
#TeamGen malware analyst 🖖 (Norton, Avast, Lifelock, MoneyLion...) | Author of the book Ghidra Software Reverse Engineering for Beginners
Galicia, Spain
Joined January 2019
- Tweets2.3K
- Following691
- Followers677
- Likes3.9K
David Álvarez retweeted
How Some Malicious AI Skills Hide Instructions from Human Reviewers
* Whitespace padding
* HTML comments
* Invisible Unicode
blog.virustotal.com/2026/10/…
David Álvarez retweeted
VirusTotal is now available in ChatGPT
Scan files, URLs, and domains for potential threats, right from your chat
chatgpt.com/plugins/plugin_a…
David Álvarez retweeted
We've just published a technical breakdown of #WardenStealer, an actively developed MaaS #infostealer which, in just two months, already positioned itself as one of the most prevalent infostealers we protect our users from, ranking on par with Amatera, Remus and Vidar.
Warden is written in Rust🦀and ships with its own loader and a built-in crypto clipper, and its builds are heavily obfuscated, morphed, and regularly updated to evade detection.
It is also one of the first stealers to target configuration files and local data belonging to AI assistants and agentic coding tools.
Read the full technical breakdown ↓
gendigital.com/blog/insights…
David Álvarez retweeted
As I promised, Exploiting Reversing (ER) series: article 10 | iOS Security Research (part 01) is available on my blog now:
exploitreversing.com/2026/10…
The primary source for new articles is blackstormsecurity.com/resea…, but articles will continue to be published on my blog with a one-week delay.
Enjoy the reading and have an excellent day.
#iOS #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #KernelSecurity
David Álvarez retweeted
When the news broke about the Kremlin's threats against my life and the lives of my fellow dissidents, I was in Strasbourg petitioning the Parliamentary Assembly of the Council of Europe (PACE) and its European Court of Human Rights (ECHR). My colleagues and our allies at PACE are pursuing ways to oblige the use of frozen Russian funds as compensation for cases Russia lost at the court. By so doing, we seek to create the legal mechanisms to overcome the resistance in some European capitals, especially France and Belgium, to using these hundreds of billions to compensate and aid Ukraine, victim of countless Russian crimes against humanity.
But the current cases regarding Russian citizens are already substantial, over 3.3 billion Euros of unpaid awards owed by Russia from when it was a member of PACE. There should be no controversy and no delay in using the frozen funds to satisfy those awards. My thanks to PACE President Petra Bayr (photo) for her solidarity and leadership in this matter. Full story and link to the resolution:
facebook.com/share/p/18vGRig…
David Álvarez retweeted
The IDA 9.5 Beta is live!
◾ IDA MCP + Assist for agentic RE
◾ New TriCore, Hexagon and DEX/ODEX decompilers
◾ Recursive decompilation
◾ New Malware Analysis add-on
◾ And more...
Beta members: it's in your Download Center now.
Not in the Beta program? Join from the customer portal today.
hex-rays.com/blog/ida-9.5-be…
David Álvarez retweeted
putin’s desperate plot to silence Garry Kasparov on American soil.
putin’s regime has once again proven that it operates less like a legitimate government and more like a transnational mafia syndicate.
According to an explosive investigative report by the Spanish newspaper El Mundo, the Kremlin’s intelligence hit squads reached all the way into the United States in a cowardly attempt to murder legendary chess champion and fearless pro-democracy leader Garry Kasparov.
For years, @kasparov63 has used his massive global platform to speak truth to power, exposing the corruption, brutality, and lawlessness of putin’s dictatorship.
Unable to defeat his ideas with arguments, the Kremlin resorted to its default language: violence and terror.
U.S. authorities had to step in this summer to directly warn Garry Kasparov that he was a top target for Kremlin assassins, forcing official security measures to shield his life. This wasn't just a vague threat. Court documents and investigative reports reveal a chilling network of operatives hunting anti-putin voices across borders.
While putin’s thugs tried to outsource their dirty work, offering pocket change to mercenaries to stalk targets in Washington, the plot exposes the utter panic inside the Kremlin.
