DevRel Things 🥑 | #vExpert Pro, #W5VT📡 🎸 🍖 🏋️🤿 ⛳️ He / Him. #wehackhealth
McKinney / Frisco, TX
- Tweets 82,363
- Following 4,495
- Followers 9,091
- Likes 103,618
This whole 🧵 is perfect. Nailed it.
Hot take no one asked for: I always feel weird going to defcon as a non-technical person, but then I look at blackhat and the giant capitalistic circlejerk where one company builds something for another company to use, passing around millions of dollars from one corp to the next,
2
575
Tim Davis 🌮 retweeted
Hours of delays and no working WiFi or power on my plane home meant I was up until 4am banging out the newsletter for this morning.
Not enough coffee in Texas.
1 subscribe = 1 respect vulnu.com
1
4
11
1,609
Tim Davis 🌮 retweeted
little psa.
open your friends newsletters and click their links.
every click counts 🤣
5
2
18
2,873
Dearest @sammcgeown. It has been 2 eternities since you have been here. I opened a generic marketing email aggregating relevant blog posts, and you wrote one of them. We miss you. Come back to us. Also, @Ned1313 was there. He can come back, too.
1
2
204
No hope for an upgrade, but holding out hope for the full row. Or at the very least, an empty middle! 10 hours. For old times sake, paging @btkrausen!
1
2
246
To the folks new in this field: don't get sucked into some get into cyber fast scam career bootcamp that offer zero to <insert-career-title> for thousands of dollars. It's almost always a scam. Always look into who is running these camps and what you're getting out of it. Then find someone objective and experienced in this field and ask them what they think of it or the person. Most of us are willing to help and give you advice to avoid getting scammed
Y’all, we need to talk about cyber bootcamp scams.
The next generation deserves training and protection, not fake salary promises, fake placement stats, debt traps, and urgency dressed up as opportunity.
Cybersecurity shouldn’t be a funnel for predators.
4
6
68
2,094
I am 100% here for the @HunterBiden timeline we have entered here on Twitter. Almost as good as the “buy a verified checkmark and impersonate brand twitter” era. Legendary.
3
147
Huge Jackman building the hydra in some nonsense OpenGL environment made me a hacker. Oh, and AOL Progz that made my text sparkley.
In 2001, Hugh Jackman delivered the most realistic computer hacking scene in film history. To this day, it is used for training at the Cybercrime Division of the FBI.
1
426
I’ve seen this episode of The West Wing before…
🚨BREAKING: DOJ charges the Southern Poverty Law Center (SPLC) with wire fraud, false statements, and conspiracy to commit money laundering.
The SPLC secretly funneled $3M+ in donor funds to violent racist extremist groups:
-Ku Klux Klan
-American Nazi Party
-Aryan Nation
-United Klans of America
-Unite the Right
-National Alliance
-National Socialist Movement
-Sadistic Souls Motorcycle Club
-American Front
To hide the payments, SPLC allegedly opened bank accounts under fictitious entities to conceal the source and control of donor funds.
Per the indictment: an SPLC field source was a member of the online leadership chat group that planned the 2017 "Unite the Right" rally in Charlottesville — made racist postings under SPLC supervision and helped coordinate transportation to the event.
FBI Director Kash Patel: "They lied to their donors, vowing to dismantle violent extremist groups, and actually turned around and paid the leaders of these very extremist groups — even utilizing the funds to have these groups facilitate the commission of state and federal crimes."
Acting AG Todd Blanche: "The SPLC is manufacturing racism to justify its existence. Using donor money to allegedly profit off Klansmen cannot go unchecked."
Scheme allegedly ran 2014–2023.
FBI calls it an ongoing investigation.
Insane!!!
257
Tim Davis 🌮 retweeted
Massive. Like stop what you’re doing and go check if you’re impacted moment.
Axios package hacked and is pushing malware.
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
11
45
898
248,591
