Bob Diachenko 🇺🇦 @MayhemDayOne
Cyber Threat Intelligence @ https://t.co/fC73RSevWP, journalist, OSINT | Responsible disclosures | Security consultancy | Contact me: [email protected] linkedin.com/in/vdyachenko Germany/Ukraine 🇺🇦 Joined February 2016-
Tweets2K
-
Followers18K
-
Following531
-
Likes897
Thing is that this (or similar) data has been sitting in open elasticsearch cluster at least since April 2025. Company did not care about closing it, despite my alerts. See below (don't be distracted by 'raaga-users' numbers, other collections contain sensitive data too, hence 10M).
Is anyone still here? please reply to this thread to let me know if it is still worth publishing reports/news on this platform as I have almost migrated to linkedin.
This is NOT a single source. It's not about the number (scary!), but the scale and raise of infostealers infections today. What this number reflects is the size of of different infostealers logs exposed publicly since the beginning of this year alone. cybernews.com/security/billi…
China is leaking data like no other country in the world recently. We register it all and analyze thoroughly. Read more about our latest find, if you missed it: cybernews.com/security/chine…
RU-hosted Troyan-As-A-Service infrastructure config (accidentally exposed).
As per my knowledge, no US or EU citizen was on this list.
Apparently, it was very limited and was part of The Kingdom of Bahrain's Joint Counter Terrorism Centre (JCTC) responsible for gathering and analysing information regarding terrorist organisations and affiliated individuals.
It's been more than 3 years ago but this post keeps popping up and my DM is full of requests from people who think they are on this list. Let me assure you are not. There's been a development since then regarding the owner of this list.
Apparently, this is the TSC (Terrorist Screening Centre) dataset publicly exposed (tsc_id is the only clue), with 1.9M+ records. In any case, any thoughts as of where to responsibly report?
@Gi7w0rm yeah that's the simpliest way to do it, aws team just shut it down and no justice )
"В целях исключения сбора информации о критических уязвимостях ресурсов, индексирования персональных данных и использования собранной информации в зарубежных моделях машинного обучения и анализа".
Interesting. Here is the list of recommended websites configuration sent by russian "Center for Monitoring and Managing the Public Telecommunications Network" to the critical infrastructure enterprises. In total, 653 search bots and crawlers are to be blocked.
@xeraa a lot of developers sincerely think that changing a default port makes the instance secured
Lost in translation maybe? :) Anyway, read the full story here: cybernews.com/security/chine…
Raysharp also provided a really weird comment when asked about the exposure which I would like to bring up here: “Elasticsearch is an open-source log service system, with port 9500 only used for log queries during product development. Under normal circumstances, it is not necessary to use it. Only when there is an abnormality in the product, it is necessary to query the product log through port 9500 to assist in locating the problem. At present, the service on port 9500 is temporarily suspended. After resolving the issue of this vulnerability, it can be opened again”.
Recently I reported very interesting leak related to Raysharp (a Chinese manufacturer of video cameras, recorders, and other surveillance products). While it may not be a household name in every corner of the world, it has established itself as a reputable provider of security surveillance solutions in certain regions or markets. Such as Russia, for example. Thread below:
Raysharp has its production server with filebeat logs exposed where more than 3 Billion (!) records stored. Of course, it was not super sensitive as passwords or even emails, but still - these data points could tell someone a good story:
We are working with @cybersecdawg and @4353_37 on a project that should help companies quickly respond to the fast-growing issue with API keys leaks. Unfortunately, @Shopify, @stripe, @PayPal and other industry players underestimate this problem and prefer not to mention numerous exposures (and not all of them re-surface on greyweb forums, most are privately sold).
Proud and excited to be part of Mind The Sec once again, one of the most important events in the region!
Palestrante confirmado! Bob é Pesquisador de segurança e jornalista, ganhando reputação como um dos mais respeitáveis analistas de segurança da atualidade. Garanta seu ingresso para a edição de 10 anos do Mind The Sec! Link: bit.ly/3V70pRx
Troy Hunt @troyhunt
250K Followers 1K Following Creator of @haveibeenpwned. Microsoft Regional Director. Pluralsight author. Online security, technology and “The Cloud”. Australian.
