Pinned Tweet
I used to just post stupid jokes and gossip here. Now I come to see how far we’ve slid into Hell since last night. I just want to tweet about my dumb server projects and voiceover stuff, not the end of the world.
casirm retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
This is great. Don’t want it to get lost in a heavy news day.
BREAKING: Meta, $META, ordered to pay $25 billion in penalties related to the Cambridge Analytica scandal in New Mexico.
casirm retweeted
Israel spyware firms hacked into Al Jazeera devices in 2024 using a new ‘adfection’ method previously unknown to the public. The ‘zero click’ hacks can infiltrate your phone or computer simply by scrolling past an ad online.
Al Jazeera’s @mohamedwashere explains.
casirm retweeted
BREAKING: Israeli spyware is confirmed on our phones. This should be headline news but none of our mainstream media is covering it, of course. So we will.
An Israeli ad company called Discover-Tech used ordinary online ads to plant spyware on people’s devices, and nobody had to click anything. The ad just had to load on a website or inside an app for you to be infected.
Citizen Lab and the ad security firm Confiant published the findings yesterday. Researchers went through roughly 4 billion ad-bidding records and found Discover-Tech ads running on more than 120,000 websites and 70,000 apps between March and June of this year. Confiant says the company was serving at least 10 million ads a day.
The platform was called Controlium. According to Citizen Lab, it let spyware companies use ad auctions to profile and unmask users, then send an infected ad to the one person they wanted to hack. The ads were also pulling cookies and login tokens from the sites they ran on. Israeli corporate records list Dekel Boni as the company’s founding director and sole shareholder.
The main spyware customer was Candiru, the Israeli firm the U.S. government blacklisted in 2021, which now goes by Integrity Labs. Five years after that blacklisting, it was still reaching devices through ad inventory on Google, Comcast-owned Beeswax and Russia’s Yandex. Google had Discover-Tech on its approved vendor list from 2020 until this week.
At least 45 Al Jazeera devices were targeted in 2024 and 2025. Candiru’s 2021 shareholder filings reportedly listed a minority investor described as a proxy for Qatar’s sovereign wealth fund, and Qatar also funds Al Jazeera. If that holds up, Qatari state money was sitting inside the company whose spyware was later aimed at Qatar’s own news network.
The heaviest targeting was in the Palestinian territories, where Discover-Tech served almost 2% of all digital ads and about 10% on April 7. Traffic also reached the Armenian prime minister’s office, courts, universities and defense organizations.
Google and the other ad platforms cut Discover-Tech off after the report came out. What nobody has answered yet is who paid for the ad buys, and how a company working with a U.S.-blacklisted spyware vendor passed vendor review for six years.
I am going to look into this today to see if we can figure out who was buying the ads. Interesting timing considering my article yesterday....
Here's what to do to protect yourself:
(1) Use an ad blocker. Citizen Lab calls ad-blocking a cybersecurity best practice and says there is no consistently safe way to be exposed to targeted ads. On iPhone, add a Safari content blocker. On Android, use Brave or Firefox with uBlock Origin. Ad blockers only work in your browser, not inside apps, so it also helps to delete free ad-supported apps you don’t need.
Kill your advertising ID.
(2) iPhone: Settings > Privacy & Security > Tracking, and turn off “Allow Apps to Request to Track.” Then Settings > Privacy & Security > Apple Advertising, and turn Personalized Ads off.
(2) Android 12 or later: Settings > Privacy > Ads > Delete Advertising ID. Then in Settings > Google > All Services > Privacy & security > Ads > Ads privacy, turn off Ad topics and Ad measurement.
(3) Windows 11: Settings > Privacy & Security > General, and turn off personalized ads using your advertising ID.
(4) Update your phone and restart it often. Many zero-click exploits don’t survive a reboot, so a daily restart forces attackers to reinfect you.
Stay tuned!
casirm retweeted
PUBLIC SERVICE ANNOUNCEMENT: CARD SKIMMERS
Card skimming devices have recently been discovered on fuel pumps throughout the Denver metro area.
In some cases, razor blades were glued to the fuel pumps just above the keypads, where the skimming devices were located.
Because this is an active investigation, we are not identifying specific fuel stations at this time.
Here's what you need to know:
•Check your accounts regularly. Look for unauthorized or suspicious charges.
•Inspect before you pay. Skimming devices can be installed on fuel pumps, ATMs and point-of-sale terminals inside stores.
•Don't touch suspicious devices. If you notice anything unusual on a fuel pump, notify station staff and report it to law enforcement.
•Report fraudulent charges. Contact your financial institution and law enforcement if you discover unauthorized transactions.
ATTENTION: FLEET AND DIESEL FUEL CARD HOLDERS
We strongly encourage you to review your accounts for suspicious activity.
If you live in unincorporated Adams County or believe your card was skimmed there, please contact the Adams County Sheriff's Office at 303-288-1535 to report the incident. If you live in a city within Adams County or believe the card was skimmed in that city, please contact that jurisdiction.
Even if your card company has already reimbursed you, we still want to hear from you! Your report could help investigators identify additional victims and connect related cases.
Stay vigilant, Adams County, and help us spread the word!
#ScamAlert #CardSkimming #AdamsCounty #CrimePrevention #PublicSafety
ALT Razor blades on device
ALT Skimmer
This is because of the pressure, btw. Keep it up. They can change, don’t let ‘em fool you.
casirm retweeted
these cartoon network leaks are really making it sink in hard that no good cartoon made for kids has been made in 10 years
casirm retweeted
People are confused. It’s not just that I don’t want to watch a public execution (I wont). I don’t want anyone to watch one. I don’t want anyone to be able to. It’s a matter of collective moral psychology and civic culture. You people despise the other countries who do this.
casirm retweeted
As a homicide detective, I can say with all of my being that there is no lesson learned in seeing someone die. But there is a price. And that price is your peace. Your decency. And the soul of our society.
We don’t have to be this way, this fake tough but real ugly way. Stop
Breaking news: The firing squad execution of Fort Hood shooter Nidal Malik Hasan will be live-streamed, the Defense Department said.
“People need to understand that there’s serious consequences for these types of things,” Defense Secretary Pete Hegseth said. wapo.st/4hNxK0C
casirm retweeted
Hey so ICE shooting a car with a 5 year old child in it is exactly what the IDF does to Palestinian families
