Himanshu

Just a guy who is into security, privacy and stuff.. :P

[Lukasz Olejnik @lukOlejnik]

CHINESE HACKERS USED CLAUDE FOR NEARLY-AUTONOMOUS CYBERATTACKS! AI-based espionage campaign by Chinese state-sponsored group. AI handled 80–90% of operations: reconnaissance, vulnerability discovery, exploitation, credential harvesting, lateral movement and data exfiltration. It executed tasks at superhuman speed, mapped networks, built payloads and extracted intelligence with little oversight. "AI hallucination in offensive security contexts presented challenges, remains an obstacle to fully autonomous cyberattacks" https://t.co/xicqS3DAmh

[BadlandYW @BadlandYW]

⚠️ URGENT WARNING ⚠️

I’m sharing this as something urgent and important please be careful, everyone.

Linda is my friend. She used to work in capital markets, and we met years ago. Yesterday, she asked me to join a meeting. I thought it was for a project and accepted. She sent me a calendar invite, and I joined the meeting this morning at 9 AM.

It was supposed to be on Google Meet, but no one was there. Then they sent me a Zoom link. I clicked it and opened it in my browser.

When I joined, everything looked broken and the page asked me to run a “system update.”
Instead, I chose to download Zoom manually and asked for the meeting ID.
They refused to give it and said the update would be “easier.”

That’s when I deleted everything and shut it down.
I told them my computer couldn’t handle the update and that we should continue on Meet.
Strangely, my camera wouldn’t turn off no matter what I did.

I calmly closed all tabs, deleted everything, restarted my browser, and ran a full virus scan.
Then I realized Linda had been hacked, and the hackers were after me.

To those hackers: waving at you 👋 you almost got me, but not this time.

Linda was someone I really trusted.
Let this be a reminder to everyone:
If someone asks you to download or install something don’t do it!

[vx-underground @vxunderground]

I've got students messaging me asking if cybersecurity is still a "safe" field to go into because of the advancements of AI

Dawg, our career value has fucking EXPLODED. Are you fuckin' with me right now?

- AI vibe coded slop as far as the eye can see
- AI deep fakes as far as the eye can see
- AI written emails, scams, as far as the eye can see

On top of that, due to how accessible the internet is now, there is a "cyber attack" literally every god damn second. It's nonstop. The internet is still very much the wild, wild, west.

Like, bro, this shitty little malware website I run brings in 20,000+ malwares a day with a budget of $15, a slice of pizza, and cat pictures. Do you have any fucking clue how widespread cybercrime is?

Don't even fucking start me on crypto theft

I'll lose my mind writing this post, bro. It's literally nonstop, around the clock, weekends and holidays. It never ends. Cybersecurity is only getting bigger.

[Trung Phan @TrungTPhan]

This Jaguar Land Rover (JLR) hack story is wild:

▫️JLR is UK’s largest automaker
▫️Factory operations suspended since end of August (it shut down entire IT network after a hack)
▫️It’s losing ~ £5m a day (over £100m so far) and many companies in the supply chain are at risk of bankruptcy (JLR has paid £300m to many suppliers in recent days keep them afloat)
▫️The hack happened while JLR’s IT network was being upgraded by Tata Consulting Services (TCS) as part of a 5-year £800m engagement
▫️TCS — owned by Tata (same Indian conglomerate that also owns JLR) — was updating SAP software meant to unify all the factory systems
▫️However, this single “smart factory” system meant that when a hacker was detected, the entire IT network had to be taken down (since hack couldn’t be isolated)
▫️TCS was also managing IT for Marks & Spencer when it suffered a cyber attack that cost it £300m in Q2 2025

***

More from The Guardian: https://t.co/w2sxF61cxR

[Pritesh Lakhani @priteshlakhani]

Never repair a damaged phone. Always buy a new one.

The kind of misuse and shady practices that happen in the name of phone repairs are beyond imagination. It’s not worth the risk.

[Michael Luo @AzianMike]

I got a cease and desist from DocuSign for my free SaaS.

A couple of months ago, I saw a tweet from @awilkinson: “I just found out how much we pay for DocuSign and my jaw dropped. What's the best alternative?”

Me being naive, I thought “how hard could would it actually be to build a DocuSign alternative?”

Turns out not that hard.

In about a weekend, I built a UETA and ESIGN compliant tool. And it was free. And it cost me less than $50.

