Jeff is free.
471 posts

Jeff is free. retweetledi
Jeff is free. retweetledi
Jeff is free. retweetledi

Las últimas semanas en ciberseguridad están siendo brutales:
→ GitHub: 3,800 repos internos filtrados (20 mayo)
→ GitHub: CVE-2026-3854, RCE con un solo git push
→ npm: 42 paquetes de Tanstack envenenados (12M descargas/semana)
→ Microsoft: 138 vulnerabilidades parcheadas este mes
→ Exchange (Microsoft): CVE-2026-42897, JS arbitrario abriendo un correo
Y Hoy le encuentran un 0 day a Nginx y están investigando una versión maliciosa de NxConsole
Y lo más loco: el mismo grupo (TeamPCP) está detrás de los ataques a npm Y a GitHub. No son incidentes aislados, es una campaña coordinada contra la infraestructura que TODOS usamos.
En 2025 se publicaron casi medio millón de paquetes maliciosos. Y seguimos instalando a ciegas. Y de momento no parece que vaya a terminar estos problemas
Español
Jeff is free. retweetledi

Ways to mitigate GitHub/npm supply chain attacks:
- Use pnpm
- Block all postinstall scripts unless necessary
- Use minimumReleaseAge
- Set up Trusted Publisher on npm/GitHub
- Disallow npm tokens
- Require 2FA for all org members
- Avoid pull_request_target
- If repo is public, consider restricting PRs to collaborators only
- Pin GitHub actions (peter-evans/create-pull-request@v8 → peter-evans/create-pull-request@5f6978f...)
English
Jeff is free. retweetledi

High-Demand & High Paying Tech Skills for 2026
1. Cloud Engineering (AWS | Azure | GCP)
2. DevOps & Automation (CI/CD | IaC | GitOps)
3. Kubernetes & Containers
4. Cybersecurity & Cloud Security
5. Data Engineering
6. AI/ML Integration (LLMs, RAG, MLOps)
7. Platform Engineering
8. Full-Stack Development (Frontend + Backend + APIs)
9. SRE & Reliability Engineering
Pick one. Go deep. Build real projects.
English
Jeff is free. retweetledi

Won Nova AI Hackathon what a success🎖️🥳 #technalogia #tech @amazon @awscloud @AmazonNova_ #AI #AmazonNova


English
Jeff is free. retweetledi

@PredicHistory What are Iran's goals and are they achievable?
It seems to me that their destruction is unavoidable regardless of the American's win or loss
English
Jeff is free. retweetledi
Jeff is free. retweetledi
Jeff is free. retweetledi
Jeff is free. retweetledi

Announcing SitDeck.com:
A free, real-time, AI-powered OSINT dashboard w/ 180+ data feeds, 55+ widgets, 70+ map layers, alerts & more.
Conflicts. Earthquakes. Flights. Nukes. Cyber threats. Elections.
All live. All in one place.
Monitor the situation. For free.

English
Jeff is free. retweetledi
Jeff is free. retweetledi
Jeff is free. retweetledi










