English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
leonov_av's profile picture. Vulnerability assessment, *nix security, compliance management, security automation

Alexander Leonov

@leonov_av

Vulnerability assessment, *nix security, compliance management, security automation

2KPosts 1KFollowers 368Following
You might like
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Nov 21

📄 November Linux Patch Wednesday. 516 vulns, 232 in Linux Kernel. One exploited in the wild. 64 more with public exploits. #Vulristics #Linux #Samba #ApacheTomcat #NVIDIACTK #Lasso #QuickJS #Keras #Django #Webmin #Squid #BIND #Suricata ➡️ t.me/avleonovcom/16…

0
0
0
0
39
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Nov 14

⚡️ November "In the Trend of VM" (#21): vulnerabilities in Windows, SharePoint, Redis, XWiki, Zimbra Collaboration, and Linux. Here's a big digest after several months - a total of 9 vulnerabilities! 🔥 #TrendVulns #PositiveTechnologies ➡️ t.me/avleonovcom/16…

0
0
0
0
54
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Nov 14

🚨 November Microsoft Patch Tuesday: 65 vulnerabilities, including 1 exploited in the wild (Windows Kernel EoP CVE-2025-62215). Linux CVEs clutter extended MSPT reports, so I'm covering MSPT-day only. #PatchTuesday #Microsoft #Windows #WinKernel ➡️ t.me/avleonovcom/16…

0
0
0
0
97
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Nov 13

🔎 ToolShell's original SharePoint RCE (CVE-2025-49704): demoed at Pwn2Own; PoCs on GitHub; observed exploited in the wild since July 7. #Microsoft #ToolShell #SharePoint ➡️ t.me/avleonovcom/16…

0
0
0
0
146
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Nov 10

👾 October’s exploited Windows EoP vulnerability (CVE-2025-59230) hits RasMan – few details so far, but it’s already in CISA KEV. #Microsoft #RasMan ➡️ t.me/avleonovcom/16…

0
0
0
0
100
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Nov 6

👾 CVE-2025-9491 - attackers can hide command-line args in a .LNK file’s Target field using whitespace characters to trigger RCE - used to deploy PlugX against diplomatic missions 🇭🇺🇧🇪. Microsoft refuses to fix. 🤷‍♂️⚠️ #PlugX #TrendMicro ➡️ t.me/avleonovcom/16…

0
0
0
0
328
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Nov 3

🚨 RCE in XWiki (CVE-2025-24893) lets guest users run arbitrary code via crafted SolrSearch requests. Fixed in 15.10.11 / 16.4.1 / 16.5.0RC1 (July 2024). 30+ exploits on GitHub. Now exploited in the wild to deploy cryptominers. #XWiki #VulnCheck ➡️ t.me/avleonovcom/16…

0
0
1
0
140
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 31

🎯🐧 CVE-2025-38001: Linux Kernel HFSC vulnerability = root privileges for local attackers. Patch came in June, exploit in July, media silence since. #Linux #LinuxKernel #HFSC ➡️ t.me/avleonovcom/16…

0
0
0
0
107
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 28

⚠️ Redis RCE "RediShell" (CVE-2025-49844): ~330k instances exposed on the Internet; PoC public. Patch to 8.2.2 now. #Redis #Wiz ➡️ t.me/avleonovcom/16…

0
0
0
0
319
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 27

🚨 Windows Agere Modem Driver (ltmdm64.sys) CVE‑2025‑24990 lets local attackers gain admin privileges — patched Oct 14, known since 2014; exploit public on Oct 16, CISA flags active attacks. #Windows #Agere #ltmdm64 ➡️ t.me/avleonovcom/15…

0
0
1
0
146
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 26

⚠️ XSS in Zimbra (CVE-2025-27915) lets JS run via an email with a malicious .ics — exploit published Sep 30; used in the wild vs Brazil’s military before Jan 27 patch. #Zimbra #StrikeReadyLabs ➡️ t.me/avleonovcom/15…

0
0
2
0
176
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 25

⚠️ CVE-2025-59287 — RCE in WSUS is being actively exploited in the wild; a public exploit is available — patch and reboot your WSUS servers now! #Microsoft #Windows #WSUS ➡️ t.me/avleonovcom/15…

