ThothTrust

ThothTrust Private Limited.

[ThothTrust @ThothTrustCom]

Test drive latest #JavaCard w Summer Code Pack. X25519 & SHA3 algo, CC EAL 6+ chip, NO NDA.

https://t.co/P3OAm2keEq

#NFC #IOT #PKI #IOTSecurity #DataSecurity #CryptoMarket #NFT #coldstorage #wallet #CryptoSecurity #ITSecurity #BTC #Altcoins #ETH #SOL #SmartContracts #Blockchain

[ThothTrust @ThothTrustCom]

The combination of utilizing @securosys #Primus HSM #SmartKey with #T101 #JavaCard secures #PKI #CA by protecting the Cert Issuance Key with quorum based approvals and secure Cert Issuance with T101 Clear Signing of the Cert CSR approvals.

[International Cyber Digest @IntCyberDigest]

‼️🚨 One of the world's largest Certificate Authorities, DigiCert, was compromised by a malicious screensaver file sent through a customer support chat. Their antivirus blocked the malware four times. The agent kept clicking. The fifth try got through.

27 code signing certificates were stolen and used to sign malware.

DigiCert ultimately revoked 60 certificates.

Per DigiCert's incident report, filed in Mozilla's CA compliance tracker as Bug 2033170, here is how it unfolded:

April 2: an attacker contacted a DigiCert helpdesk agent through the company's customer support chat channel, posing as a customer. The lure was a zip file pitched as a screenshot. Inside the zip was a .scr file. On Windows, .scr files are executables, and this one carried a malicious payload.

Opening a file a customer sent through the official support channel is what an agent is supposed to do. Support staff are the one role designed to accept files from strangers.

DigiCert's endpoint security blocked four infection attempts. On the fifth, the support analyst's machine was infected.

DigiCert detected the infection, ran an investigation, and concluded the incident was contained.

Eleven days later, an external researcher tipped DigiCert off about misuse of DigiCert-issued code signing certificates in the wild. That tip led to the discovery of a second compromised machine, belonging to a different support analyst, infected through the same vector. The EDR on that machine had not been functioning correctly, so the original investigation missed it.

The second machine gave the attacker access to DigiCert's internal support portal. That portal lets support staff reach limited views of customer accounts, including initialization codes for ordered but not-yet-issued code signing certificates. Combining a stolen initialization code with an approved order let the attacker pull a real, validly issued code signing certificate. They did this 27 times.

DigiCert's own list of what went wrong:

- File-type filtering on the customer support chat channel did not catch the .scr
- EDR coverage was inconsistent and incomplete, creating a blind spot
- Initialization codes for code signing certificates were not adequately protected

DigiCert says it got lucky. An outside researcher found the malware abuse before DigiCert did. Without that tip, the second machine and the active certificate theft might still be running today.

[Sick @sickdotdev]

received this email after insulting claude

[Evan Luthra @EvanLuthra]

🚨META’S SMART GLASSES ARE RECORDING YOU IN YOUR MOST INTIMATE MOMENTS..

AND SENDING ALL OF IT TO WORKERS IN KENYA WHO WATCH EVERY SECOND.. THEN META FIRED 1,108 OF THEM FOR TALKING ABOUT IT..

Swedish journalists discovered that footage from Meta’s Ray-Ban smart glasses is being sent to a facility in Nairobi, Kenya.. Where workers manually watch and label everything the glasses capture..

Not AI watching.. Humans watching..

Over 30 workers confirmed what they see every day.. People in intimate situations.. People on the toilet.. People undressing.. Credit card numbers.. Banking passwords.. Private messages on phone screens.. All completely visible..

One worker said.. “I don’t think they know, because if they knew they wouldn’t be recording”..

Meta marketed these glasses as “built for your privacy”.. “You’re in control of your data and content”..

The AI features cannot function without sending your footage to Meta’s servers.. There is no local option.. If you use the AI.. Your private life leaves your device..

Swedish journalists visited 10 retail stores.. Every single sales rep incorrectly told customers all data stays on the phone.. Not one knew the footage goes to Kenya..

Meta claims face-blurring protects identities.. Workers say it barely works.. Faces fully visible in low light, fast movement, complex backgrounds..

People in your bedroom.. Fully visible.. To strangers making $1.50 an hour..

Workers said the facility was “saturated with content that could trigger enormous scandals if leaked”.. So the company put them under constant camera surveillance and banned personal devices..

Workers surveilled to prevent them from leaking the surveillance footage they were watching..

Then the investigation went public..

Meta terminated the entire contract.. Claimed Sama “didn’t meet our standards”.. Sama fired back.. “At no point were we notified of any failure to meet those standards”..

1,108 Kenyan workers.. Fired.. Six days notice..

Labor activists called it retaliation.. “The workers who trained the AI saw everything.. Owned nothing.. And lost their jobs the moment they spoke about it”..

55% of these workers report clinical distress.. 52% meet thresholds for major depression.. They earn $1.50 an hour.. Meta made $56.3 billion last quarter..

The head of the Data Labelers Association said it best..

“It is African Intelligence powering European intelligence.. Which they are now calling Artificial Intelligence”..

Meta has sold 7 million of these glasses.. Targeting 10 million by year end.. A class-action lawsuit has been filed.. Kenya’s courts ruled Meta can be sued directly.. 200 former workers are pursuing a $1.6 billion claim..

7 million cameras on 7 million faces.. Sending everything to the cheapest labor market they can find..

And they called it “built for your privacy.”

[ThothTrust @ThothTrustCom]

Advancement in #AI have proved themselves as potent tools 2 find #CyberSecurity flaws. Hackers r increasing empowered w AI 2 steal identities. Understand more on how #PKI r used 2 defend against #identitytheft.

https://t.co/sQgGL5vw9J

#CryptoSecurity #ITSecurity #AISecurity

[ThothTrust @ThothTrustCom]

Safeguard #Enterprise #Blockchain assets w multiple custodians utilizing #Wyvern & @securosys HSM.

