TeaJay

~ tweets are my own~ | • [email protected] | • @apjone.bsky.social

[TeaJay @apjone]

Android 17: Create responsibly...

[AhnLab Security Information @AhnLab_SecuInfo]

이력서로 위장한 악성 바로가기(LNK) 파일이 유포되고 있습니다.
공격자는 기업명과 직무명을 활용한 파일명과 정상 디코이 문서로 의심을 낮춘 뒤, 추가 악성 파일과 백도어 실행을 시도합니다.
ASEC 블로그에서 전체 공격 흐름을 확인하세요
https://t.co/DMebSoEKp2

[mRr3b00t @UK_Daniel_Card]

you probably shouldn't be letting this ASN or really any random ASN touch the admin interface of your equipment

[TeaJay @apjone]

@UK_Daniel_Card Fortinet couldn't be in the list ......

[Joe Stocker @ITguySoCal]

Azure CLI password spray attacks have increased 2000% in the last 90 days.
80% originate from three ASNs:
53667 (FranTech)
32167 (RHOISLAND)
6939 (Hurricane Electric LLC has prior Azure CLI spray abuse: https://t.co/u9ecllNdvp
53667 ASN prior abuse: https://t.co/oU4Vu8w0hk

[Nathan McNulty @NathanMcNulty]

Did you know SSPR for admins is always enabled even if you have SSPR set to None?

It also doesn't honor your authentication methods - all of these are enabled

And currently email and phone are consumed from directory attributes..

This is an unnecessary risk - disable it

[International Cyber Digest @IntCyberDigest]

‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required.

Microsoft has patched it as CVE-2026-42824, rated critical.

[Sam Bent @DoingFedTime]

Pick any darkweb handle...
Instantly see every other forum the same actor used.
775,621 usernames cross-referenced across 27 cybercrime forums, in one offline file with 3D link graphs.
https://t.co/Gd1Xj0hGPU

[TeaJay @apjone]

Tech bros & investors taking money out of crypto to throw into AI ....

[Slashdot @slashdot]

Bitcoin Has Lost Nearly Half Its Value in 11 Months https://t.co/D1GIYvC0cA

[Assal Rad @AssalRad]

They say “Israel tells residents to leave” because FORCED DISPLACEMENT is a war crime. This is how they launder it.

[International Cyber Digest @IntCyberDigest]

‼️ UPDATE: It just doesn't stop: Almost 900 Arch Linux packages infected now.

https://t.co/xpRTsucoxA

[Fandom Pulse @fandompulse]

#SaveStargate Trends Globally as Fans Storm Amazon

https://t.co/qanI34L79w

[Dark Web Informer @DarkWebInformer]

You can find the full Nightmare Eclipse exploits located here:

https://git[.]churchofmalware[.]org/Nightmare_Eclipse/

[TeaJay @apjone]

@nahamike01 @threadreaderapp unroll

[Twonks @twonkscomics]

Smart World Cup tactics from USA

[vx-underground @vxunderground]

I had so many DMs about this post. I've been dealing with a bunch of schmummy gunkins so I haven't had an opportunity to read it.

Well, I finally read this post and the cited source. I had to pause almost immediately upon opening the cited link because I was blasted right in my eyes with SLOP.

> Why This Matters Now
> Why Connected TV (CTV) is the Ideal Proxy

It is pure slop. The purist of slop. It is slopium. It is radioactive AI slop @radioactivered would collect and hide in her walls.

Anyway, besides it being written by AI and being a giant stinky pile of slop shit, it is (probably) technically accurate, although to confirm their findings I would have to download the silly TV apps they listed and reverse engineer them myself to confirm their findings (I'm not going to do that)

In summary, your TVs allow you to install super sketchy apps and all sorts of other dumb gunk. These free apps on your TV are being bundled with BrightData stuff, a well-known and relatively-disliked company in Israel.

BrightData allows you to profit off your free app. The money comes from BrightData turning your application into a VPN node, basically letting random stuff use your internet. In other words, if you write some free junk application, and a bunch of people install it, you'll profit by letting BrightData connect to these peoples devices (from the junk application) and do stuff. BrightData has historically used this stuff to bypass VPN blockers because the device they're tunneling through is a legitimate home computer address.

This is a (sort of?) common occurrence on the Android app store (and probably iOS app store too, actually) and isn't a shocking revelation in my opinion.

Is this illegal? Technically no because somewhere in the fine print (that no one reads) you're agreeing to it.

Is this incredibly unethical? Yes, it is insanely unethical and many companies and people hate BrightData

[The Hacker News @TheHackersNews]

🚨 Fully patched Windows 10 and 11 are still at risk from a new Microsoft Defender zero-day.

The exploit, "RoguePlanet," can hand attackers full SYSTEM control when it works.

It's the latest public drop from a researcher feuding with Microsoft.

Read: https://t.co/RbALiW3Qvj

[Adam Juelich @acjuelich]

For those using Device-bound Passkeys and want to start playing with @Yubico, here are the AAGUIDs for Attestation.

https://t.co/VAF7uSHbLG

[TeaJay @apjone]

@UK_Daniel_Card @cyb3rops Only configure it so can score high on SSL Labs 😅