Jesús Andrade - Tecnochui retweeted
Qué hace la gente de @asilodigital a mitad del hackaton? Echar una partida de @pjvallenilla (Cashea) vs @metavarce (Yummy) 🥊
El juego lo desarrolló @0bkevin y quedó brutal
A veces uno se siente como Hades, respiras, te "fumas un cigarro" (darse un break) y dices "bueno, ya que, sigamos con otro tópico"
Jesús Andrade - Tecnochui retweeted
🇻🇪 🚨 VENEZUELA: THREAT ACTOR CLAIMS NETWORK COMPROMISE OF INTECH (OIL & GAS SUPPLIER)
A threat actor claims to have compromised the network of InTech Instrumentos y Equipos, C.A. (Intech-ie[.]net), a Venezuelan supplier serving Oil & Gas, Petrochemical, Food & Beverage, Pharma, and Power Generation sectors.
The actor claims:
* Network compromise of InTech Instrumentos y Equipos, C.A.
* Initial access via an insecure file-upload vulnerability in a web app
* PHP webshell dropped for remote code execution
* Multi-sector industrial customer base (Oil & Gas, Petrochemical, Food, Pharma, Power)
No numeric record volume was stated in the listing. The claim has not been independently verified.
⚠️ Analyst Note:
Named industrial suppliers with alleged RCE/webshell access are high-value CTI even without a row count, because operational and customer data can support supply-chain and sector-targeted abuse. Access vector, scope of exfiltration, and authenticity remain unconfirmed. We assess this as an unverified threat-actor claim, NOT confirmation of a compromise.
Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s…
#DDW #DarkWeb #Venezuela #OilAndGas #Industrial #DataBreach #ThreatIntelligence #CyberSecurity
JAJAJAJAJAJA ES REAL CON GEMINI
Readers added context they thought people might want to know
This video is a comedy skit by Nathan Doan Comedy with the poster's handle added as a watermark over the original.
youtube.com/watch?v=83cDUA…
x.com/UtsSs31/status…
Jesús Andrade - Tecnochui retweeted
🚨 OPENCODE CONFIRMS SECURITY BREACH HITTING 1.4% OF CONSOLE USERS WITH LINKED AI PROVIDERS
AI coding-agent platform OpenCode said on X on Oct 17, 2026 that it suffered a security breach overnight, tied to what it calls a "large scale distillation attack."
What OpenCode says:
• 1.4% of OpenCode Console users were impacted, a subset who had external AI providers linked
• All affected users were notified by email on the morning of Oct 17; users who got no email were not impacted
• The incident is ongoing, and OpenCode is working with Anthropic, OpenAI and Google to remediate
⚠️ Analyst Note:
A distillation attack uses someone else's access to a large AI model to harvest its outputs, often to train a competing model, which makes linked provider API keys the prize. Affected users are reporting unexpected spend alerts and charges on keys they used only in OpenCode. If you received the email, revoke and regenerate any keys linked to OpenCode at each provider and review usage logs. OpenCode has not yet said how access was gained or how many accounts the 1.4% represents.
Source:
xitter.cf/opencode/status/211151…
#DDW #OpenCode #AISecurity #APIKeys #DataBreach #CyberSecurity #ThreatIntelligence
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
Aquí ando 😋
Sábado de coding en Caracas 🇻🇪
Espacio presencial del Hackaton de 30X, hosteado por @asilodigital y @Wave_TechHub
Es mi tío, quien pueda ayudarlo, estaremos agradecidos.
Jesús Andrade - Tecnochui retweeted
Una de las cosas que más me enorgullecen fue diseñar el único autopago con balanza de peso y Cashea en el país 🇻🇪
Pues depende:
- hay que saber vender el software a los usuarios que lo necesiten
- soporte gratuito y pago
- actualizaciones
- licencia gratis o de bajo Costo
- migración fácil
- curva de aprendizaje baja
Hacer software cualquiera puede, pero saberlo hacer bien y venderlo es otra Cosa
Mientras aquí debatimos si el Software esta muerto, allá afuera hay:
- un taller que anota los pedidos en un cuaderno
- una distribuidora que vive dentro de un Excel de 40 pestañas
- una clínica que confirma citas llamando a cada paciente uno por uno
Ninguno quiere aprender a vibecodear. No les interesa construir software. Quieren dejar de perder tiempo y plata.
