Ragnar

🚨DISCORD IS MAKING YOUR MESSAGES SEARCHABLE ON GOOGLE! OPT OUT NOW!🚨 Starting November 16, 2026 Discord is rolling out a major change to discoverable servers, and YOU will be opted in by default!👀 Here's what's happening: 🤖AI Channel Summaries: Public server web pages can display AI-generated summaries of conversations. 🔎Searchable Messages: Actual member messages from public channels may eventually appear on these pages and in search engine results. ⚠️No usernames or avatars will be displayed, but that doesn't mean your messages can't reveal information about you! Private servers, DMs, group DMs, and private threads/forums are excluded. 🔐HERE'S HOW TO OPT OUT: 🛡️SERVER ADMINS: Server Settings → Web Presence Disable your server's public web page entirely or exclude specific channels. 👤REGULAR USERS: User Settings → Data & Privacy Disable the option allowing your messages from discoverable channels to appear on public web pages. ⚠️IMPORTANT: This doesn't opt your messages out of AI-generated channel summaries. MY BIGGEST CONCERN?... Discord is making this an opt-out feature instead of opt-in. I actually think public server pages could be GREAT for community discovery and SEO. But discoverability shouldn't come at the expense of informed consent and privacy. Especially when scammers can use publicly available conversations for OSINT, impersonation, and targeted social engineering. And if you're managing a Discord community and aren't sure how to handle these changes... 📩Reach out! At Zero Trust Security, we help communities balance growth, functionality, and security. Stay Safe & Stay Vigilant

2/ Where's the scam? The scam in this isn't what you think, there's no malicious link, no malicious github code, and no malicious setup (although this is common in these scenarios), but this guide actually helps you set up your Grok Bot legitly but with one catch... The catch is they always tell you to sign up Grok Bot to a trading terminal like CopyFomo, FOMO Family, or another similar terminal where once you connect your grok bot with their hidden referral link, they get 15% - 25% on ALL trading fees from you. This is the reason the article's don't rush you and tell you to paper trade or take your time, because once you real trade, they don't care if you lose or win, they care about transaction volume because it all adds up for them....

🚨Have you seen how GROK bot can trade for you? It's a scam, but not in the way you think..🚨 Several bot farms are pushing articles explaining "How to turn grok bot into a trading terminal" and how its printing from just a $100 but its all a scam, just not how you think.. Here's how the scam works⤵️⤵️ 1/ What's the claim? 2/ Where's the scam? 3/ How does this go viral? 4/ Tips and Tricks to be safe

🚨YOU ARE BEING TARGETED. And you might not even realize it...🚨 Think scammers don't have enough information about you to pull off a convincing attack? Think again👀 The screenshot below from @zachxbt shows just how interconnected your online information can be. The same OSINT tools security researchers use to protect people can also be weaponized by scammers... Here's how quickly things can escalate: ⤵️ 1.) Your information appears in a data breach. 2.) Scammers correlate your emails, phone numbers, usernames, wallets, and social accounts. 3.) They impersonate a trusted company, spoof a phone number, or contact you with information that makes them sound legitimate. 4.) They create urgency, convince you something is wrong, and pressure you into taking action. 💸One bad decision later, your funds could be gone... And the scary part? They may know far more about you than you realize!!! Don't assume you're too small to be targeted. Don't assume a caller is legitimate because they know personal details about you. 🔐 Audit your digital footprint. 🔐 Secure your accounts and recovery methods. 🔐 Independently verify unexpected security alerts. 🔐 Never share your seed phrase or sign transactions under pressure. 🔐 Never blindly trust a convincing email or phone call, confirm from multiple sources. You cannot control every data breach. But you CAN prepare for the social engineering that follows Stay Safe & Stay Vigilant

🚨A TON of security vulnerabilities are being disclosed. Here's what YOU should do!🚨 Multiple security advisories and patches are making headlines, and some affect tools millions of people and developers rely on... If you're an everyday user, take 5 minutes to do this NOW! ⤵️ 🌐BROWSERS Update Chrome, Edge, Firefox, Brave, or whichever browser you use. Don't keep dismissing that update notification! 📱iPHONE APPS Open the App Store → Your Profile in top right → App Updates → Update All 💻VIBE-CODED APPS If you've built or deployed an AI-generated app, audit your dependencies, review exposed secrets, and rotate any API keys that may have been compromised. 🔐DEVELOPERS & SERVER ADMINS Review the security advisories below, identify affected versions, and patch vulnerable systems. Oh and happy cybersecurity awareness month 🥲 Vulnerabilities Released thus far Railway blog.railway.com/p/security-… PHP php2shell.aikido.io/ Node.js teapawt.net/vercel_dev/status/2113… QUIC teapawt.net/4a4133/status/21130082… Gitlab Flaw thehackernews.com/2026/10/cr… Oracle Java oracle.com/security-alerts/a… eMudhra / emSign discuss.python.org/t/informa… Others Oct 21: PHP2Shell, LiteLLM, SBI Oct 20: Plex2Shell, SiteGuard, Siemens Oct 19: OVHcloud CLI, PingCAP breach Oct 17: Opencode Don't assume automatic updates have already protected you! Stay Safe & Stay Vigilant

