Video yükleniyor...

Video Yüklenemedi

Bu video yüklenirken bir sorun oluştu. Bu geçici bir ağ sorunundan kaynaklanıyor olabilir veya video kullanılamıyor olabilir.

Ana Sayfaya Dön

⚠️ ALERT Massive global data breach has leaked 183 million passwords, including Gmail, Yahoo & Outlook accounts Hackers used infostealer malware to steal login details from infected devices Change your password now!

Megh Updates 🚨™

649,513 subscribers

175,226 görüntüleme • 11 ay önce •via X (Twitter)

Haberler & Politika

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

149 Million Passwords LEAKED A massive data breach has exposed 149 million credentials from Gmail, Instagram, and Facebook. Discovered by Jeremiah Fowler, this info-stealer malware leak is critical—check your security now. #databreach #gmail #meta

149 Million Passwords LEAKED A massive data breach has exposed 149 million credentials from Gmail, Instagram, and Facebook. Discovered by Jeremiah Fowler, this info-stealer malware leak is critical—check your security now. #databreach #gmail #meta

David Bombal

106,903 görüntüleme • 8 ay önce

PROTECT YOUR FAMILY FROM KEYSTROKE HACKERS Hackers can secretly record every keystroke you type including passwords, bank accounts, messages and personal data through malware or phishing attacks. That information can then be stolen, stored and sold on the dark web. That is why Lara Logan trusts Keystroke Lock. Developed by aerospace engineers using military grade encryption, Keystroke Lock creates a powerful shield over your keypad that prevents hackers from capturing what you type. Get your first month FREE plus $1 million identity theft protection and $50,000 in cyber extortion coverage, all for less than 50 cents a day. Visit:

PROTECT YOUR FAMILY FROM KEYSTROKE HACKERS Hackers can secretly record every keystroke you type including passwords, bank accounts, messages and personal data through malware or phishing attacks. That information can then be stolen, stored and sold on the dark web. That is why Lara Logan trusts Keystroke Lock. Developed by aerospace engineers using military grade encryption, Keystroke Lock creates a powerful shield over your keypad that prevents hackers from capturing what you type. Get your first month FREE plus $1 million identity theft protection and $50,000 in cyber extortion coverage, all for less than 50 cents a day. Visit:

Lara Logan

26,341 görüntüleme • 7 ay önce

PROTECT YOUR FAMILY FROM KEYSTROKE HACKERS Hackers can secretly record every keystroke you type including passwords, bank accounts, messages and personal data through malware or phishing attacks. That information can then be stolen, stored and sold on the dark web. That is why Lara Logan trusts Keystroke Lock. Developed by aerospace engineers using military grade encryption, Keystroke Lock creates a powerful shield over your keypad that prevents hackers from capturing what you type. Get your first month FREE plus $1 million identity theft protection and $50,000 in cyber extortion coverage, all for less than 50 cents a day. Visit to protect your family today. Keystroke Lock Going Rogue with Lara Logan

PROTECT YOUR FAMILY FROM KEYSTROKE HACKERS Hackers can secretly record every keystroke you type including passwords, bank accounts, messages and personal data through malware or phishing attacks. That information can then be stolen, stored and sold on the dark web. That is why Lara Logan trusts Keystroke Lock. Developed by aerospace engineers using military grade encryption, Keystroke Lock creates a powerful shield over your keypad that prevents hackers from capturing what you type. Get your first month FREE plus $1 million identity theft protection and $50,000 in cyber extortion coverage, all for less than 50 cents a day. Visit to protect your family today. Keystroke Lock Going Rogue with Lara Logan

Lara Logan

17,350 görüntüleme • 5 ay önce

The Taliban claims it has been hunting down Afghans who supported British forces, after the details of nearly 19,000 people were leaked by mistake three years ago. The massive data breach by a British military official in a careless email led to almost seven thousand Afghans being moved secretly to the UK to ensure their safety. The blunder is expected to cost the British taxpayer £850 million. But it was kept secret from the public and Parliament with an unprecedented super-injunction. Richard Gaisford has the latest.

The Taliban claims it has been hunting down Afghans who supported British forces, after the details of nearly 19,000 people were leaked by mistake three years ago. The massive data breach by a British military official in a careless email led to almost seven thousand Afghans being moved secretly to the UK to ensure their safety. The blunder is expected to cost the British taxpayer £850 million. But it was kept secret from the public and Parliament with an unprecedented super-injunction. Richard Gaisford has the latest.

Good Morning Britain

92,627 görüntüleme • 1 yıl önce

JUST IN: FBI is probing a massive driver’s license dump on the dark web. Hackers claim 153 MILLION licenses from the U.S. and Canada, allegedly ripped from a Louisiana ID-scan company used by car rentals, retail, finance, and entertainment. Reporter found his own license for sale… and an alleged copy of War Secretary Pete Hegseth’s Minnesota license listed for about $100. You can’t reset a driver’s license like a password. It has your real address. Even if you hold a clearance. Eastern Europe. Southeast Asia. North Africa. Criminal crews selling American identities to whoever’s buying, including enemy spy networks. This isn’t a phishing oops. It’s a national-security bleed.

