Roger_Cursor @Roger_Cursor

🧵 ¿Sabes como funciona realmente un servidor web como Apache? 🌐 Antes de hablar de tipos de ataques, hay que entender qué ocurre cuando escribimos una URL en el navegador. Vamos a verlo paso a paso. 👇 1/12

INTELIGENCIA ARTIFICIAL AGÉNTICA DESDE LA PERSPECTIVA DE PROTECCIÓN DE DATOS. 2026 Agencia Española de Protección de Datos Descargar: aepd.es/guias/orientac…

50 websites that feel like the internet’s hidden toolbox 1. unpaywall.org — Free research papers 2. openlibrary.org — Borrow books online 3. doaj.org — Free academic journals 4. alternativeto.net — App alternatives 5. justwatch.com — Find where to stream 6. archive.org — Internet archives 7. gutenberg.org — 70K+ free books 8. openstax.org — Free textbooks 9. openculture.com — Free courses 10. wolframalpha.com — Solve complex problems 11. photopea.com — Photoshop alternative 12. squoosh.app — Compress images 13. remove.bg — Remove backgrounds 14. cleanup.pictures — Remove objects 15. unscreen.com — Remove video backgrounds 16. carbon.now.sh — Beautiful code images 17. ray.so — Code screenshots 18. shots.so — Product mockups 19. smartmockups.com — Create mockups 20. haveibeenpwned.com — Check data breaches 21. virustotal.com — Scan files & URLs 22. privnote.com — Self-destructing notes 23. temp-mail.org — Temporary email 24. file.io — Temporary file sharing 25. archive.ph — Save webpages 26. similarsites.com — Find similar websites 27. radio.garden — Explore global radio 28. everynoise.com — Discover music genres 29. tunefind.com — Find songs from shows

🤖 Shadow AI y hábitos inseguros: el nuevo desafío para la ciberseguridad empresarial Un nuevo informe de WatchGuard Technologies revela que el 64% de los empleados usa herramientas de IA no autorizadas y que prácticas como la reutilización… ¿Qué opinan? ciberseguridadlatam.com/shadow-ai-y-ha…

🛡️ A Hacker Used AI to Compromise an AWS Cloud Environment in Just 72 Hours Source: cybersecuritynews.com/aws-cloud-comp… A large-scale AWS intrusion reveals how AI-assisted attackers can chain familiar cloud techniques to move from initial access to full environmental compromise in roughly 72 hours, not through novel exploits, but through unprecedented speed, scale, and orchestration. The threat actor gained an initial access key to an AWS account by exploiting a weakness in an internet-facing application, then pivoted across applications, cloud infrastructure, source-control repositories, CI/CD pipelines, and runtime services. #cybersecuritynews

Acaba de confirmarse: Un incidente de seguridad en Vercel ocurrió después de que un empleado utilizó una herramienta de IA no verificada, lo que permitió a los atacantes explotarla y acceder a sistemas, robar datos y extorsionar a la empresa por $2M. Vercel fue víctima de una brecha de cadena de suministro basada en Shadow AI, donde un atacante comprometió un eslabón upstream y, a través de él, inyectó código malicioso que terminó desplegado en producción. El ataque aprovechó el uso de herramientas de IA no verificadas para acceder a sistemas y robar datos. El incidente resultó en la extorsión de $2M y la exposición de datos confidenciales. Los atacantes aprovecharon la confianza en la herramienta de IA no verificada para acceder a sistemas críticos. ¿Hay parche? No hay información disponible sobre un parche específico para este incidente. Sin embargo, es crucial que las empresas revisen sus políticas de seguridad y verifiquen el uso de herramientas de IA no autorizadas. ¿Estás en riesgo? Revisa esto: verifica el uso de herramientas de IA en tu empresa y asegúrate de que estén autorizadas y seguras. #Ciberseguridad #CVE #SeguridadDigital #PYMEsMX securityaffairs.com/194709/hacking…

MisLíneas - Consulta líneas telefónicas por CURP Consulta las líneas registradas a tu nombre en segundos. Ingresa tu CURP y revisa si hay números vinculados contigo, sin andar saltando entre decenas de portales. mislineas.com.mx

