"Hail to the king, baby!"

Joined September 2011
Passkeys “work better for users and worse for cyberattackers.” @Microsoft words, not ours. And the timing is no coincidence. Source: microsoft.com/en-us/security… Microsoft Threat Intelligence found that #AI-generated #phishing lures achieved click rates of up to 54%, compared with roughly 12% for traditional campaigns. As attackers get better at deceiving people, authentication methods built around codes that can be intercepted become a growing liability. Microsoft is responding by making passkeys the default in Entra ID and phasing out its own #SMS and voice verification codes. 🔹 September 1, 2026: Passkeys become the default in Entra ID 🔹 February 1, 2027: Microsoft-delivered SMS and voice codes end for most users 🔹 July 1, 2027: Global Administrators and external users follow 🔹 Users relying only on SMS will be prompted to register a passkey 🔹 Organizations that want to retain SMS verification must arrange and pay for carrier services themselves The direction is clear: less reliance on codes, stronger identity verification. Serenity sAxess PRO follows the same principle, bringing employee identity verification to a physical card, with access confirmed by the employee’s fingerprint. No code to type. No SMS to intercept. Identity verified at the point of authorization. s.technology/product/saxess-…
1
11
18
1,058
Your wallet’s first vulnerability might be a number. The real question is simple: can someone calculate it before you do? On October 18, @_Qubic_ halted its chain after an attacker drained more than 1,400 wallets linked to weak seeds generated using Math.random(), a browser function never designed for cryptographic secrets. Most of the funds are now frozen. If a number is truly random, predicting it should be practically impossible. If it isn’t, it may only be a matter of time before someone finds the pattern. #Code generates numbers. Weak randomness makes them predictable. Serenity takes a different approach to wallet access. With sAxess, control is tied to your fingerprint, verified by the card’s secure element, not to a number a program might reproduce. 🔒 Your identity shouldn’t be another number someone can guess. s.technology/product/saxess/
6
4
1
12
1,259
🏆 Two continents. Three awards. One card. From 181 entries in Orlando to eight finalists in Dubai! Serenity sAxess took the spotlight twice. What made it stand out? #Biometric security built directly into the card. No password to leak. No separate app. Your #fingerprint, your #access. 🎬 Three wins. One innovation. See how it happened. 👇 youtube.com/shorts/xiGEAAdqs…
1
9
19
1,210
🤖 Your AI agent follows instructions. That's exactly the risk. Before your AI agent touches anything that matters, ask three questions: • What can it access? Only the tools it needs. Nothing “just in case.” • What can it do alone? Read and draft, yes. Payments, deletions, and permission changes, not without approval. • Who signs off? A named, verified person, every time it counts. These align with OWASP's three root causes of Excessive Agency in AI applications: too much functionality, too many permissions, and too much autonomy. The final question is where sAxess PRO comes in, linking critical approvals to an authorised person's fingerprint, verified on a secure element. Let AI do the work. Keep humans in control of the decisions. 📖 @owasp guidance: genai.owasp.org/llmrisk/llm0… 🔐 sAxess PRO: s.technology/product/saxess-…
11
11
2
20
1,424
🔐 Putting assets on-chain is easy. Protecting the value behind them is the real challenge. Tokenization is changing ownership, but without secure custody, verified ownership, and trusted authorization, what protects the value behind the token? #Serenity is bridging that gap through sGold, connecting physical #gold with digital financial infrastructure. 📖 Discover why #security is the missing piece in #RWA tokenization. 👇 s.technology/blog/real-world…
2
9
1
20
1,275
🟢 Stablecoins are coming. Where will they live? This year alone: a @COLDCARDwallet seed flaw (~$116M drained), hidden implants in resold @Ledger units, 13,689 @Trezor customer addresses exposed. #Serenity CPO Boris Mofrad on the questions every issuer has to answer before deployment, the standards that sit under the hood (#FAPI 2.0, #OpenID Connect) and why a biometric card changes the answer. Watch, then verify for yourself 👇 youtube.com/shorts/4NUnol7Pz…
5
9
22
1,501
🔐 Cold storage keeps your keys offline. But is that enough? Supply-chain attacks. Hardware tampering. Seed phrase exposure. Offline doesn't automatically mean secure. Discover the hidden risks of traditional hardware wallets and how Serenity sAxess combines cold storage with biometric authentication for a different approach to digital asset security. 📖 Read the full article: s.technology/blog/hardware-w…
9
24
1,148