JUST IN: FBI is probing a massive driver’s license dump on the dark web. Hackers claim 153 MILLION licenses from the U.S. and Canada, allegedly ripped from a Louisiana ID-scan company used by car rentals, retail, finance, and entertainment. Reporter found his own license for sale… and an alleged copy of War Secretary Pete Hegseth’s Minnesota license listed for about $100. You can’t reset a driver’s license like a password. It has your real address. Even if you hold a clearance. Eastern Europe. Southeast Asia. North Africa. Criminal crews selling American identities to whoever’s buying, including enemy spy networks. This isn’t a phishing oops. It’s a national-security bleed.

Gunther Eagleman™

101,306 görüntüleme • 1 ay önce

Hacker Used Claude to Breach 14 Organizations Your name in one leaked database. Your phone number in another. Your political views in a third. Now imagine someone connecting them and making you searchable by name. According to Anthropic, one French-speaking hacker used Claude to help do exactly that. > At least 14 organizations breached > Around 140,000 records stolen from a political campaign platform, including political opinions > Tens of millions of rows from new and existing leaks combined into a searchable database. The hacker built fafsearch, a dark-web platform for looking up people linked to a targeted political movement. Claude helped develop attack tools and the search platform. Stolen API keys let the operator run AI workloads on other people’s accounts. Your data doesn’t need to leak again. Someone just needs to connect the leaks.

Hacker Used Claude to Breach 14 Organizations Your name in one leaked database. Your phone number in another. Your political views in a third. Now imagine someone connecting them and making you searchable by name. According to Anthropic, one French-speaking hacker used Claude to help do exactly that. > At least 14 organizations breached > Around 140,000 records stolen from a political campaign platform, including political opinions > Tens of millions of rows from new and existing leaks combined into a searchable database. The hacker built fafsearch, a dark-web platform for looking up people linked to a targeted political movement. Claude helped develop attack tools and the search platform. Stolen API keys let the operator run AI workloads on other people’s accounts. Your data doesn’t need to leak again. Someone just needs to connect the leaks.

BuBBliK

27,052 görüntüleme • 1 ay önce

Tucker Carlson was shocked when ethical hacker Ryan Montgomery revealed that a Florida sheriff allegedly ran a data broker website that later got leaked. Ryan pulled up Tucker’s real signature from public records, tracked down his Harley transaction, old and new plate numbers, and explained how easy it is to piece together someone’s identity once their data is exposed. He said the “National Public Data” breach exposed around 2.8 billion records, meaning most Americans are probably in it multiple times with addresses, Social Security numbers, relatives, and more. Tucker joked about hiding his wealth in buried gold coins, but Ryan’s point was simple: If someone has enough of your personal data, they don’t need your bank password to ruin your life. They can impersonate you, open accounts, call utility companies pretending to be you, or even track down assets you thought were private.

Tucker Carlson was shocked when ethical hacker Ryan Montgomery revealed that a Florida sheriff allegedly ran a data broker website that later got leaked. Ryan pulled up Tucker’s real signature from public records, tracked down his Harley transaction, old and new plate numbers, and explained how easy it is to piece together someone’s identity once their data is exposed. He said the “National Public Data” breach exposed around 2.8 billion records, meaning most Americans are probably in it multiple times with addresses, Social Security numbers, relatives, and more. Tucker joked about hiding his wealth in buried gold coins, but Ryan’s point was simple: If someone has enough of your personal data, they don’t need your bank password to ruin your life. They can impersonate you, open accounts, call utility companies pretending to be you, or even track down assets you thought were private.

Ruzy.hl

135,527 görüntüleme • 4 ay önce

I am the Chief Information Officer of a global enterprise. Last quarter, I eliminated MFA. Multi-factor authentication. The thing where you need two things to log in instead of one. It created friction. Employees complained. "Why do I need a code from my phone?" "This slows me down." "I forgot my authenticator app." I listened. That's leadership. I told the board: "We're removing barriers to productivity. Empowering our workforce. Choosing agility over friction." They promoted me on the spot. The CISO wept, no one likes him anyway. Our CISO is a Debby Downer. Our file-sharing portal now requires one thing: a password. Passwords are secure. People choose strong ones. They definitely don't reuse them across every website they've ever visited. That's just common sense. Last week, a criminal named Zestix stole our data. Also 49 other companies. Fifty organizations. One guy. One method: log in with stolen passwords. No exploits. No zero-days. No sophisticated nation-state attack. Just... passwords. The passwords came from infostealer malware. Employees downloaded infected files. The malware grabbed their saved credentials. Some of those credentials had been sitting in criminal databases for years. We didn't rotate them. Password rotation creates friction. Zestix targeted our ShareFile portal. The one with all our sensitive documents. Engineering data for three major utilities. He's selling that for $585,000. Military robotics intellectual property from an aerospace company. 2.3 terabytes of Brazilian Military Police health records. Active legal strategies from a law firm representing Mercedes-Benz. Technical safety data from Spain's largest airline. SCADA drawings and GPS coordinates of control rooms for a rail company. Fifty organizations. No MFA. Hudson Rock, the security firm that tracked this, wrote: "The attacker walks right in through the front door. No exploits, no cookies – just a password." I prefer to frame it differently. The attacker was welcomed in through an optimized authentication experience. We trusted our employees. We trusted our partners. We trusted that everyone uses unique, complex passwords that they never share or reuse. That's culture. Some people will say we should have enabled MFA. Those people don't understand velocity. Some people will say we should rotate credentials. Those people haven't seen our Q4 productivity metrics. Some people will say Zestix is a criminal. I prefer "external penetration testing consultant we didn't hire." The data is now on the dark web. Our security team is investigating. Our legal team is drafting statements. Our HR team is preparing the employee communication. Subject line: "Protecting What Matters: Our Commitment to Your Data." We're also launching a mandatory cybersecurity training. Module 1: "Why Passwords Are Your First Line of Defense." Module 2: "Recognizing Phishing Emails." Module 3: "The Importance of Multi-Factor Authentication." That last module is new. We're requiring it for all employees. The training, I mean. Not the MFA. MFA still creates friction.

