Kevin Kelly™

|| Tech Enthusiast || CCNA || HCIA || MCSA || Python || CyberSec || Sys Admin || ||

[Kevin Kelly™ @ItsKevinKelly]

Be it Easy or Hard, the only way to get there is to start

[MainStreetNewsKE @MainStreetKE]

Time To Own Africa's Economic Destiny is Now https://t.co/vBCV8r45iZ

[Kevin Kelly™ @ItsKevinKelly]

@scdudes @JLefebvreGloben How do I ensure that users are prompted to enter bitlocker pin at startup ??

[Marc Menninger @MarcMenninger]

📌 SABSA: The Security Framework You’ve Probably Never Heard Of (But Should Know)

Everyone talks about NIST, ISO 27001, and CIS Controls, but SABSA is one of the most powerful (and underrated) security architecture frameworks out there.

Why is it important, and why haven’t more cybersecurity pros heard of it? Let’s break it down. 🧵

[Sjuul | AltCryptoGems @AltCryptoGems]

This is Park Jin

A key player in Lazarus Group, North Korea’s elite cybercrime unit.

They are behind
⟜ Sony Pictures hack (2014)
⟜ Bangladesh Central Bank heist ($81M stolen)
⟜ And now, A $1.4B heist on Bybit (2025)

Here’s how he pull off one of the biggest crypto hacks ever 🧵

[Kevin Kelly™ @ItsKevinKelly]

@joe_elway Helpful

[Scott Helme @Scott_Helme]

This is a concerning day. Whilst I had Advanced Data Protection enabled, Apple said I "will eventually need to disable this security feature”…

The UK Government are compelling Apple, and myself, to disable a security feature that protects my data in the cloud!

[Kevin Kelly™ @ItsKevinKelly]

@ranlevi @MaliciousLife 🤞
All the Best Ran

[Kevin Kelly™ @ItsKevinKelly]

Hey @ranlevi any new episodes coming?
Cc: @MaliciousLife

[Kevin Kelly™ @ItsKevinKelly]

@ItzHerbie Congratulations 🎉

[AlternativeTo @AlternativeTo]

Google's new tracking policy uses fingerprinting to uniquely identify users across devices. This method is harder to block and has sparked criticism for benefiting advertisers https://t.co/qQtPHRqTTJ

[Kevin Kelly™ @ItsKevinKelly]

@ranlevi @MaliciousLife Oooh noooo😭, sad to hear that ....been wondering why I thought you were on a holiday hiatus.
What's next for you?
Something in the works ?

[Ghost St Badmus @commando_skiipz]

UPDATE:
I have spent some time working on the vulnerable bank app to make it more realistic & user-friendly.

I've implemented the following:
- Virtual cards
- Bill payments
- API documentation
- SQLite to PgSQL DB migration
- And alot of client/server-side vulns

Go try it out!

[SimpleX Chat @SimpleXChat]

Apple refused the UK government request to install backdoor and removed the feature instead. 👇

[Kevin Kelly™ @ItsKevinKelly]

@TechloreInc Damn 😩
How powerful is UK

[Kevin Kelly™ @ItsKevinKelly]

@TutaPrivacy This is terrible really

[Tuta @TutaPrivacy]

#WhatsApp shares its metadata with #Meta

They know:

✅ Your location
✅ Your device
✅ Who you're writing
✅ When you write them
✅ How often you write them
✅ Whether they reply

Stop this tracking with a #privacy-first alternatives: 👉 https://t.co/blu4pQM2QY

What is your favorite?

[Kevin Kelly™ @ItsKevinKelly]

@_JohnHammond @hackinghub_io Can I have this,
It would be awesome just dipping my toes into the Cyber world

[Alberta Tech @albertadevs]

DOGE website got “hacked” 😢 nooooo who would have guessed

[Luke Stephens (hakluke) @hakluke]

What an awesome bug and write-up by @brutecat.

They found a way to leak any YouTube user's email address using only their public YouTube channel ID.

The trick? Chaining two unrelated Google services:

- YouTube (to get an ID)
- Google Recorder (which mapped that ID to an email when sharing a recording)

One issue that they faced was that when sharing a recording, it sent an email to the victim. To avoid this, they used extremely long recording names, which broke the email’s subject line and prevented the notification from being sent.

This bug is a great example of cross-platform hacking, abusing logic across different services.

One key takeaway for new hackers is that hacking is more effective when it’s goal-driven.

Instead of just testing for common bugs like XSS or SQLi, focus on achieving a specific outcome (leaking email addresses) and find a way to make it happen.

Link to the writeup 👇

[Rachel Tobac @RachelTobac]

Yes and also, interestingly, this tool takes all of the most commons steps used to hack people & companies — from OSINT (open source intelligence) via social media, to target selection, to pretext development, to contact + phishing — and automates it completely for attackers.