Si eres developer, deja de venderle a otros developers. El que entienda un negocio real y le resuelva un problema real con estas herramientas va a tener trabajo de sobra.
1.5 millones de registros posiblemente comprometidos de KFC Venezuela, donde aparece cédulas, direcciones, pagos, transacciones, etc.
⚠️ 🇻🇪 🍗 PREVENTIVE ALERT: ALLEGED EXFILTRATION OF 1.55 MILLION RECORDS AND CONFIDENTIAL DATA FROM KFC VENEZUELA (ACTOR: MALCONGUERRA2)
[STATUS: ALLEGED / UNCONFIRMED / THREAT ACTOR: MALCONGUERRA2 / DATE: OCTOBER 13, 2026]
The centralized cyber-intelligence system has detected a new post on underground forums made on October 13, 2026, by the user malconguerra2 (Telegram contact: M4lconGuerr4). The report announces the disclosure and sale of a massive dump of confidential data from KFC Venezuela, totaling 17.5 GB in size and containing 1,542,021 records in JSON format.
It is strictly noted that the veracity of this breach and the authenticity of the records have not been officially confirmed by the company or its local operators. The definitive status of the infrastructure remains unconfirmed.
🌐 INCIDENT SUMMARY AND TARGETS
Threat Actor: malconguerra2
Victim / Affected Entity: KFC Venezuela.
Sector: 🍗 Fast Food, Restaurants, Franchises, E-commerce, and Delivery in Venezuela 🇻🇪.
Reported Data Volume: 1,542,021 records in JSON format, with a total file size of 17.5 GB.
🔍 TECHNICAL BREAKDOWN OF THE INFORMATION
According to the JSON data snippet provided on the underground forum, the leaked records contain detailed information regarding transactions, customers, payment methods, and stores:
Personal and Customer Data (PII):
Customer's full name, phone number, email address, and detailed physical address in Caracas, Capital District.
National ID card details (cédula) and document type.
Order and Transaction Details:
Order identifiers, order status (e.g., Delivered, Preparing), payment method used (cash, mobile payment), and amounts in bolivars and international currency.
Mobile payment receipts with transaction references and store data (e.g., San Martín / San Martín Nocturno store, branch codes, and geographic delivery coordinates).
Product Catalog and Cart:
Details of purchased products (e.g., chicken, fries, and beverage combos), unit prices, descriptions, SKU identifiers, and links to product images stored on cloud services.
🛡️ TECHNICAL RECOMMENDATIONS FOR CONTAINMENT (SOC / CSIRT / FRANCHISES)
Audit and Review of Data Gateways and APIs: Franchise IT administrators and their partner logistics platforms must urgently audit database repositories and online ordering gateways to revoke unauthorized access.
Monitoring and User Alerts: Advise affected customers to remain vigilant against potential fraudulent communications that utilize their actual purchase data or national ID numbers.
🖥️ CENTRALIZED THREAT MONITORING SYSTEM
Intelligence System: analyzer.vecert.io
Quickly check your security at: monitor.vecert.io
Quotes and services: vecert.io/contact
#Cybersecurity #ThreatIntel #Venezuela #KFC #DataLeak #FastFood #MalconGuuerra #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert
Posible leak y compromiso del crm panel de miguayaba[.]com, página venezolana.
⚠️ 🇵🇦 🇨🇴 🇻🇪 PREVENTIVE ALERT: ALLEGED LEAK OF 19,000 DOCUMENTS AND ~10 GB OF DATA FROM MIGUAYABA.COM AND MGPANEL.CO (ACTOR: GEA)
[STATUS: ALLEGED / UNCONFIRMED / THREAT ACTOR: GEA / DATE: OCTOBER 12, 2026]
The centralized cyber-intelligence system has detected a new post on underground forums, made on October 12, 2026, by the threat actor "gea." The report announces the disclosure and leak of approximately 19,000 documents (~10 GB) belonging to the digital ecosystem comprising MiGuayaba .com (a marketing and web design agency) and MGPanel .co.
