steamham
9.6K posts

steamham retweetledi
steamham retweetledi

In case you are curious how John Daghita (Lick) was able to steal $40M+ from US government seizure addresses.
John’s dad owns CMDSS, which currently has an active IT government contract in Virginia.
CMMDS was awarded a contract to assist the USMS in managing/disposing of seized/forfeited crypto assets.
It still remains unclear at this point how John obtained access from his dad.



ZachXBT@zachxbt
1/ Meet the threat actor John (Lick), who was caught flexing $23M in a wallet address directly tied to $90M+ in suspected thefts from the US Government in 2024 and multiple other unidentified victims from Nov 2025 to Dec 2025.
English
steamham retweetledi

Big news coming later today. It'll be the slopocalypse.
I don't feel like writing about it right now, because I'm tired from a teething baby with sleep regression, but basically all these fucking AI vibe coders are using Firebase and like, 22,000,000 records are exposed, or something, an outrageously high number.
Also, a disgustingly high amount of people trying to use AI for CSAM.
It's not my research, it's someone else's, but I want to give them a proper shout out and explanation of their work.
I cannot stress this enough: DO NOT TRUST VIBE CODERS. DO NOT DO IT. AI CODE IS NOT SECURE. DO NOT DO IT. STOP THE SLOP.
English
steamham retweetledi
steamham retweetledi
steamham retweetledi
steamham retweetledi
steamham retweetledi

Lastly, if they hack your telegram, you need to TELL EVERYONE ASAP.
"You" are about hack your friends.
Please put your pride aside and SCREAM abt it.
And if you need help with any of this SEAL-911 (@_SEAL_Org) is here for you.
Message us 24/7: t.me/seal_911_bot
English
steamham retweetledi

I don’t know why McDonald's doesn’t just give me a call.
Culture Crave 🍿@CultureCrave
The AI-generated McDonald’s Christmas ad is no longer available to watch on YouTube following backlash
English
steamham retweetledi

See the exhibit everyone is talking about...
REGULAR ANIMALS by @beeple is sparking conversations all around the world about the crossover of digital art, robotics, AI, crypto, and the physical world.
Experience it at Zero 10 Art Basel Miami Beach.
The Associated Press@AP
An Art Basel installation featuring robot dogs with wax heads of Jeff Bezos, Elon Musk and Mark Zuckerberg went viral as it examined how tech leaders influence how we see the world.
English
steamham retweetledi
steamham retweetledi

We’ve published a full guide on detecting React2Shell using Burp Suite.
Both Burp Suite Professional and Burp Suite DAST now support updated ActiveScan++ v2.0.8 checks for Next.js, plus optional targeted Bambda tests for deeper investigation.
Full breakdown:
bit.ly/4rFhtij
English
steamham retweetledi

We’re launching Anthropic Interviewer, a new tool to help us understand people’s perspectives on AI.
It’s now available at claude.ai/interviewer for a week-long pilot.
English

@vxunderground Attack chains with no code sounds like it'll hook a lot of people who won't like dry material. Excited to see your output 🫡
English

I've decided to try to make YouTube videos. They'll be educational and about malware. However, I'll have a slightly different format.
I don't particularly want to produce YouTube videos. I don't like YouTube "culture". But, conversely, I've decided to be the change I want to see in the world.
My grievance with cybersecurity tech YouTubers is over emphasis on applicability. Many of them want to show off their code (sometimes bad code), the latest hacks or exploits, and whatever cool "hacker tool" is popular at the moment. I think this is disconnected from reality and doesn't accurately illustrate the beauty of malware (or hacking, whatever).
What drew me into malware initially was the "ideas" behind malware. There is something so amazing about process injection, or maintaining persistence on a machine. Yes, we in cybersecurity are hyper aware of these concepts, but when I was younger and new to the field, I was in absolute awe these things were possible.
Hence, I want to take a Sam O'nella Academy approach. I don't plan on showing my face because nobody gives a fuck about my face (or rather, you shouldn't give a fuck about my face). I don't intend on showing a dumb staged setup with LED lights and expensive gadgets to give the facade of a techy. I intend on making straight forward, comical, playfully hyperbolic, videos which explain malware concepts from a high level.
I want to explain WHY malware does the thing it does. I want to explain challenges people face. I want to explain WHY things are the way they are now or historically.
I want you to sit down, plop your ass in front of the computer (or phone), and watch a silly video of someone explaining WHY and HOW malware does what it does WITHOUT looking at code. I think if someone can see the beauty behind these concepts they will be more compelled to do more. If they are not compelled to do more, at least they can have an appreciation for malware researchers (offensive and defensive).
Malware is a lot of fun to me. It's going to sound cliche, and corny, and dorky, and lame, but I think it's beautiful. I LOVE malware. It's my heart beat. I also love anti-malware software. The way they fight back and forth is like a song and dance to me. The going back and forth, the evolution, the repetition, the cat pictures.
I want to produce something where I can show this to others as well in simple terms. I want people to see what I see when I think of malware.
People want to discuss the "big" malware like Stuxnet. Yes, Stuxnet was cool, but Stuxnet is a drop in the bucket. There is so much more cool malware that exists. I want people to look at something as common as Information Stealer malware and understand WHY it does what it does and see the beauty in it just as much as you see beauty in something like Stuxnet
tldr I'm a massive nerd and I want to show why malware is cool and badass
English
steamham retweetledi

What’s your current Treasure count?
Anyone who's earned a Tier 3 or above Treasure from any phase of our rewards program is on the allowlist to claim @XCOPYART's latest drop: Bubbles on @shape.
Allowlist: bubbles.art/allowlist
XCOPY 🏴@XCOPYART
🫧 bubble(s) 11am ET
English
steamham retweetledi

bubbles.art
18+. void where prohibited. no purch necess. odds approx 1/10,000,000. see rules: bubbles.art/terms
GIF
English


















