switched retweeted
Congrats to @killa who solved stealmybitcoin.com hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF).
Check out their awesome writeup here: github.com/KillaBoi/StealMyB…
switched retweeted
Media Combatants: The Islamic State on Jihadi Propaganda as Warfare - by @LucasADWebber
militantwire.com/p/fighting-…
I can do 45 at best.
FORTRESS: The Pentagon is preparing every major U.S. military base to survive 90 days without outside support — no civilian power grid, no global supply chains, no outside fuel or water.
The initiative, revealed in documents reviewed by Fox News Digital, envisions portable nuclear reactors, massive battery storage, and microgrids that can disconnect installations from civilian electricity entirely. Strategic reserves of munitions, fuel, critical minerals, and medical supplies would be stockpiled based on wartime consumption rates. Civilian factories are being pre-identified to shift to defense production during a crisis.
Pentagon chief spokesperson Sean Parnell put it bluntly: "Power is combat now. Without electricity, you lose communications, water, logistics, assembly lines and just basic military command structures."
Full story here foxnews.com/politics/inside-…
switched retweeted
Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. stealmybitcoin.com/
switched retweeted
Well that’s insane.
Canadian teenager Laken Pavan was arrested in Poland on espionage charges in May 2024.
Laken joined the Canadian Armed Forces’ Bold Eagle cadet program at age 16 and trained as a combat engineer. But he soon felt unfulfilled with his military service and schooling and decided to go overseas to gain some new life experience.
On April 15th, 2024, Laken asked to be excused from English class to go to the restroom and instead walked outside to begin a voyage to Ukraine. He took a ferry to Vancouver, flew by himself to Istanbul, and then on to Moscow. From there he traveled to Donetsk and joined a volunteer group called Interbrigade.
After Interbrigade members realized he was only 17 years old, they planned to send him back home as soon as possible. He mostly spent the next few days in limbo but was detained by Russian FSB agents who’d learned of his presence. Over the course of a week, they interrogated him and then recruited him for operations in Europe.
Laken traveled first to Copenhagen. He communicated with his handler “Slon” via Telegram and the Instagram account @astridjenson.dnk and received small payments in Bitcoin for his expenses. Slon told him to report any and all interesting connections with foreigners in the city, such as US military personnel on vacation. The initial plan was for him to reenter Ukraine and join a militia unit, while reporting back to the FSB.
After a short period in Denmark, he moved to Warsaw, where he believed it would be easier to withdraw Bitcoin. But shortly after arriving he drunkenly confessed to a hotel worker and then to police that he was in Poland as a spy. He was immediately arrested, several weeks before his 18th birthday.
Laken was convicted and sentenced to 20 months in prison. He spent his 18th and 19th birthdays in prison. In mid-August 2025 he was released and deported back to Vancouver.
For episode 216 of the Spycraft 101 podcast I spoke to Laken about his journey to Ukraine, his recruitment by the FSB, his time in prison in Poland, and putting his life back together afterwards. The episode is available now.
#fsb #warsaw #ukraine #vancouver #spy
open.spotify.com/episode/4FF…
switched retweeted
Trail of Bits now has a production-grade PHP exploit: stock php.ini-production, ASLR, multi-worker, ARM64 and x86-64, MediaWiki, WordPress, phpBB and Laravel, straight to root. If you were still waiting to patch PHP, this is your sign.
Update: Our PHP exploit is now production-grade.
* stock php.ini-production, display_errors=off, normal memory_limit, multi-worker, ASLR, under load
* ARM64 + x86-64 targets
* MediaWiki, WordPress, phpBB, Laravel
* Apache/mod_php and nginx/php-fpm -> root
xitter.cf/dguido/status/21131291…
switched retweeted
Pro-ISIS Telegram channels are sharing communication links to official media channels. ISIS may soon release a statement claiming responsibility for the church attack in Jordan.
These posts are usually shared from time to time, but it appeared just after the attack in Jordan is noteworthy.
switched retweeted
Went down this rabbit hole thanks to eMudhra
Robert Neil COOKE(~75yrs) was a compliance auditor in the UK for decades running many companies.
Including QEC CERTIFICATION LIMITED (02812220) and
SN REGISTRARS (HOLDINGS) LIMITED (07659067)
See logo and company details.
switched retweeted
Has anyone looked into @eMudhra 's ISO27001 and SOC2 certifications?
Their ISO/IEC 27001:2022 (Information Security Management System) seems to have expired on 04-May-2026.
Is there a newer one @eMudhra? Can you share your SOC2 status too?
resources.emudhra.com/Corpor…
switched retweeted
A cornucopia of federal agencies have been quietly targeting a global money laundering operation that they say cleans millions a day for cartel members & those trying to avoid Russia sanctions. A previously unreported arrest this week lays it all out.
courtwatch.news/p/exclusive-…
switched retweeted
“A confidential source reportedly told federal agents that the JUST Team and its affiliates laundered approximately $50 million per day.”
courtwatch.news/p/exclusive-…
switched retweeted
THIS IS THE MOST DIABOLICAL COMMENT SECTION EVER.
Someone is getting fired over this…
switched retweeted
BREAKING: Major U.S. banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting to take actions that appear to be independent of user instructions, per Axios
switched retweeted
emudhra is exiting their certificate authority business
not because they're incompetent
but because of social media reactions
switched retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
switched retweeted
What an utterly terrifying, yet completely fair, question to ask of eMudhra.
bugzilla.mozilla.org/show_bu…
