2nd sight retweeted
1/6
A "bulletproof" host is inherently flawed 🛑. Their model relies on offering impunity under the guise of privacy. You can’t claim neutrality when your profits come directly from facilitating cybercrime & avoiding all legal accountability 🚫.
🤖 Made with AI
‼️ Virtualine, the bulletproof host that was seized earlier today, has brought up another site... virtualine.org with the following message for law enforcement.
The host has published an open letter disputing allegations that it knowingly facilitated child sexual abuse material (CSAM). The operator claims the company has always prohibited such content and terminated a customer within 24 hours of identifying prohibited material. Virtualine is calling on the FBI and other authorities to review its abuse reports, timestamps, and communications, arguing that its actions demonstrate cooperation rather than knowingly enabling criminal activity. The provider says it remains willing to cooperate with investigators and is seeking a fair assessment of the evidence.
2nd sight retweeted
🚨🇺🇸 Massive leak reportedly exposes more than 41,000 U.S. Homeland Security employees
A group calling itself the Department of Peace claims it compromised a Department of Homeland Security system and obtained records belonging to employees across ICE, CBP, CISA and several other DHS agencies.
The dataset reportedly contains names, work emails, cellphone numbers, job assignments and facility locations. It also exposes memberships in internal access groups associated with undercover and covert operations, wiretap programs, Palantir software, Cellebrite tools and xAI’s Grok chatbot.
⠀
Journalists who reviewed the material found records connected to undercover ICE personnel and other sensitive law enforcement roles. The data has since been released publicly with a searchable interface.
The group reportedly gained access using a compromised Okta single sign-on account. DHS, ICE and CBP had not publicly confirmed the breach or responded to requests for comment at the time of publication.
2nd sight retweeted
HR installed a mandatory mood survey that appears every morning when employees log into their laptops.
"How are you feeling today?"
Five options:
Thriving
Good
Okay
Stressed
Not Okay
I helped deploy it.
Here's what HR didn't tell anyone.
Clicking "Thriving" immediately closes the survey.
Clicking "Good" asks one follow-up question.
Clicking "Okay" asks five.
Clicking "Stressed" opens a 20-question wellness assessment.
Clicking "Not Okay" automatically schedules a meeting with your manager and sends HR a notification.
One engineer selected "Stressed" on Monday.
By Wednesday he'd received three wellness emails, a mandatory resilience webinar, and an invitation to discuss his emotional availability with HR.
Thursday he selected "Thriving."
Last week HR presented the results at our company all-hands.
EMPLOYEE HAPPINESS: 98.7%
The CEO gave a standing ovation.
He said this proved our investment in employee wellness was paying off.
I checked the raw data.
73% of employees selected "Thriving" within two seconds of the survey appearing.
They didn't even read the question.
They just wanted to get to their desktop.
HR asked IT to make the survey harder to dismiss so employees would engage more meaningfully.
I suggested making "Not Okay" close the window immediately instead.
HR said that would encourage negative responses.
We aren't measuring employee happiness.
We're measuring how badly people want HR to leave them alone.
2nd sight retweeted
Today only. Live online. No replay.
I'm taking you inside my investigative thinking process.
5:30PM ET. 3:30PM MT. 2:30PM PT.
us02web.zoom.us/webinar/regi… #DFIR
🤖 Made with AI
florida is one of the worst states
Florida is one of the worst states for residents searching for a job, according to a new WalletHub study. wfla.com/news/florida/florid…
2nd sight retweeted
𝗲𝗠𝘂𝗱𝗵𝗿𝗮 𝗧𝗵𝗿𝗲𝗮𝘁 𝗵𝘂𝗻𝘁𝗶𝗻𝗴
𝗠𝗲: Do we have a problem?
𝗔𝗱𝘃𝗮𝗻𝗰𝗲𝗱 𝗛𝘂𝗻𝘁𝗶𝗻𝗴: 𝚠𝚎-𝚑𝚊𝚟𝚎-𝚊-𝚙𝚛𝚘𝚋𝚕𝚎𝚖.𝚌𝚘𝚖
𝗠𝗲: Say no more. 😂
Finally, an IOC with excellent documentation.👍
#CyberSecurity #ThreatHunting #SOC
"We have morals and we have a heart, we are not villains",
Use your actions, not your words.
"but we will still continue to hold companies",
Your victim is a public, non-profit research university. These facilities are funded by the US taxpayer. These facilities serve vulnerable people who have no where else to turn. This is very different from an American, for profit company.
"responsible for bad security leading to the compromise of customer data."
Public institutions are called to protect data just the same as private, but are often without the resources needed to meet baselines. New Mexico is significantly less wealthy than the rest of the United States.
"That's the whole reason why we care about and we plan to keep it that way."
Then why demand money? What will you do with the ransom? I'd like to know.
#ALERT ‼️ The BYOD ransom group who claimed the attack on UNM medical has made a statement, they claim they will give decryption key and compensate victims of the attack (WITH PROOF) with up to $2500 USD.
#Cybersecurity #ransomware @UNM @UNMHospital
i'm livid, I'm sure patients suffered, and that's the very least of the consequences involved in this incident.
#UPDATE UNM Health ransomware attack disrupts patient care, surgeries
Ransom groups who attack medical infrastructure are cowards and I’ll fight y’all myself.
#cybersecurity @UNMHospital
ift.tt/jtxdzFO
2nd sight retweeted
Microsoft has taken steps to protect customers following an issue involving eMudhra certificate authority keys. Learn about the protections in place and recommended actions for customers: msft.it/6014aL3Ri
2nd sight retweeted
Getting laid off and then being offered COBRA health insurance for ONLY $2,800 a month.
Because obviously, when someone loses their income, the first thing they can afford is nearly $3,000 a month just to keep their health insurance.
Make it make sense.
2nd sight retweeted
🚨BREAKING (EXCLUSIVE): National Security Concerns Leaked by MSFT Whistleblower
Leaked Microsoft screenshots show an India-based engineer received approval to view U.S. government cloud logs.
A Microsoft whistleblower contacted me and shared screenshots supporting allegations that Microsoft used its “escort” process to allow an India based engineer to access Government Community Cloud (GCC) systems. The whistleblower alleges the engineer is not a U.S. citizen.
Microsoft’s own published rules state that temporary elevated access to customer content in GCC requires verified U.S. citizenship. The escort model is the workaround the company uses so non-U.S. personnel can still direct the work.
The screenshots show Viraj Chokhany requesting and receiving approval for escort access to view logs in the DPRODMGD151 environment, which is part of Government Community Cloud Moderate — the cloud used by many federal, state, and local agencies.
In the escort process, a U.S. person is supposed to open the system while the India-based engineer guides the work.
The whistleblower believes this raises urgent national security concerns and may violate FedRAMP requirements.
Multiple Microsoft employees have reviewed the screenshots and confirmed they appear authentic. Viraj, has been confirmed to live in India-- Where he also attended and graduated college.
The whistleblower is working on a public statement. I will release the whistleblowers statement when I receive it.
Attached images are some of the screenshots that I received from the Whistleblower.
@DHSgov @FBIDirectorKash @JDVance
