KingKev

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.

Each key should be a 116-digit number, but one was just 4.

Anyone can guess them and forge HTTPS certs for any website.

[AI Notkilleveryoneism Memes ⏸️ @AISafetyMemes]

This is the most serious 48 hours in cybersecurity history.

"Black October" they're calling it

It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*

SUMMARY OF THE LAST 48 HOURS:

YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):

1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan

MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):

11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached

Also serious:

24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea

[KingKev @G00dKevManCity]

Hello @peyushbansal. Huge respect for what you've done and achieved with @Lenskart_com. I'm a very recent customer. High powered eyes. Super specific feedback. PIDs 221365, 206775. Same frame, only colour differs. I can add my high power to one of them, not the other, why?

[KingKev @G00dKevManCity]

@Sunny_D_Opn @speakshoutroar Maa Kaali is first of all a goddess. Calling her violent is like calling Zeus/Poseidon/Ares violent. Violence is a means for them to maintain balance in the universe. Stick to crypto, nerd.

[KingKev @G00dKevManCity]

@_taxaeze @themagic_tophat @Londonblue_2 Even besides the emails, you would need bank statements to corroborate the conspiracy that was supposedly hatched over those emails. City weren't even allowed to present said bank statements to the "independent panel" (appointed by the PL themselves) to prove their case.

[KingKev @G00dKevManCity]

@themagic_tophat @Londonblue_2 You lot keep saying how the CAS verdict was time barred. But CAS indeed went back to 2009 and found no wrong doing wrt to sponsorship payments. They found the emails to be neither a confession nor a conspiracy. You'd know that if you read the entire 93 page verdict.

[KingKev @G00dKevManCity]

@themagic_tophat @Londonblue_2 It's a labour of hate coz hate pays. And you didn't debunk shit if all you have is elaborate on the emails. I can conspire to murder you with a friend, but if you actually end up dead, the prosecution will need to provide "evidence" to prove that I indeed did it.

[KingKev @G00dKevManCity]

@LLAlfaro_ @PolymarketFC @talkSPORT Stick to gooning over Arteta"s poster while stinking in your mum's basement. It's the same typical insulting when you fucking gooners have nothing of substance to add.

[KingKev @G00dKevManCity]

@VSljl8 @Durbs1961 @themagic_tophat Are you really that deluded or are you blatantly spreading misinformation? City lost the ability to have a say on who sits on the independent panel when they challenged it.

[KingKev @G00dKevManCity]

@LLAlfaro_ @PolymarketFC @talkSPORT Guilty according to a not so independent panel, appointed by the PL themselves. We don't even know who's on the panel. So much for transparency. But don't let facts get in the way of your biases.

[KingKev @G00dKevManCity]

@VSljl8 @Durbs1961 @themagic_tophat Keep the same energy when City dogwalk the PL in an actual court, just like we dogwalked Liverpool's sorry asses a week or so ago in front of you lot 😂 You should be thankful City haven't dragged Liverpool's name through the mud for hacking them in 2013. Bow down and stay there.

[KingKev @G00dKevManCity]

@VSljl8 @Durbs1961 @themagic_tophat The ongoing process is a PL process. The PL brought the charges, the PL appointed a so called "independent panel", and this independent panel has found City guilty. Even the appeal is a PL driven process. The PL is the judge, jury, executioner here in their little kangaroo court.

[KingKev @G00dKevManCity]

@afcRusell How did your mother not swallow you?

[KingKev @G00dKevManCity]

@thudock11 @OginiSolomon Step 5. Depends on what happens at the appeal. Whole different panel. If City win, PL could appeal that decision. Or move to retrial. Step 6. City could take it to Arbitration X. Step 7. If City lose at step 6, only then will City be able to move to high court.

[KingKev @G00dKevManCity]

@thudock11 @OginiSolomon You are truly deluded if this is your understanding of the case. Step 1. PL brings the 115 charges. Step 2. PL appoints the supposedly independent panel. Step 3. Independent panel give verdict. Step 4. City's appeal, which is also a PL process (we're here).

[KingKev @G00dKevManCity]

@Bossuk3 @OginiSolomon They're accusing City and City's sponsors of sham contracts and financial misrepresentation. Which also means telling 3rd party auditors like E&Y and Deloitte that they're corrupt too. That's then lawsuits full of liabilities, defamations, etc.

[KingKev @G00dKevManCity]

@theoldzealand But it's never about the facts with you lot, is it? It's just riding that narrative wave.

Or are you deaf to notice that the echo chamber is real?

[KingKev @G00dKevManCity]

Just saw your video on City. You say it could get political? The independent panel (appointed by the PL themselves btw) refused to accept any bank statements that confirms who made the transfer of funds. (1/many)

@theoldzealand

[KingKev @G00dKevManCity]

@theoldzealand How about the fact that CAS actually looked at City's books in the UEFA case? Before you say "time barred", UEFA's charges around City cooking their books weren't time barred. CAS went back all the way to when to when Abu Dhabi came to Manchester and found NO WRONG DOING.