Kevin Beaumont

Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.

I have Direct Messages disabled - you can send them, but I will never receive them.

My website: https://doublepulsar.com
Github: https://github.com/GossiTheDog
Signal: GossiTheDog.1337

Public Key

npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs0uvd8fnn6wdtgj6r2f29akaj63axmj3werdn5ztr4qk9g9fgullgprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyqqk9mram

Publishing to

relay.momostr.pink

Author Public Key

npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye

Show more details

Last Notes

2026-07-05 17:44:59 UTC

The study found that women who submit resumes created with AI assistance are evaluated as less competent and less trustworthy than men who submit identical AI-assisted resumes. To the evaluators, women’s AI use signaled inability, while men’s AI use signaled initiative. https://www.forbes.com/sites/michelletravis/2026/06/25/women-who-use-ai-seen-as-incompetent-men-who-use-ai-seen-as-pragmatic/

2026-06-26 10:44:12 UTC

- reply

There’s a further look at the two Lapsus$ guys here. The NCA are pushing for new powers to intervene with cases like this. https://www.bbc.co.uk/news/articles/cx2kx8jr244o

2026-06-22 22:34:30 UTC

Very funny screw up by Meta. They installed a keylogger on employees PCs, so they could train their AI. However they exposed the collected data online, so anybody could see what anybody who works there has been typing.
https://www.wired.com/story/meta-accidentally-let-employees-access-each-others-keystroke-data/

2026-06-22 16:14:25 UTC

- reply

Two men plead guilty over £39m TfL cyber attack https://www.bbc.co.uk/news/articles/czx5yp9qy0do

2026-06-21 10:24:39 UTC

VMware customers abandoning sinking ship https://www.theregister.com/virtualization/2026/06/17/tesco-is-sprinting-to-quit-vmware-and-broadcom-despite-rapid-migration-risks/5256133

2026-06-20 09:10:12 UTC

- reply

Fortinet have put out a blog about FortiBleed finally - where they don’t mention configuration exports (which is definitely happening at scale, I have receipts) or password hash cracking (we have the bash history of the user doing it).. but instead link Fortibleed to a prior marketing blog called “Attacks at the speed of AI” 🤦‍♀️
https://www.fortinet.com/blog/psirt-blogs/analysis-of-reported-credential-compromise-of-fortigate-devices?lctg=197390370

2026-06-19 19:04:04 UTC

- reply

Update on FortiBleed by me
New IOCs doing config dumps (including an IP addressed owned by Fortigate), details on movement inside networks etc.
https://doublepulsar.com/an-update-on-fortibleed-whats-happening-with-victim-orgs-c0671a50e7f4

2026-06-19 17:18:31 UTC

- reply

CloudSEK look at the open directory that had all the #FortiBleed tooling and data in it. It's a good report, although I disagree with their conclusion - it's still an absolutely truck load of creds, even if that particular opendir only had internal network details for a few thousand orgs. https://www.cloudsek.com/blog/inside-the-fortibleed-open-directory-a-technical-analysis-of-what-the-attacker-left-behind

2026-06-19 16:07:37 UTC

- reply

Canadian Centre for Cyber Security on #FortiBleed
https://www.cyber.gc.ca/en/alerts-advisories/al26-014-fortibleed-leak-thousands-compromised-credentials-impacting-fortinet-devices

2026-06-19 16:02:04 UTC

- reply

Some kind #FortiBleed victims got me to look at their situations. Some IOCs performing remote config dumps:
193.8.186.7
80.75.212.113
213.21.239.65
Look for inbound TCP traffic to Fortigate devices. If seen log into the devices and look for config dump events from those IPs.
Config dumps (including crackable password hashes) have been going on for around a month.
If you have IPsec site to site VPN tunnels on the impacted Fortinets you need to rebuild the tunnels with new keys both ends.

