Jolanda de Koff

You can create art & beauty with a computer
Hacking is not a hobby but a way of life
I ♥ Linux

[Jolanda de Koff @Jolandadekoff]

It has a name now: phantom squatting. Attackers pre-register the fake domains AI models keep inventing, then wait for the AI to send people in.

Full breakdown:
https://t.co/IoVaEA0JAL

[Jolanda de Koff @Jolandadekoff]

Your AI just sent you to a login page that did not exist a few weeks ago.

Someone registered it first and is collecting every password typed in.

No phishing email.

You trusted the link because your AI gave it to you.

That trust is the attack.

#AISecurity #Phishing

[Jolanda de Koff @Jolandadekoff]

Full breakdown: how the hidden stream drops malware in your startup folder, why the fix never lands, and how to check if you are exposed in 10 seconds.

https://t.co/3TvKvf4Xqa

[Jolanda de Koff @Jolandadekoff]

You opened a RAR file someone emailed you. A CV, nothing weird on screen.

Next login, malware is already running. You didn't click anything, didn't approve an install. Opening the archive was all it took.

WinRAR has had this hole for a year.

#WinRAR #infosec

[Jolanda de Koff @Jolandadekoff]

My accounts
Ethical Hacking Course:
→ https://t.co/50UORq6q4F

→ YouTube Channel: https://t.co/2D8KvygxAa
→ Website: https://t.co/sQtR8e4DgB
→ Facebook Page: https://t.co/gVSGfeDKiD
→ LinkedIn: https://t.co/rU1agBLPuf
→ Newslette https://t.co/xj74WlWhBR

[Jolanda de Koff @Jolandadekoff]

He broke into 40 of the world's biggest companies and became the FBI's most wanted hacker.

He never needed code. He just picked up the phone and asked.

This was Kevin Mitnick.

#ethicalhacking #socialengineering

[Jolanda de Koff @Jolandadekoff]

Kevin wrote it all down himself. Ghost in the Wires is the fugitive years in his own words.

His books → https://t.co/67MmGkzigS

As an Amazon Associate I earn from qualifying purchases.

[Jolanda de Koff @Jolandadekoff]

Full breakdown, how the escape works, and what to do while there is no patch:

https://t.co/JpmEYVTtNl

[Jolanda de Koff @Jolandadekoff]

A Docker container on a Gitea build runner can break out to root on the host.

You set privileged: false to lock it down. It does nothing.

CVSS 9.9. Public exploit. No patch yet.

#Docker #DevSecOps

[Jolanda de Koff @Jolandadekoff]

Full breakdown, how it works, and how to check your own machine:

https://t.co/hHQu0jIxQT

#Linux #peditCOW

[Jolanda de Koff @Jolandadekoff]

A normal Linux user can rewrite /bin/su in memory and become root.

The file on disk never changes.

Every integrity check comes back clean.

pedit COW, CVE-2026-46331.

A working exploit is public, and the flaw has sat in Linux since 2022.

[Jolanda de Koff @Jolandadekoff]

→ Newsletter: https://t.co/xj74WlWhBR

[Jolanda de Koff @Jolandadekoff]

Thousands of company firewalls are open right now. On 2,645 of them, the password was 123456.

That story, the rest of this week's posts, and a subscriber-only tip are in today's newsletter. What I send, you get.

Sign up 👇

[Jolanda de Koff @Jolandadekoff]

My accounts

Ethical Hacking Course:
→ https://t.co/50UORq6q4F

→ YouTube Channel: https://t.co/2D8KvygxAa
→ Website: https://t.co/sQtR8e4DgB
→ Facebook Page: https://t.co/gVSGfeDKiD
→ Connect with me on LinkedIn: https://t.co/rU1agBLPuf
→ Newsletter https://t.co/xj74WlWhBR

[Jolanda de Koff @Jolandadekoff]

Cloudflare Bypass
A site can hide its real server behind Cloudflare, but its mail usually runs on that same machine. Look up the domain's MX record, resolve it, and you often land on the origin IP. Connect to that directly, and you walk around the reason they put Cloudflare up.

[Jolanda de Koff @Jolandadekoff]

Exactly...this👇🏻

Very safe!

[Jolanda de Koff @Jolandadekoff]

My accounts:

Ethical Hacking Course:
→ https://t.co/50UORq6q4F

→ YouTube Channel: https://t.co/2D8KvygxAa
→ GitHub https://t.co/okNN5riiXM
→ Facebook Page: https://t.co/gVSGfeDKiD
→ Connect with me on LinkedIn: https://t.co/rU1agBLPuf
→ Newsletter: https://t.co/xj74WlWhBR

[Jolanda de Koff @Jolandadekoff]

Anyone on the internet can send an email that looks like it came from your bank, your boss, or you. The system that delivers it never checks if that is true.

Email was built in 1982 to trust whoever was talking. Phishing has lived in that gap ever since.

[Jolanda de Koff @Jolandadekoff]

Full breakdown: how email really works, how it gets used to break into accounts, and where to keep mail private:

https://t.co/mHHSSa4zFC #phishing

[Jolanda de Koff @Jolandadekoff]

My accounts:

Ethical Hacking Course:
→ https://t.co/50UORq6q4F

→ YouTube Channel: https://t.co/2D8KvygxAa
→ Website: https://t.co/sQtR8e4DgB
→ Facebook Page: https://t.co/gVSGfeDKiD
→ LinkedIn: https://t.co/rU1agBLPuf
→ Newsletter: https://t.co/xj74WlWhBR

[Jolanda de Koff @Jolandadekoff]

Google told a researcher his bug was a nice catch and lined up his payout.

Eleven days later, it called the flaw harmless and paid nothing.

The flaw lets anyone with basic Kubernetes access take over a whole Google Cloud org in five seconds.

Still not fixed.