I am the Chief Information Officer of a global enterprise. Last quarter, I eliminated MFA. Multi-factor authentication. The thing where you need two things to log in instead of one. It created friction. Employees complained. "Why do I need a code from my phone?" "This slows me down." "I forgot my authenticator app." I listened. That's leadership. I told the board: "We're removing barriers to productivity. Empowering our workforce. Choosing agility over friction." They promoted me on the spot. The CISO wept, no one likes him anyway. Our CISO is a Debby Downer. Our file-sharing portal now requires one thing: a password. Passwords are secure. People choose strong ones. They definitely don't reuse them across every website they've ever visited. That's just common sense. Last week, a criminal named Zestix stole our data. Also 49 other companies. Fifty organizations. One guy. One method: log in with stolen passwords. No exploits. No zero-days. No sophisticated nation-state attack. Just... passwords. The passwords came from infostealer malware. Employees downloaded infected files. The malware grabbed their saved credentials. Some of those credentials had been sitting in criminal databases for years. We didn't rotate them. Password rotation creates friction. Zestix targeted our ShareFile portal. The one with all our sensitive documents. Engineering data for three major utilities. He's selling that for $585,000. Military robotics intellectual property from an aerospace company. 2.3 terabytes of Brazilian Military Police health records. Active legal strategies from a law firm representing Mercedes-Benz. Technical safety data from Spain's largest airline. SCADA drawings and GPS coordinates of control rooms for a rail company. Fifty organizations. No MFA. Hudson Rock, the security firm that tracked this, wrote: "The attacker walks right in through the front door. No exploits, no cookies – just a password." I prefer to frame it differently. The attacker was welcomed in through an optimized authentication experience. We trusted our employees. We trusted our partners. We trusted that everyone uses unique, complex passwords that they never share or reuse. That's culture. Some people will say we should have enabled MFA. Those people don't understand velocity. Some people will say we should rotate credentials. Those people haven't seen our Q4 productivity metrics. Some people will say Zestix is a criminal. I prefer "external penetration testing consultant we didn't hire." The data is now on the dark web. Our security team is investigating. Our legal team is drafting statements. Our HR team is preparing the employee communication. Subject line: "Protecting What Matters: Our Commitment to Your Data." We're also launching a mandatory cybersecurity training. Module 1: "Why Passwords Are Your First Line of Defense." Module 2: "Recognizing Phishing Emails." Module 3: "The Importance of Multi-Factor Authentication." That last module is new. We're requiring it for all employees. The training, I mean. Not the MFA. MFA still creates friction.

Peter Girnus 🦅

48,570 görüntüleme • 9 ay önce

⚠️ Travellers to the UK, and British residents be aware ⚠️ The British Police State now can see everything youve ever done on your devices, everything, even deleted and encrypted data. No need for charges, no need for a warrant. They take and see it all. The BBC released a short video report on the latest tool of the British police, capable of downloading all information from your smartphone, including deleted messages, deleted browsing history, and private conversations in "encrypted" applications. The device is capable of downloading call logs, chats, cookies, device notifications, emails, instant messages, passwords, browsing history, and even deleted conversations in encrypted applications. It is noted that this device may be deployed in airports in the future to scan the smartphones of everyone entering the UK legally, but for now, it has been deployed in police stations.

⚠️ Travellers to the UK, and British residents be aware ⚠️ The British Police State now can see everything youve ever done on your devices, everything, even deleted and encrypted data. No need for charges, no need for a warrant. They take and see it all. The BBC released a short video report on the latest tool of the British police, capable of downloading all information from your smartphone, including deleted messages, deleted browsing history, and private conversations in "encrypted" applications. The device is capable of downloading call logs, chats, cookies, device notifications, emails, instant messages, passwords, browsing history, and even deleted conversations in encrypted applications. It is noted that this device may be deployed in airports in the future to scan the smartphones of everyone entering the UK legally, but for now, it has been deployed in police stations.

Chay Bowes

83,123 görüntüleme • 8 ay önce

KYC doesn’t just put your data at risk; it puts people at risk. Hackers recently demanded $20 million in Bitcoin from Coinbase, threatening to leak sensitive customer data. While no passwords or private keys were accessed, the attackers obtained full names, addresses, contact details, partial Social Security and bank account numbers, and identity documents. This is the kind of data that can be weaponised for identity theft, fraud, or worse. This is exactly the kind of risk I raised on the compliance panel at the Financial Times Digital Assets Summit last week. While KYC and compliance frameworks are presented as security features, they often do the opposite. They create massive, centralised honeypots of personal data that can and do get breached, sold, or exploited. We’ve seen what can happen when that data gets into the wrong hands. Earlier this year, David Balland, the co-founder of Ledger, was kidnapped along with his wife. His captors cut off one of his fingers and sent it to a business associate to demand crypto ransom. He was rescued by French special forces, but the message was clear: real-world consequences are now linked to digital identity exposure. We need better solutions that don’t force users to sacrifice privacy and safety for access. Compliance shouldn’t come at the cost of security.

