9.9.9.9
Joined September 2012
- Tweets13.1K
- Following3K
- Followers619
- Likes16.2K
1312 (AllComputersAreBroken) retweeted
NYC Surveillance Flight from KISP back to KISP
Left KISP 22:10 and returning 01:40
1312 (AllComputersAreBroken) retweeted
Microsoft Security Response Center put out a blog post today about Eclipse Nightmare guy
Basically they think he's super mean and totally not cool he's dropping zero days. They say you're a jerk if you do this stuff because it's dangerous and stuff
microsoft.com/en-us/msrc/blo…
1312 (AllComputersAreBroken) retweeted
𝗛𝗢𝗪 𝗗𝗢 𝗬𝗢𝗨 𝗛𝗔𝗖𝗞 𝗧𝗛𝗘 𝗣𝗘𝗡𝗧𝗔𝗚𝗢𝗡 𝗔𝗡𝗗 𝗚𝗘𝗧 𝗖𝗔𝗨𝗚𝗛𝗧 𝗕𝗬 𝗔 $𝟮𝟱𝟬 𝗧𝗥𝗔𝗡𝗦𝗔𝗖𝗧𝗜𝗢𝗡.
– Kai West was 25, British, and running the dark web's biggest stolen data marketplace under the name IntelBroker
– His victim list reads like a who's who. Apple. AMD. Cisco. Nokia. General Electric. Europol. The US Pentagon.
– And a database containing the personal information of every member of the US Congress.
– He sold everything in Monero only. Untraceable by design. For 2 years nobody could touch him.
– Then in January 2023 an FBI agent reached out to buy $250 worth of stolen data and talked him into accepting Bitcoin just this once
– That $250 went into a wallet tied to his real Coinbase account. Registered with his actual UK driver's license. His real name and his real face.
– The FBI spent the next 2 years quietly building the case. Matching his YouTube watch history to posts on his hacker forum. Piecing everything together.
– He even had a fake LinkedIn saying he worked at the UK equivalent of the FBI. They publicly said they had never heard of him.
– In January 2025 he stepped down from running the forum. Said he was "too busy."
– He was arrested in France 3 weeks later.
– $25 million in damage. 40+ companies. 2 years of running the biggest stolen data operation on the dark web.
Brought down by $250 and one moment of trusting the wrong coin.
The most untraceable hacker on the internet forgot that Coinbase needs your ID.
1312 (AllComputersAreBroken) retweeted
Call held for TWO. HOURS
SOURCE: The San Diego Police Department Northern Division is where the Islamic Center shooting happened and they were 7 officers understaffed today for morning watch. The mother of one of the shooters called PD at 9am to report her son stole her car and the father’s guns and left a note about “shooting up a place.” The CALL HELD for 2 HOURS before an officer went to handle it. The active shooter came out while the unit was speaking with the mom. This whole thing could have been stopped if we had adequate staffing. The City of San Diego has failed us by supporting Defund the Police and not having a balanced budget.
1312 (AllComputersAreBroken) retweeted
NVE groups like O9A, 764, ToB are the most multicultural extremist group in the U.S. and globally and growing in numbers daily. Exacerbated by poor socialization, hyperonline, neurodivergence, coming of age in a hopeless traumatic miserable decade. Radicalize ALL demographics.
1312 (AllComputersAreBroken) retweeted
Mamdani adding more cops
.@NYCMayor & @GovKathyHochul & NYPD Commissioner @NYPDPC are announcing that the Bronx will now officially be split into two patrol boroughs - Bronx North and Bronx South
The NYPD will be bringing in 200 additional officers into the borough - including specialized units
Plainclothes NYPD officers harassing community members. Remember their faces they patrol the finance district. Including the MTA.
1312 (AllComputersAreBroken) retweeted
🚨 فيديو إثبات (PoC) يُظهر استغلال ثغرة جديدة باسم "YellowKey" تتجاوز حماية BitLocker كاملةً على نظام Windows.
🔹 الفيديو يوضّح خطوة بخطوة طريقة الاستغلال:
1- نسخ مجلد FsTx إلى ذاكرة USB
2- الدخول إلى وضع Windows Recovery Environment
3- تنفيذ تركيبة مفاتيح (SHIFT + CTRL) للحصول على Shell بصلاحيات كاملة على القرص المشفّر
دون الحاجة لكلمة مرور أو مفتاح استرداد
Credit: @DarkWebInformer
1312 (AllComputersAreBroken) retweeted
Microsoft: PowerShell is simple and easy to use.
Actual PowerShell command: Remove-MgIdentityAuthenticationEventFlowAsOnGraphAPretributeCollectionExternalUserSelfServiceSignUpAttributeIdentityUserFlowAttributeByRef
No, this isn't a joke. This was noted by @NathanMcNulty
1312 (AllComputersAreBroken) retweeted
‼️🚨 Microsoft calls this "intended behaviour," so here we go.
How to dump the credentials of every user stored in Microsoft Edge:
1. Open Edge. Don't browse anywhere, just open it.
2. Flip to Task Manager, find Edge, expand the task.
3. Highlight the "browser" sub-task, right-click, and choose "Create Memory Dump."
4. Open the dump file and look for credentials.
The logged-in Windows user can dump every stored Edge credential with no additional rights. Which means any malware that user executes has those credentials for the asking.
Thanks to Rob VandenBrink at SANS: isc.sans.edu/diary/32954
1312 (AllComputersAreBroken) retweeted
Student Arrested in Taiwan for using SDR and Handheld Radios to Halt Four High Speed Trains with TETRA Hack rtl-sdr.com/student-arrested…
1312 (AllComputersAreBroken) retweeted
💥 ShadowBroker: A real-time, multi-domain OSINT dashboard that fuses 60+ live intelligence feeds into a single dark-ops map interface.
github.com/BigBodyCobain/Sha…
Aircraft, ships, satellites, conflict zones, CCTV networks, GPS jamming, internet-connected devices, police scanners, mesh radio nodes, and breaking geopolitical events, all updating in real time on one screen.
1312 (AllComputersAreBroken) retweeted
Someone just open-sourced an autonomous AI red team that runs the full kill chain.
It's called Decepticon. A multi-agent system where one agent does recon, another exploits, another handles privilege escalation and lateral movement.. all inside a hardened Kali sandbox.
100% Open Source.
1312 (AllComputersAreBroken) retweeted
This is one of the more fascinating malware write-ups I've read in a while.
Sentinel LABS covered fast16, a 2005 sabotage framework that was doing things most people associate with much later operations.
The malware used a driver to tamper with calculation software, but it also had automated methods to propagate through the network. It looked for the right applications, used Windows-native mechanisms, and took advantage of shared drives with weak passwords or no passwords.
This is a good takeaway because the sabotage only works well if the corrupted results become consistent across systems, so if one workstation gives bad results, someone may spot it. Having the testing and validation documents in the same flat network makes tampering easier.
Also, the mechanisms used to tamper with research are fascinating. A chain of operations starting from a filesystem driver, and very specific software targeting.
Sentinel really nailed this one, connecting everything together. Just goes to show that trying something different can take you somewhere unexpected. You never know what’s out there, and there are definitely more, newer samples like this.
Full report: sentinelone.com/labs/fast16-…
1312 (AllComputersAreBroken) retweeted
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.mdfile that primes Claude with expert-level methodology for a specific attack surface from SQLi to shellcode, EDR evasion to exploit development.
Resource: github.com/SnailSploit/Claud…
