Guest Domain Admin A talent for making secure systems suddenly feel insecure. No…Not Hacking…Persuasive Computing…Also Here for the Gimmicks too...
Jamaica
Joined September 2011
- Tweets47.4K
- Following1.7K
- Followers2.6K
- Likes13.3K
$6.3B Stolen enuh...
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Just got a notice from GoDaddy about an AI-driven cyberattack on Sept 18 that exposed some Websites + Marketing profile and contact info via API...
Sir Helium retweeted
new information received is that she was calling the company a scam in various comments that are now deleted but the company kept receipts and there after sent her a cease and desist
If I’m not mistaken…credit card fees and interest charges can exceed the benefits of said credit card if not used in a smart manner. The same can be said about GiftMe… Use it in a smart manner.
Sir Helium retweeted
1/2
LDAP signing was supposed to stop NTLM relay to LDAP. I found a way to relay coerced SMB auth to a DC with LDAP signing and channel binding enforced.
Patched in October.
Blog: specterops.io/blog/2026/10/2…
PoC: github.com/grayhatkiller/swi…
Sir Helium retweeted
You published your .env to cloudflare
Sir Helium retweeted
That parking arrangement at UHWI was designed by someone who will NEVER use it. And it was approved by someone who will NEVER HAVE TO use it.
It is cruel & unusual punishment to those of us who have no option but to use it to do business with the UHWI. The process is my problem
🤔
Jamaicans with cybersecurity skills are being encouraged to volunteer their services to the country by joining the Cyber Incident Response Team (CIRT) Division’s Cyber Reserve Programme.
Director of the Division, Lieutenant Colonel (Ret’d) Godphey Sterling, says the initiative is aimed at strengthening Jamaica’s capacity to respond to cyber incidents and other national emergencies.
#JISNews #StayInformed #METT #OPMJA
Sir Helium retweeted
This would’ve been a great opportunity to establish an office in the west and give opportunities outside of Kingston.
Sir Helium retweeted
OpenAI’s post is very very very carefully worded so here’s more information from the criminal complaint and DOJ statements.
The individual that planted the device was Abdulrahman Alfozan, 35, a Saudi national and engineer on the product team who joined OpenAI in July 2025.
Key allegations from the complaint (N.D. Cal.):
• On or about Sept. 30, OpenAI’s technical surveillance team found a surreptitious audio recording device plugged into a USB port on the back of a TV in an executive conference room. It was concealed in toilet paper, installed around Sept. 28, and its contents were encrypted.
• The room is used for highly confidential technical, commercial, and strategic discussions. Alfozan had no authority to access it or attend meetings there. CCTV showed him near the room on multiple dates beforehand.
• On Oct. 5 he entered the room and appeared to look behind the TV. That same day he left an unattended bag in another room containing his wallet, ID, and a second similar recording device.
• Before installation, he queried internal tools about building addresses, meeting rooms, room capacities, calendars, and locations of leadership and external partner meetings.
• A chatbot account tied to his spouse (sharing multiple identifiers with his own) submitted prompts between Sept. 24–30 about building a continuous audio recorder, encrypting the SD card, concealing the device, adding Wi-Fi/remote access, and the specific device’s MAC address.
He’s been charged with using or attempting to use a device to intercept oral communications (18 U.S.C. § 2511).
If convicted: up to 5 years, $250,000 fine, and 3 years supervised release.
Arrested Oct. 9, initial appearance Oct. 13, remains in custody. Detention hearing set for Oct. 19.
OpenAI says it used its models to help identify him, coordinated the termination with the FBI (access was progressively restricted beforehand), and has no indications of model-weight, source-code, or customer-data exfiltration.
U.S. Attorney described it as a national-security matter; FBI has flagged protection of American AI innovation as a high counterintelligence priority.
Friendly reminder that physical + digital insider-threat controls matter even when the goal isn’t classic IP exfiltration. Wiretap charges don’t require successful data theft. Toilet-paper concealment and a second device left in a bag with ID are not sophisticated tradecraft.
(Complaint details drawn from SF Standard reporting, DOJ/USAO Northern District of California statements, and OpenAI’s own post.)
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
Sir Helium retweeted
The first group of third-country nationals from the United States is now in Jamaica, following their arrival at the Norman Manley International Airport in Kingston on Tuesday.
Read more: jamaica-gleaner.com/article/…