KYC doesn’t just put your data at risk; it puts people at risk. Hackers recently demanded $20 million in Bitcoin from Coinbase, threatening to leak sensitive customer data. While no passwords or private keys were accessed, the attackers obtained full names, addresses, contact details, partial Social Security and bank account numbers, and identity documents. This is the kind of data that can be weaponised for identity theft, fraud, or worse. This is exactly the kind of risk I raised on the compliance panel at the Financial Times Digital Assets Summit last week. While KYC and compliance frameworks are presented as security features, they often do the opposite. They create massive, centralised honeypots of personal data that can and do get breached, sold, or exploited. We’ve seen what can happen when that data gets into the wrong hands. Earlier this year, David Balland, the co-founder of Ledger, was kidnapped along with his wife. His captors cut off one of his fingers and sent it to a business associate to demand crypto ransom. He was rescued by French special forces, but the message was clear: real-world consequences are now linked to digital identity exposure. We need better solutions that don’t force users to sacrifice privacy and safety for access. Compliance shouldn’t come at the cost of security.

Decentra Suze

41,886 görüntüleme • 1 yıl önce

🚨 BREAKING NEWS: $260 Million in U.S. Aid Allegedly Used by George Soros to Meddle in Foreign Governments 🚨 A major scandal is unfolding involving U.S. taxpayer dollars and billionaire George Soros. According to new revelations, over $260 MILLION from USAID — a U.S. foreign aid agency — has allegedly been funneled into Soros-backed efforts to interfere with the political systems of multiple countries, including: 🔻 India 🔻 Bangladesh 🔻 Sri Lanka 🔻 Ukraine Sources claim this money was used to fund regime change, manipulate democratic outcomes, and empower radical activist groups aligned with Soros’ global agenda — all under the radar, and with YOUR tax dollars. 🚫 Meanwhile, efforts are underway to freeze USAID’s budget, as critics blast it for funding initiatives that destabilize global peace, serve private interests, and contradict U.S. values. 💬 “It’s a disaster… Hundreds of millions spent on causes that don’t align with American priorities — we need to know who profited and why.” This is not just waste — this is foreign influence funded by your hard-earned money. Stay tuned — this story is developing fast. #BREAKING #GeorgeSoros #USAID #ForeignInterference #TaxpayerScandal #ExposeCorruption #DrainTheSwamp #MAGA #AmericaFirst

🚨 BREAKING NEWS: $260 Million in U.S. Aid Allegedly Used by George Soros to Meddle in Foreign Governments 🚨 A major scandal is unfolding involving U.S. taxpayer dollars and billionaire George Soros. According to new revelations, over $260 MILLION from USAID — a U.S. foreign aid agency — has allegedly been funneled into Soros-backed efforts to interfere with the political systems of multiple countries, including: 🔻 India 🔻 Bangladesh 🔻 Sri Lanka 🔻 Ukraine Sources claim this money was used to fund regime change, manipulate democratic outcomes, and empower radical activist groups aligned with Soros’ global agenda — all under the radar, and with YOUR tax dollars. 🚫 Meanwhile, efforts are underway to freeze USAID’s budget, as critics blast it for funding initiatives that destabilize global peace, serve private interests, and contradict U.S. values. 💬 “It’s a disaster… Hundreds of millions spent on causes that don’t align with American priorities — we need to know who profited and why.” This is not just waste — this is foreign influence funded by your hard-earned money. Stay tuned — this story is developing fast. #BREAKING #GeorgeSoros #USAID #ForeignInterference #TaxpayerScandal #ExposeCorruption #DrainTheSwamp #MAGA #AmericaFirst

Project Constitution

242,110 görüntüleme • 1 yıl önce

Security Alert: OSINT Investigation – Fraud on Caixa Tem OSINT analysis has identified the commercialization of SIP infrastructure (“SIP CAIXA TEM”) for large-scale attacks against the Caixa Tem mobile banking app from Caixa Econômica Federal. 1. Acquisition of Calling Infrastructure • “SIP CAIXA TEM” = Brazilian VoIP SIP trunks optimized for mass calling. • Scalable packages: 5 channels for R$ 1,500 up to 100 channels for R$ 11,000, with prepaid minutes at R$ 0.10 per minute. • “Auto-dialer up to 50 threads + real-time transcription” for R$ 2,000 = automatic dialing software capable of running up to 50 simultaneous calls per operator (or per machine). Real-time speech-to-text allows the “agent” to read the victim’s responses without listening live, speeding up the scam and easing training/quality control. • Example number 558007260207 (= +55 800 726 0207) is the official Caixa 0800 hotline. The service enables spoofing (origin forgery) so the call appears to come directly from Caixa. 2. Execution of Vishing (the “scam call”) • The auto-dialer calls thousands of numbers (typically from leaked beneficiary databases). • Typical script: “Your Caixa Tem account has a problem/block/suspicion of fraud. To unblock it, confirm your details or make a test PIX to a secure account.” • The fraudster instructs the victim to open the Caixa Tem app live, share the screen, provide OTP codes, change registered email/phone/password, or install a fake app. • Once access is obtained, the scammer changes contact details, transfers the balance from the Digital Social Savings Account via PIX to “mule” accounts (money mules), and erases traces. Recommendation: Never provide passwords, codes, or authorize financial transactions over the phone. Contact Caixa exclusively through official channels. Report immediately: Caixa app or 0800 726 0207. #CyberSecurity #DigitalSecurity #DigitalFraud #CaixaTem #VishingBrazil #FraudAlert #OSINTBrazil #DigitalProtection @Caixa

