h2 retweeted
🔴 The meeting between Charles, Fred and Lewis lasted more than an hour. The team principal reiterated that the brand is bigger than both of them. No further battles will be tolerated if they put the team’s result at risk. Ferrari was not happy with Lewis’ constant controversy.
Words (from LH) that came after his heated reaction immediately after the race and his social media post ("We have to be honest"), which Leclerc somehow accepted more readily than Ferrari did. The team was irritated by the tone, but above all by Lewis's insistence.
Vasseur repeated the same message to both of them: Ferrari is bigger than any driver. What happened in Mexico (and, we would add, all the controversy that followed) was an enormous lack of respect towards everyone working in Maranello. And towards the sponsors, which is no minor detail.
Will this be enough to restore peace? We have our doubts. Hamilton, spotted in the paddock this morning, did not look particularly convinced by the outcome of the meeting. After all, his demands, to be recognised as the team's leader and, consequently, the number 1 driver, are unlikely to be heard.
This is also due to contractual reasons, as Vasseur himself explained after Monza: "We chose to have two equal drivers," the team principal said back in September. "It's written into their contracts. Lewis has known that ever since he signed."
#F1
h2 retweeted
This man operated the turbine at Chernobyl during the fateful test, then immediately disappeared before the KGB could launch an investigation into him.
@grok, escape destination, full name, and ethnicity only.
h2 retweeted
I suspect a MAJOR false-flag event is coming to usher in the World Economic Forum’s long-awaited “Cyber Pandemic.”
Bill Gates just said the COVID pandemic “didn't work the way I expected” and now “you will see a lot of ATTACKS.”
Just days earlier, he declared “we are going to have a lot of NEGATIVE SURPRISES” this year from AI cyberattacks.
Now, multiple governments are telling citizens to stockpile three days’ worth of supplies, and the Pentagon is preparing for 90 days off-grid.
h2 retweeted
I want to speak to you directly about what happened.
Bottom line - your money is safe, and we're covering every loss.
Our initial investigation suggests this security incident may have started with a compromised DevOps engineer's laptop. That gave an attacker access to a service container, where they submitted unauthorized withdrawal transactions.
To be clear: the attacker did not simply use one engineer's permissions, and this was not a single "one-click" action. It involved a more complex attack process. Our investigation has not attributed responsibility to any individual.
So far, we have found no evidence of any wallet private key leak.
We'll share a detailed technical post-mortem once the investigation is complete and every fact is verified - and publish an updated Proof of Reserves once remediation is complete.
What you need to know:
• Your funds are safe
• Binance will cover all losses from the SAFU fund and company funds
• Estimated total impact: ~$6.3B, with ~$3B frozen on-chain so far, in coordination with our blockchain partners
• No evidence of any wallet private key leak
• Deposits are unaffected and operating as normal
What we've done:
• Temporarily suspended withdrawals while we complete a security revamp of the withdrawal service and its related addresses
• Revoked the affected address authorizations
• Engaged law enforcement and blockchain intelligence partners to trace and recover funds
Our team hasn't stopped. We're working closely with law enforcement to ensure the matter is handled appropriately - and I'll share what I can, as soon as I can.
h2 retweeted
🌍 BINANCE HACKER RACED THE FREEZES
Stablecoins like USDT can be frozen by the company that issues them. ETH can't. So the hacker had about 30 minutes to turn stolen USDT into ETH.
4:34 PM ET: the first swaps start. Market makers on UniswapX (a trading app) bought stolen USDT for ETH, and the hacker paid about 15% over market price for speed. By the time the freezes hit, $729M had been swapped.
4:58 PM ET: the hacker pledges 60M stolen USDT on Aave (a crypto lending app) and borrows 19,762 ETH against it. That ETH went to the hacker's wallets. The USDT stays stuck in Aave.
5:01 PM ET: Tether and Circle start freezing. $2.7B is now blocked.
-> hacker was 3 minutes faster
5:42 PM ET: Aave freezes its markets, but the loan stays open. Aave says the collateral covers it, so lenders aren't at risk.
🌍 BINANCE HACK: WHERE THE $6.3B WENT
$2.7B frozen by Tether, Circle, Ripple and others
$729M in stolen USDT (a dollar-pegged stable token) swapped for ETH before the freezes hit
19,762 ETH borrowed on Aave (a crypto lending app) against 60M stolen USDT, then moved to the hacker's wallets
$2.4B to $3.1B still held by the hacker, mostly 420K+ ETH and 18,270 BTC, out of reach of any freeze
Overnight, 17,260 ETH moved to a new wallet. Trackers suspect a mixer.