🔐 Sealed box. Authorized seller. Compromised device. “Only buy from an authorized reseller.” They did. Source: coindesk.com/tech/2026/10/12… #CryptoBilis was listed as an authorized Ledger reseller. @Ledger has confirmed an unauthorized #hardware implant in at least one device sold through the reseller. Investigators traced up to $93.2 million in stolen crypto across 315 wallets. #Tether froze $10 million, while roughly $81 million remained visible on-chain as of October 11. The implant reportedly captured the recovery phrase displayed during setup and transmitted it to attackers. It didn't need to break the #cryptography. It just needed to read the words. That's the problem with a security model built around a phrase that must be displayed, written down, and kept secret forever. Serenity sAxess takes a different approach. No recovery phrase to write down during setup. The key stays on the card's secure element, with access authorized by your fingerprint. Your security shouldn't depend on keeping a secret that can be copied. 👇 s.technology/product/saxess/
3
7
22
1,236
📸 A picture is worth a thousand words. Someone just read them. Screenshot app @gyazo was hit by a databreach on September 11, The Hacker News reports. The attacker never needed the images. #Gyazo had already turned them into searchable text. What got out with 490 million image records: 🔹 Text extracted from images 🔹 Location data and upload IPs 🔹 Which images were private Plus 23.62 million user records, including login session #IDs and integration tokens. Teams screenshot internal tools every day, and every login typed into a terminal becomes text on a screen. Serenity sAxess PRO makes that login passwordless: one #fingerprint, verified offline on the card. No username or password appears on the display. With air gapped #biometric verification, sensitive #credentials do not need to reach the screen in the first place. Not for one employee. For the whole company. That is the kind of access control sAxess PRO is built to provide. 👇 s.technology/product/saxess-…
1
9
15
1,088
🔴 A chip nobody ordered. A device people trusted. @Ledger has confirmed an unauthorized hardware implant in a device sold through #CryptoBilis. The full investigation is still ongoing. Meanwhile, @Trezor hardware wallets are being offered for free through @coingecko Candy. Why now? But here's the question that matters: How do you know the device you're trusting is really secure? 🎙 Serenity CPO Boris Mofrad on what you should ask before trusting any device with your seed phrase. Watch, then verify for yourself. 👇 youtube.com/shorts/elYH7Kar3…
2
9
1
29
63,374
In an alley, nobody would touch one. Put the same box behind an “official reseller” badge and suddenly nobody asks where it’s been.
🔴 A chip nobody ordered. A device people trusted. @Ledger has confirmed an unauthorized hardware implant in a device sold through #CryptoBilis. The full investigation is still ongoing. Meanwhile, @Trezor hardware wallets are being offered for free through @coingecko Candy. Why now? But here's the question that matters: How do you know the device you're trusting is really secure? 🎙 Serenity CPO Boris Mofrad on what you should ask before trusting any device with your seed phrase. Watch, then verify for yourself. 👇 youtube.com/shorts/elYH7Kar3…
1
10
26
49,055
🏦 Imagine a bank that checks your name on the last line of your own letter. Source: mezo.org/blog/incident-repor… That's essentially what happened to @MezoNetwork on October 5. Its contract relied on a trusted relayer to append the sender's address to a message. But when that message passed through an external library, the verified address was lost. The contract then trusted whatever address remained at the end. Thirty-seven positions. Approximately 5.52 BTC gone. The attacker didn't need to forge a signature. The contract simply trusted the wrong identity. Serenity sAxess PRO takes a different approach. Critical actions require an authorised person's #fingerprint, verified on a secure element, connecting #authorization to the human behind the action. Don't just trust what the system says. Verify who is acting. 👇 s.technology/product/saxess-…
1
11
17
1,100
🌐 Wall Street is moving on-chain. Ownership has to move with it. Source: theblock.co/news/defi/2026-1… At @token2049 Singapore, $Base creator Jesse Pollak pointed to tokenized equities and non-dollar stablecoins as the next major drivers of tokenization. 📈 The numbers already show momentum: 🔹 $70M to $100M in daily tokenized stock trading volume 🔹 50 stocks listed on Base, with 250 expected by month end 🔹 32 stablecoins across 21 currencies But putting assets on-chain is only half the story. The real challenge is securing ownership, access, and custody as digital assets scale. That's where Serenity comes in. Gold connects physical gold with digital financial infrastructure, while sAxess puts biometric security at the heart of digital asset access. Tokenize the asset, secure the ownershipand build for what comes next. 🌐 Explore Serenity: s.technology
9
19
1,348
Can you spot it? Neither can we. Maybe it’s time for hardware with nowhere to plant a nasty surprise 🔍 #sAxess
What's crazier is the hackers apparently bought the reseller and made them sign a non-disclosure agreement to keep their mouth shut. So many things wrong here...