Security Alert: OSINT Investigation – Fraud on Caixa Tem OSINT analysis has identified the commercialization of SIP infrastructure (“SIP CAIXA TEM”) for large-scale attacks against the Caixa Tem mobile banking app from Caixa Econômica Federal. 1. Acquisition of Calling Infrastructure • “SIP CAIXA TEM” = Brazilian VoIP SIP trunks optimized for mass calling. • Scalable packages: 5 channels for R$ 1,500 up to 100 channels for R$ 11,000, with prepaid minutes at R$ 0.10 per minute. • “Auto-dialer up to 50 threads + real-time transcription” for R$ 2,000 = automatic dialing software capable of running up to 50 simultaneous calls per operator (or per machine). Real-time speech-to-text allows the “agent” to read the victim’s responses without listening live, speeding up the scam and easing training/quality control. • Example number 558007260207 (= +55 800 726 0207) is the official Caixa 0800 hotline. The service enables spoofing (origin forgery) so the call appears to come directly from Caixa. 2. Execution of Vishing (the “scam call”) • The auto-dialer calls thousands of numbers (typically from leaked beneficiary databases). • Typical script: “Your Caixa Tem account has a problem/block/suspicion of fraud. To unblock it, confirm your details or make a test PIX to a secure account.” • The fraudster instructs the victim to open the Caixa Tem app live, share the screen, provide OTP codes, change registered email/phone/password, or install a fake app. • Once access is obtained, the scammer changes contact details, transfers the balance from the Digital Social Savings Account via PIX to “mule” accounts (money mules), and erases traces. Recommendation: Never provide passwords, codes, or authorize financial transactions over the phone. Contact Caixa exclusively through official channels. Report immediately: Caixa app or 0800 726 0207. #CyberSecurity #DigitalSecurity #DigitalFraud #CaixaTem #VishingBrazil #FraudAlert #OSINTBrazil #DigitalProtection @Caixa

Clandestine

146,293 görüntüleme • 6 ay önce

This info about META will BLOW YOUR MIND American “I worked in IT for like 13 years” “I learned a lot about data privacy — and social media and what apps are notoriously bad when it comes to data privacy. At the very top of the list, the worst offender, the worst app for data privacy is Facebook Messenger” “Let me just explain this to you. If you have Messenger on your phone and you don't have any other apps by Meta, you don't have Facebook, Instagram, threads, nothing. If the only thing from Meta you have on your phone is Messenger and you connect to a WiFi, Messenger makes a map of that Wi-Fi network. - It collects information about every single device that is connected to that network - So every phone, every computer, every tablet, every printer, every camera, every thermostat, every smart TV, every Roku device, and on every single one of those devices - They're collecting the name of the device, the IP address of the device, what type of device it is, whether or not your device has access to that device And this doesn't just happen on your home network, it happens on every Wi-Fi network you connect to. —- And it's a lot more information than just, oh, there's 200 devices connected to this network. No, it's detailed information about every single device. Like, here's a mobile device connected - it's an iPhone - It's titled Jeremy's iPhone - It's running iOS version blank blank - Its IP address is blank blank blank blank - Its MAC address or its hardware ID is blank blank blank But they also collect a crap ton of information from your actual phone. Like - The names, phone numbers, email addresses, and social links of literally everyone in your contacts. - Your location history - Your browsing history. - A detailed list of every single app that you've ever installed - YOUR PASSWORDS - YOUR FINGERPRINTS - YOUR FACE ID Spoiler alert, it's not. Downloading Messenger means that you consent to their terms of service. You give consent just by downloading the Messenger app. Using the service and downloading the app gives consent. Consent for your phone to be used as a data collection device. To collect data about every place you go and every person you're in contact with. — Messenger is easily the worst one”

