- Tweets 10,880
- Following 3,365
- Followers 36,403
- Likes 67,124
Spreek retweeted
Keystone customer data leakage - contains your name, contact details, shipping address, and order information, including the items purchased and their prices.
1
1
4
1,241
Spreek retweeted
We’re here today to discuss why you clicked on the Knicks championship ring phishing email
23
1,048
32,219
338,731
Initia chain hacked and a bunch of tokens infiniminted.
Hacker has cashed out $2.6m thus far with more in flight
48
48
351
66,558
Spreek retweeted
We are aware of reports of suspicious activity on the swETH and rswETH contracts.
Our team is investigating now with our security partners and taking all necessary precautions.
No ETH has left the swETH or rswETH withdrawal or deposit contracts.
No action is required.
5
1
21
2,272
Admin keys for Swell DAO's swETH and rswETH appear to be compromised (railway related?)
* Attackers are raising NAV by max 1% (unbacked) each hour
* Four malicious upgrade contracts have been deployed (although not queued yet through multisig) that could steal approx 2500 ETH
27
62
402
117,429
github.com/Spreek/test/blob/…
(Claude written report, I have not verified everything so take with a grain of salt, but I believe the top line information is correct)
17
13,149
They did drain crypto keys that were in Railway.
Seems like an okay sweeper script (read: not something homegrown for this one op)
Attacker:
0xd9773325282874d18cb83f1fe50f14c39750b2ee
~$371,000
Oct 21 19:36 UTC
500+ txns
200+ distict addresses
19+ EVM chains
15
32
292
117,299
Spreek retweeted
Railway is compromised, rotate all API keys as soon as possible
Deployments are down so don’t wait to redeploy
Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack
Stay safe friends
121
496
4,747
564,380
Spreek retweeted
she's a 10 but that was supposed to be a random 384-bit number
49
1,684
28,838
306,742
Spreek retweeted
Today I call upon the website industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of all websites to pen and paper.
So, two big things this morning:
1. A Certificate Authority (CA) was stupid and used a ridiculously-easily-guessable value for its private keys. Which means the entire SSL/TLS chain of trust is broken.
This means anyone can impersonate any site, and you won't be able to tell, because the site certificate will be legitimate (in fact, the only way you COULD tell is to know that eMudhra wasn't in the chain of trust for the site before, but is now).
Anything that checks/processes certs needs to be updated, to revoke the CA's certs. That means computers, phones, video game consoles, smart appliances, and a ton of phone apps and computer programs. And a lot of them don't have patches ready yet.
2. There's going to be an announcement later today of a vulnerability that's being exploited right now that allows anyone to take over any computer running a website that uses PHP, with a single request. It does not require authentication. If you're running any websites using any version of PHP, research "PHP2Shell" immediately, and take the necessary mitigation steps ASAP. Like I said, this is already being exploited right now, but once the announcement's official, the internet's gonna get slammed with people trying to take control of millions of computers worldwide.
2
3
18
1,500
it's hilarious how certain bitcoin mining cos mostly got bailed by being early into the biggest hardware up only market of all time and are STILL maybe going bankrupt
3
1
57
6,112
Spreek retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
4,152
6,078
77,545
26,119,485