Network Engineer.
Temuco, Chile
Joined November 2007
- Tweets11.8K
- Following5.1K
- Followers5.2K
- Likes7.6K
Pinned Tweet
Les dejo disponible a todos un curso de redes nivel #CCNA gratuito en español de casi 100 horas que acabo de publicar.
Este curso estuvo mucho tiempo en otra plataforma y por fin pude recuperar el material y subirlo a YouTube.
Espero que lo disfruten: youtube.com/playlist?list=PL…
Paulo Colomés retweeted
TeamViewer urges users to patch severe flaws “as soon as possible”
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Paulo Colomés retweeted
This is what Internet in Portugal right now looks like.. Lots of networks unreachable or severe packet loss, not great :( MEO is having some big issues.. hope they can get it under control.
Paulo Colomés retweeted
‼️ Nuclei template for fingerprinting the PAN-OS CVE-2026-0300 zero-day:
github.com/projectdiscovery/…
Credit: @rxerium
Paulo Colomés retweeted
🚨LAPSUS$ Revives Insider Recruitment Campaign Targeting Telecom, Tech, and AI Firms 🚨
The threat actor group LAPSUS$ has resurfaced with a renewed insider recruitment campaign, actively seeking employees from major telecom, technology, and AI organizations. The group is offering financial incentives in exchange for internal access, specifically targeting VPN/VDI credentials, Citrix sessions, remote access tools such as AnyDesk, or any foothold into corporate networks. Unlike traditional data breach operations, the campaign explicitly emphasizes gaining initial access through insiders rather than purchasing datasets. Targeted sectors reportedly include telecom providers, large software and gaming companies, AI firms, and call center/BPO environments.
#LAPSUS #InsiderThreat #CyberSecurity #ThreatIntelligence
Paulo Colomés retweeted
Over the past 48 hours there have been some very interesting developments...
The "@chartercomms" announcements for 47.1.0.0/16 and 47.2.0.0/16 have disappeared, implicitly confirming that they were hijacked.
The "@Orange" announcement for AS41128 has changed - the path is now:
90.98.0.0/15 AS41128 AS22541 AS29802
AS41128: @orange 🇫🇷
AS22541: MEGALINK S.R.L.🇧🇴
AS29802: @HIVELOCITY 🇺🇸
The entire network has relocated from Chicago to Dallas (likely to the Prime Dallas Campus DFW01 datacenter). Once more the inclusion of a South-American ISP appears completely unrealistic, with the traffic between the AS29802 router (de-cix[.]dfw[.]hivelocity[.]net) and the final destination seemingly within the Dallas datacenter.
But there's more....⬇️
We've recently observed some unusual large-scale routes appearing on the internet (see image), involving the following networks:
AS393232: Comcast Cable Communications 🇺🇸
AS36429: @chartercomms 🇺🇸
AS41128: @orange 🇫🇷
AS13335: @Cloudflare 🇺🇸
AS17072: @totalplaymx 🇲🇽
AS270118: SOLUCIONES, ANALITICOS Y SERVICIOS TEAM (Stratosphere Technology Latam) 🇲🇽
AS199524: @gcore_official 🇱🇺
The label "path (fixed)" indicates that identical paths were observed by several probes across the internet. This strongly suggests that AS199524 is the central pivot point behind these announcements.
While the first four paths have since disappeared, the most recent three remain active. ⬇️
Paulo Colomés retweeted
🚨 New Fortinet vulnerability being exploited as an 0-day
CVE-2026-35616 - FortiClient EMS pre-authentication API access bypass - CVSS 9.1 Critical
After observing in-the-wild exploitation of this vulnerability earlier this week, Defused reported it to Fortinet under responsible disclosure.
Fortinet has released an emergency hotfix - plus a scheduled patch - for FortiClient EMS 7.4.5 and 7.4.6.
The vulnerability allows an unauthenticated attacker to bypass API authentication and authorization entirely, unauthorized code or commands via crafted requests.
This discovery was made through our upcoming Radar feature launching next week 😇
Advisory: fortiguard.com/psirt/FG-IR-2…
Track exploitation of this and other Fortinet vulns in real time and get updates on the new Defused Radar 👉 console.defusedcyber.com/sig…
Credit also to @heckintosh_ for independently discovering this vulnerability 💪
Paulo Colomés retweeted
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
Paulo Colomés retweeted
Yesterday a light aircraft crashed in Aysen, Chile. The 2 aboard survived with minor injuries. Aircraft was identified as Cessna 172N Skyhawk [Registration “CC-SCE”] operated by Club Aéreo de Concepción. CCTV shows aircraft going down while attempting to take-off.
ℹ️ASN
Paulo Colomés retweeted
Ganadores del Mundial de Programación 2026 (TCS CodeVita) 🏆💻
Mejores Programadores del Mundo
🇨🇳 Zhou Jingkai 🥇
🇨🇱 Vicente Opazo 🥈
🇵🇪 Jorge Valdivia 🥉
Mejor Programador Emergente
🇮🇳 Balashiva S 🥇
🇪🇨 Jose Nunez 🥈
🇪🇨 Gabriella Padilla 🥉
Mejor Programador en IA
🇨🇳 Zhou Jingkai 🥇
🇺🇸 Benjamin Orellana 🥈
🇵🇪 Jorge Valdivia 🥉
Paulo Colomés retweeted
The impact of power issues in the AWS ME-CENTRAL-1 region is visible in the @CloudflareRadar Cloud Observatory. Starting ~1200 UTC, key metrics including error rates, connection failures, and response header receive times all increased. See more at radar.cloudflare.com/cloud-o…
Paulo Colomés retweeted
#Volcanvillarrica La superficie de calor (hotspot) detectada por Sentinel-2/Landsat 8/9 los días 21 y 24 de febrero, equivale a unos 1.600 m2, la mayor desde abril de 2025. Noticia en desarrollo. Fuente: nicogenzano.users.earthengin… @SmithsonianGVP
Paulo Colomés retweeted
Internet connectivity in Iran is now in a near-complete shutdown, down about 98% vs the previous week. The disruption began around 07:00 UTC, following reports of military strikes — and in past incidents the government has responded with nationwide Internet shutdowns.
Paulo Colomés retweeted
🚨 BGP Route Leak at 2026-02-27 21:14 UTC
🇨🇱AS266878 (Besthost) leaked 15918 prefixes learned from 🇨🇱AS64139 (GRUPO) towards 🇨🇱AS7195 (EDGEUNO), creating conflicts with 1549 ASNs in 96 countries.
🌐 Max propagation: 95% ⏳ Duration: >15m, ongoing
Paulo Colomés retweeted
El SII informa que los contribuyentes podrán presentar su declaración de IVA hasta el 23 de febrero sin multas ni intereses, debido a dificultades técnicas que afectaron en forma intermitente la disponibilidad de este sistema en sii.cl. ¡Comparte la información!
Paulo Colomés retweeted
Microsoft just changed the game 🤯
They've open-sourced bitnet.cpp, a 1-bit LLM inference framework.
It let's you run 100B parameter models on your local CPU without GPUs.
- 6.17x faster inference
- 82.2% less energy on CPUs
100% Open Source.
Readers added context they thought people might want to know
"Just" is misleading, last activity was 8 months ago: github.com/microsoft/BitN…
It is more academic than practical: reddit.com/r/LocalLLaMA/c…
There are quantization methods for 1-bit inference which are actually being used: unsloth.ai/docs/basics/un…
See, e.g., current open-source SOTA, GLM 4.7. Most downloaded quantizations are Unsloth dynamics: huggingface.co/models?other=b…