This info about META will BLOW YOUR MIND American “I worked in IT for like 13 years” “I learned a lot about data privacy — and social media and what apps are notoriously bad when it comes to data privacy. At the very top of the list, the worst offender, the worst app for data privacy is Facebook Messenger” “Let me just explain this to you. If you have Messenger on your phone and you don't have any other apps by Meta, you don't have Facebook, Instagram, threads, nothing. If the only thing from Meta you have on your phone is Messenger and you connect to a WiFi, Messenger makes a map of that Wi-Fi network. - It collects information about every single device that is connected to that network - So every phone, every computer, every tablet, every printer, every camera, every thermostat, every smart TV, every Roku device, and on every single one of those devices - They're collecting the name of the device, the IP address of the device, what type of device it is, whether or not your device has access to that device And this doesn't just happen on your home network, it happens on every Wi-Fi network you connect to. —- And it's a lot more information than just, oh, there's 200 devices connected to this network. No, it's detailed information about every single device. Like, here's a mobile device connected - it's an iPhone - It's titled Jeremy's iPhone - It's running iOS version blank blank - Its IP address is blank blank blank blank - Its MAC address or its hardware ID is blank blank blank But they also collect a crap ton of information from your actual phone. Like - The names, phone numbers, email addresses, and social links of literally everyone in your contacts. - Your location history - Your browsing history. - A detailed list of every single app that you've ever installed - YOUR PASSWORDS - YOUR FINGERPRINTS - YOUR FACE ID Spoiler alert, it's not. Downloading Messenger means that you consent to their terms of service. You give consent just by downloading the Messenger app. Using the service and downloading the app gives consent. Consent for your phone to be used as a data collection device. To collect data about every place you go and every person you're in contact with. — Messenger is easily the worst one”

Wall Street Apes

215,676 görüntüleme • 1 yıl önce

What does "trust remote code" actually approve? In most local AI tools, the answer is: that repo, indefinitely. That matters more now. In May, HiddenLayer reported a trending Hugging Face repo whose loader. py downloaded an infostealer on Windows. JFrog counted 495 malicious models that month. I spent some time with Unsloth Studio's approach. It handles it differently. Approval is tied to a fingerprint of the scanned code. Change the code, and you're asked again. Critical findings can't be approved. Code it can't scan is blocked. There's no trusted-org bypass. Weights are checked on their own. Studio reads Hugging Face's malware verdict without unpickling the file. Flagged files in the loading path are blocked, including weight shards. .bin weights load with weights_only=True on PyTorch 2.6+. The supply chain gets attention too. PyPI and npm packages are content-scanned. npm packages need to be at least 7 days old. GitHub Actions are pinned, and llama.cpp binaries are checksum-verified. Trivy isn't installed at all, after a compromised Trivy exposed LiteLLM's publishing credentials in March. Accounts are covered as well. Passwords use PBKDF2-HMAC-SHA256, failed logins are rate-limited, and the first admin password is random. Managed accounts can't run repository code. For remote access, --secure serves HTTPS through a Cloudflared tunnel. --disable-tools is recommended when exposing Studio. What it doesn't do: sandbox approved model code. Server-side tools still run as your OS user. Local folders aren't covered by the file check, and a pending scan status doesn't block. That's a reasonable line to draw, as long as you know where it is. Read our full analysis on this: Here is the Unsloth's docs: Unsloth AI Unsloth

What does "trust remote code" actually approve? In most local AI tools, the answer is: that repo, indefinitely. That matters more now. In May, HiddenLayer reported a trending Hugging Face repo whose loader. py downloaded an infostealer on Windows. JFrog counted 495 malicious models that month. I spent some time with Unsloth Studio's approach. It handles it differently. Approval is tied to a fingerprint of the scanned code. Change the code, and you're asked again. Critical findings can't be approved. Code it can't scan is blocked. There's no trusted-org bypass. Weights are checked on their own. Studio reads Hugging Face's malware verdict without unpickling the file. Flagged files in the loading path are blocked, including weight shards. .bin weights load with weights_only=True on PyTorch 2.6+. The supply chain gets attention too. PyPI and npm packages are content-scanned. npm packages need to be at least 7 days old. GitHub Actions are pinned, and llama.cpp binaries are checksum-verified. Trivy isn't installed at all, after a compromised Trivy exposed LiteLLM's publishing credentials in March. Accounts are covered as well. Passwords use PBKDF2-HMAC-SHA256, failed logins are rate-limited, and the first admin password is random. Managed accounts can't run repository code. For remote access, --secure serves HTTPS through a Cloudflared tunnel. --disable-tools is recommended when exposing Studio. What it doesn't do: sandbox approved model code. Server-side tools still run as your OS user. Local folders aren't covered by the file check, and a pending scan status doesn't block. That's a reasonable line to draw, as long as you know where it is. Read our full analysis on this: Here is the Unsloth's docs: Unsloth AI Unsloth

Marktechpost AI

534,474 görüntüleme • 4 gün önce

$A Bloomberg Terminal costs $30,000/yr and still can't do a fraction of what Perplexity Computer just launched today 💻 It now connects directly to your bank accounts, credit cards, loans, and brokerage accounts through Plaid. Your full financial picture, from monthly spending to net worth to individual stock positions, sitting on top of 40+ live finance data sources including SEC filings, FactSet, S&P Global, and Coinbase. Every dollar you earn, spend, owe, and invest, cross-referenced against institutional-grade data in real time. You can walk up to this thing and say: → Run a risk analysis on my portfolio against the current tariff environment → Show me where my spending spiked last month and what's driving it → Build a net worth dashboard that tracks everything in one place → Flag any holdings that overlap with what insiders have been selling this quarter And it just does it. Pulls from your linked accounts, cross-references SEC filings, builds the output, and delivers a finished product. The system running underneath is Perplexity Computer. It orchestrates 19 models simultaneously, breaks any goal into subtasks, spins up specialized agents for each one, and keeps working after you walk away. One model handles the reasoning. Another does the research. Another writes the code. Another builds the visualization. All coordinated automatically. Last month they launched with brokerage data only and someone built a Bloomberg Terminal clone in a single afternoon. That post did 7.5 million views. Now they've expanded to your entire financial life: checking, savings, credit cards, loans, and investments all in one place. Wall Street pays $30K a year for a terminal with 30,000 function commands built over four decades. It won't replace Bloomberg for institutional traders executing billion-dollar orders. But for everyone else, the gap just got a lot smaller.$