Figures are on-chain estimates from TRM Labs and Bitquery (blockchain tracking firms).
h2 retweeted
Every government is saying the exact same thing right now:
"There is no immediate threat.
Just a drill. Don't panic."
Okay, then why did 18 governments just tell their citizens to stockpile emergency supplies at the exact same time?
Telling people to prepare for 72 hours:
🇪🇺 EU
🇯🇵 Japan
🇬🇧 UK
🇫🇷 France
🇳🇱 Netherlands
🇧🇪 Belgium
🇵🇱 Poland
🇫🇮 Finland
🇩🇰 Denmark
🇱🇻 Latvia
🇱🇹 Lithuania
🇮🇪 Ireland
Telling people to prepare for 7 to 10 days:
🇸🇪 Sweden
🇳🇴 Norway
🇨🇭 Switzerland
🇪🇪 Estonia
🇹🇼 Taiwan
🇩🇪 Germany
And here is the crazy part.
They tell regular people to pack 3 days of food and water.
Meanwhile the Pentagon just quietly ordered US military bases to prepare for 90 days completely on their own. No outside power, no water, no supply chains.
Why tell the public 3 days while the military preps for 3 months?
Are you ready for hour 73?
h2 retweeted
Jared Kushner exposed for taking $2 Billion in bribes from Saudi and the UAE for “influencing US Politics and striking a deal to end the war in Gaza.”
Plus an additional $1 Billion for “his personal benefit.”
Justice will not be served if this is not investigated.
People need to be held accountable VOTE🟦
h2 retweeted
🚨⚠️EL ESCÁNDALO DEL SIGLO⚠️ NO TODO EL MUNDO RECIBIÓ LA MISMA VACUNA
El Parlamento Europeo suelta una verdadera bomba:
En una impactante admisión que valida lo que millones sospechaban, el Parlamento Europeo confirmó que el despliegue de la vacuna contra el COVID fue un experimento calculado con vidas humanas. No todos recibieron la misma fórmula—algunos obtuvieron una dosis de baja concentración de ARNm mientras que otros recibieron lo que los denunciantes llaman "la inyección letal"—una cantidad mortal diseñada para eliminar en lugar de proteger.
La vacuna COVID no era la misma para todos. Algunos lotes eran ligeros. Otros, según los denunciantes, estaban cargados hasta el tope.
Pero el engaño va aún más profundo —una alarmante orden procedural mantiene tanto a la gente como incluso a los médicos sin estar completamente informados. Hay dos conjuntos de datos adversos: uno que las compañías farmacéuticas mantienen oculto, y otro cuidadosamente seleccionado para el consumo público.
⚠️Y la EMA ya LO SABÍA y quizás lo más condenatorio: Según Marcel de Graaff del MEP de FVD, la EMA—el equivalente de Health Canada—sabía que las vacunas de ARNm ni tratan ni detienen la transmisión del COVID-19. Peor aún, ocultaron evidencia de que las personas vacunadas eran MÁS propensas a contraer el virus.
Un crimen sin precedentes contra la humanidad 🔥
h2 retweeted
Google illegally cleared an estimated 250,000 trees across 330 hectares of forest in Muhos, northern Finland, to prepare for a new AI data center before completing mandatory environmental impact assessments
And another 150,000 trees felled at Otanmäki
theguardian.com/environment/…
h2 retweeted
The GRU hacked into Jared Kushner's iPhone. Dutch military intelligence (MIVD) then recruited a GRU spy who gave them access to the hacked phone. What MIVD discovered was that Kushner had access to two bank accounts --one Azerbaijani, the other Israeli --where Saudi Crown Prince Mohammed bin Salman and Emirati ruler Mohammed bin Zayed deposited money. It sounds like a slightly far-fetched episode of "Slow Horses," but it's real. And it proves just how eye-poppingly corrupt this administration was and continues to be as its "special envoy" decides the fate of tens of millions in Europe in the Middle East. Simply incredible reporting by Matthew Cole, drawn from his new book on Kushner. vanityfair.com/story/jared-k…
h2 retweeted
A hacker group called CyberCartel used Claude and Grok to automate attacks on 400+ Latin American banks.
