Within
Joined August 2019
- Tweets13.3K
- Following2.5K
- Followers1.1K
- Likes18.5K
devvbankx retweeted
More cybersecurity content isn't necessarily going to make you a better security professional.
What matters is having a plan for how you're going to turn that knowledge into practical skills.
That's the philosophy behind DefendTheOrg. Every course, skill, track, lab, and weekly challenge has a purpose in helping you progress toward a specific career goal.
Instead of jumping between random tutorials and wondering what to learn next, you can follow a structured path and actually practice the work.
Don't just collect knowledge. Build toward something.
devvbankx retweeted
One of the first papers I've ever read, which absolutely blew my mind back then and hugely influenced my life choices.
30 years ago today, Phrack 49 published Aleph One’s “Smashing the Stack for Fun and Profit”.
A legendary paper that inspired generations of hackers and helped shape modern exploit development.
Still an essential reading.
phrack.org/issues/49/smashin…
Phrack 73 is coming soon!
devvbankx retweeted
They could not have picked a worse week.
JUST IN: Anthropic is expected to begin its IPO roadshow the week of November 9, according to CNBC, which is the earliest window available to it.
SEC rules require at least 15 calendar days between a public filing and the start of investor meetings, and the company filed its public S-1 on October 26.
It plans to list Class A shares on the Nasdaq Global Select Market under the ticker ANT, with 22 underwriters led by Goldman Sachs and Morgan Stanley.
devvbankx retweeted
🐾👀 So Elon has a new pet?!
And Pump.fun wasted NO TIME turning the story into a meme coin. 😂🚀
Is this one going to get some attention? Who’s watching? DYOR! 💚
5rax2Am2vFkq7U1srAbYDMPhAbimKu8T9G27eophpump. DYR
devvbankx retweeted
Join me at 11AM PT on Friday (6-November) for an open session and Q&A to talk about whatever is on your mind. I've gotten the request to do this for quite a while so bring your questions and topics....
youtube.com/watch?v=mCP6fU8O…
devvbankx retweeted
🚨 Node.js Announces Upcoming Security Updates to Address High-Severity Vulnerabilities
nodejs.org/en/blog/vulnerabi…
The Node.js project has announced an upcoming security release scheduled for November 11, 2026, to address vulnerabilities affecting several actively supported versions of the JavaScript runtime.
According to the official advisory, the highest-severity vulnerabilities being addressed are rated High across all three supported release lines.
The announcement has not yet disclosed specific vulnerability details or CVE identifiers, giving administrators advance notice to prepare for the updates.
Node.js | November 2026 Security Release
• Severity: High
• Affected release lines: Node.js 22.x, 24.x, and 26.x
• Scheduled release: November 11, 2026
• CVEs: Not yet disclosed
• Security fixes: Details pending
• End-of-life versions: Also considered affected
The Node.js team recommends maintaining supported, up-to-date versions, as end-of-life releases do not receive regular security fixes.
Administrators should prepare to deploy the upcoming security updates once available and review their applications for dependencies on affected Node.js versions.
devvbankx retweeted
I just found a CSRF in 2026 😂 I get the feeling that there is still SO MUCH CSRF to find in bounty programs.
CSRF comes in many forms. Try prompting your hackbot really specifically to so that it tries:
- Removing the token parameter entirely
- Setting the token to a blank string
- Changing the token to an invalid token of the same format
- Using a different user's token
devvbankx retweeted
Backdooring Installers with DFMI
DFMI can embed malicious payloads into Windows software installers while keeping them fully functional.
hackers-arise.com/offensive-…
@three_cube @_aircorridor
devvbankx retweeted
I just stumbled across a blog that I forgot I wrote years ago about advanced nmap usage. It's so handy even today to know what's possible. Using AI for hacking is one thing, but knowing what to tell it is a whole other thing.
If you get something out of this article, share it!
medium.com/@hakluke/haklukes…
devvbankx retweeted
The human attack vector will always be the easiest vector to exploit. Humans are stupid.
No, Binance was not most likely compromised from a web browser zero day chain.
As is tradition with large compromises, it is almost certainly something ridiculously stupid, like the DevOps guy trying to get Fortnite cheats, or they called someone with a shitty American accent and said they need to log into their machine for something
devvbankx retweeted
At @arcanuminfosec we've been doing "AI as an Insider" and compromise via DevOps methodologies for a year already. Three parallel methodologies for assumed breach testing.
We simulate things like Mercor and other high profile breaches. Reach out if want to work with some of the best!
arcanum-sec.com/services/ass…
devvbankx retweeted
Prior to this week's Binance incident, Chainalysis estimated DPRK-linked crypto theft at a lower bound of $6.75B through 2025 plus over $1B in 2026, for roughly $7.75B cumulative.
TRM Labs and Chainalysis both attribute the ~$6.36B Binance hack to TraderTraitor (the same DPRK unit behind Bybit) with high confidence. Adding it pushes the all-time total past $14B (gross, before the ~$3B frozen).