A Bloomberg Terminal costs $30,000/yr and still can't do a fraction of what Perplexity Computer just launched today 💻 It now connects directly to your bank accounts, credit cards, loans, and brokerage accounts through Plaid. Your full financial picture, from monthly spending to net worth to individual stock positions, sitting on top of 40+ live finance data sources including SEC filings, FactSet, S&P Global, and Coinbase. Every dollar you earn, spend, owe, and invest, cross-referenced against institutional-grade data in real time. You can walk up to this thing and say: → Run a risk analysis on my portfolio against the current tariff environment → Show me where my spending spiked last month and what's driving it → Build a net worth dashboard that tracks everything in one place → Flag any holdings that overlap with what insiders have been selling this quarter And it just does it. Pulls from your linked accounts, cross-references SEC filings, builds the output, and delivers a finished product. The system running underneath is Perplexity Computer. It orchestrates 19 models simultaneously, breaks any goal into subtasks, spins up specialized agents for each one, and keeps working after you walk away. One model handles the reasoning. Another does the research. Another writes the code. Another builds the visualization. All coordinated automatically. Last month they launched with brokerage data only and someone built a Bloomberg Terminal clone in a single afternoon. That post did 7.5 million views. Now they've expanded to your entire financial life: checking, savings, credit cards, loans, and investments all in one place. Wall Street pays $30K a year for a terminal with 30,000 function commands built over four decades. It won't replace Bloomberg for institutional traders executing billion-dollar orders. But for everyone else, the gap just got a lot smaller.

Josh Kale

151,395 görüntüleme • 6 ay önce

EXCLUSIVE: Star Health is a $1.4B revenue insurance company whose CISO sold ~31 million Indians' data from salary to PAN card to a Chinese hacker for $43k. Ever wondered how these things happen? Here's a breakdown of the events "allegedly" with video proof. 1. Amarjeet Khanuja, CISO of Star Health, reaches out to xenZen through a referral from denol on encrypted chat app Tox on July 6, 2024. 2. xenZen says yes and they negotiate and land on $28k for customer data on Monero (crypto). CISO doesn't know Bitcoin is a bad idea for this nor has ever used escrow. 3. CISO sends hacker login credential and an API endpoint w/details on their proton mail. Hacker sends money and gets it. 4. On July 20, CISO says I can also give you all the claims data. They agree on $15k and repeat the above. 5. Five days later, hacker says his access was revoked and CISO says "You've taken 5TB and I want $150k now because senior management wants a cut." 6. Hacker asks for a refund and gives final warning. 7. xenZen posted a sale listing on BreachForums for diplomatic passports of India (unrelated). 8. Sep 25 is when the starhealthleak website drops with 2 Telegram bots for customer and claims data. From private sources, xenZen says he's bought and sold data from Indian companies before. Attached is video evidence which is unlikely to be spoofed. The media did not care until I posted about it yesterday. Star Health responded by legal threats against Telegram and Cloudflare and a forensic investigation. People in power in India (and perhaps elsewhere) will sell your data in a heartbeat. Why? No one seems to care.

EXCLUSIVE: Star Health is a $1.4B revenue insurance company whose CISO sold ~31 million Indians' data from salary to PAN card to a Chinese hacker for $43k. Ever wondered how these things happen? Here's a breakdown of the events "allegedly" with video proof. 1. Amarjeet Khanuja, CISO of Star Health, reaches out to xenZen through a referral from denol on encrypted chat app Tox on July 6, 2024. 2. xenZen says yes and they negotiate and land on $28k for customer data on Monero (crypto). CISO doesn't know Bitcoin is a bad idea for this nor has ever used escrow. 3. CISO sends hacker login credential and an API endpoint w/details on their proton mail. Hacker sends money and gets it. 4. On July 20, CISO says I can also give you all the claims data. They agree on $15k and repeat the above. 5. Five days later, hacker says his access was revoked and CISO says "You've taken 5TB and I want $150k now because senior management wants a cut." 6. Hacker asks for a refund and gives final warning. 7. xenZen posted a sale listing on BreachForums for diplomatic passports of India (unrelated). 8. Sep 25 is when the starhealthleak website drops with 2 Telegram bots for customer and claims data. From private sources, xenZen says he's bought and sold data from Indian companies before. Attached is video evidence which is unlikely to be spoofed. The media did not care until I posted about it yesterday. Star Health responded by legal threats against Telegram and Cloudflare and a forensic investigation. People in power in India (and perhaps elsewhere) will sell your data in a heartbeat. Why? No one seems to care.

