Official account of Predicta Lab. Leveraging intelligence since 2020. Contact us at [email protected] Our articles 馃憠 https://nitter.cf/t.co/qCs1kI49wT
Joined March 2020
- Tweets757
- Following293
- Followers9.1K
- Likes634
A backdoored copy of Anthropic's Claude Code extension sat on Cursor's marketplace for 11 hours. Up to 5,000 developers may have installed it, and uninstalling does not clean the machine. 猬囷笍
Binance lost control of its hot wallets for 40 minutes last night. Analyst estimates of the outflows run from 3.5 to 5.9 billion dollars, and the exchange insists user funds are safe. What we know so far 猬囷笍
Someone just made one fifth of the Department of Homeland Security searchable by name. For the agents whose anonymity the US government defends in court, the timing could not be worse. 猬囷笍
Three South Korean financial firms confirmed data breaches in one morning: Bithumb, Daishin Securities, Mirae Asset. October's running count: 16 firms hit. Here is how a whole financial sector gets picked apart. 猬囷笍
Flock's own website leaked an access token exposing the locations of 300,000 of its surveillance devices. A researcher turned it into a public map, and the company has been trying to kill it ever since. 猬囷笍
Everyone spent last week patching PHP2Shell. Meanwhile a second RCE, just as broad, was sitting in Google's Brotli compression code, used by every language on the internet. 猬囷笍
A root-trusted certificate authority generated a private key that was literally the number four. Not a metaphor: 4. The fallout is ending its entire TLS business. 猬囷笍
A ransomware crew ran its intrusions through commercial AI models and left the chat logs on an open server. 8,257 messages later, we can read exactly how a machine breaks into a company. 猬囷笍
Moderna lost about 24 billion dollars in market value in a day. Not after a hack: after its own trial results appeared online two days before the embargo lifted. 猬囷笍
The NSA's advice to every org running PHP this week: install the emergency update now, or take your systems offline until you can. Four governments chose offline. 猬囷笍
One hacker breached more than 100 companies in under a month. The toolkit: AI agents and roughly 5,000 dollars in tokens. Researchers watched it happen live, through the attacker's own dashboards. 猬囷笍
