Mark Puckett 🇺🇸

CEO @RaxisOne, @Forethreat1. Fan of startups, innovation, SEO, web apps, and anything tech. Hobbies range from cars to construction.

[Mark Puckett 🇺🇸 @Mpuckett]

@SilverrocketCo Very nice.. and up to 17% downforce in the front!

[Mark Puckett 🇺🇸 @Mpuckett]

Building something new!

[Forethreat @Forethreat1]

Getting ready for a UniFi Network, UniFi Talk, and UNAS installation at a landscaping company in Dawsonville, GA! Talk has been a great solution for many of our customers, offering real cost savings and better functionality than a traditional ISP phone plan.

[The White House @WhiteHouse]

There could be no Independence Day without Memorial Day. 🇺🇸

[Mark Puckett 🇺🇸 @Mpuckett]

Someone should have told this kid he could get paid really well to do the exact same thing, legally. Same skills, wrong side of the keyboard.

Teen potentially exposed info of hundreds of thousands of Georgians: ‘I was addicted to hacking’ https://t.co/jCd0lRMXTg

[Mark Puckett 🇺🇸 @Mpuckett]

The world in a Minecraft world!

[Oliver Prompts @oliviscusAI]

🚨 BREAKING: Someone just open-sourced a tool that turns the real world into a playable Minecraft map.

It pulls data directly from OpenStreetMap and generates your exact neighborhood, city, or street block by block.

100% Open Source.

[Mark Puckett 🇺🇸 @Mpuckett]

And another one.

[The Hacker News @TheHackersNews]

🛑 ALERT - A new flaw in #Ubuntu 24.04+ lets attackers gain full root access from low privileges.

By timing system cleanup, they replace a snap directory and execute code as root—no user action required.

🔗 Exploit steps and patched versions → https://t.co/C2S8mYjapP

[Mark Puckett 🇺🇸 @Mpuckett]

Patch!!

[International Cyber Digest @IntCyberDigest]

🚨‼️ CRITICAL: Ubiquiti UniFi Network Application vulnerabilities were just disclosed

CVE-2026-22557 CVSS 10.0
Remote path traversal vulnerability allowing an attacker to access and manipulate files, leading to account takeover. No authentication required.

CVE-2026-22558 — CVSS 7.7
Authenticated NoSQL Injection allowing privilege escalation.

[Mark Puckett 🇺🇸 @Mpuckett]

Rough one for Stryker. Reports say an Iranian-linked group (Handala) used compromised Intune access to remotely wipe over 200k devices across 79 countries overnight. Even personal phones enrolled for work got hit!

This shows how quickly things can go sideways when privileged access like MDM gets abused. Worth double-checking those configs, permissions, and enrollment policies right now… you know it had to be a simple oversight that know one knew about that let them in the door.

[Hedgie @HedgieMarkets]

🦔 Medical technology giant Stryker is offline after an Iranian-linked hacktivist group called Handala deployed wiper malware across its network. The attackers claim they stole 50 terabytes of data and wiped over 200,000 systems, servers, and mobile devices, forcing offices in 79 countries to shut down. Employees report devices were remotely wiped in the middle of the night through the company's mobile device management system, including personal phones enrolled for work access. Stryker filed an 8-K with the SEC confirming a global disruption to its Microsoft environment and says it has no timeline for restoration.

My Take
Stryker makes surgical equipment, neurotechnology, cardiac monitors, stretchers used in ambulances. EMS workers are already reporting they can't transmit patient data to hospitals, and when a medic calls in with a weird EKG and the doctor can't see it, that's a gap where people can die. Offices in 79 countries are reverting to pen and paper for medical device operations while tensions with Iran are at a peak and Hormuz is closed.

The attack vector appears to be Microsoft Intune, the mobile device management system. Hackers got in, pushed a mass wipe to every enrolled device, and took down the whole company. I wrote about the cybersecurity selloff a few weeks ago when the sector was getting hammered despite obvious escalating threats, and this is exactly the scenario that made that selloff look insane. Companies have been cutting security budgets and offshoring security roles for years because it looked like an easy place to save money. You can move the labor overseas but you can't move the consequences when Iranian hackers wipe your entire infrastructure in one night.

