Vulny

Automated security + SEO/GEO scanning for your business
🔍 Vulns · ⚙️ SEO · 🤖 AI-search
Protecting businesses across the globe 🌐

[Vulny @vulnyapp]

@Revolut LIVE UPDATE:
Randomly work, try multiple times: Apple pay/Google Pay (cards VISA/Mastercard) ATM, IBAN.
My personal two friends confirmed, multiple X users confirmed.
Thank you all, I am out, visit my profile I am a cyber security engineer. Follow!

[Vulny @vulnyapp]

@Revolut LIVE UPDATE:
Some users reports that: Apple pay/Google Pay (VISA) works, ATM withdrawn works and IBAN and internal transactions works. (randomly try multiple times).
What happened: Google data center electricity lost, Revolut works on Google servers.
Some servers still recovering

[Vulny @vulnyapp]

@Revolut LIVE UPDATE (who is out of sync):
Some users reports that Apple pay/Google Pay, ATM withdrawn works and IBAN and internal transactions. (random).
What happened: Google data center electricity lost, Revolut works on Google servers.
Some servers still recovering...

[Vulny @vulnyapp]

@Revolut LIVE UPDATE (who is out of sync):
Some users reports that ATM withdrawn works and IBAN and internal transactions. (random).
What happened: Google data center electricity lost, Revolut works on Google servers.
Some servers still recovering...

[Vulny @vulnyapp]

@Revolut LIVE UPDATE (From Google Cloud):
Most europe-west2 workloads recovering as of Oct 20, 05:10 PDT. Zone europe-west2-b still down; other zones may see errors and network issues.

[Vulny @vulnyapp]

@Revolut LIVE UPDATE (who is out of sync):
Some users reports that ATM withdrawn works and IBAN transactions.
What happened: Google data center electricity lost, Revolut works on Google servers.

[Vulny @vulnyapp]

@Revolut LIVE UPDATE:
Some users reports that withdrawn works and IBAN transactions, please check.

[Vulny @vulnyapp]

@Revolut LIVE UPDATE (who is out of sync):
1. Revolut down because of Google Cloud servers are down.
2. Google Cloud servers are down because power lost.
3. Power is restored partially, servers are booting.
4. Can take up to hour to boot all other servers.
5. After that Revolut.. waiting

[Vulny @vulnyapp]

@Revolut LIVE UPDATE (who is out of sync):
1. Revolut down because of Google Cloud servers are down.
2. Google Cloud servers are down because power lost.
3. Power is restored partially, servers are booting.
4. Can take up to hour to boot all other servers.
5. After that Revolut.. waiting

[Vulny @vulnyapp]

@Revolut LIVE UPDATE:
Power outage in europe-west2-b, now mitigated. Existing workloads are recovering (full recovery expected by Oct 20, 06:00); new workloads may not be creatable yet.

[Vulny @vulnyapp]

@Revolut LIVE UPDATE:

news in 5 min.

[Vulny @vulnyapp]

@Revolut LIVE UPDATE:

Google says that in 30 min servers will be up!

[Vulny @vulnyapp]

@Revolut LIVE UPDATE HERE:
(Google Cloud is down its a servers which uses Revolut)
1. https://t.co/o3ZJAmIkuE
2. https://t.co/z0TDfCSCFJ

First watch if Google Cloud is Up (link 1), then check if Revolut servers is up (link 2)

[Vulny @vulnyapp]

For entrepreneurs in Europe and USA who cannot tell a real report from a sales pitch.
What to look for in one, and what to ignore.

[Vulny @vulnyapp]

Your token validator reads the alg from the token header. What stops a forged token from declaring alg:"none" and skipping the signature check entirely?

[Vulny @vulnyapp]

A password manager is the office keyring. Nobody hands every employee a copy of every key cut by hand. One trusted ring holds them, and access is granted, not photocopied.

[Vulny @vulnyapp]

For owners in Europe and USA whose customers trust them with something.
What keeps that trust intact, in the parts of the business you never look at.

[Vulny @vulnyapp]

The mistake almost everyone makes: calling verify() without specifying allowed algorithms, so the token's header decides — and "none" becomes a valid option.

[Vulny @vulnyapp]

For entrepreneurs in Europe and USA who never open the dashboards they pay for.
One pass over your site, and what comes back that you would act on.

[Vulny @vulnyapp]

For entrepreneurs in Europe and USA selling to banks, insurers or the public sector.
What those buyers ask every supplier, and how long it takes to be ready.