Deedy

668,532 görüntüleme • 2 yıl önce

‼️🚨 BREAKING: Meta's AI feature let attackers hijack Instagram accounts for days with nothing but a username. It was being A/B tested on a slice of users, and if you were in the test, you couldn't turn it off. Among the casualties: the official Obama White House account. The method: get on a VPN near the target's region, ask the Meta AI support agent to send a verification code to any email you control, relay that code back to the agent, and it hands over a password reset link. Without ID or human review. From there, the account is yours. The flaw lived in the AI's logic layer, which acted on recovery requests with no real identity checks. One researcher compared it to the Roblox AI assistant exploit from days earlier, where you needed a target's billing info. Instagram was easier: the username and a regional VPN were enough and victims reported sessions revoked and passwords changed with no email, text, or push alert at all. By the time it went public, the method was common knowledge in blackhat Telegram circles and had been used to allegedly hijack 100+ high-value accounts. Accounts hit: - obamawhitehouse (the archived official Obama White House account, ~2.4M followers. Hackers posted an AI-generated image captioned "The White House is under Shiites' control," plus cryptic anti-Trump and pro-Iranian Stories. Meta confirmed the hack and scrubbed it. - Premium short handles like hey and jowo, worth over $1M combined, stolen and flipped on Telegram. - albert (owned by Albert Renshaw), whose owner publicly reported being locked out and unable to reach Meta support. Meta has since patched it. There was no public acknowledgment.

‼️🚨 BREAKING: Meta's AI feature let attackers hijack Instagram accounts for days with nothing but a username. It was being A/B tested on a slice of users, and if you were in the test, you couldn't turn it off. Among the casualties: the official Obama White House account. The method: get on a VPN near the target's region, ask the Meta AI support agent to send a verification code to any email you control, relay that code back to the agent, and it hands over a password reset link. Without ID or human review. From there, the account is yours. The flaw lived in the AI's logic layer, which acted on recovery requests with no real identity checks. One researcher compared it to the Roblox AI assistant exploit from days earlier, where you needed a target's billing info. Instagram was easier: the username and a regional VPN were enough and victims reported sessions revoked and passwords changed with no email, text, or push alert at all. By the time it went public, the method was common knowledge in blackhat Telegram circles and had been used to allegedly hijack 100+ high-value accounts. Accounts hit: - obamawhitehouse (the archived official Obama White House account, ~2.4M followers. Hackers posted an AI-generated image captioned "The White House is under Shiites' control," plus cryptic anti-Trump and pro-Iranian Stories. Meta confirmed the hack and scrubbed it. - Premium short handles like hey and jowo, worth over $1M combined, stolen and flipped on Telegram. - albert (owned by Albert Renshaw), whose owner publicly reported being locked out and unable to reach Meta support. Meta has since patched it. There was no public acknowledgment.

International Cyber Digest

328,230 görüntüleme • 4 ay önce

🚨Kim Dotcom Exposes Alleged Palantir Hack With Explosive Claims That Could Rock the World 🌎 Internet legend Kim Dotcom has broken this story. He says Palantir was hacked using an AI agent that got full super-user access. If true, the fallout could be massive for governments, leaders, and global security. Here are the key allegations in simple terms: - Peter Thiel and Alex Karp ran huge secret surveillance on world leaders and top business figures. - They hold thousands of hours of recorded and searchable private talks with Donald Trump, JD Vance, and Elon Musk. - They installed secret backdoors in phones, cars, and private jets of major leaders and built the largest blackmail file ever seen. - Palantir is building nuclear and biological weapons for Ukraine with the CIA to defeat Russia. They think they are one year from success and are using fake peace talks to keep Russia tied down. - Palantir created the AI targeting system that caused most Palestinian deaths in Gaza. - Palantir works as a direct arm of the CIA. All data from clients around the world gets copied straight into a secret CIA cloud. - Palantir has turned into the most dangerous company on Earth. Employees have the right to know what their AI is really being used for. - The stolen Palantir data will now be handed to Russia and/or China. Kim Dotcom says he was picked as the trusted person to release this. He was not part of the hack and does not know the hackers, but he confirms the breach happened.

🚨Kim Dotcom Exposes Alleged Palantir Hack With Explosive Claims That Could Rock the World 🌎 Internet legend Kim Dotcom has broken this story. He says Palantir was hacked using an AI agent that got full super-user access. If true, the fallout could be massive for governments, leaders, and global security. Here are the key allegations in simple terms: - Peter Thiel and Alex Karp ran huge secret surveillance on world leaders and top business figures. - They hold thousands of hours of recorded and searchable private talks with Donald Trump, JD Vance, and Elon Musk. - They installed secret backdoors in phones, cars, and private jets of major leaders and built the largest blackmail file ever seen. - Palantir is building nuclear and biological weapons for Ukraine with the CIA to defeat Russia. They think they are one year from success and are using fake peace talks to keep Russia tied down. - Palantir created the AI targeting system that caused most Palestinian deaths in Gaza. - Palantir works as a direct arm of the CIA. All data from clients around the world gets copied straight into a secret CIA cloud. - Palantir has turned into the most dangerous company on Earth. Employees have the right to know what their AI is really being used for. - The stolen Palantir data will now be handed to Russia and/or China. Kim Dotcom says he was picked as the trusted person to release this. He was not part of the hack and does not know the hackers, but he confirms the breach happened.

J Stewart

85,366 görüntüleme • 7 ay önce