40%) but struggles with finding vulnerabilities in code (29%).
🔹 Models improve in finding 0-days. Opus 4.6: 27.3%, Opus 4.5: 18.2%, Sonnet 4.5: 0%.
🔹 Smaller models punch above their weight. Haiku 4.5 on Claude Code beats (72%) GPT-5.2 with every scaffold on API.
My take:
1️⃣ Biggest surprise. Gemini scored low on software vulnerabilities, despite their heavy investments in AI secure coding with Code Mender.
2️⃣ Expected. Frontier models heavily depend on scaffolding for cybersecurity tasks.
3️⃣ Anthropic’s enterprise strategy is clear. Make Claude Code the most powerful and model-agnostic scaffold for major enterprise tasks. It lifts up every model that runs on it. Gemini CLI favors the Gemini model family.
Author: Ilya Kabanov
Albert retweeted
Exploit Demo & Analysis Article by 78ResearchLab(@78_lab)
CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability
blog.78researchlab.com/2ffdb…
#CVE_2026_20817 #LPE #Windows
Albert retweeted
OpenClaw Partners with VirusTotal for Skill Security
openclaw.ai/blog/virustotal-…
Albert retweeted
Meet VulnLLM-R-7B: a specialized AI that reads code like a security expert. It's trained to spot vulnerabilities before they become breaches. This isn't just another chatbot, it's a digital security guard for your codebase. The community is buzzing because it makes security accessible.
Albert retweeted
@SpecterOps dropped research on a Mythic C2 profile abusing Azure Blob Storage for covert comms, legit traffic to "*.blob.core.windows.net" makes raw domain-based detection super noisy.
We tuned a couple Elastic detection rules that pair the destination domain with process context (unsigned binaries, non-standard paths, code signature checks) to cut through some of the noise.
Expect FPs in Azure-heavy environments though. Dev tools, custom scripts, and third-party apps hitting blob storage will still fire. These rules are a starting point; you'll likely need environment-specific exceptions for things like Azure SDKs, CI/CD pipelines, and backup agents.
Check out the changes: github.com/elastic/detection…
Refs:
- specterops.io/blog/2026/01/3…
- github.com/senderend/azureBl…
Happy Hunting!
#ThreatDetection #MythicC2 #Azure #BlueTeam #DetectionEngineering #ElasticSecurity #ThreatHunting #InfoSec
Albert retweeted
PROPAGANDA AND SOCIAL ENGINEERING TECHNIQUES
A complete breakdown of all social engineering and propaganda techniques used to shape your way of thinking and/or behavior. Those that war against your mind have spent many decades perfecting how to manipulate and control you.
Albert retweeted
1/3: Claude now supports authorized security testing, CTFs, and educational security work (not just defensive). It still refuses harmful use: destructive techniques, DoS, mass targeting, supply chain compromise, and malicious detection evasion. Dual-use tools require explicit authorization context.
Diff: github.com/marckrenn/claude-…
Albert retweeted
Notion AI: Unpatched Data Exfiltration promptarmor.com/resources/no…
Albert retweeted
eSIM and its security and privacy issues: Embedded Subscriber Identity Module in a nutshell ☎️ 🐾🔎🌍🎯
More details on:
LinkedIn: linkedin.com/posts/dlaskov_t…
Substack: it4sec.substack.com/p/esim-a…
Albert retweeted
Awesome & wholesome:
Slashdotters were dunking on @stevewoz for selling his Apple stock… then he showed up in the comments with the most grounded reply.
Gave away his Apple wealth, funds museums, pays his taxes, and measures life by joy: “Happiness is Smiles minus Frowns.”
Albert retweeted
Meet evilDoggie, the Car Hacking hardware interface.
Being witness from the idea to it’s execution has been a privilege. I’m proud of @ogianatiempo and @GastonAznarez to push the boundaries on what we can achieve.
If you are in Vegas and interested in what we built. Send DM
Albert retweeted
Reviving my blog with a complete analysis of the latest #LockBit #ransomware v4.0 Green! 🤠
chuongdong.com/reverse%20eng…
h/t to @fwosar & @demonslay335 for all the crypto helps! Huge thanks to @BushidoToken & @CuratedIntel for the threat intelligence insight too! 🙏