Florian Roth ⚡️ @cyb3rops
221K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
mRr3b00t @UK_Daniel_Card
123K Followers 8K Following Department of Cyber WAR. Member of the Counter Spider Collective. Wielder of AI to defend in Cyber Space. Ralph Vibe Specialist. VibeOps Operator!
BleepingComputer @BleepinComputer
255K Followers 206 Following Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
Germán Fernández @1ZRR4H
38K Followers 463 Following 🏴☠️ OFFENSIVE-INTEL 🏴☠️ Cyber Threat Intelligence by Hackers | Security Researcher at https://t.co/rDrSxZStZD | @CuratedIntel Member | 🥷🧠🇨🇱
Justin Elze @HackingLZ
71K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Will @BushidoToken
38K Followers 3K Following Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth @darknetdiaries #126: REvil
Md Ismail Šojal �... @0x0SojalSec
45K Followers 5K Following Cyber_Security_Re-searcher || Ai Re-searcher || AI-Sec|| Malware Analysis II iOS || Pwn || 0SINT || Project AI-StrikeSec || 0ldAccounts Suspended @0xSojalSec ||
☣ KitPloit - Hacker... @KitPloit
116K Followers 3K Following Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
CyberKnow @Cyberknow20
37K Followers 3K Following Situational Awareness | Threat Intelligence | cybertracker | Hacktivism | Meme Farmer Digital Owl of the Cyber Realm Posts and Opinions are my own
Clandestine @akaclandestine
61K Followers 5K Following | Security | Osint | Threat Research | Opsec | Threat Intelligence | Infosec | Threat Hunting | Humint |
Kim Zetter @KimZetter
94K Followers 3K Following Journalist - cyber/national security. Author - COUNTDOWN TO ZERO DAY: Stuxnet and the Launch of the World's First Digital Weapon. https://t.co/334DzfSL1f
blackorbird @blackorbird
42K Followers 702 Following Peace and Love. Just Analysis/Hunter/Youtuber/AiCoder/Entrepreneur/. #APT #threatIntelligence #Exploit #CTI #meme #cyber #hacker #OSINT #Ai Need Remote Job
Dawood Sajjadi (دا�... @5tuxnet
8K Followers 1K Following CyberSec Pro | Lifelong Learner | PhD from UVic | SMIEEE | CISSP | Director of SRE at Fortinet | Archiving News, Views are my own. (Signal ID: stuxnet.01)
uɐpʇou@ ✸ @notdan
22K Followers 3K Following genuinely flawed satire ه҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿ im U17r4H4rd(0r3 d00d
Thomas Roccia 🤘 @fr0gger_
35K Followers 2K Following AI Security x Threat Intel · Threat Researcher · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @Microsoft @McAfee_Labs
Jeremy Kirk @Jeremy_Kirk
14K Followers 7K Following Threat intel @Okta. Personal account. Interests: AI, cyber threat intelligence, cybercrime, data breaches, OSINT.
Luis Madero @_Y000_
7K Followers 570 Following Ingeniero en sistemas 👨🏻💻 Maestro de inglés 👨🏻🏫. Solo un apasionado al 'HACKING ÉTICO' y reportar vulnerabilidades web ✨
