dobs retweeted
This is gonna be a bloodbath if Andrew is warning people to go ahead and take any PHP offline until patch drops.
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can:
php.net/index.php#2026-10-20…
dobs retweeted
Good speaking with @laurashin and @MagicalTux about the recent Ledger incident.
If you are a victim or someone concerned about this attack, and still need some (entirely free) support on what to do and how to navigate a response - you can still reach out to @SEAL_911.
The implant never touches Ledger's secure chip. It reads your 24 words off the screen during setup and sends them out over LTE.
@magicaltux and @tanuki42_ walk @laurashin through the attack, live Thursday 9am ET.
xitter.cf/i/broadcasts/1RKZzBMPO…
dobs retweeted
Regarding anonymity on Telegram, here are a couple of examples of what Telegram actually provides upon request.
source: Tor Zireael
dobs retweeted
Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.
Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).
Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.
Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.
For assistance or questions, contact Ledger customer support through our official channels: support.ledger.com
dobs retweeted
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
dobs retweeted
Scoop by @Simondlewis - the U.S. has reversed its policy of isolating Myanmar's military regime and is now engaging in direct talks, in a shift led by US Assistant Secretary of State for Intelligence and Research, Michael Vance.
reuters.com/world/asia-pacif…
dobs retweeted
PSA: On the eve of @token2049 week, please be CAREFUL when talking to people you don't know.
🇰🇵 North Korea has used proxies to socially engineer people in real life at conferences (see $285M Drift hack in April). Others do the same.
Be extremely careful what you disclose.
dobs retweeted
for all the sec researchers out there, give it a try!!
today we're releasing apex-flash-1, our first open-weights model for security research post-trained on real vulnerabilities we found and got paid for.
we are also releasing the abliterated variant for researchers who want fewer refusals in their own authorized workflows.
how we built it: cantina.security/apex-flash
dobs retweeted
Spy implant in @Ledger Nano X, back in the days and now, that's quite an evolution.
Old implant picture from grandideastudio.com/portfoli…
dobs retweeted
I'm tracking 23 hacks this week. There are definitely more that no OSINT monitoring platform caught.
SEAL (god bless them) could handle just 3(!) protocol compromises along with 58 other private key, DPRK, social engineering, and other incidents.
The rest were left to fend for themselves, probably with no security team, no prior IR experience.
The DeFi security industry needs to at least 10x for us to have a chance. Until then we are getting slaughtered.
dobs retweeted
Onchain security is everyone’s problem and nobody’s job.
ETHSecurity Initiatives is how we are changing that.
Propose the work. Fund the work. Build the work.
initiatives.thedao.fund/
I don’t get much time to read these days. Hoping that once “Blasting Through” is released, I will get back to it. In the meantime, here are ten of my favorites. Have you read any on this list? If so, what was your take?
1. “Annapurna - First Conquest of an 8000-meter Peak,” by Maurice Herzog. (First climbing book)
2. “Hell on Ice - The Saga of the ‘Jeannette,’" by Commander Edward Ellsberg
3. “The Endurance: Shackleton's Legendary Antarctic Expedition,” by Caroline Alexander
4. “Bury My Heart at Wounded Knee - An Indian History of the American West,” by Dee Brown
5. “Unbroken - A World War II Story of Survival, Resilience, and Redemption,” by Laura Hillenbrand
6. “We Were Soldiers Once...and Young: Ia Drang - The Battle That Changed the War in Vietnam,” by LTG Harold G. Moore (Ret.) and Joseph L. Galloway
7. “Into Cambodia - Spring Campaign, Summer Offensive, 1970,” by Keith William Nolan
8. “A Hell of a Bomb - How the Bombs of Barnes Wallis Helped Win the Second World War,” by Stephen Flower
9. “Relentless Strike - The Secret History of Joint Special Operations Command,” by Sean Naylor
10. “The Thousand-Mile War - World War II in Alaska and the Aleutians,” by Brian Garfield
Cybersecurity this, cybersecurity that... meanwhile actual cybersec folks do not have access to the Cyber Models. Only AI folks & Threat Actors. The actual experts who have been doing all the work in this domain are not inculded in talks. Great. Just fantastic.
We Must Pace the Frontier: I’ve written a new essay on why the AI industry should slow down, with a three-part plan for doing so.
Anthropic is unilaterally committing to the first of these steps. We’ll provide third-party evaluators with permanent, employee-level access to our systems, so that they can verify adherence to our safety measures, report on incidents, and assess models’ alignment during training.
You can read the full post here: darioamodei.com/post/we-must…
#Myanmar 🇲🇲: Anti-Junta fighters struck military jets and army personnel at Tada-U Air Base in Mandalay with Drones operated by female pilots.
Group used numerous “Fiber-Optic FPV Kamikaze Drones” armed with Improvised warheads detonated by commercial limit switches.
dobs retweeted
See you all in Mumbai this November!
Excited to bring the Security Hub to @EFDevcon and build it together with the Ethereum security community.
Drumroll please... We are thrilled to announce the 14 Community Hubs selected for Devcon 8!
🔐 Privacy Hub
🛟 Security Hub
📑 EIP Hub
🤝 P2P Networking Hub
🪙 Token Rights Hub
📈 Prediction Markets Hub
🛠️ Open Source Builders Hub
🎨 Onchain Art Hub
🔬 DeSci Hub
🌐 Resilient Networks Hub
🇮🇳 Katta Developers (India Hub)
🧩 Fragmentation Hub
🤖Agentic Hub
🌱 Zuzone Hub
Selected from 32 proposals, this year’s hubs will create spaces for new ideas, unexpected conversations, and community-led programming throughout Devcon 8 🌍
Check the full forum post below, link in the replies 👇🏻
dobs retweeted
Myanmar 🇲🇲 MAP UPDATE: the situation in Myanmar as of 07/09/2026.
This past summer was marked by a slow down of the fighting due to heavy rain fall. But all signs indicate fighting will escalate again this september as the junta launched an offensive in Rakhine and moved a flotilla up Kachin.
dobs retweeted
New framework on developer-targeted intrusions. Based on SEAL's incident responses, it covers the most common attack vectors we observe against devs. Learn to threat model your execution environment and stay secure against persistent malware campaigns.
frameworks.securityalliance.…
dobs retweeted
Mawlaik PDF relesead a video of "Operation Crocodile" carried out against a junta convoy of 28 military vessels that traveled upstream along the Chindwin River in July 2026.




























