Cyber security news, vulnerabilities, breaches, updates & education. #CyberSecurity #Malware #Cybercrime #CyberSec #News #Infotech #CyberNews #Hackers #Exploits
New York, NY
- Tweets 9,402
- Following 2,895
- Followers 1,393
- Likes 24,662
Pinned Tweet
Throwback to AOL Proggies and Punterz and just learnt @finkd even made his own Prog Vader Fader.... thats actually reall cool to know he was involved in the early days of the internet warez//hacking scene a bit. Wonder what @elonmusk was doing those days hah
#AOL #MarkZuckerberg
1
2
289
The Cyber Post retweeted
Elon Musk took a $40,000 username from a guy who had owned it for 16 years.
He paid him absolutely nothing.
Not even a dollar.
Instead, he was offered a T-shirt and a tour of Twitter’s headquarters.
This is the story of Gene X. Hwang the first @X username
2007
- photographer from San Francisco
- co-founder of Orange Photography
- registers @x on Twitter
- keeps the username for 16 years
over the years
account grows to ~53,000 followers
receives offers of up to $40,000 for the handle
But he refuses to sell
2014
- hackers steal his x account
- Twitter helps him recover it
July 23, 2023
- Elon Musk announces Twitter will become X
- Gene is in Canada playing in a pinball tournament
He has no idea what’s coming
July 25, 2023
- Twitter officially becomes X
- the company wants x
- Gene receives an email from Twitter support
“Your user handle is affiliated with X Corp.”
his username is taken and gets a new one @x12345678998765
what X offers him
- company merchandise
- exclusive tour of X headquarters
- meeting with the management team
$0.
Gene even asks if he can have the old blue Twitter bird sign being removed from headquarters.
they say no.
October 2025
X launches its Handle Marketplace
rare usernames can cost $2,500 to over $1 MILLION
users must maintain a paid subscription
lose the subscription, potentially lose the handle
the same company that took x without paying its owner now charges people for access to rare usernames.
16 years building an identity.
$40,000 in offers rejected.
and all he got was an offer of merchandise and an office tour.
BROTHER.
1,923
3,455
36,121
7,538,568
The Cyber Post retweeted
‼️ BREAKING: Google says Android TV box maker Videostrong infected its own users and sold the access to criminals.
They built a backdoor into the firmware of 1.3M+ set-top boxes. If a user deleted it, it came back on the next reboot.
Buyers turned the boxes into residential proxies and ad-fraud bots.
Google has banned Videostrong from certified Android and says the takedown also cuts off at least 10M more infected devices.
27
253
1,212
66,023
The Cyber Post retweeted
NEW CRITICAL EVENT · Nov 2, 2026
ST 91 / LT 92
CrowdStrike says China-nexus VAPOR PANDA ran ARTEX, an agentic AI framework, on the DeepSeek LLM against 200+ organizations in 14+ countries over 11 days.
Post-exploitation confirmed at 9 orgs, including two foreign ministries, an interior ministry and telecoms in the US, Belgium and the Philippines. A human operator steered the agents in Chinese. Separate from Storm-0940.
Verify endpoint sensor coverage, rotate unrotated signing keys and hunt for credential spraying.
Full evidence + audit route: aithreats.app/#/audit/evt_27…
1
8
40
4,330
The Cyber Post retweeted
China-linked accounts on X are posing as American voters ahead of the midterms.
One of them has 200,000 followers. It used to be a Philippine culture and food blog. After going quiet in 2022, it came back posting Chinese state media and Mao tributes. Then it switched to U.S. politics, posting both pro- and anti-Trump content and using an AI video to claim America isn’t a real democracy.
Graphika’s new report identifies three clusters tied to Spamouflage, a network it has tracked since 2019. One centers on a MAGA-style persona boosted by accounts that previously attacked Chinese dissidents. Another is an old account that attacked Democrats during the 2025 shutdown.
The tells: Chinese-style punctuation in English posts, and almost all the engagement coming from inside the same network.