Dictators like putin are terrified of brilliant, uncompromised voices like Kasparov who remind the world that a free, democratic Russia is possible.
This assassination plot shatters the illusion that critics are safe once they leave Russia.
Yet, for all their dark money, surveillance networks, and hired thugs, the Kremlin's desperation only reveals their weakness. They can threaten, stalk, and plot, but they will never silence Garry Kasparov, nor the unstoppable demand for freedom.
David Álvarez retweeted
I responded in more detail in The Next Move here, and there will be more tomorrow from Strasbourg, where we are moving forward to make Russia pay, literally, for its evil. thenextmove.org/p/new-detail…
David Álvarez retweeted
Your AI agent is safe. Says who?
New claims like this land every day. Verifying them is a different story. So we at @GenDigitalInc drove an @AMTSO working group on independent testing of AI agent security. Labs and vendors at one table, so the next time someone says "it's safe", there is a way to check.
gendigital.com/blog/insights…
The 13th Annual NSA Codebreaker Challenge is LIVE! Join the mission and test your cybersecurity skills. Visit nsa-codebreaker.org to register and start your first phase today! #CodebreakerChallenge
David Álvarez retweeted

vx-underground@vxundergroundSep 22
United States
United StatesConnected via United States Android AppAccount-level information, not a live location or per-post device.
fbi job portal defaced and compromised? oh yeah, it's a silly tuesday
HyperDbg v0.24 is released!
It includes nine new commands, support for arrays as function parameters, char and wide-char arrays, fix kernel-mode builds on Linux, plus major bug fixes and refactoring.
Check it out:
github.com/HyperDbg/HyperDbg…
Virtualized Python source code with
🐍 pelock.com/python-obfuscator…
#python #virtualizer #obfuscator #hacking #redteam
David Álvarez retweeted
New Pwndbg release!
Backward disassembly in context/nearpc, indirect jumps, nearpc -f without debug symbols, stack-vis to visualize stack frames, improved v2p/p2w/pageinfo kernel commands & more!
See: github.com/pwndbg/pwndbg/rel…
Please sponsor us: github.com/sponsors/pwndbg !
David Álvarez retweeted
🚨 PoC RELEASED: A public exploit for CVE-2026-75650, a CVSS 10.0 unauthenticated RCE affecting Adobe Commerce, is now available.
The flaw can allow remote attackers to execute arbitrary code without authentication or user interaction.
⚠️ The vulnerability is already being exploited in the wild, making the public PoC especially significant.
🔴 Adobe has released a fix in APSB26-146. Patch immediately.
🔗 github.com/fortbridge/styles…
#Adobe #AdobeCommerce #Magento #CVE #RCE #PoC #CyberSecurity #Infosec
David Álvarez retweeted
⚡️ 0-Day Alert: Chrome v8 RCE
CVE-2026-87491: WasmGetOwnProperty builtin may invoke a getter from user's JavaScript, leading to OOBW.
Patched in Chrome 153.0.8010.36/.37
intelligence.zerodayengineer…
It's been a while since we passed 4K GitHub stars ⭐️
And more good news: HyperDbg's kernel-mode drivers now build on #Linux! 🐧
After successfully getting the user-mode components compiled, thanks to @MaxRaulea, we're now moving on to...
github.com/HyperDbg/HyperDbg…
🤖 Made with AI
David Álvarez retweeted
One click was all it took.
We discovered a critical #vulnerability in Sogou Input Method that was actively exploited in the wild by #UNC3569 🇨🇳 to deploy the #GRAYRABBIT backdoor. Three separate weaknesses chained into a single RCE exploit.
Read our research:
gendigital.com/blog/insights…
David Álvarez retweeted
The #VB2026 call for last-minute papers closes today (13 Sept) at midnight Hawaii time (10am UTC on Monday) - you still have a few hours to submit a proposal! virusbulletin.com/conference…




