Y2WATERMARK @Y2WATERMARK
329 Followers 539 Following "Nobody knows who I am or what I do. Not even I." - DJM
BlvckDonXIII Hub @HabliH10291
15 Followers 117 Following PrimeVerify Hub 连接客户和合作伙伴与银行及验证服务机构。安全、保密、高效。 TELEGRAM & WECHAT: @VeriffkycOT_c
Nima Amini @nimasy26
3 Followers 30 Following
- @twodevnull
36 Followers 2K Following
Roey Bartov @RoeyBartov
0 Followers 67 Following
TIME_WAIT @TIME_WAIT_0
0 Followers 12 Following
Aashish @_no_rumor
0 Followers 508 Following
not important @not_important_
446 Followers 3K Following ⚖️⚔️Verfechter der freiheitlich-demokratischen Grundordnung⚔️⚖️ 🖤❤️💛
Gh0stM3rc @Gh0stM3rc
8 Followers 534 Following
Ryan Williams @Willicious3
172 Followers 2K Following Married Father of 2 Girls, Oregon Alum and a Mortgage Broker in the Portland area. Go Ducks!
mmeeoo @mmeeoox0
0 Followers 35 Following
Baba_Vooos @je_fou_le_Seum
697 Followers 3K Following CEO of @StillStand224. Jamais renoncé est la devise. #Geek $btc #SystemAndNetwork #WinLinuxUX #CiscoJuniper #Database #Security #Fortinet #Still_Stand fièrement
Halit Alptekin @crimedisruptor
86 Followers 451 Following Final Boss of the Threat Actors • Cybercrime Disruptor • Heir of the Akindji • Silent in noise, lethal in shadow.
Arjun Raval @arjun_raval
27 Followers 434 Following
Samuel MacLachlan @samuelmac
317 Followers 1K Following ICT Professional, aviation enthusiast, sci-fi geek, and meme connoisseur. Views are my own.
Security Talent @Securi3yTalent
350 Followers 3K Following JS Dev | Penetration Tester | malware analyst
Mualiful Mizan @Mualiful_mizan
99 Followers 256 Following
- @Oxfr0g
76 Followers 378 Following SOC Analyst | OSDA & ( eCIR & eCTHP ) Certified | DFIR & Threat Detection | CTF Player | Pen-100
Thealienroot @thealienroot
1 Followers 275 Following
Cyberthings @pocpov_
5 Followers 77 Following
Ista @IstaPee
156 Followers 2K Following
Iron @dmrfth77
35 Followers 831 Following
Décio C. Silva @DcioCSilva1
3 Followers 341 Following
Q8CyberTi @Q8CyberTi
358 Followers 308 Following Phishing Campaigns Tracker | Kuwait 🇰🇼 | Standing Strong Against Phishing Threats 💪 https://t.co/0yjbihBFpu
Oleg @Cyber_0leg
878 Followers 528 Following #Cybercrime #CTI #OSINT #Cybersecurity https://t.co/b3uWuDBEVs
Pujitha Gangireddy @PujithareddyG
0 Followers 58 Following
Brian Halbach ☕️ @brianhalbach
1K Followers 6K Following Who has two thumbs and can count to ten. Does cyber security things | abyss gazer | opinions are my own | (he/him)
Al @tingajx
68 Followers 866 Following
Stefan Rozek @stefan_roz75472
13 Followers 847 Following
kafetero777 @kafetero777
91 Followers 247 Following
taobao86 @taobao861
103 Followers 3K Following
M4lcode @M4lcode
699 Followers 365 Following Malware researcher exploring malware, APT groups, and their campaigns across the wild. | Threat Researcher @dexpose_io | GREM | Blog Author @anyrun_app
vx-underground @vxunderground
440K Followers 362 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Troy Hunt @troyhunt
250K Followers 1K Following Creator of @haveibeenpwned. Microsoft Regional Director. Pluralsight author. Online security, technology and “The Cloud”. Australian.
MalwareHunterTeam @malwrhunterteam
254K Followers 37 Following Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
Nicolas Krassas @Dinosn
157K Followers 770 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKZLB Posting content that I find interesting.
