tbmdow @tbmdow

Information System Security ::1/128 Joined January 2011

Tweets

13K
Followers

261
Following

856
Likes

8K

Clément Molin @clement_molin

3 months ago

JL Mélenchon: « En Ukraine, nous enverrons des casques bleus protéger les centrales nucléaires » -> convoi de l'ONU distribuant de l'aide alimentaire à Kherson, visé par un drone FPV -> l'ONU dit ne pas savoir d'où il vient -> les russes publient fièrement la vidéo 1 heure après

115 1K 6K 246K 284

View Details

Vini B 「thecoding.dev」 @vinibarbosabr

3 months ago

Intentional VPN backdoor on Android? Looks like it TL;DR + security researcher @cybaqkebm found a bug on Android + the bug allows apps to circumvent VPN tunnels, leaking user data + the bug was reported to Android, with a proposed fix + Android sais it wouldn't fix it + The bug report mysteriously disappeared + GrapheneOS already released a patched version + advanced users can manually patch their Androids via USB debugging (adb code)

Mullvad.net @mullvadnet

3 months ago

A new VPN leak that allows any app to leak traffic outside the VPN tunnel has recently been discovered by @cybaqkebm Read more here: mullvad.net/blog/any-app-o…

57 459 3K 455K 894

42 574 3K 154K 1K

View Details

Bryson 🦄 @brysonbort

4 months ago

Remote Desktop, Windows quietly saves fragments of what was on screen. Attackers can grab those fragments and reassemble them into readable screenshots using two free tools and about ten minutes. No special privileges required. scythe.io/scythe-labs/wh…

9 120 549 41K 383

View Details

Xavier Tytelman @PeurAvion

2 years ago

La Russie 🇷🇺 est la protectrice des valeurs traditionnelles, de la famille et de la chrétienté. Un petit #Thread pour prouver une fois pour toutes la décadence de l'occident et la pertinence du modèle russe. 👇 1/11

383 2K 4K 444K 905

View Details

Grégory Raymond 🐳 @gregory_raymond

10 months ago

🟥 Exclusive @TheBigWhale_ The acquisition of Exaion (a subsidiary of French public energy giant @EDFofficiel) by American Bitcoin miner @MARA conceals an explosive clause: If this goes through, EDF will no longer have the right to engage in any intensive computing activity for two years. Behind these technical terms ("computing, cloud or HPC-related activity") lies a prohibition that affects much more than Bitcoin mining. 👉 It could also block any artificial intelligence or sovereign cloud project led by EDF. According to our information, this exclusivity clause signed on August 11, 2025 prohibits EDF from acting "as a service provider, agent, consultant or otherwise" in the field of high-performance computing. Result: the French public group would be forced to freeze for 24 months any activity related to AI, cloud, or mining. Potentially, EDF would not have the right to provide computing power to @MistralAI A major blow, still according to our information, as EDF had been working for a year on an internal project called FlexMine, designed to monetize surplus electricity by powering flexible computing infrastructures for AI and Bitcoin. The project has reportedly been abandoned since the signing with Mara, which would only bring in $20 million for EDF. This could amount to a strategic surrender at a time when everyone is fighting to secure computing capacity. The affair raises questions of digital sovereignty, especially since Mara (subject to the American Cloud Act) could now control part of France's critical computing infrastructure. Read this major investigation produced by @Raph_Bloch and myself 👉 app.thebigwhale.io/article-en/exc…

48 314 502 212K 143

View Details

Charles Guillemet @P3b7_

11 months ago

That couldn't happen if Telegram was end-to-end encrypted.

Pavel Durov @durov

11 months ago

🇲🇩 About a year ago, while I was stuck in Paris, the French intelligence services reached out to me through an intermediary, asking me to help the Moldovan government censor certain Telegram channels ahead of the presidential elections in Moldova. After reviewing the channels

5K 24K 118K 38.2M 10K

38 34 556 54K 35

View Details

Raphael Grably @GrablyR

11 months ago

- Pavel Durov accuse la France de lui avoir demandé de censurer des comptes Telegram en Moldavie (sans toutefois apporter d’élément matériel). ➡️ 17 millions de vues - Amplification par Elon Musk. ➡️ 13 millions de vues - Réponse du Quai d’Orsay ➡️ 15.000 vues