0
0
2
0
259
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 17

October Linux Patch Wednesday. 801 vulns, 546 in Kernel. One exploited in wild. 39 more with public exploits. #Vulristics #Linux #VMware #Redis #RediShell #OpenSSH #7Zip #FreeIPA #Asterisk #MapServer #Binutils #OpenBabel ➡️ t.me/avleonovcom/15…

0
0
0
0
79
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 15

🪟 October Microsoft Patch Tuesday. 213 vulns - 2× September. 41 added mid-cycle. 4 exploited in the wild. #Vulristics #PatchTuesday #Microsoft #Windows #IGELOS #Chromium #Unity #WSUS ➡️ t.me/avleonovcom/15…

0
0
0
0
60
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 14

🚨 Elevation of Privilege in Sudo (CVE-2025-32463): local attackers can escalate to root. Exploits are public, patches released, KEV listed. #Linux #sudo ➡️ t.me/avleonovcom/15…

0
0
0
0
114
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 2

👾 ArcaneDoor strikes again: CVE-2025-20333 & CVE-2025-20362 allow remote code execution on Cisco ASA/FTD. Over 45k hosts at risk. #Cisco #CiscoASA #CiscoFTD #ArcaneDoor #RayInitiator #LINEVIPER #Shadowserver ➡️ t.me/avleonovcom/15…

0
0
1
0
481
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Oct 1

Exploit PoCs often hide in blogs or vendor pages. Now @VulnersCom gathers them too, making data more complete. 🧰📈 #Vulners #Vulristics #exploit ➡️ t.me/avleonovcom/15…

0
1
0
0
230
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Sep 30

September "In the Trend of VM" (#19): WinRAR, 7-Zip, SAP NetWeaver & TrueConf Server vulnerabilities — no Microsoft flaws this month! 😲🙂#TrendVulns #PositiveTechnologies #WinRAR #BiZone #ESET #RomCom #SAP #NetWeaver #Onapsis #7Zip #TrueConf #PTSWARM ➡️ t.me/avleonovcom/15…

0
0
0
0
130
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Sep 30

🚨 Critical RCE vulnerabilities found in TrueConf Server (BDU:2025-10114/15/16), security updates released Aug 27. #TrueConf #PTSWARM #PositiveTechnologies ➡️ t.me/avleonovcom/15…

0
0
0
0
79
leonov_av's profile picture.
Alexander Leonov
 @leonov_av
Sep 29

September Linux Patch Wednesday. In September, Linux vendors began addressing 748 vulnerabilities, slightly fewer than in August. Of these, 552 are in the Linux Kernel. Of all of them, the RCE in Asterisk looks the most promising. 🤔 What do you think? ➡️ t.me/avleonovcom/15…

0
0
0
0
58
anton_chuvakin's profile picture. Information security - #SIEM, #DFIR, #EDR formerly at Gartner! Now @GoogleCloud Office of the #CISO; host of @CloudSecPodcast https://t.co/VpKtfz8nXG

Dr. Anton Chuvakin

@anton_chuvakin
HackingDave's profile picture. Founder @Binary_Defense @TrustedSec Co-Owner https://t.co/HQC75WhdJh. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.

Dave Kennedy

@HackingDave
schneierblog's profile picture. Bruce Schneier is an internationally renowned security technologist and author. Described by The Economist as a "security guru"

Schneier Blog

@schneierblog
a66ot's profile picture. @tyunusov@infosec.exchange

Timur Yunusov

@a66ot
alukatsky's profile picture. Специалист по кибербезопасности. 30 лет стажа. Спикер, писатель. Гораздо больше пишу в https://t.co/oMc8iBgS8w

Alexey Lukatsky

@alukatsky
mikko's profile picture. Researcher and a best-selling author. Keynote talks at RSA, Black Hat & DEF CON. TED Speaker. Chief Research Officer at Sensofusion.

@mikko

@mikko
TGilmullin's profile picture. Software Engineering and Automatization Fuzzy Technologies Ln: https://t.co/FoDeISL2El Blog: https://t.co/N1UoHvVCue Code: https://t.co/rkTRwaXoac

Timur Gilmullin

@TGilmullin
VulnCheckAI's profile picture. Outpace Adversaries

VulnCheck

@VulnCheckAI
bessec_eng's profile picture. from Ural with love about #cybersecurity, #criticalinfrastructure and #ICS, audits, #dataprivacy, cybersec management and consulting. The main blog in telegram

BESSEC

@bessec_eng
jogibharat's profile picture.