So I thought I’d share it out for free. Tweeted (Xeeted?) a link out. Went viral. At the time, I was charging $0 for it. Completely free. Had a over a thousand users sign up on the first day. All is great right?

Until DocuSign sent me an email. That I’m “in violation of Docusign’s intellectual property”. For “disseminating false and misleading statements regarding Docusign”.

What?

I never stole anything from DocuSign or made misleading statements about DocuSign.

They basically got scared that I created a free e-sign tool.

So what did I do with my free side project with a legal budget of $0?

Continued building of course. Shipped new features. Made the free product even better. It’s crazy how I now have thousands of users on Inkless who love the product.

DocuSign - maybe next time it’s better to listen to your customers rather than sending cease and desists?

[Sensei Kraken Zero @YearOfTheKraken]

A'ight. In this thread I will make a long list of what people are saying about the Trump Tariffs so that you can understand how terrible it actually looks for the Global Economy right now, and the USA especially.

1. Job openings in the USA have taken a major hit.

[Markets by Zerodha @zerodhamarkets]

Delhivery just announced something very interesting: it's acquiring its arch-rival Ecom Express for ₹1,407 crore in cash.

The shocking part? Less than a year ago, Ecom Express was valued at ₹7,300 crore and preparing for an IPO. Now it's being acquired for just 20% of that value. Here's the real story. 🧵👇

[The Chronology @TheChronology__]

How USAID trained 75000 media persons in India (Expose)

Indian media, education, arts, and culture are dominated by Left ideology

But This didn't happen accidentally
Everything was well planned. We were brainwashed, our generations were destroyed

It's time to wake up now

1/16

[Eric Hunley @hunleyeric]

The CIA is the top intelligence organization in the world.

But from the beginning, they trafficked drugs and laundered money to fund their "Black Budget" and hide their evil.

Here's the story of Operation X and the dark origin of the CIA... (thread) 🧵

[Kumar Exclusive @KumarExclusive]

Reports claim that 185 employees in @Apple Bay Area offices were terminated following alleged misuse of the Matching Grants program. This incident, reportedly involving some Indian associations, highlights serious concerns about nonprofit ethics and corporate integrity.

[International Chess Federation @FIDE_chess]

🇮🇳 Gukesh D is the YOUNGEST WORLD CHAMPION in history! 🔥 👏

[Mario Nawfal @MarioNawfal]

🇺🇸 STEVE JOBS: THE BEST MANAGERS ARE GREAT CONTRIBUTORS... WHO NEVER WANTED TO BE MANAGERS

"At Apple, we thought hiring professional managers would make us a big company.

It didn’t work—most were bozos who could manage but couldn’t do anything else.

The best managers?

Great individual contributors who never wanted the job but took it because they knew no one else could do it as well."

Source: BusinessX on IG

[Rithwik Jayasimha @thel3l]

Last month, a number sent me malware via an APK titled 'Union Bank Aadhar Update' on Whatsapp.

These typically just lamely forward all SMSes received to steal OTPs, but this one turned out to be a significantly more sophisticated op.

Some notes from taking down a scam network:

[Sick.Codes @sickcodes]

35 year old Chinese man arrested in Bangkok, driving around populated areas with a SMS blaster with a 3km radio sending 1,000,000 phishing SMS per hour. "Phone users within range received a message stating: “Your 9,268 points are about to expire! Hurry up and redeem your gift now”. This was followed by a URL for phishing website."

Video of the arrest: https://t.co/OE8cJio84o

[Oversecured @OversecuredInc]

🚨 Security Alert: Over 2 billion Android users and 100 million Pixel users may be at risk of file theft, VPN bypass, unauthorized Bluetooth access, and geolocation leaks. Visit our blog for details.

https://t.co/AUHBs9E4lp

[Markets by Zerodha @zerodhamarkets]

In October 2024, the Indian stock market saw one of the largest sell-offs by foreign institutional investors (FIIs) in recent history. FIIs sold a massive ₹82,000 crore (about $10 billion) in just a single month.

Let’s understand why this happened🧵👇

[Baptiste Robert @fs0c131y]

Today, the famous hacker known as USDoD was arrested by the Brazilian police.

The FBI had a way to find his identity and home address since at least June 2022. I will show you how.

It's OSINT time! ⬇️

[neural nets. @cneuralnetwork]

these are the people I watch regularly to relax

[2000s @PopCulture2000s]

23 years ago, linkin park released ‘in the end’
https://t.co/7p5A00g03g