ST0P wasting hours searching for AI resources. Everything you need is already in one place. link:docs.google.com/document/d/1X9…

Han creado un Burp Suite completamente gratis y de código abierto. Se llama Hetty y permite interceptar, analizar, modificar y repetir peticiones HTTP igual que las herramientas profesionales de pentesting. → Proxy HTTP completo para auditorías web → Intercepta y modifica peticiones en tiempo real → Funciona en Windows, macOS y Linux Ya supera las 10.5k stars en GitHub. Te explico cómo funciona 👇

List of 15 websites where you can download unlimited books for free: 1. planetebook .com 2. oceanofpdf .com 3. freecomputerbooks .com 4. zlibrary .to 5. bookboon .com 6. gutenberg .org 7. manybooks .net 8. pdfdrive .com 9. digilibraries .com 10. openlibrary .org 11. standardebooks .org 12. librivox .org 13. standardebooks .org 14. getfreeebooks .com 15. authorama .com add more👇

🚀 ALL FREE CERTIFICATION RESOURCES Level up your skills for FREE 👇 ☁️ AWS drive.google.com/drive/mobile/f… 🔐 CISSP drive.google.com/drive/mobile/f… 🛡️ CISA drive.google.com/drive/mobile/f… 📊 CISM drive.google.com/drive/mobile/f… ⚡ CRISC drive.google.com/drive/mobile/f… 📈 Digital Marketing drive.google.com/drive/mobile/f… 📌 Save this for later 🔁 Retweet to help others 🎯 Follow me @Tech_Arish for more free tech resources 🚀

I found a Vault of 27 FREE Cybersecurity Courses and Certifications that cover GRC, Offensive Security, Defensive Security, and Hand on Labs. You don't always need to pay money to gain knowledge and certifications. Sometimes great training and certifications are right in front of you. These particular courses are from Qualys and offer certifications. Before you go any further, stop and save 💾 this so you have it for later. 🟠 Vulnerability Management Learning Path: 1. Vulnerability Management Foundation 2. Vulnerability Management, Detection, and Response 3. CyberSecurity Asset Management (CSAM) 4. Enterprise TruRisk Management 5. Scanning Strategies 6. Reporting Strategies 7. TruRisk Eliminate 🟠 Policy Compliance Learning Path: 1. Policy Compliance (Foundation) 2. Policy Compliance (Deeper Knowledge) 🟠 PCI Compliance Learning Path: 1. PCI Compliance (Foundation) 2. PCI Compliance (Deeper Knowledge) 🟠 Endpoint Detection and Response Learning Path: 1. Endpoint Detection and Response (Foundation) 2. Endpoint Detection and Response (Deeper Knowledge) 🟠 Foundational courses Learning Path: 1. Endpoint Detection and Response Foundation 2. Vulnerability Management Foundation 3. Policy Compliance Foundation 4. PCI Compliance Foundation Additional Certified courses Learning Path: 1. Administration 2. Qualys Flow (QFLOW) 3. Custom Assessment & Remediation (CAR) 4. Endpoint Detection & Response 5. Qualys Query Language (QQL) 6. API Fundamentals 7. Cloud Agent 8 Container Security 9. File Integrity Monitoring 10. PCI Compliance 11. TotalAppSec 12. TotalCloud These are fantastic hands on labs and certs. They can definitely help you get a start in your Cybersecurity career. Make sure you take the time to save 💾 this guide. If this was helpful to you, please take the time to repost.♻ You can find the resources at linktr.ee/mikemillercyber Keep in mind, you can learn for free on HacktheBox, TryHackMe, Qualys, and a ton of other sites. I'm not affiliated with Qualys in any way, but thought my network could make good use of these. I'm curious which ones you'll start on first?

