#TeamGen malware analyst 🖖 (Norton, Avast, Lifelock, MoneyLion...) | Author of the book Ghidra Software Reverse Engineering for Beginners

Galicia, Spain
Joined January 2019
🚀 Ghidra 12.1.4 released! 🔐 Swift demangler & library-loading hardening 🛠️ PE/OMF stack-overflow fixes ⚙️ Major Hexagon improvements 🔧 x86, AArch64, SuperH & NDS32 fixes ⬇️ Download: github.com/NationalSecurityA… #Ghidra #ReverseEngineering #CyberSecurity #InfoSec
2
5
201
David Álvarez retweeted
How Some Malicious AI Skills Hide Instructions from Human Reviewers * Whitespace padding * HTML comments * Invisible Unicode blog.virustotal.com/2026/10/…
1
5
11
1,330
David Álvarez retweeted
¡Ya están abiertas las inscripciones para #C3TF2026!
Inscripciones abiertas!!! c3tf.io
1
4
52
David Álvarez retweeted
VirusTotal is now available in ChatGPT Scan files, URLs, and domains for potential threats, right from your chat chatgpt.com/plugins/plugin_a…
18
188
12
735
40,365
David Álvarez retweeted
We've just published a technical breakdown of #WardenStealer, an actively developed MaaS #infostealer which, in just two months, already positioned itself as one of the most prevalent infostealers we protect our users from, ranking on par with Amatera, Remus and Vidar. Warden is written in Rust🦀and ships with its own loader and a built-in crypto clipper, and its builds are heavily obfuscated, morphed, and regularly updated to evade detection. It is also one of the first stealers to target configuration files and local data belonging to AI assistants and agentic coding tools. Read the full technical breakdown ↓ gendigital.com/blog/insights…
2
20
2
51
4,155
David Álvarez retweeted
As I promised, Exploiting Reversing (ER) series: article 10 | iOS Security Research (part 01) is available on my blog now: exploitreversing.com/2026/10… The primary source for new articles is blackstormsecurity.com/resea…, but articles will continue to be published on my blog with a one-week delay. Enjoy the reading and have an excellent day. #iOS #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #KernelSecurity
2
66
1
334
14,512
David Álvarez retweeted
When the news broke about the Kremlin's threats against my life and the lives of my fellow dissidents, I was in Strasbourg petitioning the Parliamentary Assembly of the Council of Europe (PACE) and its European Court of Human Rights (ECHR). My colleagues and our allies at PACE are pursuing ways to oblige the use of frozen Russian funds as compensation for cases Russia lost at the court. By so doing, we seek to create the legal mechanisms to overcome the resistance in some European capitals, especially France and Belgium, to using these hundreds of billions to compensate and aid Ukraine, victim of countless Russian crimes against humanity. But the current cases regarding Russian citizens are already substantial, over 3.3 billion Euros of unpaid awards owed by Russia from when it was a member of PACE. There should be no controversy and no delay in using the frozen funds to satisfy those awards. My thanks to PACE President Petra Bayr (photo) for her solidarity and leadership in this matter. Full story and link to the resolution: facebook.com/share/p/18vGRig…
96
947
22
3,952
70,924
David Álvarez retweeted
The IDA 9.5 Beta is live! ◾ IDA MCP + Assist for agentic RE ◾ New TriCore, Hexagon and DEX/ODEX decompilers ◾ Recursive decompilation ◾ New Malware Analysis add-on ◾ And more... Beta members: it's in your Download Center now. Not in the Beta program? Join from the customer portal today. hex-rays.com/blog/ida-9.5-be…
9
53
7
456
36,306
David Álvarez retweeted
putin’s desperate plot to silence Garry Kasparov on American soil. putin’s regime has once again proven that it operates less like a legitimate government and more like a transnational mafia syndicate. According to an explosive investigative report by the Spanish newspaper El Mundo, the Kremlin’s intelligence hit squads reached all the way into the United States in a cowardly attempt to murder legendary chess champion and fearless pro-democracy leader Garry Kasparov. For years, @kasparov63 has used his massive global platform to speak truth to power, exposing the corruption, brutality, and lawlessness of putin’s dictatorship. Unable to defeat his ideas with arguments, the Kremlin resorted to its default language: violence and terror. U.S. authorities had to step in this summer to directly warn Garry Kasparov that he was a top target for Kremlin assassins, forcing official security measures to shield his life. This wasn't just a vague threat. Court documents and investigative reports reveal a chilling network of operatives hunting anti-putin voices across borders. While putin’s thugs tried to outsource their dirty work, offering pocket change to mercenaries to stalk targets in Washington, the plot exposes the utter panic inside the Kremlin. Dictators like putin are terrified of brilliant, uncompromised voices like Kasparov who remind the world that a free, democratic Russia is possible. This assassination plot shatters the illusion that critics are safe once they leave Russia. Yet, for all their dark money, surveillance networks, and hired thugs, the Kremlin's desperation only reveals their weakness. They can threaten, stalk, and plot, but they will never silence Garry Kasparov, nor the unstoppable demand for freedom.
