Alireza Gharib
banner
alirezagharib.net
Alireza Gharib
@alirezagharib.net
Just a Techi Talkie Boy !
https://alirezagharib.net
Reposted by Alireza Gharib
Yep.

New places for attackers to hide.

It's One Battle After Another.

Which is why I just dropped a Subtitles module.

github.com/StartAutomat...

#CyberSecurity #PowerShell #Accessibility
GitHub - StartAutomating/Subtitles: Script Subtitles with PowerShell.
Script Subtitles with PowerShell. Contribute to StartAutomating/Subtitles development by creating an account on GitHub.
github.com
December 23, 2025 at 8:19 PM
Your movie subtitle from torrent could be a password stealer!

A massive Agent Tesla campaign hiding in plain sight within a viral Leo DiCaprio film subtitle torrent. 🧵👇
December 23, 2025 at 2:36 PM
Moving Toward a Zero-Trust Desktop: Qubes OS 4.3.0 is Here 🛡️

The "Last Bastion" of digital security just got stronger. As cybersecurity professionals, we often talk about defense-in-depth, but Qubes OS 4.3.0 actually delivers it at the hardware and kernel level.👇🧵
December 22, 2025 at 1:15 PM
The Spotify "85 Million" isn't a data leak—it's an Asset Heist. 🧵👇

A massive DRM bypass has reportedly allowed the scraping of 85M songs (approx. 300TB). This isn't about leaked passwords; it's about the keys to the kingdom being copied.
December 22, 2025 at 11:24 AM
🚨 SOC Note: The AI Supply Chain is officially on fire. 🚨
Forget Log4j. In Dec 2025, we’re hunting CVE-2025-23001—a.k.a. "PickleScan."
Attackers are now embedding RCE payloads inside pre-trained AI models (.pkl/.h5). If your devs download a "helper" model from a public repo, you're compromised. 🧵👇
December 21, 2025 at 3:41 PM
If you think the SOC is quiet this week because it’s nearly Christmas... I have some bad news. 🧵👇
December 20, 2025 at 4:33 PM
The SOC is on fire this week. 🔥 December 2025 is officially the month of the "Unauthenticated RCE."
If you're a defender, here is the 2-minute breakdown of what’s actually happening right now. 🧵👇
December 20, 2025 at 10:42 AM
I finally did it. I ditched the standard analyst laptop setup and went full paranoia mode with Qubes OS + Proxmox. 🛡️
It was a steep learning curve, but honestly? I can't go back. Here’s why this stack is a game changer for my home lab. 🧵👇
December 19, 2025 at 3:36 PM
The Quantum Leap: OpenSSL 3.5 and the New Era of Security 🔐

The "Harvest Now, Decrypt Later" threat is no longer a distant worry. With the release of OpenSSL 3.5, Post-Quantum Cryptography (PQC) has officially moved from experimental labs to stable production environments.

👇
December 17, 2025 at 6:55 PM
The 2025 SOC survival guide. 🧵
If you are building a defensive stack (home lab or enterprise) without a massive budget, here is the "Golden Triangle" of open source tools you need to master right now.
👇

#BlueTeam #InfoSec #CyberSecurity #TechTips
December 17, 2025 at 6:29 AM
Reposted by Alireza Gharib
FANTASY/SKELETON.GIF
November 18, 2025 at 5:20 AM