Clemson researcher Darren Linvill says there’s “no chance it tips the balance,” calling the network “famously bad at mimicking real Americans.” It’s been more effective at harassing Chinese critics overseas.
The Chinese Embassy says China “has never and will never interfere” in U.S. elections.
The goal looks less like picking a winner and more like making Americans trust their own system less.
11
66
178
9,402
The Cyber Post retweeted
❗️ A Dutch Starlink user says he got a Paramount piracy notice within two days of torrenting a single episode of Dexter: Resurrection.
Starlink forwarded it with a warning that further downloads could get his service suspended or terminated and put him at risk of legal action.
He says 24 years of torrenting had never brought him a single notice before. In the Netherlands, the Supreme Court ruled in 2021 that a major ISP did not have to hand alleged pirates' details to a film distributor. So the user thought he was safe.
Starlink, a US company bound by the DMCA, has said it is obliged to pass such notices on.
208
536
3,242
287,059
The Cyber Post retweeted
Hackers breaking into European supermarket fridges (Sweden, Belgium) and raising temperatures to spoill food.
Fascinating Reddit comment from someone works with supermarket control systems:
▫️fridges vulnerable due to old firmware (should update)
▫️systems are on public-facing IP addresses (should be behind VPN)
▫️the temperature is being “raised” by the fridge’s defrosting system (for maintenance, the fridge de-ices evaporator coils at least once a day…and hackers look to be running defrosting cycles non-stop which can “turn the case into a sauna”)
European supermarket fridges are under cyberattack once again, with stores across a vast swathe of the continent from Sweden to Belgium hit by a hack that turned up their temperatures, echoing an incident in France just last month reut.rs/47PPmV0
57
296
2,012
232,116
The Cyber Post retweeted
🚨ALARMING: Power outage hits Washington, D.C., a day before the U.S. midterm elections.
Nearly 80,000 customers are WITHOUT power across the U.S., including outages in Washington, D.C., per PowerOutage's data.
- Pepco reports 1,176 customers without power in Foggy Bottom, just blocks from the White House.
- Traffic lights and federal facilities, including the State Department, are affected.
- A substation failure is the probable cause. No restoration time is confirmed.
- The outage affected about 1,800 customers near Morristown and voting sites in Wittmann and Circle City.
- Brief AT&T connectivity issues also affected some voter check-in devices.
- Officials said 99% were functioning and no voters were turned away.
108
626
2,392
262,215
The Cyber Post retweeted
China’s Ministry of State Security targeted a Stanford student with a free trip to Shanghai.
In June 2024, freshman Elsa Johnson was researching Chinese industry and military tactics at the Hoover Institution when a man calling himself Charles Chen messaged her on Instagram. His profile showed Stanford photos and mutual connections.
He offered a paid trip to China, sent a flight itinerary to Shanghai, pushed her onto WeChat, and later publicly demanded she delete screenshots of their chats. She had never told him she had those screenshots.
According to Johnson, the FBI said Chen had no Stanford affiliation, had targeted at least ten other female students since 2020, and was likely working for China’s Ministry of State Security. In 2025 the FBI warned her she was under physical surveillance on campus and that her family was being monitored.
After she and a classmate published an investigation in the Stanford Review detailing the targeting, she received intimidation calls in Mandarin. One referenced her mother. She testified before Congress in March 2026.
Stanford University student Elsa Johnson became a target of the Chinese Communist Party in 2024.
Elsa attended a private school as a child with a heavy focus on foreign languages and became fluent in Mandarin Chinese while still in elementary school. Years later after she was accepted to Stanford, she studied international relations and researched Chinese industry and military tactics while working at the Hoover Institution on campus.
She soon came to the attention of members of the Chinese Communist Party, which has a heavy presence at Stanford and throughout Southern California. There are currently more than 1,000 Chinese students attending Stanford each year, and the university has received more than $64,000,000 in private donations from Chinese individuals and organizations since 2010.
