Just another dude.. techno | 5G security | Private5G | SOAR | ICS/OT | RE | MDM/IIoT | NTN | 6G-IA | #trustbutverify 🖖🔊📶💜🖤🎶
London // Sydney // Zürich
Joined April 2009
- Tweets8.9K
- Following4.5K
- Followers1.2K
- Likes111K
Pinned Tweet
Verifying myself: I am locknload on Keybase.io. L90CEo2bVrTjhv1CvMgCCa9-EyiFEAjAV1By / keybase.io/locknload/sigs/L9…
J retweeted
NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads.
45 devices at @AJEnglish confirmed infected
citizenlab.ca/research/how-d…
J retweeted
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
J retweeted
- XZ utils backdoor: found by guy debugging 200ms latency
- LiteLLM hack: found by guy debugging oom issue
These could have been the most impactful compromises ever.
Forget security vendors, weaponize your engineers’ autism.
J retweeted
Yeah, so basically it turns out Meta has been heavily lobbying online age verification laws. They've lobbied over $2,000,000,000 to politicians in form of grants and donations.
xitter.cf/bee_fumo/status/203246…
someone traced the all the non profit grants for the age verification laws
old.reddit.com/r/linux/comme…
J retweeted
If you use a personal phone/laptop for your work, pay very close attention to this little detail.
Iran attackers wipe 200k devices at a company called Stryker. Within those devices appears to be employees PERSONAL devices.
The attackers used the company’s MDM software, which is basically IT management software running on everything. It’s an incredibly attractive backdoor to an attacker. I successfully targeted MDM software for several Red Team engagements. It’s… lots of fun :)
Anyway, a lot of companies require you to install their MDM software on your personal devices before you can access resources like Corp email. It’s used to keep devices updated, lock things down if they get stolen, etc. The company often promises that they won’t access personal data, erase any personal data, etc. But this is often ONLY POLICY. If a bad actor gains access to the MDM tool, as was the case here, then anything can happen.
People should be aware of these risks. I refused to run MDM software on any of my personal devices. The company needs to provide me with hardware if they want that. I personally isolate all corp devices to their own network too. If an adversary can get into the corp laptop, then can then get inside my network… there have been cases of it happening in the past.
I've published more details about the cyberattack in this piece: zetter-zeroday.com/iranian-h…
J retweeted
BREAKING: powerful iPhone hacking tools used by Chinese criminals originated from US defense giant L3 Harris.
The $LHX zero-click exploits went to Russian spies too.
Unbelievable harm to our collective security.
Scoop by @lorenzofb, here's why this matters 1/
J retweeted
God's eye view 24-hour replay of Operation Epic Fury.
The Iran strikes kicked off and I set an AI agent swarm loose to record every OSINT signal I could find before the caches cleared. Built a full 4D reconstruction in WorldView.
I can scrub through minute by minute and watch the whole thing unfold on a 3D globe:
> Airspace clearing over Tehran
> Ground strike coordinates locking in
> Severe GPS interference blinding the region
> EO and SAR satellites making passes over the strike zone
> No-fly zones locking down 9 countries
> Shipping fleets scrambling at the Strait of Hormuz
It's pretty amazing how complete of a picture you can build without "proprietary data fusion" -- one dev with public signals and a love for computer graphics and geospatial intelligence.
Thank you for all the love on my last post. Dropping WorldView in April. This my friends is just the beginning.
J retweeted
Think your guest Wi-Fi is isolated from your main network? Think again.
AirSnitch (NDSS'26) breaks client isolation on every router tested: from home APs to enterprise WPA2/3-Enterprise. Full MitM in seconds, sometimes leaking WPA2 traffic in plaintext.
Technique breakdown & tool usage: 🔗 community.penthertz.com/t/ai…
J retweeted
The general counsel of Paragon, uploaded a picture on Linkedin today showing the Paragon spyware control panel.
The panel shows a phone number in Czechia, Apps, Accounts, media on the phone, the interception status and numbers extracted from various apps.
J retweeted
Yeah, so pretty much, like, there is this really sketchy company in Israel named "Paragon". Paragon sells a "product" called GRAPHITE.
Let me explain the background and why this is very silly.
GRAPHITE spyware which allows "customers" to remotely access peoples cell phones and monitor their instant messaging applications such as WhatsApp
It is spyware. It is sometimes called Mercenary Spyware because it is primarily used by governments to spy on political enemies, journalists, and activists.
Very little is known about Paragon, GRAPHITE, and their "customers". However, it was publicly noted by the Trump administration in January, 2025, to be purchased by the United States government and to be used to aid ICE.
Furthermore, in September 2025 the Trump administration noted the usage of Graphite to aid the United States against "domestic terrorist organizations" such as "ANTIFA".
ICE acting director Todd Lyons noted using GRAPHITE to monitor anti-ICE protestors to track "ringleaders and professional agitators".
Citizen Lab and other civil rights organizations have documented the usage of GRAPHITE against individuals in Australia, Canada, Cyprus, Denmark, Israel, Singapore and (unsurprisingly) the United States. It is believed the Canadian government actively uses GRAPHITE in Ontario.
Okay, so why does all of this matter? Yeah, it's super fucked up. But today representatives from Paragon accidentally leaked GRAPHITE screenshots ... ON LINKEDIN. Dawg, that image in the background IS GOVERNMENT FUCKING SPYWARE
It shows phone numbers in Czechia, apps, accounts, media on the phone, "interception status", and phone numbers extracted. THEY LEAKED IT BY ACCIDENT ON LINKEDIN WHILE TAKING SELFIES
J retweeted
Another standout in our Hacking Humble Bundle!
If you want crypto intuition without hand-waving, this book delivers: AES-GCM internals, elliptic curves, TLS, GHASH, and more.
Grab it in our bundle along with 17 other DRM-free hacking titles: humblebundle.com/books/hacki…
📶
Turn theory into working wireless systems. The Wireless Cookbook helps you master Wi-Fi, Bluetooth, and LoRa through Linux projects that build real, functional solutions.
nostarch.com/wireless-cookbo…
🥷🤑
NEW: fresh trouble for mercenary spyware companies like NSO Group.
@Apple launching substantial bounties on the zero-click exploits that feed the supply chain behind products like Pegasus & Paragon's Graphite.
With bonuses, exploit developers can hit $5 million payouts. 1/
J retweeted
We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe.
signal.org/blog/pdfs/germany…
📶
Happy building, whatever you’re up to. It’s looking like #SIGINT Saturday over here
• BLE/WiFi sweep
• Drone RID detection
• RTC synced triangulation
• Tamper sensor auto-wipe
• Mesh C2
• API and MQTT bridge
Digital and physical tripwire- for perimeter security in-depth
J retweeted
Bitwarden wouldn't do this.
🚀 New partnership alert!
The 1Password browser extension will be available in @perplexity_ai’s Comet browser, making AI-powered browsing secure by default.
Read more in our press release: bit.ly/42ClhG3
