ClevrOne

Is your #Cloud secure? Are your IAM policies optimized? Need help assessing your cloud environment?
A startup, offers expert cloud and cybersecurity services.

[ClevrOne @OneClevr]

Very good

[ClevrOne @OneClevr]

@Paul_Reviews Why it only encrypt PIN? It should be entire block to encrypt

[ClevrOne @OneClevr]

Why encrypt only PIN? It should tied up block and encrypt whole.

[Paul Moore - Security Consultant  @Paul_Reviews]

Hacking the #EU #AgeVerification app in under 2 minutes.

During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.

1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.

So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.

After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.

Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.

Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.

[ClevrOne @OneClevr]

Thank you very much,

[Ruben Hassid @rubenhassid]

Stop bookmarking 50 guides you'll never read.

You can skip all of it with these 15 free guides:

Claude 101: https://t.co/jw2qdIcjnh
Claude Code: https://t.co/UgE9xBXVbE
Claude Skills: https://t.co/6cHYYfjXEA
Stop prompting: https://t.co/j1LATSJiat
Claude in Excel: https://t.co/mfcXYSACWR
1M followers with AI: https://t.co/jZwxZr4ZhU
Claude for your team: https://t.co/qxlcqhf8bM
No prompt saves you: https://t.co/SDKJWylftC
AI Slides (PPT in 2026): https://t.co/L0bPMgXci6
Set up Claude Cowork: https://t.co/uWTpOI3Woc
Claude to sound like you: https://t.co/99RzxXU3p0
Claude interactive charts: https://t.co/ebCHGZqOF1
Claude as your computer: https://t.co/TxYuHPjgbV
Claude Cowork + Project: https://t.co/Q7AN9CZAbO
Set up AI before prompting: https://t.co/pE3OF72A04
___

1. Save this list for later (three dots, top right).
2. Share it with a friend by ♻️ reposting this image.
3. Subscribe to my free newsletter: https://t.co/psB7XxB2Y4.

[ClevrOne @OneClevr]

@0x_Discover Awesome

[ClevrOne @OneClevr]

Really insane.

https://t.co/8PhmzoL16b

[Help Net Security @helpnetsecurity]

War spreads into cyberspace after Iran-linked hackers hit medtech giant Stryker - https://t.co/OrpdoMKwAM - #CyberAttack #Cyberwar #Iran #Stryker #Geopolitics #CyberSecurity #CyberSecurityNews #SecurityNews

[ClevrOne @OneClevr]

I am planning to go. Anything specific to focus?

[muteki ☁️ [email protected] on Mastodon @muteki_rtw]

Who’s going to BSides Charm?

(side note, I’m over on BlueSky, @ muteki 🙂)

[ClevrOne @OneClevr]

Flat networks are dangerous. Segmented networks are resilient.
Microsegmentation limits threats and protects critical assets. 🔐

Visit: https://t.co/qOvz8xNMOx

#NetworkSecurity #ZeroTrust #Microsegmentation #CyberSecurity #EnterpriseSecurity #Clevrone

[Narendra Modi @narendramodi]

Champions!

Congratulations to the Indian team on winning the ICC Men’s T20 World Cup!

This remarkable triumph reflects exceptional skills, determination and teamwork. They have shown outstanding grit through the tournament.

This victory has filled every Indian heart with pride and joy.

Well done, Team India!

[ClevrOne @OneClevr]

@narendramodi Congratulations!!! Big win…

[ClevrOne @OneClevr]

Kubernetes is powerful—but only if secure.
RBAC, workload protection, and image security are critical for protecting cloud-native infrastructure☸️

Visit: https://t.co/qOvz8xNMOx

#Kubernetes #KubernetesSecurity #CloudNative #DevSecOps #ContainerSecurity #Clevrone #Trump #USA

[ClevrOne @OneClevr]

@NoLimitGains Not true!!!

[ClevrOne @OneClevr]

Security Operations Centers are becoming autonomous.
AI will detect, analyze, and respond to threats—faster than any human team can.

#SOC #CyberSecurity #SecurityAutomation #AI #ThreatResponse #Clevrone

[ClevrOne @OneClevr]

Security audits aren’t optional—they’re essential.
Regular assessments strengthen defenses, reduce risk, and ensure compliance.

Visit: https://t.co/qOvz8xOkE5

#SecurityAudit #CyberSecurity #RiskManagement #Compliance #InformationSecurity #Clevrone

[ClevrOne @OneClevr]

AI brings intelligence to Zero Trust.
Continuous monitoring, adaptive access, and real-time risk analysis create smarter, stronger security. 🤖��

Website: https://t.co/qOvz8xNMOx

#ZeroTrust #AISecurity #CyberDefense #IdentitySecurity #SecurityInnovation #Clevrone

[ClevrOne @OneClevr]

Cloud security in 2026 is identity-driven, AI-powered, and Zero Trust enforced.
Security must evolve as fast as the cloud itself. 🔐

Visit: https://t.co/qOvz8xNMOx

#CloudSecurity #CyberSecurity #ZeroTrust #DevSecOps #CloudProtection #Clevrone #Trump #USA

[ClevrOne @OneClevr]

Your cloud bill reflects your cloud strategy.
Smart monitoring, autoscaling, and resource optimization can dramatically reduce waste and increase ROI. 💡

Visit: https://t.co/qOvz8xOkE5

#CloudCost #FinOps #CloudOptimization #CloudManagement #CloudEfficiency #Clevrone #AI

[ClevrOne @OneClevr]

Multi-cloud offers flexibility. Hybrid offers control.
The smartest organizations choose based on performance, compliance, and long-term scalability—not trends. ☁️

#MultiCloud #HybridCloud #CloudStrategy #CloudComputing #DigitalTransformation #Clevrone

[ClevrOne @OneClevr]

AI is transforming threat detection by identifying anomalies in real-time, predicting attacks, and reducing response time from hours to seconds.

Autonomous security is the future of cyber defense.

#AI #ThreatDetection #CyberSecurity #AI #SOC #SecurityAutomation #Clevrone