Tory☁️ retweeted
Day 87/100
Made a write up on all the vulnerabilities i have found in the app i have been testing for the last few days
medium.com/@abdulmalikadebay…
@commando_skiipz @ce3nerd @ife0x01 @KoredeSec @DefendWithFelix
Day 86/100
Today I read some documentation on medium about Android testing .
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Tory☁️ retweeted
I did say we'd be releasing our models periodically...introducing Gemini 4 Carbon, our next frontier model.
Following Argon's release just two weeks ago, Carbon shows the pace at which we’re pushing the frontier, it ranks #1 on the recently updated v5.0 of @ArtificialAnlys Intelligence Index at 59. It also leads across key cybersecurity evaluations scoring 88.2% on SEC-bench Pro for finding vulnerabilities, 54.8% on ExploitGym for exploitation, and 71.0% on CWE-bench for patching.
We’re seeing significant improvements in long-horizon tasks even compared to Argon, and we’ve strengthened frontier safeguards.
As we did with Argon, we’re going to roll it out gradually + responsibly. Some trusted cyber defenders will get access starting this week. We'll be expanding it to more partners through our Fairwind Program, ahead of wider availability soon, so hang tight!
Tory☁️ retweeted
JUST IN: Aeon, a Nigerian cybersecurity startup, has secured $1 million in funding to accelerate the development of its technology amid escalating threats from cyberattacks and growing vulnerabilities in digital infrastructure.
Tory☁️ retweeted
This is Genie 4, our most realistic and interactive world model yet. 🌐
Explore dynamic environments in real time to see how the scene responds, sounds, and how the people in it move, react, and speak.
Tory☁️ retweeted
🚨📊 Leo Messi finished in the top five of the Ballon d’Or rankings in both 2007 and 2026… 19 years apart.
Nearly two decades at the very top. UNREAL LONGEVITY. 👑
Tory☁️ retweeted
Btw, a 39 year old Lionel Messi ended up finishing 5th in the Ballon d’Or rankings, competing with the stars of today.
Not to forget his astonishing World Cup campaign.
Longetivity at its peak.
God knows I’d be so pissed if Yamal won it. I’d have even preferred Mbappe ahead of him. He needs to do more for Barça to win it, and the same goes for Spain. You can’t be going missing in the biggest games and expect to win the Ballon d’Or.
Messi has genuinely ruined my standards, My Messi could never.
Tory☁️ retweeted
Day 85/100
InsecureBankv2’s ViewStatement activity is exported loaded another user’s full transaction statement into a WebView with zero login, same bypass pattern as PostLogin and ChangePassword.
@commando_skiipz @ce3nerd @DefendWithFelix @KoredeSec @ife0x01
Day 84/100
Chained 3 findings into one exploit on InsecureBankv2: broadcast an intent from the terminal with a phone number I made up, and the app decrypted the real stored password and tried to send it via SMS to that number. Zero login, zero app interaction.
@commando_skiipz
I didn’t know you could run out of GitHub Actions minutes until I started going this hard on a project
Every campaign we catch teaches us something, every bug gets fixed, and every fix gets tested against the cases we’ve already seen.
1,910 tests and counting. Each CI/CD run takes around 15 minutes, and I’ve already had to top up just to keep the pipeline running. Somehow, I’m almost out again.
Building this thing is getting expensive in ways I didn’t anticipate lmao.
Threat actors are working overtime. Three days of chasing campaigns, watching domains rotate, and trying to get ahead of the next victim. 👇
A bank sign-in clone jumped across 4 domains in 5 days. I reported each one as it appeared. Three hosts pulled theirs, and I caught the fourth the same night it went live.
Fake copies of a telecom’s official sites went down 1h 28m, 1h 33m, 5h, and 10h after my reports.
A recurring brand scam? Its newest domain lasted just 2h 20m after my report.
Then came the worst one: an SMS telling a Nigerian bank’s customers to “verify your identity within 24 hours.” Someone reportedly lost money to this.
I traced it to one operation running 8 domains. All 8 reported. Two blocked within an hour. I also found a domain already prepared to impersonate a second bank and reported it to give an heads up.
So far, 172 reports since October 12.
The actors aren’t slowing down. Neither am I. : )
Tory☁️ retweeted
Day 84/100
Chained 3 findings into one exploit on InsecureBankv2: broadcast an intent from the terminal with a phone number I made up, and the app decrypted the real stored password and tried to send it via SMS to that number. Zero login, zero app interaction.
@commando_skiipz
Day 83/100
Chained 3 findings into one exploit on InsecureBankv2: broadcast an intent from the terminal with a phone number I made up, and the app decrypted the real stored password and tried to send it via SMS to that number. Zero login, zero app interaction.
@commando_skiipz
Tory☁️ retweeted
Days 24-25/30:
I went back to the basics of SIEMs, logs. How can you understand what a SIEM outputs if you don't know how to dissect and digest a log file
@Niffeey007 @malik_cybersec @DefendWithFelix @gabbytech01 @KoredeSec @cyberjeremiah
#30DaysCybersecurityChallenge
Days 21-23/30:
I've been working on some side projects and also working on the phishing analysis section on tryhackme
@Niffeey007 @malik_cybersec @DefendWithFelix @KoredeSec @gabbytech01 @cyberjeremiah
#30DaysCybersecurityChallenge
Tory☁️ retweeted
Dedicated to preaching the gospel of cybersecurity awareness in the streets of Ikeja, Lagos with @cabbagenode @TheCyberPatron_ @_DeejustDee @lady_sheraz @cyberjeremiah @HalimatAdepegba @BigAuntyAni @ChefMagicfinger @Austineprinces1 @bestmanmichael9.
Huge success!🎉🎉🎉
Tory☁️ retweeted
Day 83/100
Finished exploiting InsecureBankv2’s content provider: confirmed read, inject, insert, update, AND delete, all unauthenticated.Full CRUD compromise through one exported provider with zero permission checks.
@commando_skiipz @ce3nerd @KoredeSec @DefendWithFelix @ife0x01











































