Director of Red Team, Offensive Security, Agentic Super Intelligence. Helping organizations safeguard their businesses from the bad guys.
Hong Kong
Joined December 2014
- Tweets37.7K
- Following424
- Followers32.1K
- Likes33.9K
Vincent Yiu retweeted
The Binance hacker might have just executed one of the most brilliant moves in crypto.
First, Tether froze $1.5 billion worth of USDT.
Then Circle followed by freezing another $800 million in USDC.
At that point, it seemed like the hacker’s funds were completely trapped.
But apparently, he had already thought several steps ahead.
Rather than keeping the stolen USDT in a wallet, he allegedly deposited it into Aave and used it as collateral to borrow ETH.
Then he walked away.
And this is where things get really interesting.
Tether can freeze the USDT sitting in that wallet.
But it can’t freeze the ETH that was already borrowed.
So now, Aave is left with frozen collateral, while the hacker is holding liquid ETH.
And unless the protocol finds a way to recover those funds, he might not even have to repay the loan.
Two companies froze billions of dollars in seconds.
Yet someone who understood how DeFi works may have found a way to bypass both restrictions.
Pretty wild when you think about it.
Vincent Yiu retweeted
So freaking amazing. – at Wyndham, VA
Our security research team discovered a cross-site scripting vulnerability in Cloudflare's /cdn-cgi/image/ endpoint by chaining an SVG sanitizer bypass with a new Cache-Control header trick to bypass the CSP. The issue was reported to Cloudflare and has since been fixed.
You can read more here:
slcyber.io/research/cache-me…
Vincent Yiu retweeted
they got me 💔 #NintendoSwitch2
Readers added context they thought people might want to know
This image is a fabricated Nintendo Switch 2 ban screen. Official messages for error code 2124-4007 state only that online services are restricted by Nintendo and do not name community exploits like ns2jb.
en-americas-support.nintendo.com/app/answers/de…
pepsipu.com/blog/2026-10-s…
Vincent Yiu retweeted
Syswhispers4
github.com/JoasASantos/SysWh…
Vincent Yiu retweeted
Re: the widely circulated blog claiming the PHP bugs aren't easily exploitable: @trailofbits has a working exploit that gets a shell on an unmodified MediaWiki installation.
eliastaylor.com/noexploit/
Vincent Yiu retweeted
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X
Vincent Yiu retweeted
🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST.
Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using:
🟧 ActiveScan++ v2.0.13 (portswigger.net/bappstore/31…)
🟧 Bambda scan checks (github.com/PortSwigger/bambd…)
🟧 BChecks (github.com/PortSwigger/bchec…)
Start scanning for the vulnerability now → portswigger.net/bappstore/31…
Vincent Yiu retweeted
🦛🦛🦛Microsoft patched PetitPotam this October: EFSR now only resolves local paths. This means WebDAV to LDAP Coercion is fixed!
Remaining methods for clients are WSP (coercing SMB) and PrinterBug (coercing RPC), but both cannot be relayed to LDAP 💀💀💀
Vincent Yiu retweeted
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
ALT A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.
Vincent Yiu retweeted
I thought the first rule of EDR Reversing Club was you don’t talk about EDR Reversing Club.
nitter.cf/OffensiveAIcon/status/…
Your EDR Has Boundary Issues.
@harmj0y and @tifkin_ of @SpecterOps explore how adversarial machine learning can evade EDR detection- and how LLMs are accelerating the reverse engineering behind it.
Watch their Offensive AI Con talk below. 👇
youtube.com/watch?v=GNDMDI_p…
#OAIC #OffensiveAI #Cybersecurity #EDR
Vincent Yiu retweeted
Fuzzing became a lot more efficient 😏 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool: github.com/assetnote/h3fuzzR…
Writeup: slcyber.io/research/how-prac…
Vincent Yiu retweeted
Song Xingyu, a self-taught Gen Z vlogger from Badong in China's Hubei province who posts as Shenqi Ayu, has built a rideable hoverboard inspired by the Green Goblin's glider in Spider-Man and flown it across the Yangtze River. After his first five-turbojet prototype caught fire, he rebuilt it around ten brushless electric units with more than 30 kg of thrust each, and trained on it with an AI posture coach made from two phones.
Vincent Yiu retweeted
🕵️♂️ Pivot From Targeted Industries to Actor Infrastructure
Do you know which threat actors are targeting the sector you care about? We can help with that.
On our platform, you can filter the threat actor dataset by sector, open a matching profile, and review the activity tied to that actor.
In this example, we start with Information Technology, narrow the list to actors tied to that sector, and land on WageMole, a North Korean state-sponsored group. From there, we can pivot into its IPs, hosts, SHA256s, and related activity.
See which actors are targeting your sector 👉 hunt.io/get-started
#ThreatHunting #ThreatIntel #CyberSecurity
