Humano de apoyo emocional. No acariciar. Ofertas Amazon en @LoboCompras. Podcast efímero en @aRoscachapa. Mismo nick en todas las RRSS del universo.
Madrid, Comunidad de Madrid ES
Joined March 2009
- Tweets86.1K
- Following510
- Followers3.2K
- Likes6.2K
Pinned Tweet
Comprad mis hermosos jabalíes y ayudadme a hacer obra social ❤️ ¡Y #pásalo a tus amigos/as, enemigos/as, compañeros/as y familiares/us!
teapawt.org/LoboCompras/status/172…
Ofertas diarias de Amazon España sobre tecnología, juguetes, perfumes, moda, muebles, electrodomésticos ¡y mucho más!
¡Únete y no te pierdas ni una!
WhatsApp: whatsapp.com/channel/0029Va7…
Telegram: t.me/lobocompras
Twitter/X: teapawt.org/lobocompras
Javier Lobo retweeted
Bulos del 29N, tapados en tu feed de X.
Si aparece un post que repite un bulo ya desmentido por Maldita, Newtral o EFE Verifica, la extensión de Unrot lo tapa y te enseña el desmentido. Si quieres verlo igual, un clic.
No sé si lo había hecho alguien ya...
🤖 Made with AI
ALT Parodia de la mítica imagen de Rita Barberá diciendo "Vaya hostia", pero con Trump y Musk diciendo "What a fucking wipeout!"
Vamos para bingo #Vulnvember
🚨 BREAKING: A flaw in APT, the tool that installs software on Debian Linux, lets an attacker on the network tamper with a package after it passes verification and run code as root.
The bug, CVE-2026-109518, sits in resumed HTTP downloads. APT can merge two different downloads when a redirect gives them the same address, and a man-in-the-middle can then alter the file after its check.
Debian fixed it in apt 3.0.4, shipped to Debian 13 security updates on 4 November. Users should upgrade now.
Per Debian's changelog, the fix is four words long. "Open target files exclusively."
Javier Lobo retweeted
⚠️ 🇪🇸 🏦 🗄️ SECURITY ALERT – ALLEGED 3.55 MILLION BANKINTER (SPAIN) CUSTOMER RECORDS
[STATUS: ALLEGED / UNCONFIRMED / DATE: OCTOBER 31, 2026]
Centralized cyber-intelligence systems have intercepted a commercial offer on an underground data-trading forum, advertising the sale of a database titled "西班牙银行Bankinter 355万条数据" (Data for 3.55 million Bankinter customers in Spain). The seller claims the data originates from "public sources."
Based on the sample provided in the dataset:
Full Names:
Phone Numbers / Internal numerical identifiers.
International Bank Account Numbers (IBANs): Standardized structures corresponding to the Spanish banking system, including Bankinter’s entity code (128) and the country prefix.
Please be advised that the veracity of this data dump, the overall authenticity of the records being sold, and the origin of the data extraction have not been officially confirmed by the financial institution. As this involves an offer for sale on an underground marketplace, the status of the information remains alleged and unconfirmed.
Victim / Target: Bankinter — 🇪🇸 Spain.
Sector: 🏦 Banking, Financial Services, and Commercial Banking.
Stated Volume: 3,550,000 customer and account records.
Nature of the Incident: Commercial offer of a database exposing personally identifiable information (PII) and bank account details (IBANs) of users in Spain.
🛡️ PREVENTIVE TECHNICAL RECOMMENDATIONS FOR CONTAINMENT (SOC / CSIRT / BANKING SECTOR)
Transaction Auditing and Monitoring: Bankinter’s security teams must immediately audit exposed systems and implement strict monitoring of the account numbers and IBANs identified in the samples to prevent fraudulent transactions.
Customer Protection and Early Warnings: Issue security alerts to customers to warn them about potential fraud attempts or deceptive communications that utilize their actual account information.
Third-Party Vendor Verification: Investigate whether the data leak is linked to breaches within the technology service supply chain or external partner organizations working with the bank.
🖥️ CENTRALIZED THREAT MONITORING SYSTEM
Intelligence System: analyzer.vecert.io
Quickly check your security status at: monitor.vecert.io
Inquiries and services: vecert.io/contact
#Bankinter #Spain #BankingSecurity #DataLeak #DataBreach #BreachAlert #DatabaseLeak #IBAN #DarkWeb #Hacking #ThreatIntel #ThreatIntelligence #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert #CyberDefense #CyberRisk
Si tú o alguien de tu equipo tenía esta extensión oficial de Claude en VS Code, tú y/o tu empresa podéis tener un gran problema. Repórtalo a tu responsable de seguridad, no te hagas el/la orejas. Podría ser muy grave.
‼️ WARNING: Updating the poisoned Claude Code extension won't remove its backdoor, Kevin Beaumont says.
Cursor, which served the bad build to up to 5,000 users, warns that even uninstalling it may not be enough.
The backdoor never lived only in the extension. On loading, it planted the attacker's SSH key and its own startup scripts, which keep trying to open a tunnel to the attacker every 60 seconds or so.
An update swaps the extension's files but leaves the key and the scripts in place.
Una sociedad que desactiva el antivirus cada vez que se le interpone para piratear el Office, sentando cátedra sobre lo que puede o no puede ser un error humano.
Haciendo una auditoría de seguridad de las mías, he encontrado cookies de tracookiepixel[.]xyz al visitar @elespanolcom, @larazon_es y @espinof_com entre mayo y agosto.
El dominio pertenece a una infra publicitaria vinculada a operaciones de spyware documentadas por Citizen Lab.
¿Quién coño audita la publicidad que metéis en nuestros dispositivos? ¡Sinvergüenzas!
Más info: citizenlab.ca/research/how-d…
¡Hombre! ¡Primera vez que el puto Tebas me bloquea poder investigar vulnerabilidades porque hay señores pateando balones! Me cago en cristo rey...
Javier Lobo retweeted
Si tenéis un pfSense, actualizad ya los paquetes de PHP, hay que hacerlo por SSH.
pfSense-upgrade -c && \
pkg upgrade -y && \
pkg upgrade -fy pfSense-pkg-WireGuard && \
/etc/rc.reboot
netgate.com/blog/critical-ph…
Me dice mi Sonarr que han retirado "La Hormiga Atómica" de TVDB:
Series Atom Ant (tvdbid 106301) was removed from TheTVDB
Oficialmente indignado.
El puto asco que me está dando ver a los “faros de la izquierda” a navajazos en las redes y en las tertulias, justo cuando empezaba a atisbarse un poco de ilusión de los rojazos por la posibilidad de la unión.
De decepción en decepción. Sin parar desde el 15-M primigenio.
No vais a hacer cambiar de opinión a un fachapobre insultando. Tampoco sin insultar, así que… al menos, llevaos la satisfacción.
Javier Lobo retweeted
Update your Telegram Desktop app now!!!
One clicked link can lead to complete account takeover, researcher BeakSec found. It injects hidden commands that make the app send them your session files.
Telegram allegedly fixed the flaw, CVE-2026-107181, in 7.2.9.
