Connor200024 (@connor200024) header
Connor200024 (@connor200024) profile picture

• IT Technician | • Full-Stack Developer | • Board of Director @NodeByteLTD | • Ethical Hacker/Pentester | • Living life to its fullest! 🤙🏻❤️

England, United Kingdom
Joined February 2018
Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)Photo by Connor200024 (@connor200024)
*sigh* new discord hack!
⚠️New Discord Hack Tactic⚠️ Someone I trusted reached out to me, claiming them and their friends made a game called Inkborn. Turns out it was an imposter and added a virus into my PC. I’m taking all precautions to this but I urge anyone to beware if you get reached out for this.
71
Well… we are fu**ked…. Scammers will become more active now.
Discord releases Gift Cards in USA, Canada, France, Italy, Spain and UK!
1
30
🤷🏻‍♂️ I still don’t think it’s right for an employee to be doing what he was doing… 😬😬
Last night, I became aware of the concerns raised in Josh's post. I reached out publicly and over DM to offer a potential explanation based on the limited information available at the time, while working to understand what happened. As background, we’ve internally been pushing 100% on security of the Railway platform. At Railway, we believe that cyber threats are real and mounting, and we’ve built out tooling for automatic scanning + CVE remediation (for both our infrastructure and customers). Over the last few weeks, oncall engineers were instructed to red team our infrastructure. We maintain specific policies and short lived grants for when these actions occur. Subsequently, I became aware that an employee at Railway had constructed, on their own time, a tool for proactive identification + reporting of bug bounties within the broader community. The employee, using their own personal accounts, personal credit card, and time outside of work hours, signed up for a personal subscription to a hosted service running Deepseek. I can confirm they ran this tool once and only once, on a singular external provider, and halted it proactively within 15 minutes of starting. Railway does not condone these actions. We expect all our employees to uphold our standards of conduct, whether acting on behalf of Railway or in a personal capacity. We create an environment where internal red teaming has strict guidelines, and when bug bounty disclosures must occur, we follow every letter of responsible disclosure. We have addressed this incident with the employee directly and have taken appropriate action. We are also reinforcing our expectations for employee conduct to help prevent similar situations.
Readers added context they thought people might want to know
Primcloud does not have a bug bounty program, per its founder. Its Acceptable Use Policy forbids unauthorized probing, scanning or vulnerability testing without prior written consent. x.com/joshmanders/st… primcloud.com/aup
30
Lost an absolute legend! Rest in peace Sir Patrick Stewart! ☹️❤️
31
🫩 yet more and more vulnerabilities are coming up!
The critical PHP security issue highlights the importance of understanding your organisation’s attack surface. The NCSC’s guidance can support your organisation to navigate a vulnerability patch wave and respond with greater confidence. Learn more: ncsc.gov.uk/blogs/prepare-fo…
1
52
What is this hack week?
1
1
52
🚨 Researcher publishes 11 unpatched security flaws affecting Tailscale and headscale Erica Windisch of Cyberdione Labs skipped coordinated vulnerability disclosure and publicly released details for 11 flaws tested against Tailscale 1.104.2 and headscale 0.29.5. The reported issues involve Tailscale SSH, Unix socket forwarding, App Connectors, Serve and Funnel. The most serious could allow an authorized Tailscale SSH user to gain root-level capabilities on a destination system through port forwarding. ⠀ Windisch said the findings were reported but not coordinated with Tailscale before publication. Tailscale confirmed it received the report and had independently identified issues it is now working to fix. The company said the full scope remains under investigation and is not currently advising everyone to disable Tailscale SSH. Research: tailworm.com/ Tailscale response: reddit.com/r/Tailscale/comme…
10
25
8
152
25,659
….