12
21
840
Healthcare is failing. With staff shortages and rising costs. Platforms like @Aimedis offer a complete solution: an integrated ecosystem with AI agents pulling from PubMed (and similar sources) $AIMX #DigitalHealth #Telehealth #AI #AIinHealthcare #MedTech #FutureOfHealth
1
2
21
🏆 And the award for Biggest Breach of Q3 goes to... 🥇 @bitget , $387.5M 🥈 @Liquid_BTC Network, $319M 🥉 Tectonic, $120M 🏅 @COLDCARDwallet , $112.7M According to @CertiK , Q3 saw $1.26 billion in crypto security losses, with the Bitget incident alone accounting for around 31%. No speech. No trophy. Just billions lost. But the detail worth remembering is how Bitget was breached. Attackers exploited a vulnerability in a third party security product, obtained high level internal credentials, and used them to forge withdrawal commands. Bitget said its private #keys and #cold wallets were not compromised. The #cryptography wasn't broken. The credential was trusted. And that is the problem with credentials. They can be stolen, copied, and used by someone else. That is a strong reminder that credentials can be stolen. A fingerprint on #Serenity sAxess PRO can't be forwarded. s.technology/product/saxess-…
1
10
21
1,326
Cold storage. Warm blanket. See you after noon 😴
8
17
1,304
5,000 years of sitting perfectly still. Finally back on the job market. 🏛️
🚀 A NEW CHAPTER FOR SERENITY - sGold is now on Republic.com Many of you have been part of the Serenity journey from the beginning from RWS and Web3 infrastructure to sAxess, identity, and now sGold. Today, we’re taking an important step toward bringing what we have built into the real-world economy. 🇺🇸 sGold Technology Inc. is now live on Republic.com for a Testing-the-Waters campaign under @SECGov Regulation Crowdfunding (Reg CF). What does this mean? Republic provides a platform for companies to raise capital from their communities through regulated securities offerings. Reg CF can allow eligible members of the public and other investors to invest in private companies through an SEC-registered intermediary that is also a FINRA member such as Republic’s funding portal. Right now, sGold is Testing the Waters. No investment is being taken yet. Instead, our community can explore the opportunity and make a non-binding reservation expressing interest in investing when the offering becomes live. Why now? With much of the technology foundation built, sGold is moving toward commercial launch and enterprise adoption. This raise is intended to help take sGold from technology development to real-world deployment and scale. And this is part of the larger Serenity story. As sGold grows, it can expand real-world utility across the broader Serenity ecosystem, including RWS, sAxess, identity, payments and settlement infrastructure. Why reserve? A reservation costs nothing, requires no investment today and is completely non-binding. But your reservation matters. Strong community participation demonstrates that sGold is approaching its commercial phase with an existing community and demand. 👉 Explore sGold and reserve your interest on Republic: republic.com/sgold Don’t forget to watch our founder and product videos on the campaign page. If and when the Reg CF offering goes live, those who wish to participate can then consider making an actual investment through Republic, subject to the offering terms and applicable requirements. We built the technology. Now it’s time to take it to the real world. We want the Serenity community to be part of that journey. Testing-the-Waters Disclaimer With regard to communications by an issuer on the Site to gauge interest in a potential securities offering pursuant to the Regulation CF exemption from the registration requirements of the Securities Act, including opportunities to “reserve” securities as indications of interest in the potential offering, please note that pursuant to Regulation Crowdfunding Rule 206 (i) that no money or other consideration is being solicited thereby, and if sent in response, will not be accepted, (ii) no offer to buy the securities can be accepted and no part of the purchase price can be received until the offering statement is filed and only through a registered intermediary’s platform, (iii) any such offer may be withdrawn or revoked, without obligation or commitment of any kind, at any time before notice of its acceptance is given after the Form C is filed, and (iv) an indication of interest is non-binding and involves no obligation or commitment of any kind.
2
10
20
1,551