Drew (@DopeDrew) header
Drew (@DopeDrew) profile picture

Drew

@DopeDrew

Retired Vet | Cybersecurity | CISSP SecurityX PenTest+ CySA+ SSCP Sec+ Net+ A+ CC ITIL AZ900 SC900 | #BlackTechTwitter #CyberProfessional #BlacksInCyber

 Cleveland, OH
linktr.ee/dopedrew
Joined June 2009
  • Tweets31.4K
  • Following2.8K
  • Followers1.9K
1.3KMedia
Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)Photo by Drew (@DopeDrew)
#NewProfilePic
Image from Drew (@DopeDrew)
1
2
1
49
Why I Built My Own Threat Intel Platform Instead of Paying for One

Why I Built My Own Threat Intel Platform Instead of Paying for One

Article · @DopeDrew
2
129
I understand why they love the fold phones now
1
452
Golf 🔥🔥🔥
1
431
Check out the latest article in my newsletter: Your MFA Didn't Fail. Nobody Checked the Token That Bypassed It. linkedin.com/pulse/your-mfa-… via @LinkedIn
Your MFA Didn't Fail. Nobody Checked the Token That Bypassed It.

Your MFA Didn't Fail. Nobody Checked the Token That Bypassed It.

A remote, unauthenticated attacker can now walk into a SimpleHelp technician session without a password, without an MFA prompt, and without tripping a single identity control — because the login flow...

linkedin.com
115
This ufc shit is a disgrace
1
143
#NewProfilePic
Image from Drew (@DopeDrew)
1
158
CISA: CVE-2026-11645 is exploited in Chromium V8. Update Chrome, Edge, Opera, and other Chromium browsers now. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 cisa.gov/known-exploited-vul…

Known Exploited Vulnerabilities Catalog | CISA

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative...

cisa.gov
123
Critical: CVE-2026-0257 in Palo Alto PAN-OS is being actively exploited to bypass auth and create unauthorized VPN access. Patch PAN-OS firewalls and gateways now. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 security.paloaltonetworks.co…
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized...

security.paloaltonetworks.com
176
Critical: CVE-2026-0300 lets attackers take over exposed PAN-OS firewalls without logging in. This puts the network edge at risk. Patch now, disable or restrict Captive Portal exposure, and hunt for signs of compromise. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 security.paloaltonetworks.co…
CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™...

CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™...

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code...

security.paloaltonetworks.com
148
Critical PAN-OS flaw CVE-2026-0300 is being exploited via the User-ID Authentication Portal. If it is internet-facing on affected 10.2, 11.1, 11.2, or 12.1 releases, patch now. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 security.paloaltonetworks.co…
Palo Alto Networks Security Advisories

Palo Alto Networks Security Advisories

Palo Alto Networks Security Advisories - Latest information and remediations available for vulnerabilities concerning Palo Alto Networks products and services.

security.paloaltonetworks.com
174
GitHub disclosed critical RCE CVE-2026-3854 in git push handling. GitHub cloud was patched, but GitHub Enterprise Server admins should upgrade immediately. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 github.blog/security/securin…
Securing the git push pipeline: Responding to a critical remote code execution vulnerability

Securing the git push pipeline: Responding to a critical remote code execution vulnerability

How we validated, fixed, and investigated a critical vulnerability in under two hours, and confirmed no exploitation.

github.blog
1
107
CVE-2026-34197 is hitting Apache ActiveMQ Classic now. If your brokers are internet-exposed and on 5.19.4 or earlier, or 6.2.3 or earlier, patch immediately. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 bleepingcomputer.com/news/se…
Actively exploited Apache ActiveMQ flaw impacts 6,400 servers

Actively exploited Apache ActiveMQ flaw impacts 6,400 servers

Nonprofit security organization Shadowserver found that over 6,400 Apache ActiveMQ servers exposed online are vulnerable to ongoing attacks exploiting a high-severity code injection vulnerability.

bleepingcomputer.com
135
Check out the latest article in my newsletter: Adobe’s Acrobat Zero-Day Is a Reminder That “Routine” Software Still Creates Frontline Risk linkedin.com/pulse/adobes-ac… via @LinkedIn
Adobe’s Acrobat Zero-Day Is a Reminder That “Routine” Software Still Creates Frontline Risk

Adobe’s Acrobat Zero-Day Is a Reminder That “Routine” Software Still Creates Frontline Risk

Adobe’s emergency fix for CVE-2026-34621 should get every blue team’s attention for a simple reason: this was not a theoretical issue waiting in a backlog. It was reported as actively exploited, and...

linkedin.com
62
Axios npm was backdoored. 50M weekly downloads, now shipping a RAT for Windows/macOS/Linux. North Korean UNC1069. Audit your lock files, rotate tokens, rebuild from clean. CI/CD pipelines are at risk. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 thehackernews.com/2026/04/go…
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, impacting multiple OS.

thehackernews.com
87
CISA KEV: CVE-2025-31277 — buffer overflow in Apple Safari, iOS & macOS lets malicious web content corrupt memory. All Apple devices at risk. Patch: Settings → General → Software Update. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 cisa.gov/known-exploited-vul…

Known Exploited Vulnerabilities Catalog | CISA

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative...

cisa.gov
243
🍎 Apple just silently patched a WebKit flaw (CVE-2026-20643) that broke the same-origin policy — the wall that stops malicious sites from reading your bank tabs & email. No malware needed. Just visiting a page. Check Settings → Privacy & Security → enable Background Security Improvements. #CyberSecurity #CyberThreat #ThreatIntel #C3Security 🔗 thehackernews.com/2026/03/ap…

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

Apple fixes WebKit CVE-2026-20643 in iOS 26.3.1, macOS 26.3.2 using background patches, reducing exploit risk.

thehackernews.com
130
A hacker broke into an FBI evidence server, found Epstein investigation files, and threatened to "report the owner to the FBI." He didn't know it was the FBI's server. The bureau hid the Epstein connection for 3 years. 🧵
1
1
174
more replies
Feb 2023 — FBI publicly acknowledges a "cyber incident." Zero mention of Epstein. March 2026 — Reuters connects the dots through mandatory DOJ document releases under the Epstein Transparency Act. Three years of silence.
1
68
The cybersecurity takeaway nobody wants to hear: if a random cybercriminal stumbled into these files through a misconfiguration, what do you think nation-state actors with actual resources have already accessed? Basic security hygiene isn't optional — even for the FBI. #cybersecurity #infosec
52
Load more