Bharat Jogi 

@jogibharat
TulsiGabbard's profile picture. Director of National Intelligence. Former Presidential candidate & Congresswoman. Soldier. NYT bestselling author. (Views do not reflect position of USG/DoD)

Tulsi Gabbard 🌺

@TulsiGabbard
VMconf's profile picture. An international online event dedicated to Vulnerability Management

VMconf

@VMconf
dukebarman's profile picture. Yet Another Security Engineers lead. Blizzard games fan. Tweets are my personal opinions. #fuzzing https://t.co/xPnADlwcMP

Boris Ryutin

@dukebarman
straczynski's profile picture. Official since 2011. No story ideas please. Other than for promotion and PR I'm not here a lot, mostly on Patreon, so posts there will get a faster reply

J. Michael Straczynski

@straczynski
ptswarm's profile picture. Positive Technologies Offensive Team

PT SWARM

@ptswarm
gentilkiwi's profile picture. A kiwi coding mimikatz & kekeo github: https://t.co/eS3LVgU6i0 Head of security services @banquedefrance Tweets are my own and not the views of my employer

🥝🏳️‍🌈 Benjamin Delpy

@gentilkiwi
AttackerKb's profile picture. Community-driven information, analysis, and discussion of vulnerabilities and threats. Part of the @Rapid7 family.

AttackerKB

@AttackerKb
JanOliverWagner's profile picture. Founder and CEO of Greenbone Networks

Jan-Oliver Wagner

@JanOliverWagner
ArtyomSinitsyn's profile picture. Certified cybersecurity architect with 20 years in IT field | CISSP | CCSP | MCSE | Microsoft Alumni | Cybersecurity speaker & podcast host | ex-Microsoft MVP

Artem Sinitsyn

@ArtyomSinitsyn
BSidesLjubljana's profile picture. :: Security #BSidesLjubljana event official account :: 13th of March 2026 | @muzej | https://t.co/TGQ9qO9avH | 90% time @lowk3y does the tweeting :)

Security BSidesLjubljana

@BSidesLjubljana
GreenboneEN's profile picture. IT security vendor providing vulnerability management solutions to help companies achieve sustainable resilience. Find us at https://t.co/x9mrb8mbGd

Greenbone AG

@GreenboneEN
sawaba's profile picture. 🎙️ Enterprise @secweekly Podcast, 🤝 Founder @bsidesknoxville, 🗣️ Faculty @IANS_Security, 🍳 Cooking, 🏎️ F1, ⛰️ Hiking

Adrian Sanabria (@[email protected])

@sawaba
georgiaweidman's profile picture. Author: Penetration Testing Founder: @bulbsecurity & @shevirahsec Professor: @UMDGlobalCampus @SCSU & @purdueglobal

Georgia Weidman

@georgiaweidman
nushinde's profile picture. Software Security Engineer

Narendra Shinde

@nushinde
BelevgEvgeny's profile picture. Community Management Consultant | #communitymanagement , #security , #infosec , #IT , #AI | Practice Thai in my free time

Evgeny Belenky

@BelevgEvgeny
mruef's profile picture. infosec researcher @scipag · lead architect @vuldb · lecturer @eth @fhhwz @hslu @ikf_lucerne · keynote speaker · book author 🐘 https://t.co/ilVrKNH5Jc

Marc Ruef 𖢥

@mruef
MarcoErmini's profile picture. CISO @EQSGroup. PhD educated. Personal account, RTs are not emoluments.