⚠️ Hackers Using FortigateSniffer Tool That Turns Compromised Firewalls Into Password Collectors Source: cybersecuritynews.com/fortigatesniff… A financially motivated threat actor has deployed a custom Golang-based tool called FortigateSniffer across more than 430,000 FortiGate firewalls globally, silently harvesting over 110 million credentials since at least February 2026, including confirmed data exfiltration from a NATO-aligned defense contractor. The threat actor, assessed to be an Initial Access Broker (IAB) motivated by financial gain, operated continuously through mid-June 2026, running 659 discrete harvest cycles with infrastructure that remains partially active at the time of writing. Tooling with Cyrillic-alphabet comments suggests a possible Russian origin, with potential links to ransomware groups or state-sponsored actors. #cybersecuritynews

Claude Opus 4.7 es una Ferrari que estás conduciendo como si fuera un Ford Focus. Por eso creé la guía definitiva de uso de Claude Opus 4.7 con todo lo que necesitas para exprimirlo de verdad. 12 capítulos. Prompts listos para copiar. Casos de uso reales. Automatizaciones. Cómo ganar dinero con él. Comparativa vs ChatGPT y Gemini. ¡GRATIS solo durante 24h! Solo: 1. Dale like 2. Comenta "Opus" 3. Sígueme para recibir el DM

CURSO GRATUITO DE 2 HORAS PARA AUTOMATIZAR UN NEGOCIO COMPLETO CON IA. Lo creó alguien con un negocio de $3M al año. Guárdalo ahora. ⬇️

Libro de HACKING - principiantes: drive.google.com/file/d/14mpTyZ…

50 Websites That Feel 'Illegal' But Are Totally Legal 1. cobalt.tools — Download any social media video 2. photopea.com — Free Photoshop 3. temp-mail.org — One-click temporary email 4. tinywow.com — 100+ free tools for a single website 5. archive.org — Access any old webpage 6. libgen.li — Millions of free textbooks 7. sci-hub.al — Free research papers 8. alternativeto.net — Find free app alternatives 9. justwatch.com — Find streaming locations for any content 10. gutenberg.org — 70,000 free classic books 11. pdfdrive.com — Free PDF downloads 12. openculture.com — Free courses from top universities 13. wolframalpha.com — Instantly solve any math problem 14. remove.bg — One-click background removal 15. cleanup.pictures — Erase objects from photos 16. unscreen.com — Free video background removal 17. squoosh.app — Free compression for any image 18. excalidraw.com — Free hand-drawn charts 19. carbon.now.sh — Turn code into artwork 20. ray.so — Stunning code screenshots 21. flightradar24.com — Real-time tracking for any flight 22. camelcamelcamel.com — Track Amazon price history 23. haveibeenpwned.com — Check if you've been hacked 24. virustotal.com — Scan any file for malware 25. privnote.com — Send self-destructing messages 26. file.io — Share auto-deleting files 27. archive.ph — Permanently save any webpage 28. accountkiller.com — Delete yourself from any website 29. radio.garden — Listen to any global radio station 30. tunefind.com — Find songs from any show 31. musicforprogramming.net — Focus music 32. mynoise.net — Custom focus soundscapes 33. annasarchive.org — Search every book ever written 34. elicit.com — AI research paper assistant 35. consensus.app — Search scientific consensus 36. connectedpapers.com — Visualize and map research 37. semanticscholar.org — Free academic search 38. scispace.com — Understand any research paper 39. summarize.tech — Summarize any YouTube video 40. phind.com — Developer AI search 41. regex101.com — Instantly test any regular expression 42. codebeautify.org — Cleanly format any code 43. explainshell.com — Understand terminal commands 44. tldraw.com — Infinite whiteboard in your browser 45. downdetector.com — Check if any website is down 46. tineye.com — Reverse image search 47. fast.com — Check internet speed 48. smallpdf.com — Free PDF editing 49. ilovepdf.com — Merge and split PDFs 50. 10minutemail.com — Instant temporary email All legal. All free. All hidden from you. Bookmark this before it disappears.

Anthropic publicó un taller gratuito de 26 minutos para aprender a hacer prompts de verdad. > sin registro. > sin muro de pago. > impartido por quienes lo construyeron. 🔖 guárdalo, vale la pena.