Spy implant in @Ledger Nano X, back in the days and now, that's quite an evolution. Old implant picture from grandideastudio.com/portfoli…

I'm tracking 23 hacks this week. There are definitely more that no OSINT monitoring platform caught. SEAL (god bless them) could handle just 3(!) protocol compromises along with 58 other private key, DPRK, social engineering, and other incidents. The rest were left to fend for themselves, probably with no security team, no prior IR experience. The DeFi security industry needs to at least 10x for us to have a chance. Until then we are getting slaughtered.

Onchain security is everyone’s problem and nobody’s job. ETHSecurity Initiatives is how we are changing that. Propose the work. Fund the work. Build the work. initiatives.thedao.fund/

I don’t get much time to read these days. Hoping that once “Blasting Through” is released, I will get back to it. In the meantime, here are ten of my favorites. Have you read any on this list? If so, what was your take? 1.  “Annapurna - First Conquest of an 8000-meter Peak,” by Maurice Herzog.  (First climbing book) 2.  “Hell on Ice - The Saga of the ‘Jeannette,’" by Commander Edward Ellsberg 3.  “The Endurance: Shackleton's Legendary Antarctic Expedition,” by Caroline Alexander 4.  “Bury My Heart at Wounded Knee - An Indian History of the American West,” by Dee Brown 5.  “Unbroken - A World War II Story of Survival, Resilience, and Redemption,” by Laura Hillenbrand 6.  “We Were Soldiers Once...and Young: Ia Drang - The Battle That Changed the War in Vietnam,” by LTG Harold G. Moore (Ret.) and Joseph L. Galloway 7.  “Into Cambodia - Spring Campaign, Summer Offensive, 1970,” by Keith William Nolan 8.  “A Hell of a Bomb - How the Bombs of Barnes Wallis Helped Win the Second World War,” by Stephen Flower 9.  “Relentless Strike - The Secret History of Joint Special Operations Command,” by Sean Naylor 10. “The Thousand-Mile War - World War II in Alaska and the Aleutians,” by Brian Garfield

Cybersecurity this, cybersecurity that... meanwhile actual cybersec folks do not have access to the Cyber Models. Only AI folks & Threat Actors. The actual experts who have been doing all the work in this domain are not inculded in talks. Great. Just fantastic.

#Myanmar 🇲🇲: Anti-Junta fighters struck military jets and army personnel at Tada-U Air Base in Mandalay with Drones operated by female pilots. Group used numerous “Fiber-Optic FPV Kamikaze Drones” armed with Improvised warheads detonated by commercial limit switches.

See you all in Mumbai this November! Excited to bring the Security Hub to @EFDevcon and build it together with the Ethereum security community.

Myanmar 🇲🇲 MAP UPDATE: the situation in Myanmar as of 07/09/2026. This past summer was marked by a slow down of the fighting due to heavy rain fall. But all signs indicate fighting will escalate again this september as the junta launched an offensive in Rakhine and moved a flotilla up Kachin.

It has been a frustrating day for me using AI services. First I encountered model overload errors from Venice. Now I am getting “Claude is at capacity” errors. It really makes local LLM processing sound mighty enticing…

New framework on developer-targeted intrusions. Based on SEAL's incident responses, it covers the most common attack vectors we observe against devs. Learn to threat model your execution environment and stay secure against persistent malware campaigns. frameworks.securityalliance.…

Mawlaik PDF relesead a video of "Operation Crocodile" carried out against a junta convoy of 28 military vessels that traveled upstream along the Chindwin River in July 2026.

SEAL weekly stats, 25-31 Aug: 45 incident we dealt with. Cumulative reported losses by threat category: Protocol compromise $5.7M Wallet drain $2.8M DPRK intrusion $1.5M "Fake support" caller $320k + 3 BTC + 3.4 ETH Cause unknown $123.7k Malware $52 BTC + $5k

⚡️We currently observe an ongoing campaign mentioned by @ossmalware - utilizing NullReceiver and adding more IP addresses to its list. Last transaction happened hours ago. This time, the same sender initiates transfers to a new address which decodes to 166.88.73[.]46. Ref: opensourcemalware.com/blog/n…

More than just a GRU Hacker School💻 DTI researchers analyzed the internal documents leaked from a long-term training pipeline for Russian military intelligence and cyber operations. Read our investigation: dti.domaintools.com/research… #Cybersecurity #ThreatIntel #Russia

Scammers are actually buying ad space now. For one fintech client we found more than 50% of the threats we've flagged were paid, targeted Meta campaigns impersonating a payments brand that millions of people trust. 1,392 taken down so far after just one month of our threat detection. Every one looked legitimate enough to scroll past or click without a second thought. User trust is essential for fintech brands like this. And it’s the exact reason why scammers impersonate them.

When a DPRK ITW passes an interview without being asked to insult Kim Jong Un

Ethereum security should not run on urgency alone. TheDAO is working toward something better: coordinated funding, expert judgment, and visible outcomes.

AI sandbox checking for policy violations

Oh, no … not again

babe wake up, new term just dropped