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details → thehackernews.com/2026/10/ur…
48
What else could go wrong? ;)
‼️ Node.js Releases Security Updates to Fix High-Severity TLS, DNS, & Brotli Vulnerabilities Details: cybersecuritynews.com/node-j… Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting DNS lookups, TLS certificate checks, and Brotli decompression. The supplied release details identify 26.12.1, 24.22.1, and 22.23.4 as the patched versions. The most serious potential outcome is remote code execution through the Brotli decoder. The October security update also covers HTTP connection handling, repeated random values, ZIP processing, and filesystem permission checks. CVE-2026-111497 affects the Brotli decoder in all three release lines. The supplied advisory describes an out-of-bounds write that permits remote code execution. #cybersecuritynews
1
1
61
Due to the PHP security vulnerabilities getting early signs of exploitations we have shut down 3 of our services while we await PHP to release the security patches. No gaming servers or VPS servers currently running will be affected by this.
1
1
1
128
🤦🏻‍♂️😡 Poor girl… why do people do this l. What fun do they get from this? But making people terrified. :/
❗️ The FBI arrested an 18-year-old it says swatted a girl's home for years and threatened on Discord to firebomb it. He used a VPN, but his Discord account was registered to his own phone number. He has pleaded not guilty.
70
🤦🏻‍♂️ why the bbc they are full of sh**!!
📺 Big news! @BBCNews is now streaming live on YouTube in the UK and U.S. YouTube is the home for high-quality, trusted news: in the first half of 2026 alone, viewers watched over 18 billion hours of news content on the platform. By using @YouTube's live tools, iconic broadcasters like the BBC can build deep, authentic rapport, bringing global communities together to learn, discuss, and follow history as it happens.
Readers added context they thought people might want to know
This comes as part of a wider move to expand the license fee charter. An upcoming government white paper will recommend Britons be forced to fund the BBC if they use YouTube, Netflix, Amazon or Disney Plus independent.co.uk/news/uk/politi…
2
1
95
hello your computers has virus... 🤣
Digital gift cards are now available in the US at select retailers - pick yours up now! Physical cards are coming this holiday season, check out this page for the latest on where and what to buy: discord.com/gift-cards
2
63
A new data breach involving Double Counter has exposed information connected to Discord users affecting around 275,000 unique email addresses. According to Have I Been Pwned, the exposed data includes: -Email addresses -Discord usernames -Names -Geographic information -Country and postcode for some paying subscribers The breach was linked to a vulnerability in Metabase, the analytics platform used by Double Counter. If you’ve used Double Counter on Discord, check whether your email was affected and stay alert for phishing attempts or suspicious Discord messages.
725
5,348
1,170
41,618
2,362,827
😬🤦🏻‍♂️
‼️ Breaking - Discord Users’ Data Exposed in Security Bot Double Counter Security Breach Details: cybersecuritynews.com/discor… Double Counter, a Discord security bot, has disclosed a breach that exposed user data after an attacker broke into its cloud systems on October 4, 2026. Attackers copied about 12 GB of database records, and the stolen bot token was used to post unwanted invitations across roughly 50 large Discord servers. According to Double Counter’s official incident report, the attack is contained, and service was restored at 19:19. Investigators audited 14 cloud projects and found no backdoors. The breach involved the bot provider’s infrastructure, not a confirmed compromise of Discord itself. #cybersecuritynews #Discord
2
1
67
❗️ More than half a million credentials leaked on GitHub turned out to still work, and the oldest was committed 17 years ago. Researchers found 543,699 of them across 224 million public repos, where the median working secret was 784 days old. npm revokes leaked tokens, so just 1 of 101,886 still worked. Of 126,963 leaked Google Cloud service account credentials, more than half still did.
13
52
6
403
60,647
Completely agree, no matter how many times you block the numbers they call back. Wonder what the government will do about this spoof calling 😅
why is no one talking about the amount of spam calls people in the UK has been getting recently?? there has to have been some sort of huge data leak bc I KNOW it’s not just me
1
539
Officially spooky season? 👻🎃
23
:o I has blue tick now?
1
2
70