BleepingComputer @BleepinComputer
255K Followers 206 Following Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
Luke Stephens (hakluk... @hakluke
100K Followers 2K Following Hacker, marketer. I manage socials and marketing for cybersecurity orgs. Founder of @hacker_content and @haksecio
Shodan @shodanhq
112K Followers 2 Following Monitor your external network, search the Internet of Things and perform empirical market research. You can also find us on https://t.co/nPLFbFy8R5
x0rz @x0rz
95K Followers 418 Following Cybersecurity & Threat Intelligence. Knowledge is power, France is bacon 🥓
Dark Web Intelligence @DailyDarkWeb
193K Followers 0 Following We work in the dark to bring clarity to the light.
uɐpʇou@ ✸ @notdan
22K Followers 3K Following genuinely flawed satire ه҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿҈̿ im U17r4H4rd(0r3 d00d
Thomas Roccia 🤘 @fr0gger_
35K Followers 2K Following AI Security x Threat Intel · Threat Researcher · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @Microsoft @McAfee_Labs
Jeremy Kirk @Jeremy_Kirk
14K Followers 7K Following Threat intel @Okta. Personal account. Interests: AI, cyber threat intelligence, cybercrime, data breaches, OSINT.
Lorenzo Franceschi-Bi... @lorenzofb
52K Followers 3K Following Senior reporter @TechCrunch, writing a book on Hacking Team and government spyware. ☎️ Signal: +1 917 257 1382 https://t.co/6G1h8Iae3w
Metasploit Project @metasploit
253K Followers 182 Following Official account of the Metasploit Project, part of the @rapid7 family. Mastodon: @[email protected] Slack: https://t.co/ZOLPDG2O2s
Danny Willems🛡️ @dwillems42
2K Followers 3K Following Mathematician, working on @zcash Interested in applied mathematics (cryptography, type theory, formal verification), or "high assurance cryptography".
Grégory Boddin @gboddin
158 Followers 99 Following @leak_ix CTO/co-founder, addicted gopher. Believes in offsec for good and for everyone.
JayeLTee @Jayeltee1337
582 Followers 27 Following Leaks everywhere. I mostly post on my infosec profile; follow me there. My finds: https://t.co/7fzdfhvux0
Molfar @molfar_agency
16K Followers 204 Following Ukraine's private intelligence firm. Open International Intelligence Institute. OSINT investigations, analytics & training. https://t.co/d3IOfZSvY3
Gi7w0rm @Gi7w0rm
19K Followers 819 Following Threat Intelligence Analyst | Projects: https://t.co/azRpNg9NJQ & https://t.co/SyvUfXpbmI | If I post false intel, contact me! Support me: https://t.co/5WgDqr0K8p 🇪🇺🇩🇪🇺🇦🌈
OSINTtechnical @Osinttechnical
1.7M Followers 926 Following PAI enjoyer, OSINT guy @hntrbrkmedia, my views/freezing cold takes are my own. For full disclosures, visit https://t.co/JOtQx4pI3e.
Dark Web Informer @DarkWebInformer
221K Followers 72 Following One guy. Global cybercrime. Tracked so you don't have to. Ransomware, data breaches, dark web activity, darknet markets, IOCs & emerging threats. Stay informed!
Андрій Сень... @sydoriv_castle
10K Followers 430 Following старший солдат ЗСУ, інколи балакаю в KDK, розважався в @zak_rutka, працював в Гуд Ібенінг
The Record From Recor... @TheRecord_Media
22K Followers 467 Following Covering the world of cyber and intelligence from every angle.
Cloooud |🇺🇦 @GloOouD
197K Followers 622 Following 🇺🇦Osinter, associated with NATO intelligence services and the Main Intelligence Directorate. War footage, news. TG channel https://t.co/wDLaD1CgiU
Validin @ValidinLLC
2K Followers 463 Following Validin is a next generation internet intelligence platform.
Nikhil @SecretsN1nja
534 Followers 645 Following █ۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗ█ۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗฏ๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎ Researcher █ۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗ█ۗۗۗۗۗۗۗۗ
ʞʞıdɐɔoɥƆ @Chocapikk_
4K Followers 317 Following Security Researcher & Exploit Developer @VulnCheckAI
Tatarigami_UA @Tatarigami_UA
209K Followers 159 Following Former UA officer Founder of the Frontelligence Insight To support my work: https://t.co/A9oLjGWIYc Have insights on Russia? Write to [email protected]
☁️ Andres Riancho @AndresRiancho
1K Followers 116 Following Application and Cloud security expert. Hacker.