Marco Ermini

@MarcoErmini
barryfyoung's profile picture. IT Professional for 19years. Specialising in Compliance , Privacy and Security

barry young

@barryfyoung
viktor_larionov's profile picture.

viktor_larionov

@viktor_larionov
CyberCentralCon's profile picture. CyberCentral is one of Europe's Most Exclusive Events focusing on technical presentation, workshops & #strategic discussions from #CISOs to #CyberCrime #Experts

CyberCentral

@CyberCentralCon
wallarm's profile picture. Wallarm is the fastest, easiest, most effective way to block API attacks in real-time

Wallarm

@wallarm
essobi's profile picture. Hyperlexic Polymath Savant GenTech / AI Consultant CTO @ https://t.co/aRlDQqW7Y3 EX-Heroku T&S Language Model Expert. #TrillionaireTokenClub #RunLocal

Kyle 'esSOBi' Stone

@essobi
L_AGalloway's profile picture. @paymentvillage lead, Director of Security Research, security @ https://t.co/xEW1ag9WDA art @ https://t.co/2XClvIwPV7

Leigh-Anne Galloway

@L_AGalloway
GiftsUngiven's profile picture. Web - Net - Hardware. Funemployed. In search of sunrise

Gifts

@GiftsUngiven
SymbianSyMoh's profile picture. Daemon at @Seekurity, Bitcoin CypherPeer, Coding, Analyzing, Hacking, Reversing, Building & Breaking since Y2K-1, @OWASP, CD8736C76472167C, https://t.co/NDGFb1a66s

₿asset 丰

@SymbianSyMoh
DC7499's profile picture. Our group are open to anyone who is willing to share their ideas and research results and for whom information security is not just a job, but a real passion.

DC7499

@DC7499
obodryk's profile picture. - CISO for Global Managed Services @SAP-like company - Former Threat Intel Analyst @iSIGHT Partners - Former Head of Security Architecture @Fortune500

Alex Bodryk

@obodryk
asintsov's profile picture. was born in '85, still alive...

Alyosha Sintsov

@asintsov
stevenerat's profile picture. MOVED: https://t.co/rwbb27KFX9

StevenErat https://bsky.app/profile/stevenerat.com

@stevenerat
APr8020's profile picture. CISM, CIPP/E, CDPSE, LA27001 | Advisor and Mentor | I create cybersecurity and privacy toolkits focusing on compliance #ISMS #ISO27001 #GDPR #ISO27701 #DORA

Andrey Prozorov

@APr8020
nicksciberras's profile picture. Principal Product Manager @ Invicti Security

Nicholas Sciberras

@nicksciberras
brittocan's profile picture.

Britto

@brittocan
TigerOptics's profile picture. Дистрибьютор кибербезопасности. Читайте наш блог https://t.co/fW8weA7p8P

Tiger Optics

@TigerOptics
______flick's profile picture. I live my life 9.8 m/s/s at a time.

andrew

@______flick
romanilyin's profile picture. Networwk security, Security Audit, Penetration tests, Consulting, Reverse Engeenering, Ethical hacking

Roman Ilyin

@romanilyin
gniiiptzi's profile picture. https://t.co/PhB7JZ8Zsp

Банк данных угроз

@gniiiptzi
lukasafonov's profile picture. Information Security Evangelist

Luka Safonov

@lukasafonov
jerh17's profile picture. CEO & Co-Founder @hackenclub, Blockchain Security & Compliance | Forbes 30 Under 30 | Ethical Hacker

Yev🇺🇦

@jerh17
benheise's profile picture. Infinite Curiosity, limited time. Veteran. Creator of @rallysecurity. Views not those of my employer. he/him. @benheise@infosec.exchange

@[email protected]

@benheise
ossecproject's profile picture. The official Twitter home for the OSSEC Project. OSSEC is an open source host-based intrusion detection system. Visit us at https://t.co/f9JFQIAWhM.

OSSEC Project

@ossecproject
owasppoland's profile picture.

OWASP Poland

@owasppoland
arussellmorris's profile picture. technophile by day, technophobe by night

Russell Morris

@arussellmorris
IT_KafkaPR's profile picture.

Kafka Kommunikation

@IT_KafkaPR
EleanorDallaway's profile picture. Tech journalist.Founder: Assured Intelligence.Published:The Guardian,The Times,The Sunday Times,Infosecurity,Imbibe. Lover of weekends,travel, sunsets & my boys

Eleanor Dallaway

@EleanorDallaway
sb0risov's profile picture. Стратег ИБ. Несу огонь кибербезопасности людям в блоге.

Sergey Borisov

@sb0risov

United States Trends

You might like

Something went wrong.


Something went wrong.