It is strictly noted that the veracity of this breach and the authenticity of the files have not been officially confirmed by the affected entities. The definitive status of the infrastructure remains unconfirmed.
Threat Actor: gea.
Victim / Affected Entity: MiGuayaba .com and MGPanel .co.
Sector: 💻 Information Technology, Software Development, CRM, and Digital Agencies in Panama, Colombia, and Venezuela.
Reported Data Volume: 19,000 files with a total size of ~10 GB.
🛡️ PREVENTIVE TECHNICAL CONTAINMENT RECOMMENDATIONS (SOC / CSIRT)
Audit and Revocation of Cloud System Access: Administrators of MiGuayaba .com and MGPanel .co must urgently audit centralized storage repositories, API credentials, and server permissions to cut off any active data exfiltration paths. Early Notification to Clients and Authorities: Alert companies in the affected portfolio (such as agencies, real estate firms, and logistics companies) so they can strengthen identity verification controls and monitor for potential fraudulent use of their corporate and tax documents.
🖥️ CENTRALIZED THREAT MONITORING SYSTEM
Intelligence System: analyzer.vecert.io
Quickly check your security at: monitor.vecert.io
Quotes and services: vecert.io/contact
#Cybersecurity #ThreatIntel #Panama #Colombia #Venezuela #DataLeak #MiGuayaba #MGPanel #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert
Oh mira, posibles credenciales comprometidas de la armada venezolana. Wow, quien lo diría, cuando tienen elementos de ciberseguridad las fanb 🙄
⚠️ 🇻🇪 ⚓ PREVENTIVE ALERT: LEAK AND OFFER OF BOLIVARIAN NAVY OF VENEZUELA CREDENTIALS (ACTOR: REVELATIONS)
[STATUS: ALLEGED / UNCONFIRMED / THREAT ACTOR: REVELATIONS / DATE: OCTOBER 2026]
The centralized cyber-intelligence system has detected a new post on underground forums made on October 10, 2026, by the user RevelationS. The report announces the disclosure and sale of an institutional database belonging to the Bolivarian Navy of Venezuela, containing a reported total of 6,924 records.
It is strictly noted that the veracity of this breach and the authenticity of the records have not been officially confirmed by Venezuelan authorities. The definitive status of the infrastructure remains unconfirmed.
Threat Actor: RevelationS.
Victim / Affected Entity: Bolivarian Navy of Venezuela.
Sector: ⚓ Government, National Defense, Armed Forces, and Security in Venezuela 🇻🇪.
Reported Data Volume: 6,924 records in total.
🛡️ PREVENTIVE TECHNICAL CONTAINMENT RECOMMENDATIONS (SOC / CSIRT / DEFENSE)
Mass Credential Invalidation: Venezuelan Navy technology teams must immediately proceed to deactivate and rotate all email credentials and system access accounts under the @armada.mil.ve domain.
Security and Encryption Audit: Replace obsolete hashing algorithms (such as MD5) with robust key derivation methods (e.g., Argon2 or Bcrypt) across all the military force's internal portals and systems.
🖥️ CENTRALIZED THREAT MONITORING SYSTEM
Intelligence System: analyzer.vecert.io
Quickly check your security at: monitor.vecert.io
Quotes and services: vecert.io/contact
#Cybersecurity #ThreatIntel #Venezuela #VenezuelanNavy #MilitarySecurity #DataLeak #Revelations #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert
Lo peor de todo es que no sabes cómo va a funcionar realmente, con que reglas y como te puedes salvar o "darle la vuelta".
Tiempos horribles y oscuros se acercan.
🏛️📊 Seniat y Sudeban formalizan alianza de interconexión financiera
El acuerdo busca optimizar la recaudación mediante intercambio directo de datos con la banca nacional:
🔹 Monitoreo y fiscalización en tiempo real
🔹 Reducción de evasión
🔹 Mayor trazabilidad transaccional
#FintechCCS

