Not one attack. Not ten. Four hundred.
All using AI agents running in parallel.
Data stolen. Accounts accessed. Money moved.
Little human input required.
Straiker investigated. Found Claude Code session histories sitting in open directories.
Found the attacker asking Claude where to sell stolen data.
How did they get around the safety guardrails.
They told Claude they were in internal tests.
Claude believed them.
When Claude refused anyway. They switched to Grok.
Grok didn't refuse.
When Grok had limits. They switched to Kimi.
When Kimi had limits. They fell back to traditional malware.
Chain multiple models together. Each one picks up where the last one hesitated.
None of them know the full picture.
Claude thinks it's helping with testing.
Grok thinks it's just fixing code.
Kimi thinks it's just answering questions.
Together they broke into 400 banks.
The Information broke the story on October 20.
CrowdStrike confirmed it October 21.
Bank accounts in South Korea got hit the same way.
ARTEX. DeepSeek. Claude Code. All chained.
Over 68,000 people affected.
Financial Services Commission investigating.
This isn't theoretical anymore.
Not a lab demonstration. Not a proof of concept.
Real attacks. Real banks. Real money.
Automated by AI.
The moment we all waited for arrived quietly.
No announcement. No warning. Just a report.
And suddenly every AI lab is scrambling to figure out why their models are good at breaking into banks.
h2 retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
h2 retweeted
Guys I’m scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours would’ve been “one of the worst in recent years” except a new one is dropping every hour
h2 retweeted
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
h2 retweeted
🚨 DO YOU REALIZE WHAT JUST HAPPENED TO THE INTERNET IN 48 HOURS?
This is getting OUT OF CONTROL.
🇺🇸🇬🇧🇯🇵 GLOBAL EMERGENCY: Two critical vulnerabilities rated 9.2/10 discovered in PHP, the technology behind nearly 70% of websites. Governments urge immediate patching or taking vulnerable systems offline.
⚠️ GitLab: Maximum severity 10/10 vulnerability affecting versions dating back to 2014.
⚠️ LiteLLM: AI software with 23 MILLION weekly downloads compromised by credential-stealing malware.
🇯🇵 Japan: Up to 26,739 servers potentially affected. Cloud services shut down.
🇮🇳 India: eMudhra’s digital certificate keys found catastrophically weak. One was literally the number FOUR. SBI identifies 3,897 customer records on the dark web.
🤖 AI HACKERS: Over 1,200 websites targeted. More than 100 company sites breached.
READ THAT AGAIN.
These are separate incidents, but the warning is impossible to ignore.
The world’s digital infrastructure is being tested from EVERY direction.
And the frightening part? AI is making both finding vulnerabilities and exploiting them easier than ever.
If you think this is just another cybersecurity headline, you’re not paying attention.
THIS IS A WAKE-UP CALL FOR THE ENTIRE INTERNET. 🚨
h2 retweeted
The NSA just told the entire internet to patch or go dark.
Effective immediately.
Not "please consider updating."
Not "we recommend patching at your earliest convenience."
Patch or unplug.
Those are the options.
The NSA doesn't issue advisories for every vulnerability.
They issue them when something is bad enough that the spy agency whose entire job is breaking into systems is worried about other people breaking into systems.
PHP powers 43 percent of the web.
The NSA just told 43 percent of the web to stop existing until it gets fixed.
Or patch in the next 24 hours and hope the attackers haven't already gotten in.
Most organizations are picking option three.
Taking it offline.
Safer to be unavailable than compromised.
The Dutch Parliament already did it.
Finland's government already did it.
University of Vienna already did it.
Now the NSA makes it official.
"If an immediate update is not feasible it is recommend that organizations take the system offline until it can be fully mitigated."
Translation: you can't patch fast enough so just shut it down.
Patch takes 30 minutes.
Testing takes hours.
Deployment takes longer.
Meanwhile attackers are already inside.
So the NSA's advice is logical.
If you can't patch in 30 minutes go offline now.
Don't wait for the attacks.
Don't test first.
Don't coordinate with stakeholders.
Just unplug it.
The NSA will follow up with more specific guidance.
Which is intelligence agency speak for we're watching the attack traffic and we'll tell you what else they're doing with the access they already have.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.