In June 2024, a man claiming to be a fellow Stanford student named Charles Chen contacted her online. She was not initially suspicious as they had many mutual associates, and his photos and posts appeared to be centered on campus. But his questions and requests quickly put her on edge as he invited her on a paid trip to China. And he seemingly knew details about her that she had never shared with him.
When she tried to disengage with him, she began receiving threatening phone calls by Chinese speakers. Elsa contacted Stanford administrators and the FBI, who told her Charles was likely affiliated with the Ministry of State Security, had been posing as a Stanford student for years, and had targeted at least ten other female students since 2020 in a similar manner. They also told her she was under physical surveillance on campus by the Chinese Communist Party.
Elsa wrote articles in the Stanford Review and The Free Press about Chinese influence on campus, and in March 2026 testified about espionage threats on college campuses before the House Committee on Education and Workforce.
For episode 270 of the Spycraft 101 podcast I spoke with Elsa about being targeted by a foreign government right in the middle of a US college campus. The episode is available now.
#stanford #college #student #china #hooverinstitute
open.spotify.com/episode/6KO…
7
232
725
36,236
The Cyber Post retweeted
North Korean-linked actors have begun a new phase of laundering the funds stolen from Binance.
After draining $500M from TRON staging wallets, the launderers have started moving onto Solana.
The Reactor graph below shows the scale across blockchains.
44
98
441
68,939
The Cyber Post retweeted
Xiaomi phones are silently logging what apps you install and sending short screen clips to the cloud for anti-fraud checks.
This came to light after a developer reverse-engineered a rooted Xiaomi 14 running HyperOS 3. His friends had received calls from local police ordering them to uninstall X and Telegram. He found privileged system components that track recent app usage, upload lists of third-party apps, and capture brief encrypted screen recordings for cloud risk analysis. Xiaomi’s own developer documentation confirms the system retains 72-hour records of screen activity and app installs, even after you delete the apps.
Most users cannot turn this off.
多名用户检查小米手机：预装组件进行应用信息采集、后台行为记录和录屏上传
10月31日，某开发者称，朋友接到警方电话，被要求卸载X和Telegram。
他随后检查朋友的小米14，称发现预装组件涉及向小米及联通相关服务器上报应用列表，系统安全组件还包含将约3秒的录屏片段加密上传、进行云端检测的代码。
众多网友随后分享了对小米17 Pro Max的AI辅助分析，同样指出预装组件具有读取应用列表、设备及SIM卡信息等能力。
小米官方开发者文档则介绍，其反诈服务可向深度合作方提供部分设备行为数据，支持过去72小时内的相关行为查询，并称删除通话记录或应用后仍可检测。
8
134
479
84,097
Cyberattack on fridges hits supermarkets across Europe reut.rs/3X1A0dF
128
680
1,740
450,805
The Cyber Post retweeted
BREAKING:
This morning’s cyberattack against supermarket fridges and freezers has now spread to Belgium, Sweden, Luxembourg and Estonia.
The hackers increased the temperature up to 50C. Food worth millions of euros has been spoiled.
Experts warn that such cyberattacks on supply chains and logistics can constitute a threat to national food security in many Western states.
909
3,065
12,758
2,116,217
10/29 币安被盗事件又给全行业敲了一次警钟。被攻破的不一定是代码。所有的创始人、开发团队，甚至是运营、HR等等看似离代码很远的岗位，每个人都可能是黑客的突破口。
2024年11月，我们面试过一个前端开发人员。我们收到的是中文简历，中文名字。履历里面记录了他在Bybit, 阿里巴巴等工作经历。在面试的时候，我们发现他的口音是韩式英文，并且不会说中文。我们要求他打开摄像头，摄像头那端，他的像素模糊，画面质感像15年前的摄像头。他带着头戴式耳机，有刘海，和下面截图的这个人非常相似。
我问他会不会说中文，他说不会。我问他是哪里人，他说是日本人。然后我问他在中国和新加坡的工作经历，他含糊其辞。几轮交流下来，我们怀疑他是不是朝鲜黑客，于是结束了面试。从他的简历和背景来看，造假的概率很高。
事情过去了接近两年，今天看到这张照片恍然大悟。
也在此给所有的项目方提醒：面试一定要求开摄像头，PDF不要轻易下载。一定要让全公司的同事都有安全防范意识，不要留下弱点让黑客攻击。
最后，希望加密社区团结一致。我们都在这里支持币安 @cz_binance @heyibinance @zachxbt
45
49
428
115,409
The Cyber Post retweeted
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products.
