Mateusz Chrobok

Chcieli dobrze, wyszło jak zwykle

🫡 Mamy kolejną gwiazdę rocka, czyli podatność ocenioną na 10/10 w skali CVSS. React2Shell, bo o nim mowa, z początkiem grudnia postawił w mgnieniu oka na nogi całą branżę cyberbezpieczeństwa.
Źródła:
🖥️ React2Shell (CVE-2025-55182)
https://react2shell.com/
🚨 Critical Security Vulnerability in React Server Components
https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
📑 CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation
https://www.trendmicro.com/en_us/research/25/l/CVE-2025-55182-analysis-poc-itw.html
📑 React2Shell and related RSC vulnerabilities threat brief: early exploitation activity and threat actor techniques
https://blog.cloudflare.com/react2shell-rsc-vulnerabilities-exploitation-threat-brief/
🇨🇳 China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)
https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/
📃 Cloudflare outage on December 5, 2025
https://blog.cloudflare.com/5-december-2025-outage/
Relevant xkcd: https://xkcd.com/1957/
© Wszystkie znaki handlowe należą do ich prawowitych właścicieli.
❤️ Dziękuję za Waszą uwagę.
Znajdziecie mnie również na:
Instagramie @mateuszemsi https://www.instagram.com/mateuszemsi/
Twixxerze @MateuszChrobok https://twitter.com/MateuszChrobok
Mastodonie https://infosec.exchange/@mateuszchrobok
LinkedInie @mateuszchrobok https://www.linkedin.com/in/mateuszchrobok/
Patronite https://patronite.pl/MateuszChrobok
Rozdziały:
00:00 Intro
00:28 React.js
01:26 React2Shell
03:46 Reakcja
05:50 Cloudflare
12:08 Zakończenie
13:42 Co Robić i Jak Żyć?
#React2Shell #CVSS #podatność #Meta #cloudflare

🧙 AI Drama in the World of Games

Regardless of whether you’re gamers or not, you probably heard of Larian - it’s a game studio that literally conquered the market.
Sources:https://zurl.co/dkgp3
https://zurl.co/j9glm
#ai #divinity #bg3 #shorts

🧙‍♂️ Drama AI w świecie gier

AI w grach - jesteście na tak, czy nie?Źródła:
https://zurl.co/dkgp3
https://zurl.co/j9glm
#ai #divinity #bg3 #shorts

🎄Porozmawiaj z bliskimi o bezpieczeństwie

Każdy z Was może zostać takim Mateuszem, czy raczej Aniołem Stróżem Waszego domu 👼Porozmawiajcie z bliskimi i uczulcie ich na zagrożenia.
Wesołych i bezpiecznych świąt życzą Mateusz i zespół uczmnie.pl 🎄 #shorts

🔞 TikTok podkłada dzieciom treści dla dorosłych

Uwaga, TikTok podkłada dzieciom treści dla dorosłych i są na to dowody. Czy widzieliście podobne treści na platformie typu TikTok/IG/FB/X?
Źródło: https://zurl.co/pLIJV #shorts

⁉️ ChatControl Is Getting Cancelled?

ChatControls gets cancelled?! At least for a while.
Sources:
https://zurl.co/OkFJ8
https://zurl.co/kb6Ue
#chatcontrol #ue #cybersecurity #shorts