Hedgie🤗

[Mark Puckett 🇺🇸 @Mpuckett]

@tonybaloney1234 @AlBuffalo2nite @grok It’s AI

[Mark Gadala-Maria @markgadala]

This story is actually insane:

• dude drops $2000 on a DJI robot vacuum like a lunatic
• refuses to use the normal app like a peasant
• Sammy Azdoufal fires up Claude to crack the API so he can drive it with an xbox controller
• Claude delivers the goods
• pulls an auth token from their servers, connects successfully
• except the system thinks he controls 7000 vacuums
• checks again
• yep, seven thousand
• DJI built authentication with zero device ownership verification
• any valid token works for any unit on the planet
• Sammy now has eyes inside homes across 24 countries
• live vacuum camera feeds everywhere
• full floor plans from the mapping data
• some guy in germany eating cereal at 3am, unaware his roomba is snitching
• one API call away from being the most informed burglar in history
• all he wanted was to steer his vacuum with a joystick
• does the right thing and reports it
• DJI fixes it in two days
• back to normal life with his stupidly expensive floor cleaner
• IoT companies stay undefeated at shipping garbage security

[Mark Puckett 🇺🇸 @Mpuckett]

Check out my post on “Google Tag Manager CSP Vulnerable to XSS” https://t.co/Ed3mhIqLwP

[Mark Puckett 🇺🇸 @Mpuckett]

@dtop1percentmen It’s an opinion of a man without any friends. Consider the source, as he’s wrong.

[Mark Puckett 🇺🇸 @Mpuckett]

@nowiknowmyabcs @DHSgov @HiltonHotels Hilton should step up and address this immediately or there will be fallout… the Hilton name is on it.

[Mark Puckett 🇺🇸 @Mpuckett]

Our Raxis Chief Pentest Officer, Brian Tant, interviewed on channel 2 news in Atlanta! https://t.co/YfppLI44CO

[Mark Puckett 🇺🇸 @Mpuckett]

If you're looking for a Wordpress hide login/hidden login plugin that is completely free and works with (or without) WP SAML Auth, here you go. https://t.co/VOZ6GwB765

[Mark Puckett 🇺🇸 @Mpuckett]

It's a really interesting idea and possible.

[Nic Cruz Patane @niccruzpatane]

Elon Musk came up with a pretty incredible idea during the Q3 Earnings Call, that no one is really talking about.

His words: “Actually, one of the things I thought, if we've got all these cars that maybe are bored, while they're sort of, if they are bored, we could actually have a giant distributed inference fleet and say, if they're not actively driving, let's just have a giant distributed inference fleet.
At some point, if you've got tens of millions of cars in the fleet, or maybe at some point 100 million cars in the fleet, and let's say they had at that point, I don't know, a kilowatt of inference capability, of high-performance inference capability, that's 100 gigawatts of inference distributed with power and cooling taken, with cooling and power conversion taken care of. That seems like a pretty significant asset.”

So basically, each car has ~1 kilowatt of high-performance AI inference capability, Tesla wouldn’t need to build giant data centers — the fleet is the data center.

Tesla could turn their entire fleet into a giant distributed inference network, spread across the world, powered by the batteries and AI in the car already.

Mind blown.

[Mark Puckett 🇺🇸 @Mpuckett]

Proud to sponsor deadface CTF! https://t.co/3tuyGuAxY7

[Mark Puckett 🇺🇸 @Mpuckett]

Ready or not, iOS 26 is coming. https://t.co/3jEdGssfoc

[Mark Puckett 🇺🇸 @Mpuckett]

Nothing to see here. Move along.

[ACE Responder @ACEResponder]

How to spot a penetration tester

#ThreatHunting #DFIR

[The Hacker News @TheHackersNews]

Hackers are busy.

⚠️ CISA says TP-Link Wi-Fi extenders can be reset + hijacked — and since they’re end-of-life, no fixes are coming.

⚠️ WhatsApp + Apple flaws are being chained in a spyware campaign, quietly targeting fewer than 200 people.

Details you don’t want to miss ↓ https://t.co/6ntXXw2uEY