James Thomas

Information security engineer and researcher. Interested in techology infrastructure, global information / cybersecurity, OSINT and threat analytics, and AI sec

[James Thomas @On2Space]

Really excellent write-up on AI-assisted compromise of Mexican Government systems.

[Eyal Sela @eyalsela]

Technical report released: The AI-Assisted Breach of Mexico’s
Government Infrastructure

https://t.co/RHvMgoNLh8

[International Cyber Digest @IntCyberDigest]

‼️Telegram has a vulnerability that allows proxy bypass by sending a link disguised as a username

When the victim clicks the mentioned username, they connect to the specified proxy, exposing their IP address.

[Shayan Sardarizadeh @Shayan86]

The amount of detail the latest generative AI models can get right in their content is frightening. It's becoming very hard to detect any major errors with naked eyes, if at all.

The time to learn how to detect and verify gen AI content is now, tomorrow is late.

[International Cyber Digest @IntCyberDigest]

‼️🚨The WIRED subscriber database has been leaked and published for free by a threat actor.

The actor claims that 40 million customer records of Condé Nast will follow, this includes subscribers of brands like:

-Vogue
-The New Yorker
-Vanity Fair
-GQ
- Architectural Digest

[Florian Roth ⚡️ @cyb3rops]

MongoBleed (CVE-2025-14847) is basically Heartbleed for MongoDB

- unauthenticated memory disclosure
- public POC, trivial to exploit
- leaks creds, tokens, cloud keys straight from RAM
- huge exposed surface on the internet

Good writeups and technical details here:
https://t.co/LgK4RABmJu
https://t.co/DWtByJQ3au
https://t.co/LUwfnF6uXG

Patch fast, rotate secrets, and assume exposed instances were scanned(!)

[International Cyber Digest @IntCyberDigest]

‼️T-Mobile USA has leaked all its customers' phone numbers

You didn't even have to log in to see all of it. The post itself has now been deleted by the author.

[Vatnik Soup @P_Kallioniemi]

This is what you’re debating with on social media:

[NetBlocks @netblocks]

⚠️ Confirmed: Live network data show a nation-scale internet outage across #Syria corroborating reports of a telecommunications disruption affecting multiple cities

[James Thomas @On2Space]

A great thread on the implications of the Gravy Analytics data breach. Gravy isn't a household name but they gather massive amounts of location data from apps and other services. Serious national security implications with this one.

[Baptiste Robert @fs0c131y]

Hackers claim to have breached Gravy Analytics, a US location data broker selling to government agencies.

They shared 3 samples on a Russian forum, exposing millions of location points across the US, Russia, and Europe.

It's OSINT time! 👇

[James Thomas @On2Space]

@NicoleBeckwith Nice!

[Tyler Rogoway @Aviation_Intel]

Chinese Sea Dragon Commandos Show Off Drones That Look Just Like Birds

Weaponized drones that look and fly like birds may sound like something out of a movie, but they are very real with a long history.

Story: https://t.co/h1X8Rnvl1i

[vx-underground @vxunderground]

Zscaler's ThreatLabz 2024 ransomware report shows confirmation of DarkAngels ransomware receiving the largest ransomware payment in history: $75,000,000

To put that into perspective: someone could buy 524 2024 Mercedes-Benz G Wagons with this money

or buy 6,000,000,000 Robux...

[James Thomas @On2Space]

Things are looking rough in Venezuela. Videos are circulating of ballot boxes being stolen.

[Eduardo Menoni @eduardomenoni]

🚨| URGENTE: Con fusiles, pistolas y cuchillos, colectivos chavistas vestidos de negro y encapuchados, se enfrentan a personas que intentan evitar que las máquinas electorales y actas sean sacadas de los puestos de votación en el estado Táchira.🇻🇪 El régimen de Maduro está caído.

[James Thomas @On2Space]

X has opted in users to train its AI.

[EFF @EFF]

Without notice, X has opted all users into training its "Grok" AI Model. To turn off this setting and stop your "posts, interactions, inputs, and results" from being used for training and fine-tuning Grok, visit https://t.co/hhKe2I8u9d and uncheck the checkbox.

[Tyler Rogoway @Aviation_Intel]

Chinese Wing Loong Drones Disguised As Wind Turbines Seized By Italy

With wrappers and labels suggesting they were wind turbine parts, the drones were supposed to beat the UN arms embargo on Libya.

Story: https://t.co/MzTn7odX7R

[Shayan Sardarizadeh @Shayan86]

A viral story that alleges Ukraine's Olena Zelenska recently bought a rare Bugatti car in Paris is the work of an AI-powered disinformation operation, run by an ex-Florida cop now based in Moscow, that pumps out fake news websites aimed at Americans.

https://t.co/GlWXX4XZuR

[James Thomas @On2Space]

Looks like it may be this plant at: 48°20'06.4"N+37°50'11.2"E. Niu-York, Donetsk Oblast, Ukraine, 85294

[Michael MacKay @mhmck]

Russian terrorists drop a 3,000 kilogram guided aerial bomb on New York in Donetsk region.

This attack was made possible by the insane restrictions the United States places on Ukrainian defenders.

[James Thomas @On2Space]

When Dev accidentally becomes Prod.

[Andrew Jones @AJ_FI]

Wow. This is apparently what was supposed to be a STATIC FIRE TEST today of a Tianlong-3 first stage by China's Space Pioneer. That's catastrophic, not static. Firm was targeting an orbital launch in the coming months. https://t.co/BY9MgJeE7A

[James Thomas @On2Space]

If this spyware happens to be on your device, remove it. It is being installed automatically as part of OS updates on some platforms.

[Malwarebytes @Malwarebytes]

The popular shopping app TEMU is being sued for being “functionally malware and spyware.”
https://t.co/xeu661jsQ8

[James Thomas @On2Space]

Some problems never go away.
From "The Right to Privacy" by Warren and Brandeis in Harvard Law review, 1890: