tbmdow

Information System Security

[Clément Molin @clement_molin]

JL Mélenchon: « En Ukraine, nous enverrons des casques bleus protéger les centrales nucléaires »

-> convoi de l'ONU distribuant de l'aide alimentaire à Kherson, visé par un drone FPV
-> l'ONU dit ne pas savoir d'où il vient
-> les russes publient fièrement la vidéo 1 heure après

[Vini B |「 thecoding 」 @vinibarbosabr]

Intentional VPN backdoor on Android?
Looks like it

TL;DR

+ security researcher @cybaqkebm found a bug on Android
+ the bug allows apps to circumvent VPN tunnels, leaking user data
+ the bug was reported to Android, with a proposed fix
+ Android sais it wouldn't fix it
+ The bug report mysteriously disappeared
+ GrapheneOS already released a patched version
+ advanced users can manually patch their Androids via USB debugging (adb code)

[Bryson 🦄 @brysonbort]

Remote Desktop, Windows quietly saves fragments of what was on screen. Attackers can grab those fragments and reassemble them into readable screenshots using two free tools and about ten minutes. No special privileges required.

https://t.co/h56E4HVvoJ

[Xavier Tytelman @PeurAvion]

La Russie 🇷🇺 est la protectrice des valeurs traditionnelles, de la famille et de la chrétienté. Un petit #Thread pour prouver une fois pour toutes la décadence de l'occident et la pertinence du modèle russe. 👇 1/11

[Grégory Raymond 🐳 @gregory_raymond]

🟥 Exclusive @TheBigWhale_

The acquisition of Exaion (a subsidiary of French public energy giant @EDFofficiel) by American Bitcoin miner @MARA conceals an explosive clause:

If this goes through, EDF will no longer have the right to engage in any intensive computing activity for two years.

Behind these technical terms ("computing, cloud or HPC-related activity") lies a prohibition that affects much more than Bitcoin mining.

👉 It could also block any artificial intelligence or sovereign cloud project led by EDF.

According to our information, this exclusivity clause signed on August 11, 2025 prohibits EDF from acting "as a service provider, agent, consultant or otherwise" in the field of high-performance computing.

Result: the French public group would be forced to freeze for 24 months any activity related to AI, cloud, or mining.

Potentially, EDF would not have the right to provide computing power to @MistralAI

A major blow, still according to our information, as EDF had been working for a year on an internal project called FlexMine, designed to monetize surplus electricity by powering flexible computing infrastructures for AI and Bitcoin.

The project has reportedly been abandoned since the signing with Mara, which would only bring in $20 million for EDF.

This could amount to a strategic surrender at a time when everyone is fighting to secure computing capacity.

The affair raises questions of digital sovereignty, especially since Mara (subject to the American Cloud Act) could now control part of France's critical computing infrastructure.

Read this major investigation produced by @Raph_Bloch and myself

👉 https://t.co/X8nNDkv1E2

[Charles Guillemet @P3b7_]

That couldn't happen if Telegram was end-to-end encrypted.

[Raphael Grably @GrablyR]

- Pavel Durov accuse la France de lui avoir demandé de censurer des comptes Telegram en Moldavie (sans toutefois apporter d’élément matériel).

➡️ 17 millions de vues

- Amplification par Elon Musk.

➡️ 13 millions de vues

- Réponse du Quai d’Orsay

➡️ 15.000 vues

[Justin Elze @HackingLZ]

Probably a good time for this reminder

[ᐱ ᑎ ᑐ ᒋ ᕮ ᒍ @Andr3jH]

> miss the AI train
> AI turns out to be fake
> watch your enemies and adversaries pour trillions into a bottomless pit

[hi^^ @collysucker]

Microsoft openly admitting they have not(!) had MFA, network segmentation, least privilege, software lifecycle, jump-servers, asset- and software-inventory etc for Azure PROD for years and they are not there yet.

This whole report is just so scary. At the same time, good.. (1/2)

[david D. @secretsqrl123]

from reports it looks like europe will state they are ready to stop buying our debt if trump keeps backing russia.. also they have to agree to restructure the 9 trillion debt that is about to come due this year. if they refuse they can force the US to default.
last week we tried to sell debt bonds, the sale failed and we got NO buyers.. this has not happened in a LONG time. with europe holding a HUGE amount of our debt just saying they are going to dump the bonds will probably put us in a rescission.
with the 5 trillion new debt on the BBB now due this could be devastating.
trump will probably be presented with a choice today. russia or europe you cant be friends with both.

[Julian Cohen @HockeyInJune]

A security program in one tweet.

[vx-underground @vxunderground]

Do you guys remember that Reddit post about installing network equipment in your home for $250/month?

Some people argued it's legitimate. I said it's probably state-sponsored from North Korea.

I was wrong.

It was Belarus. DONT INSTALL RANDOM SHIT IN YOUR HOUSE

[Ru Campbell @rucam365]

Most IT teams, including mature ones, aren’t gonna adopt physical dedicated PAWs and it’s not reasonable to assert they should.

What have been your most successful compromises for this?

[vittorio @IterIntellectus]

AGI is here and has started murdering people

[Het Mehta @hetmehtaa]

Free Offensive and Defensive Courses

AV/EDR Evasion Practical Techniques
Foundations of Log Analysis for Cyber Defense
Fundamentals of Game Hacking Development
Introduction to Bug Bounty
Introduction to Offensive Security with Artificial Intelligence
Introduction to Python for Defensive Security
Introduction to Python for Offensive Security
Introduction to Red Team Operation Management
Malware Analysis Introduction v1
Offensive Development Introduction for Windows v1
OpSec & Anonymity for Red Teams
Purple Team - Active Directory and AzureAD v1
Windows API for Red Team Introduction
Physical PenTest Fundamentals
Healthcare Hacking Introduction

Course Link: https://t.co/CnaDKZlbTV

By Red Team Leaders
#redteam #hacking #blueteam #pentest #offensivesecurity #redteamleaders

[Imran Rashid☁️ @ITSupportBlog]

🚨 Cybersecurity just got a whole lot easier, and FREE!

Introducing the Microsoft Security Academy

All-in-one access to expert-led training!

💥 No cost. No catch. Just serious skills.

https://t.co/N8wXJ77fnk

Enjoy 🙂

[marc rees @reesmarc]

"M. Anton Carniaux, directeur des affaires publiques et juridiques de Microsoft France, invité par la commission d’enquête à garantir que les données des citoyens français hébergées par Microsoft ne seront jamais transmises à des autorités étrangères sans l’accord des autorités françaises, a-t-il répondu : « Non, je ne peux pas le garantir ». " (p.23 du rapport)

[Brian Roemmele @BrianRoemmele]

AI controlled Bot Farm.

100s of them tossing 1000s of comments and postings designed to agitate you. Polarize you. Offend you.

Disempowering you.