In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk.
If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-code-…
560
1,076
7,032
1,278,727
The Cyber Post retweeted
The scale of the danger North Korea poses to crypto has become impossible to ignore.
This is the story of the investigators exposing North Korean operatives working inside the industry.
You think you know who your developer is.
But do you?
🎬 Introducing THE DEVELOPER.
26
107
694
105,886
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
3,419
6,180
29,633
7,194,476
A 19 year old scammed $13 million in Bitcoin over the phone and got caught because the Rolls Royce he was in was SPEEDING
The day his crew took 185 Bitcoin he texted his partner on Signal "We actually smacked a 185btc target today" and then "And we ain't done"
His name is Trenton Johnston and he started scamming at 17 in Canada before moving to Miami
In March his crew called a California resident pretending to be Google support and said their accounts had been hacked
Then a fake rep from the crypto wallet company Trezor called and the victim handed over the codes to two accounts
185 Bitcoin disappeared and it was the victim's entire life savings
A witness later told investigators he'd been sharing his screen on Discord to show people exactly how he did it
Prosecutors say the money went on a Lamborghini Aventador SVJ and two BMWs and jewelry and a private jet
Eleven days after the heist a deputy pulled over a white Rolls Royce for speeding in North Miami and Johnston was sitting in the back
Police found 21 suspected amphetamine pills in his Hermès bag
The three people in the car told investigators he had no real job and was paying for all of them by scamming crypto holders
Prosecutors originally asked for 4 to 5 years in prison
But he handed back the crypto he still had and helped investigators with cases against other people so this week the judge gave him 25 months
Cooperation or not I think 25 months for wiping out someone's entire life savings is way too light
405
534
6,504
708,541
The Cyber Post retweeted
veeerrry iiintereeestiiing
中国社区逆向拆解了Claude的封号机制。以下是他们的发现
Claude使用积分制。注册时账号获得初始分数，之后根据行为加分或扣分。低于阈值直接封号。回分很难
影响分数的因素:
注册
> 干净IP是最重要的因素。不一定要家宽，但必须干净
> Gmail已经不是最优选，有权重更高的邮箱服务
> 注册时直接弹KYC的号可以扔了
> 用手机App注册会加分
支付
> 刚注册就订阅会扣分
> 直接上Max会大幅扣分。最好等两天先订Pro
> 支付时弹KYC说明账号在考察期，但不一定会封
> 国外实体银行卡加分。Google Play也行。虚拟卡扣分
使用
> 不要一次把限额用完。宁可两个号轮换也不要一个号撸到底
> Desktop客户端有少量加分。尽量少用网页端
> 手机端也有少量加分
> 开启记忆功能加分。记忆文件越多分越高
IP和设备
> 稳定性是关键。不要跳IP，尽量一直用同一个
> 代理必须全局模式并开启TUN
> 多设备登录大幅扣分。理想状态是一台电脑一个客户端
> 频繁换IP、频繁登录、高并发都会大幅扣分
账号年龄
> 老号有巨大的容错空间。2023年的号明显更高
> 分数随时间增长，但很慢
其他
> Windows和macOS没区别。Linux会扣分
> 时区和语言基本不影响。不会因为北京时间就封号
> 跟Claude说自己是中国人没问题，记忆不会触发封号
> 大量使用Fable会扣分
> 升级Max大概率进入观察期，除非是高权重老号
观察期和封号
> 接近阈值时账号可能进入观察期。典型特征是掉登录
> 观察期继续扣分就会封号
> 高分号可以扛过多次观察期
关注我，拆解你每天在用的服务背后到底怎么运作的
49
134
2,493
180,434