DeepState UA @Deepstate_UA
57K Followers 55 Following Канал ґрунтовної аналітики внутрішньодержавної та міжнародної ситуації. Про події в Україні та Світі стисло, розгорнуто та влучно. 👉🏻https://t.co/9dVLrZHdgE
Cyber.Anarchy.Squad @theway_3119
980 Followers 51 Following We are a Ukrainian hacker group that fights for the freedom of our people and state. Glory to Ukraine, ave C.A.S - У невідоме дорога найближча. © Василь Стус.
Ukraine Reporter @StateOfUkraine
54K Followers 18 Following Award-raking muckrakers and researchers from Ukraine and Russia with long-standing ties to the US and MENA. Protecting identities to preserve independence.
FOFA @fofabot
14K Followers 193 Following Cybersecurity Search Engine Contact Email: [email protected] Telegram: https://t.co/E5EcKr5Kyl
NOELREPORTS 🇪🇺 ... @NOELreports
527K Followers 400 Following Media platform covering global conflict zones. Focus on the Russian-Ukrainian war. If you'd like to support our voluntary work: https://t.co/PmM2wwDA1Y.
WarTranslated @wartranslated
733K Followers 973 Following 🇪🇪 Estonian-born blogger | https://t.co/olceNoeCxI | https://t.co/JckIQOdLob
Hunter @HunterMapping
26K Followers 182 Following Internet search engine for security researchers Contact Us: [email protected]
Проф. Преоб�... @prof_preobr
331K Followers 98 Following Запомните: вы должны молчать и слушать, молчать и слушать, что вам говорят!
Dmytro Putiata @kriegsforscherD
121K Followers 377 Following April 2022 — April 2026 veteran: SOF, 36 marine brigade, General Staff, 20 unmanned systems brigade. Drone warfare expert.
SecurityTrails, A Rec... @securitytrails
13K Followers 1K Following Security Trails was acquired by Recorded Future. To see what's new, visit @RecordedFuture.
Recorded Future @RecordedFuture
108K Followers 2K Following Recorded Future. Know what matters. Act first.
Special Kherson Cat �... @bayraktar_1love
459K Followers 423 Following Cat owner from Kherson🇺🇦. Here I post mainly about ongoing war in Ukraine and situation in my hometown Kherson, liberated 11/11/2022. (fled from Kherson)
IgorGirkin @GirkinGirkin
245K Followers 134 Following
Oleksii Reznikov @oleksiireznikov
592K Followers 188 Following Minister of Defence of Ukraine November 2021 - September 2023
Defense of Ukraine @DefenceU
2.2M Followers 96 Following Official page of the Ministry of Defense of Ukraine 🇺🇦 Minister: @FedorovMykhailo
BlueSauron👁️ @Blue_Sauron
200K Followers 120 Following Provide coverage on the military side of a conflict, currently focusing on || #Ukraine #Donbas ||
Harlad Farhage. I hat... @HarladF
4K Followers 370 Following Why is most 'progress and growth' only making things worse for humans?
Mårten Mickos @martenmickos
31K Followers 142 Following CEO in the service of AI startup CEOs. Former CEO of HackerOne, Eucalyptus Systems, MySQL.
Anonymous TV 🇺🇦 @YourAnonTV
529K Followers 408 Following We are #Anonymous, an internet-based international collective from all around the world | Get the latest updates on global conflicts and Anonymous Ops
SOS Intelligence @SOSIntel
20K Followers 2K Following Dark Web Intelligence. We find what's been stolen before it's weaponised. https://t.co/aQgEdlJVPl
Михайло Под... @Podolyak_M
1.8M Followers 300 Following Mykhailo Podolyak. Advisor to the Office of the President of Ukraine Volodymyr Zelenskyy
Rob Lee @RALee85
702K Followers 4K Following Senior Fellow @FPRI. Previously @USMC, @ColumbiaSIPA, @CentreAST. Focused on Russian defense policy.
You might like