Will the EU Spy on All Our Conversations? #ChatControl

✊ The European Union will spy on all our conversations! But will it, actually? When it comes to ChatControl – as this new, controversial Union law is commonly known… there are many myths surrounding it.
Sources:
🪙 Looking for an inexpensive VPS?
Check https://tinybox.sh 👈
✊ Fight Chat Control
https://fightchatcontrol.eu/
🇪🇺 Chat Control: The EU’s CSAM scanner proposal
https://www.patrick-breyer.de/en/posts/chat-control/
▶️ nowyekrantv: ACTA - TRZECIA WOJNA W INTERNECIE (24.01.12)
https://youtu.be/tcIy3VPzg_8
📰 Why Europe is freaking out about ‘Chat Control’
https://www.politico.eu/article/eu-online-child-sexual-abuse-material-csam-privacy/
🧑‍⚖️ Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL laying down rules to prevent and combat child sexual abuse
https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX:52022PC0209
💬 New Branding, Same Scanning: “Upload Moderation” Undermines End-to-End Encryption
https://signal.org/blog/pdfs/upload-moderation.pdf
👩‍⚖️ European Human Rights Tribunal Judgment PODCHASOV v. RUSSIA
https://hudoc.echr.coe.int/eng/#{"itemid":["001-230854"]}
🧟 Euroviews. Return of chat control: Something is rotten in the state of Denmark
https://www.euronews.com/next/2025/08/08/return-of-chat-control-something-is-rotten-in-the-state-of-denmark
🇵🇱 Statement by the Ministry of Digitization on „Stop Chat Control”
https://www.gov.pl/web/cyfryzacja/stanowisko-ministerstwa-cyfryzacji-w-zwiazku-z-akcja-stop-chat-control
Relevant xkcd: https://xkcd.com/1810/
© All trademarks, logos and brand names are the property of their respective owners.
All company, product and service names used in this website are for identification purposes only.
Use of these names, trademarks and brands does not imply endorsement.
My socials:
Instagram @mattchrobok https://www.instagram.com/mattchrobok/
Twixxer @ChrobokMatt https://twitter.com/ChrobokMatt
Mastodon https://infosec.exchange/@mateuszchrobok
LinkedIn @mateuszchrobok https://www.linkedin.com/in/mateuszchrobok/
TikTok @mattchrobok
Facebook https://www.facebook.com/mattchrobok
Chapters:
00:00 Intro
00:40 Chat Control
02:40 Pros?
05:12 Privacy
10:23 Future
12:01 What To Do And How To Live?
#privacy #censorship #Chat #communication #EuropeanUnion

AI Models Are Playing Among Us

AI is also playing games - specifically, Among Us! A group of researchers wanted to check what would happen if they throw popular language models into the game.
Sources:
https://www.4wallai.com/amongais
#AI #AmongUs #competition #impostor

OpenAI’s New Romance?

Is this some kind of tech world long-running soap opera? Until recently, OpenAI got their chips from Nvidia, paying tens of millions of dollars. Then - OpenAI cuts the deal of the century with… AMD.
Sources:
https://openai.com/index/openai-amd-strategic-partnership/
#Nvidia #AMD #OpenAI #computing

What’s up with the Russian spies?

🐻 I wanted to learn more about the Russian APT group codenamed Turla, so I turned to my source at ESET, Tony Anscombe, to answer a few questions.
Sources:
🔐 DAGMA IT Security
https://dagma.eu/en
🤝 Gamaredon X Turla collab
https://www.welivesecurity.com/en/eset-research/gamaredon-x-turla-collab/
🕵️‍♀️ ESET APT Activity Report Q2 2025–Q3 2025
https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q2-2025-q3-2025/
🇮🇷 Iran-aligned BladedFeline spies on Iraqi and Kurdish officials, ESET Research discovers
https://www.eset.com/us/about/newsroom/research/iran-aligned-bladedfeline-spies-on-iraqi-and-kurdish-officials-eset-research-discovers/
Relevant xkcd: https://xkcd.com/1330/
© All trademarks, logos and brand names are the property of their respective owners.
All company, product and service names used in this website are for identification purposes only.
Use of these names, trademarks and brands does not imply endorsement.
My socials:
Instagram @mattchrobok https://www.instagram.com/mattchrobok/
Twixxer @ChrobokMatt https://twitter.com/ChrobokMatt
Mastodon https://infosec.exchange/@mateuszchrobok
LinkedIn @mateuszchrobok https://www.linkedin.com/in/mateuszchrobok/
TikTok @matt.chrobok
Facebook https://www.facebook.com/mattchrobok
Chapters:
00:00 Intro
01:26 Turla
02:38 Attribution
03:49 Kazuar
05:12 Collaboration
07:52 Examples
10:36 Evolution
12:10 Automation
13:22 Goals
17:03 Disaster
20:09 Recruitment
20:46 Monetisation
21:50 Marketplace
23:31 Differences
26:15 The End
#Turla #Gamaredon #ESET #APT #cybersecurity