33
465
35
1,386
248,315
David Álvarez retweeted
I responded in more detail in The Next Move here, and there will be more tomorrow from Strasbourg, where we are moving forward to make Russia pay, literally, for its evil. thenextmove.org/p/new-detail…
25
131
4
695
17,529
David Álvarez retweeted
Your AI agent is safe. Says who? New claims like this land every day. Verifying them is a different story. So we at @GenDigitalInc drove an @AMTSO working group on independent testing of AI agent security. Labs and vendors at one table, so the next time someone says "it's safe", there is a way to check. gendigital.com/blog/insights…
2
2
282
David Álvarez retweeted
The 13th Annual NSA Codebreaker Challenge is LIVE! Join the mission and test your cybersecurity skills. Visit nsa-codebreaker.org to register and start your first phase today! #CodebreakerChallenge
72
116
30
333
34,998
David Álvarez retweeted
fbi job portal defaced and compromised? oh yeah, it's a silly tuesday
51
312
24
4,179
140,724
David Álvarez retweeted
HyperDbg v0.24 is released! It includes nine new commands, support for arrays as function parameters, char and wide-char arrays, fix kernel-mode builds on Linux, plus major bug fixes and refactoring. Check it out: github.com/HyperDbg/HyperDbg…
1
9
41
1,962
David Álvarez retweeted
5
13
116
6,773
David Álvarez retweeted
New Pwndbg release! Backward disassembly in context/nearpc, indirect jumps, nearpc -f without debug symbols, stack-vis to visualize stack frames, improved v2p/p2w/pageinfo kernel commands & more! See: github.com/pwndbg/pwndbg/rel… Please sponsor us: github.com/sponsors/pwndbg !
4
31
195
8,217
David Álvarez retweeted
🚨 PoC RELEASED: A public exploit for CVE-2026-75650, a CVSS 10.0 unauthenticated RCE affecting Adobe Commerce, is now available. The flaw can allow remote attackers to execute arbitrary code without authentication or user interaction. ⚠️ The vulnerability is already being exploited in the wild, making the public PoC especially significant. 🔴 Adobe has released a fix in APSB26-146. Patch immediately. 🔗 github.com/fortbridge/styles… #Adobe #AdobeCommerce #Magento #CVE #RCE #PoC #CyberSecurity #Infosec
17
86
10,144
⚡️ 0-Day Alert: Chrome v8 RCE CVE-2026-87491: WasmGetOwnProperty builtin may invoke a getter from user's JavaScript, leading to OOBW. Patched in Chrome 153.0.8010.36/.37 intelligence.zerodayengineer…
3
24
156
10,848
David Álvarez retweeted
It's been a while since we passed 4K GitHub stars ⭐️ And more good news: HyperDbg's kernel-mode drivers now build on #Linux! 🐧 After successfully getting the user-mode components compiled, thanks to @MaxRaulea, we're now moving on to... github.com/HyperDbg/HyperDbg…
🤖 Made with AI
1
6
39
1,818
David Álvarez retweeted
One click was all it took. We discovered a critical #vulnerability in Sogou Input Method that was actively exploited in the wild by #UNC3569 🇨🇳 to deploy the #GRAYRABBIT backdoor. Three separate weaknesses chained into a single RCE exploit. Read our research: gendigital.com/blog/insights…
10
1
27
2,912