Hugo | DevOps | Cybersecurity 🇱🇻

Hey @Cloudflare & @eastdakota I’ve been holding onto the cloudflare.lv domain for a while to ensure it doesn't fall into the hands of malicious actors for phishing campaigns in Latvia/Baltics. As a DevSecOps engineer and a big fan of your ecosystem, I’d love to transfer it to your official team completely for free. Let's get it secured properly! DMs are open. #CyberSecurity #Infosec #Cloudflare

CVE-2025-4981 - Critical RCE in Mattermost. Unpatched. CVSS 9.9. Archive upload path traversal allows arbitrary file write. Disable file uploads or restrict access immediately. #CVE #Mattermost #infosec #DevSecOps #DevOps more info: valtersit.com/cve/CVE-2025-4…

Is your self-hosted network actually secure? A brand new CVE-2026-40172 just dropped for Authentik, targeting Single Sign-On (SSO) gateways. Don't let hackers compromise your Proxmox cluster. #infosec #devops #proxmox #valtersit #CVE #CVEAlert #devsecops #hackers

CVE-2025-20309 - Critical default root credentials in #Cisco Unified CM and Unified CM SME. Unauthenticated remote login with static, unchangeable creds. CVSS 10. No patch available. Isolate affected systems immediately. #CVE #infosec #CVEAlert #networking More: valtersit.com/cve/CVE-2025-2…

CVE-2020-36849 - Critical RCE in Ait CSV import plugin for WordPress. Arbitrary file upload via missing validation. CVSS 9.8. Unpatched. Update or remove immediately. #CVE #WordPress #infosec #CVEAlert #DevSecOps #DevOps #sysadmin CVE Alerts and Patches: valtersit.com/cve/CVE-2020-3…

CVE-2025-41240 - Critical Supply Chain Attack in Bitnami Helm charts. Kubernetes secrets exposed at predictable path /opt/bitnami/*/secrets within web root. CVSS 10. Unauthenticated access to sensitive credentials via HTTP/S. #CVE #CVEAlert Patch: valtersit.com/cve/CVE-2025-4…

CVE-2025-5954 - Critical Privilege Escalation in Service Finder WordPress plugin. Unauthenticated users can register as admin. CVSS 9.8. No patch available. Disable plugin immediately. #CVE #WordPress #infosec #CVEAlert #Developers #sysadmin More CVE +PATCHES: valtersit.com/cve/CVE-2025-5…

@StarkPrivacy Theoretically, that is great news, but what will be in reality? Maybe they will add some backdoor or something in silent mode, as companies nowadays are driven by greed and money and if Canada bans them, then they lose a portion of the market

🌐 ProtonVPN contra la vigilancia en Canadá Proton VPN ha anunciado que se opondrá firmemente a las exigencias de vigilancia del gobierno canadiense incluidas en el proyecto de ley C-22. Afirma que no comprometerá su política de no registrar datos, ni sus medidas de encriptación, incluso si la legislación se aprueba. Según sus representantes, cumplir con órdenes de vigilancia extranjeras sin seguir el proceso legal suizo sería un delito en su país de origen.

@cptdankkk Hmm and Meta is growing supper fast with so much high quality innovations. Better look in the mirror before you say something bad about others.

Mark Zuckerberg says Apple's lack of innovation since the iPhone will lead to its decline "They haven't really invented anything great in a while. Steve Jobs invented the iPhone, and now they're kind of sitting on it 20 years later" "Year over year, I'm not even sure they're selling more iPhones at this point. Part of it is that each generation doesn't actually get that much better, so people are taking longer to upgrade" "They built stuff like AirPods, which are cool, but they've thoroughly hamstrung the ability for anyone else to build something that can connect to the iPhone" "I'm pretty optimistic that because they've been so off their game in terms of not really releasing many innovative things... eventually they'll get beat by someone"