#CryptoMarket #BlockchainInnovation #BlockchainSecurity #CryptoSecurity #ITSecurity #NFT #Bitcoin #Ethereum #altcoin #SmartContracts

Intro Video:
https://t.co/daAtPzs3Mk

[ThothTrust @ThothTrustCom]

Secure your #Web3 w tiny #CodeWav #NFC #JavaCard with algos including X25519 & SHA3 algo, CC EAL 6+ chip, NO NDA.

https://t.co/AstFTvNIWJ

#PKI #CryptoMarket #NFT #coldstorage #wallet #CryptoSecurity #ITSecurity #BTC #Altcoins #ETH #SOL #SmartContracts #Blockchain

[ThothTrust @ThothTrustCom]

Own the slimest & tinest #crypto #wallet via #CodeWav #NFC #JavaCard just 0.9 mm thick.

For info or samples:
https://t.co/bjqUPwNygI

#PKI #CryptoMarket #BlockchainInnovation #BlockchainSecurity #CryptoSecurity #ITSecurity #SelfCustody #Web3 #BTC #Altcoins #ETH #SmartContracts

[ThothTrust @ThothTrustCom]

🎇🎇 LATEST UPDATE 🎇🎇
Secure 👛 w latest JC 3.2 enabled Fingerprint #JavaCard w #OpenSource friendly APIs.

https://t.co/FnNUcDxGsO

#CryptoMarket #NFT #coldstorage #wallet #CryptoSecurity #ITSecurity #BTC #Altcoins #ETH #ADA #SOL #XLM #XMR #SmartContracts #Blockchain

[ThothTrust @ThothTrustCom]

🎇🎇 LATEST UPDATE 🎇🎇
#T102 #JavaCard is updated to V2 w new algos. EdDSA, Ed25519, Curve25519, SHA3 & JCOS 2.3.

*NO NDA NEEDED*

https://t.co/FnNUcDxGsO

#CryptoMarket #NFT #coldstorage #wallet #CryptoSecurity #ITSecurity #BTC #Altcoins #ETH #SmartContracts #Blockchain

[International Cyber Digest @IntCyberDigest]

‼️ This is insane. Please don't listen to this. Don't upload your medical data into public LLMs, folks.

[AlternativeTo @AlternativeTo]

Researchers have recently found 27 vulnerabilities in four major cloud based password managers that could let attackers access credential vaults, potentially affecting over 60 million users. The affected apps include Bitwarden, LastPass, Dashlane, and 1Password, with vendors publishing responses and fixes https://t.co/RacBS0UEuS

[ThothTrust @ThothTrustCom]

Bad for Google, good for FOSS and Europe.

[Diana 🇪🇺🇺🇦 @Diana_European]

Hahahaha 🖕🏻

[ThothTrust @ThothTrustCom]

Poorly implemented and understood cryptographic knowledge and functions opens many Cloud-based Password Managers to attacks.

https://t.co/wW7Sa7yHpp

#CryptoSecurity #ITSecurity #password

[International Cyber Digest @IntCyberDigest]

❗️🇨🇭 Researchers at ETH Zürich have discovered serious vulnerabilities in cloud-based password managers that allowed viewing and modifying stored passwords.

1Password, Bitwarden, Dashlane, and LastPass were all affected by critical vulnerabilities.

[ThothTrust @ThothTrustCom]

@CyberInsidercom Move to open source OS and stacks.

[Windows Central @WindowsCentral]

France is about to replace Microsoft Teams, Google Meet, Zoom, and other platforms with its sovereign video-conferencing app, "Visio," for public officials.

It's set to save €1 million/year in licensing fees.

https://t.co/ak4vUklNv0

[MyBroadband @mybroadband]

An international group of plaintiffs sued Meta Platforms, alleging the WhatsApp owner can store, analyse, and access virtually all of users' private communications.

https://t.co/6KrvlvDYNd

[ThothTrust @ThothTrustCom]

We should not be trusting @WhatsApp with privacy and security in the first place.

Use an #OpenSource secure alternative like @BitchatMe_ and Briar. https://t.co/wL3X9M1JBH

[ThothTrust @ThothTrustCom]

Never store seed phrases in 1 backup. Cut into few pcs & lock in diff places.

#T101 #JavaCard is excellent tool 2 store seed & sign txn securely.

#NFC #SmartCard #CryptoMarket #NFT #coldstorage #wallet #CryptoSecurity #ITSecurity #BTC #Altcoins #ETH #SmartContracts #Blockchain

[Bitcoin Teddy @Bitcoin_Teddy]

imagine a police bodycam leaks your seed phrase 😭

[ThothTrust @ThothTrustCom]

🎁🎄🎇 HOLIDAYS SPECIAL 2025 🎇🎄🎁

Secure sensitive data w CC cert Chip + X25519

https://t.co/ZT0ZwOhS5d

#JavaCard #coldstorage #wallet #CryptoSecurity #ITSecurity #BTC #Altcoins #ETH #Solana #SmartContracts #Blockchain #StableCoins #Cryptopay #PKI #Bitlocker #FDE

[ThothTrust @ThothTrustCom]

🎁🎄🎇 HOLIDAYS SPECIAL 2025 🎇🎄🎁

End of year and new year's *SPECIAL* sales.

25 Dec 2025 to 31 Jan 2026

Package:
- 1x T101 JavaCard
- 4x T99 JavaCard with X25519 curves, SHA3, Keccak256, RIPEMD
- 1x Card Reader

SG$ 345 (global shipping included)

https://t.co/i08GxD5XBu