103 219 663 61K 42

View Details

Justin Elze @HackingLZ

11 months ago

Probably a good time for this reminder

Florian Roth ⚡️ @cyb3rops

11 months ago

Cisco just confirmed that multiple zero-days against ASA/FTD VPN web services were exploited in the wild. CISA followed up with an Emergency Directive ordering federal agencies to inventory, patch, or disconnect affected devices. The last 3 Cisco advisories are directly tied to

9 153 513 174K 218

30 230 2K 121K 456

View Details

ᐱ ᑎ ᑐ ᒋ ᕮ ᒍ @Andr3jH

a year ago

> miss the AI train > AI turns out to be fake > watch your enemies and adversaries pour trillions into a bottomless pit

120 628 16K 646K 1K

View Details

hi^^ @collysucker

a year ago

Microsoft openly admitting they have not(!) had MFA, network segmentation, least privilege, software lifecycle, jump-servers, asset- and software-inventory etc for Azure PROD for years and they are not there yet. This whole report is just so scary. At the same time, good.. (1/2)

7 123 910 66K 660

View Details

david D. @secretsqrl123

a year ago

from reports it looks like europe will state they are ready to stop buying our debt if trump keeps backing russia.. also they have to agree to restructure the 9 trillion debt that is about to come due this year. if they refuse they can force the US to default. last week we tried to sell debt bonds, the sale failed and we got NO buyers.. this has not happened in a LONG time. with europe holding a HUGE amount of our debt just saying they are going to dump the bonds will probably put us in a rescission. with the 5 trillion new debt on the BBB now due this could be devastating. trump will probably be presented with a choice today. russia or europe you cant be friends with both.

539 2K 11K 461K 768

View Details

Julian Cohen @HockeyInJune

6 years ago

A security program in one tweet.

2 81 431 0 539

View Details

vx-underground @vxunderground

a year ago

Do you guys remember that Reddit post about installing network equipment in your home for $250/month? Some people argued it's legitimate. I said it's probably state-sponsored from North Korea. I was wrong. It was Belarus. DONT INSTALL RANDOM SHIT IN YOUR HOUSE

Infrawatch @infrawatch_app

a year ago

New research Tuesday: How is a Belarus company convincing US military personnel to install network devices in their homes? Our investigation into DSLRoot reveals Americans are unknowingly helping foreign actors build proxy infrastructure on US soil.

2 67 474 221K 124

54 370 4K 170K 467

View Details

Ru Campbell @rucam365

a year ago

Most IT teams, including mature ones, aren’t gonna adopt physical dedicated PAWs and it’s not reasonable to assert they should. What have been your most successful compromises for this?

52 27 192 40K 110

View Details

vittorio @IterIntellectus

a year ago

AGI is here and has started murdering people

219 635 17K 678K 842

View Details

Het Mehta @hetmehtaa

a year ago

Free Offensive and Defensive Courses AV/EDR Evasion Practical Techniques Foundations of Log Analysis for Cyber Defense Fundamentals of Game Hacking Development Introduction to Bug Bounty Introduction to Offensive Security with Artificial Intelligence Introduction to Python for Defensive Security Introduction to Python for Offensive Security Introduction to Red Team Operation Management Malware Analysis Introduction v1 Offensive Development Introduction for Windows v1 OpSec & Anonymity for Red Teams Purple Team - Active Directory and AzureAD v1 Windows API for Red Team Introduction Physical PenTest Fundamentals Healthcare Hacking Introduction Course Link: redteamleaders.coursestack.com/catalog By Red Team Leaders #redteam #hacking #blueteam #pentest #offensivesecurity #redteamleaders

8 173 924 45K 1K

View Details

Imran Rashid☁️ @ITSupportBlog

a year ago

🚨 Cybersecurity just got a whole lot easier, and FREE! Introducing the Microsoft Security Academy All-in-one access to expert-led training! 💥 No cost. No catch. Just serious skills. microsoft.github.io/PartnerResourc… Enjoy 🙂

2 141 658 29K 832

View Details

marc rees @reesmarc

a year ago

"M. Anton Carniaux, directeur des affaires publiques et juridiques de Microsoft France, invité par la commission d’enquête à garantir que les données des citoyens français hébergées par Microsoft ne seront jamais transmises à des autorités étrangères sans l’accord des autorités françaises, a-t-il répondu : « Non, je ne peux pas le garantir ». " (p.23 du rapport)

marc rees @reesmarc

a year ago

"Compte tenu de la forte sensibilité des données concernées, ainsi que de la doctrine de l’État prônant une protection et une souveraineté des données publiques sensibles, le choix de confier l’hébergement de cette plateforme à Microsoft – société exposée aux effets des lois