🚨AI is accessing your bank... Instructions to Revoke Now Below!!🚨 We're seeing headlines about AI agents accessing bank accounts and taking actions users never intended... But there's one VERY important detail getting overlooked... How did the AI get access in the first place? 👀 Users are connecting their accounts and granting permissions without fully understanding what they're allowing... Whether you're using Muse, ChatGPT, Claude, Grok, or another AI agent, giving an app access to your financial information is a SECURITY decision. And simply telling an AI what it can or cannot do isn't the same as enforcing permissions. Which most user's never implemented guardrails, therefore it technically can do what it wants.. 🔐Here's what you should do TODAY: 1️⃣ Check which third-party apps have access to your bank accounts. 2️⃣ Revoke access for apps you don't recognize or no longer need. 3️⃣ Review what permissions each app has. Can it only read balances, or can it initiate transactions? 4️⃣ Check your AI apps and agents for connected financial accounts. 5️⃣ Review recent transactions, active sessions, and trusted devices. Don't assume disconnecting an app automatically revokes every permission or deletes previously shared data. Below are instructions for checking connected apps at Chase, Bank of America, Wells Fargo, and Morgan Stanley ⤵️ JPMorgan Chase Chase website (chase.com): 1.) Log in and open the Security & Privacy tab. 2.) Under Linked Apps & Websites, find the app. It’s usually listed as “[App] via Plaid” or similar. 3.) Click Edit Sharing to choose which accounts it can see, or remove the app entirely. Edits are saved by clicking “I Agree.” Chase only lets you change these permissions on its own website. Deleting the connection inside the app doesn’t remove the access on Chase’s side. Chase Mobile app: 1.) Chase started rolling out a Data Security Center in the app in late September 2026. It lets you see connected apps, change permissions, shorten how long access lasts, choose which accounts are linked, or unlink an app. Because the rollout is phased, you may not have it yet. If you don’t, use the website. J.P. Morgan wealth / private bank accounts: 1.) In the J.P. Morgan Mobile app, go to Settings, then Security center, then “Linked apps and websites.” On J.P. Morgan Online, go to Security & privacy to reach the Security Center. Bank of America 1.) Log in to Online Banking or the mobile app. 2.) Open the Security Center. 3.) Select Third Party Site Access. This page shows who has access to your information and lets you revoke it at any time. Revoke anything you don’t recognize or no longer use. If an app you know you connected isn’t on the list, it isn’t using Bank of America’s secure connection method yet. For those apps, you can try removing access from inside the app, but the bank says the safest fix is to change your Bank of America password. Bank of America connections also expire on their own. Consent lapses 365 days after you last gave it, or after 180 days if the third party hasn’t accessed your data. Wells Fargo 1.) Log in to Wells Fargo Online or the mobile app. 2.) Open Control Tower. 3.) Find the third-party or data-sharing section. There you can turn an app’s access to your account information off or back on, and choose which accounts it can see. I couldn’t find an official Wells Fargo page with the exact menu names, so the labels inside Control Tower may differ a little. If you can’t find the section, call Wells Fargo. Also check Account Access Manager for people you’ve added. That feature lets you give someone view-only access and edit or cancel a guest user’s access at any time. Morgan Stanley (Morgan Stanley Online) Morgan Stanley has two separate settings to check. App and aggregator data sharing: 1.) Log in, go to the Services tab, then Security Center. 2.) Click Edit next to Third party data sharing. Partner guides describe setting it to Yes to allow sharing, so set it to No and click Update to turn sharing off. People or services you added as third-party users (such as an accountant): 1.) Go to Services, then Security Center, then Third Party Management, and click Edit. 2.) Click Delete next to the user, then confirm Delete in the pop-up. The Total Wealth View / “Add External Accounts” feature works in the opposite direction: Morgan Stanley pulling in data from your other banks. To stop that, remove the external account there, and also revoke Morgan Stanley’s access in the other bank’s linked-apps list. After revoking, at every bank 1.) Change your password if you ever typed it into the app or agent. Turning on two-factor authentication also helps. 2.) Review trusted devices and active sessions in each bank’s security settings, and remove any you don’t recognize. 3.) Delete the bank connection inside the app or agent itself. Revoking at the bank stops new data from flowing, but you may need to contact the third party about data it already collected. 4.) Check recent transactions. If an agent had money-movement access, look for payees, transfers, or bill-pay entries you didn’t set up. Call the bank’s fraud line if anything looks wrong. Stay Safe & Stay Vigilant