Varys

#btvvirtual is one of the ways - check @BlueTeamVillage tweets for updates

@UK_Daniel_Card do we have an example victim? / dm if preferred

WP2SHELL Batch method detected on a live site! IOCS: 62.113.210.14 - - [19/Jul/2026:00:06:23 +0100] "GET /wp-json/batch/v1 HTTP/1.1" 403 22109 "-" "Mozilla/5.0"

I have a report full of security issues of a software I'm working on. Codex won't fix them because of Cyber guardrails Fable won't fix them because of Cyber guardrails Kimi K3 fixed them all. No restrictions, just gets the job done. This will end badly for OpenAI & Anthropic.

🚨 Latest versions of WordPress are vulnerable to pre-authentication remote code execution (RCE) via SQL injection <= 6.8.5: not affected 6.9.0 - 6.9.4: affected 7.0.0 - 7.0.1: affected

With less than a month to go until #DEFCON34, we'd like to thank our Gold Sponsor, @FRSecure! 💙 Your support helps Blue Team Village bring defenders together to learn, connect, and grow. Thank you for helping make this year's village possible!

Minister: onderhandelingen over chatcontrole 2.0 weer in beweging #securitynl security.nl/posting/945179…

@Malwarehunterr @JAMESWT_WT he’s also servinv it on the IP ( 188.116.26[.]11) - also defect. Should work on windows and ios.

#Clickfix While analyzing a ClickFix page hosted on meet-webconnect[.]com, I noticed the clipboard payload currently copies only the string windows instead of a PowerShell command. - Clicking Fix Errors: - Copies windows to the clipboard - Displays instructions to paste it into File Explorer At the moment, this appears to be a placeholder/test configuration rather than an active payload. However, since the clipboard value is loaded separately via clipboardText.js, operators can easily swap it for a malicious command without changing the main JavaScript. IOCs: meet-webconnect[.]com clipboardText.js #Clickfix @500mk500 @skocherhan @abuse_ch @tvishwa107

The cat’s finally out of the bag! 🐈 Proud to announce that my book, The (Un)Natural History of Malware, is now available on the @nostarch website! 📖 nostarch.com/unnatural-hist…

⚠️Observed phishing URLs delivering RMM payload: RMM: ScreenConnect Theme: DocuSign URL: hxxps://xzwhkw[.]com/dcsnmnts1a/ MSI Download URL: hxxps://xzwhkw[.]com/dcsnmnts1a/Windows/download.php SHA256: 67221150c89a6c5336b9402cb7a2c4b0cf28396693e98ce41a2cd43a62325c16 #ThreatIntel #Phishing #RMM

INTEL DROP 🚨 Tracking multiple IP's possibly performing targeted exploitation against Fortinet devices. 213.177.179.28 213.177.179.33 213.177.179.36 213.177.179.41 Other IP's in the range Brute-force + scanning: 213.177.179.62 / 213.177.179.79 / 213.177.179.80 / 213.177.179.91 — brute-force 213.177.179.12 / 213.177.179.27 / 213.177.179.61 / 213.177.179.88 / 213.177.179.97 / 213.177.179.101 —scanners #TotalInsights #Fortinet #ThreatIntel

A highly sophisticated cyber attack.

@bslagter in fact they are chasing away anyone with initiative 🤷🏻‍♀️

FD: “Jacht geopend op kennismigrant voor AI, klimaat, defensie en biotech. Kabinet wil internationaal werven voor cruciale sectoren met oog op toekomstige welvaart” Haha, en tegelijk 36% aanwasbelasting invoeren. Succes met je jacht 😆😂

We are excited to have another CTF event by @VenatorAurum in our village this year.

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

Blue Team Village #DEFCON 34 is still looking for volunteers to help make this year's village a success. Whether you're a seasoned volunteer or it's your first time, we'd love to have you on the team. Sign up here forms.gle/2s8t8tc3qS8mFK…

Cloudflare built drag-and-drop deployment for HTML, CSS, and JavaScript. Developers see a quick way to share a prototype. Threat actors see: 1. Phishing hosting 2. Credential collection 3. Fake downloads 4. Malicious JavaScript 5. Redirect infrastructure 6. A legitimate HTTPS URL 7. Automatic cleanup after roughly one hour Disposable infrastructure has never looked this friendly. cloudflare.com/drop/

Attn @defcon attendees, we have 27 days to go. Who’s ready for some hacker fun?!? We def are and can’t wait to see who will take the top spot for our official DC contest! Prizes will go to the top 3 so fine tune those CTF skills and get ready to have some fun with us! #defcon34

Hi we're Venator Aurum! We're an official @defcon contest stationed inside @BlueTeamVillage. We're not your average CTF. Physical & digital puzzles galore w/ lots of fun to be had. OSINT, Decoding, RE, lockpicks, & much more! Prizes for the top 3! Come check us out at DC34!

@UK_Daniel_Card thing is they treat everyone ( but politicians/ which are extempt) as suspects. Most people are decent and treating everyone as criminal is simply wrong 🤷🏻‍♀️

Child what????

🚨 BREAKING: Progress has warned ShareFile customers to immediately power down Storage Zone Controller servers due to a "credible external security threat." The company has disabled affected ShareFile accounts and says customers must manually shut down the on-premises servers while it investigates. It is unclear at this time if the threat involves a zero-day vulnerability or whether any Storage Zone Controllers have been compromised.

I was spoken by police for walking and running the few hours allowed “free” a day at the time. Took me long to get in shape again. Lost respect for a lot of such people in hindsight 🤷🏻‍♀️