CVE-2025-8853 - Critical Authentication Bypass in 2100 technology Document Management System. Unauthenticated attackers can steal user tokens and log in as any user. CVSS 9.8. Isolate affected systems immediately. #CVE #CVEAlert #infosec More: valtersit.com/cve/CVE-2025-8…

@VivekIntel Top Red Team Helper valtersit.com/cve/ Each CVE contains Docker Docker-based lab for testing purposes. Mitre and Yarn info + Workaround patch until official fix releases - Daily updates etc

Top 15 Red Team Tools Every Ethical Hacker Should Know ☠️🔴 1.🐉 MITRE CALDERA 2.🟢 Sliver 3.🩸 BloodHound 4.📡 Responder 5.📦 Impacket Suite 6.🖥️ Evil-WinRM 7.💠 CrackMapExec 8.🔐 Mimikatz 9.🐕 SharpHound 10.🪖 Kerbrute 11.👁️ Mimikatz 12.👻 Phantom-Evasion 13.🎯 Cobalt Strike 14.🛰️ DNScat2 15.💀 Veil-Evasion #CyberSecurity #RedTeam #EthicalHacking #Pentesting

CVE-2025-54049 Critical Privilege Escalation in Miniorange Custom API for WP. CVSS 9.9. Unpatched in versions <= 4.2.2. Disable plugin immediately. #CVE #WordPress #infosec #CVEAlert #DevOps #Develoeprs Patch, Test Lab and other CVES available: valtersit.com/cve/CVE-2025-5…

@Ayussheth Let’s build something beautiful

Thinking of starting a community for people who want to learn hardware, work in hardware, or just enjoy tinkering with things in general. Reply to the tweet if you want in.

CVE-2025-0280 - Unauthorized database access in HCL Compass. CVSS 7.5. No patch yet. Act now to mitigate. #CVE #HCL #infosec #cybersecurity #DevOps #DevSecOps #hackers More info, test Lab and workaround + other #CVE #CVEAlerts : valtersit.com/cve/CVE-2025-0…

CVE-2025-58637 - LFI in Immonex Kickstart <= 1.11.6. CVSS 7.5. Unpatched. Review and mitigate now. #CVE #WordPress #infosec #Developers #CVEAlert #DevOps #Sysadmin Patch and More info also others CVE alerts with patches: valtersit.com/cve/CVE-2025-5…

CVE-2025-9959 - High severity supply chain attack in Smolagents. Incomplete dunder attribute validation allows sandbox escape via prompt injection. CVSS 7.6. Review your use immediately. #CVE #infosec #smolagents #CVEAlert #cybersecurity more: valtersit.com/cve/CVE-2025-9…

CVE-2024-34598 - Supply chain risk in Goodlock prior to 2.2.04.95. Local attackers can install arbitrary apps from Galaxy Store. CVSS 7.7. No patch available. Restrict access and monitor. #CVE #Samsung #infosec #CyberSecuiryt #CVEAlert #businessman More: valtersit.com/cve/CVE-2024-3…

CVE-2025-58355 - Critical RCE in Soft Serve. SSH API allows arbitrary file write. CVSS 7.7. Fixed in v0.10.0. Update immediately. #CVE #infosec #Git #CVEAlert #DevOps #Developers #DevSecOps More: valtersit.com/cve/CVE-2025-5…

@Dinosn Auch, that will be painfull and the reputation is already damaged

Charter Communications confirms data breach as hackers threaten leak of 42 million records cyberinsider.com/charter-commun…

Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets securityaffairs.com/192538/apt/gho…

@three_cube Maybe should create a video on this topic to build your own at-home parts from Aliexpress

Stingray's are notorious for proving intelligence agencies access to your cellphone traffic. Did you ever consider building your own? Now you can! Join our June class on; Building Your Own Mobile Network, June 16-18 You can use this cell tower (BTS) to keep your companies data safe from interception or use it as a cell site simulator (Stingray). Part of Subscriber Pro and Signals Intelligence programs. hackersarise.thinkific.com/bundles/sdr-si…