@1440000bytes
 INVINCIBLE PRIVACY GROUP
joinstr.xyz
Joined January 2018
  • Tweets18K
  • Following345
  • Followers7.3K
3KMedia
I have created a donation page to support my work: donate.joinstr.xyz/ This would help me continue to work on joinstr and other projects.
8
11
3
78
45,942
floppy.md retweeted
MTS
@MTSlive9h
SITUATION DETECTED: Major U.S. banks are detecting unauthorized AI agents operating inside customer accounts and struggling to determine which actions were authorized by users, per Axios.
71
192
106
2,681
186,038
floppy.md retweeted
Z A D D Y
@ZaddyzaddyOct 21
Zero sense of urgency?
sagitz
@sagitz_Oct 21
Replying to @sagitz_
Full technical details are available on our blog: wiz.io/blog/php2shell-php-rc… Advisory website: php2shell.com

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

wiz.io
21
31
11
937
95,654
Every vulnerable server will be exploited. This includes all the servers used by custodians.
2
15
511
floppy.md retweeted
ℏεsam
@Hesamation18h
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits. the PHP Foundation revealed this JUST yesterday. keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet. thephp.foundation/blog/2026/…
46
152
32
1,425
122,409
floppy.md retweeted
Harsh Khandelwal
@kutukam19h
I never wanted to say this but we have reported vulnerabilities in hundreds of companies in India. Almost all the companies rejected it, got defensive and now i’m so afraid the exploits are just left open. This is btw the biggest companies in India
59
134
17
1,751
29,534
talk about a great week to migrate off wordpress!
2
4
45
2,123
floppy.md retweeted
Wu Blockchain
@WuBlockchain16h
CoinDCX Faces Suspected $16 Million Hack After $44 Million Breach in 2025 India's CoinDCX, one of the country's largest cryptocurrency exchanges, may have suffered another security breach, according to on-chain investigator Darcy. On October 21, approximately 15.99 million USDT and 5,784 TRX were transferred from CoinDCX hot wallets and deposit addresses to a single TRON address, including one transfer of 15.82 million USDT. The funds were subsequently split and routed to deposit addresses at Binance, OKX and Gate. CoinDCX previously lost about $44 million in a July 2025 hack. The latest suspected theft has not been officially confirmed.
60
20
16
193
53,762
floppy.md retweeted
Eric Voskuil
@evoskuilOct 21
He misspelled, "drop validation". Trust Me Bro [tm] github.com/bitcoin/bitcoin/i…

AssumeUTXO: drop background sync? · Issue #36557 · bitcoin/bitcoin

This zooms in on one aspect of: #32377 And has a prerequisite (which itself needs careful consideration): #36543 We currently sync from the snapshot to the tip, and then from genesis to the snapsho...

github.com
4
4
3
21
3,867
A security incident concerning eMudhra’s Public Key Infrastructure (PKI) was reported in the public domain. Meity has taken serious note of the reported incident. A special team has been constituted to investigate the matter.
234
543
193
5,296
445,087
HRF uses WordPress LMAO
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
9
578
floppy.md retweeted
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,263
10,588
2,763
68,974
11,892,906
1
2
409
I reported my first vulnerability to ola (Indian uber) when I was in college (no AI). I was given defense access by anthropic a few days back. Think about yourself before questioning me and my approach.
21
820
I love marketing posts on bitcoin twitter. Provides me an opportunity to review their claims.
9
547
floppy.md retweeted
Punit Shah
@thepunitOct 19
Replying to @thepunit @bagder
An unexpected learning: it turns out emailing vulnerability proof-of-concepts (PoCs) gets your email rejected, so most of the reports we first sent bounced. We think mail filters flagged these PoCs as malware. We already sent encrypted reports when maintainers provided us a key. Now, all reports arrive encrypted.
1
2
1
21
3,547
I don't need lessons about responsible disclosure from teams that sit on some known, unfixed vulnerabilities for weeks or months and fail to respond in time.
2
21
1,141
floppy.md retweeted
Seed
@sesi_the_manOct 19
More evidence of a HWW company sweeping evidence of compromised devices under the rug. These companies are highly incentivized to under-report legitimate risks so the sales machine continues on. zetter-zeroday.com/trezor-wa…

Trezor Wallets Also Compromised with Implants

Despite claims by Trezor today that none of its devices have been compromised -- unlike the devices of its competitor, Ledger -- hardware hacker Joe Grand says he found implants in two Trezor devices...

zetter-zeroday.com
32
43
5
240
39,376
Reported multiple vulnerabilities in cake wallet today that could lead to loss of funds. One of them affects only bitcoin users. Still waiting for an acknowledgment or response.
17
18
4
159
10,633
Starlink is the USA equivalent to Russian natural gas, a form of economic power used to leverage policies favorable to the controlling foreign power. I always hope Europe will get wise to it because they talk big but they rarely follow through.
Financial Times
@FTOct 18
US threatens Europe over Starlink restrictions ft.trib.al/0KUTiUQ

US threatens European companies over Starlink restrictions

Ambassador Andrew Puzder warns about ‘devastating’ retaliation if Brussels goes ahead with plans to limit spectrum access for non-EU companies

ft.com
3
2
9
715
Load more