Matt Johansen
46.8K posts
@mattjay
Helping Secure the Internet | Long Island elder emo surviving in ATX | Expect: infosec current events, DFIR, appsec & cloudsec - and me!
Signal was being exploited in the wild. You have already silently received some patches if you’re up to date with the app. ic3.gov/PSA/2026/PSA26…
People keep asking me about Moxie’s partnership with Meta. They seem enthusiastic about the prospect of TEE-based AI inference integrated with confidential messengers. I guess I’m in the minority here, because this scares the pants off of me.
HackerOne receives ±200 reports every hour now. This is unsustainable. Why is this happening? You can literally tell an AI agent to just "Hack this site" and it is capable enough to go and find a vulnerability (or at least something that looks like a vulnerability).
okay given claude is down again, i figured you'd all be on x. we came up with swag for #rsac. I'll be around all week talking minimal.dev dm me if you want one so I can stock up accordingly!
It's kind of weird that Meta didn't announce this. Seems like it could be a big deal, maybe one that pressures other AI companies to follow suit. wired.com/story/signals-…
I am impressed by this accounts ability to re-discover the same breaking news every couple of weeks. It is evident now they're exploiting peoples fear of identity verification for profit. Image 1. February 20 Image 2. February 25 Image 3. March 6 Image 4. March 14
@IceSolst @noperator yes! love this and thanks for the SiftRank tip... how was I not following @noperator until now... fixed
A second iOS exploit has been spotted in use by Russian spies to infect websites and hack visitors' iPhones. This one works on iOS 18, and appeared in a very reusable form, so will likely proliferate. If you haven't updated your iPhone, now's the time. wired.com/story/hundreds…
I am genuinely impressed by mainstream media outlets ability to find absolute nobodies in cybersecurity. It's remarkable. I am often left speechless. There has been dozens occasions, especially as of recent, where some media outlet will be like, "Today as a special guest is world-renowned cybersecurity expert and ethical hacker Joe McCyberSecurity". I'm like, who the fuck is Joe McCybersecurity? I've been doing cybersecurity and malware stuff for a long time and I've never once seen or heard of Joe McCybersecurity. If he is world-renowned, I would THINK I would have seen them or heard of them. The camera then pans over to Joe McCybersecurity and it is the most generic cookie cutter white dude in a cheap suit and the tag below him will say something like, "Joe McCybersecurity, Ethical Hacker, CEO of Cybersecurity McJoe Industries" I'm like, "Cybersecurity McJoe Industries? What the fuck is that?". I look it up and it's a generic WordPress website hosted on GoDaddy with an expired SSL cert. Joe McCybersecurity then babbles incomprehensible nonsense for about 60 seconds until the TV host goes "woaw" and it cuts to a commercial. Absolute cinema.
