Proactively Secure Every Layer of Your Software Supply Chain. Experience more @ https://xitter.cf/t.co/3Z2MLZ595c
Joined May 2025
- Tweets47
- Following20
- Followers32
- Likes13
🚨 BREAKING: Attackers hijacked .gh, .sl & .as domain registries (Ghana, Sierra Leone, American Samoa), rewrote DNS & got legit CAs to issue HTTPS certs for major brands + Google domains.
Chrome is blocking most of them.
🚨 Poisoned Bing results are delivering MayaBot malware + tech-support scams
BengalSEO is running fake software download pages + filtered redirect chains that decide who gets the payload and who gets sent to a scam call center.
Classic SEO poisoning + selective redirection.
This week: Chrome's 6th zero-day of 2026, a router hijack that needs no login, a "patched" system getting popped anyway, and backdoors showing up in checkout pages.
Thread. 🧵
/3
Huntress caught active exploitation of three N-able N-central CVEs on systems that were already fully patched.
Patched isn't the same as safe. CVE-2026-86206, 86207, 86218.
/2
Two MikroTik zero-days chained into one exploit, "MikroTrick." No auth needed, attacker gets SSH and drops their own accounts on your router.
Live since Sept 2. CVE-2026-67276 + CVE-2026-86060.
/1
CVE-2026-85046: Type confusion vulnerability in V8, being exploited prior to patch availability. Sixth zero-day exploit for Chrome in 2026. Update to 152
🚨 MikroTik routers under active attack
CERT Polska warns: internet-exposed SSH on vulnerable RouterOS can be fully hijacked with zero authentication.
Update to 7.24.2 / 7.23.4 / 6.49.21 right away, then hunt for unknown users & scripts.
🚨 Critical: Actively exploited Chrome V8 zero-day (CVE-2026-85046)
Type confusion in V8 allows remote code execution inside the sandbox via crafted HTML. Fixed in Chrome 152.0.7977.82/.83.
Google confirms in-the-wild exploitation. Update immediately:
Stay safe. #Chrome
🚀 O3 Security is hiring!
Roles: : Founder’s Office • Founding Designer • Tech Intern • GTM & Growth Intern
Work on real cybersecurity problems.
Apply: [email protected]
#Hiring #CyberSecurity
🚨 Attackers are actively exploiting two SonicWall SMA 1000 zero-days.
One is a pre-auth SSRF vulnerability; the other enables authenticated admins to inject OS commands under certain conditions.
SonicWall says the flaws may have been chained together for remote code execution.
TeamPCP backdoored Trivy, then LiteLLM, hit 1,000+ orgs, stole 500K+ credentials.
Got caught because they reused the same cat avatar on Telegram, TikTok, Steam and HackerOne.
Bad opsec > good malware. Full trace:
o3.security/blog/teampcp-sup…
‼️ Supply chain attack on a popular npm package
@7nohe/openapi-react-query-codegen (~150k weekly downloads)
4 malicious versions published and actively being exploited.
Check your lockfiles / node_modules immediately and pin to a clean version.
#Cybersecurity #npm
🚨 19 Chrome & Edge extensions just turned into crypto drainers.
Attackers buy legit ones → wait for users → push malicious updates that steal seeds, drain wallets & hijack sessions.
One had ~80k users when it went dark.
Audit your extensions NOW. !!
O3 Security retweeted
Cybersecurity’s real challenge isn’t finding vulnerabilities, it’s proving which ones actually matter.
O3 Security, a member of the Nasscom GenAI Foundry, is stopping attackers in their tracks with AI that thinks like an attacker.
No more noise, just focused insights. The future of cybersecurity is here.
Swipe through to discover O3 Security’s story.
#GenAIFoundryStories #GenAI #CybersecurityInnovation #NasscomGenAIFoundry
@O3security
Most security teams are building two crypto inventories for the same problem.
One's called CBOM. One's called QBOM.
A QBOM isn't a second list — it's the same inventory with one extra field: quantum risk.
One list. One score.
Stop the double work. 🧵👇
o3.security/academy/qbom-vs-…