2026-06-18 20:33:31 UTC

- reply

To be transparent about this, a threat actor has been claiming they have an exploit to get FortiOS device password hashes remotely from config for the past month. It’s currently unclear how. They claim it’s an exploit of an unpatched vuln. Their claims predate the discovery of this dump.
If I end up having to set up another FortiGate firewall honeypot to figure out what’s going on.. I’ll British tut and get on with it.
https://cyberplace.social/system/media_attachments/files/116/773/008/265/422/976/original/b764e7e727aade8e.mp4

2026-06-18 20:20:38 UTC

- reply

NCSC UK advice on Fortibleed: https://www.ncsc.gov.uk/news/advice-following-global-targeting-of-fortinet-firewalls-and-vpn-gateways

2026-06-18 20:10:07 UTC

- reply

Fortinet appear to be telling press the #Fortibleed breach is made up of prior breaches and brute forcing.. but I’ve seen the breach data and it includes many passwords not in prior dumps, and I’ve worked with impacted orgs and they report no brute forcing of impacted accounts.
I think there may be some confusion about this one - the brute forcing is the cracking of the passwords by the threat actor, which is done locally.
Watch this space on this one anyhoo.
https://cyberplace.social/system/media_attachments/files/116/772/900/051/768/508/original/4263c41be37060e4.jpeg

2026-06-18 10:42:22 UTC

- reply

#GAYINT list of impacted #FortiBleed IPs. Not all as I couldn't write the parser properly. http://owned.lab6.com/~gossi/research/public/fortibleed/some-fortibleed-ips.txt

2026-06-18 10:27:08 UTC

- reply

#GAYINT list of impacted domains (this is basically email addresses of admin accounts on the device btw) https://blog.gayint.org/intel/fortibleed.txt

2026-06-17 15:43:12 UTC

- reply

Lol, the #FortiBleed data was found in an opendir on a webserver 🤣 truly GenAI is going to take over 😜
"They accidentally left an open directory with artefacts, connection strings, tooling, scripts and data online. Analytics obtained via their cron jobs, bash histories, logs etc,"
https://www.bleepingcomputer.com/news/security/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices/

2026-06-17 14:21:47 UTC

- reply

Wrote a blog about the #FortiBleed situation https://doublepulsar.com/fortibleed-75k-fortinet-firewalls-have-admin-passwords-cracked-60299faa65f8?postPublishedType=initial

2026-06-17 13:43:30 UTC

- reply

So there are definitely devices which weren't in the Belsen Group post back last year, in fact almost all of them weren't.
On how they got the passwords - until about a year ago, FortiOS (Fortinet firewall OS) stored admin passwords SHA-256 salted, which can be bruteforced.
In an update about a year ago, if installed and admins log in, passwords are stored much more securely - but most orgs won't be that condition yet.
https://cyberplace.social/system/media_attachments/files/116/765/736/421/232/371/original/99378007b9a008a1.png

2026-06-17 11:35:50 UTC

- reply

It’s similar to the Belsen Group thing, although that was a smaller collection of devices - prior thread
https://cyberplace.social/@GossiTheDog/113834848200229959

2026-06-17 11:22:46 UTC

- reply

Data looks like this, appears they validated creds too.
https://cyberplace.social/system/media_attachments/files/116/765/184/936/319/367/original/309beb6a558e64d0.jpeg

2026-06-17 11:18:44 UTC

An ecrime group has somehow gained access to 75k Fortinet firewall devices - dubbed Fortibleed
Blog https://www.infostealers.com/article/fortibleed-75000-fortinet-firewalls-compromised-global-enterprises-exposed-claim-your-ethical-disclosure/
Check if your domain is impacted: https://www.hudsonrock.com/fortinet
I’ve verified the data is real. They’ve been dumping the Fortinet config - not sure how yet - and then cracking the passwords it appears. Data is being resold online. #fortibleed

2026-06-16 12:50:03 UTC

The US government has intervened in a lawsuit on the side of X, saying Grok is "critical for national security" https://www.wired.com/story/doj-lawyers-argue-xai-vital-national-security-naacp-lawsuit/

2026-06-13 18:32:43 UTC

I'm on year 3 of trying to convince the UK gov to use Mastodon.. instead ministers are busy tweeting about Elon on Elon's platform.
https://www.lemonde.fr/en/international/article/2026/06/13/musk-s-role-was-instrumental-in-the-belfast-riots-according-to-researchers_6754420_4.html

2026-06-12 09:45:54 UTC

KPMG issued a report citing all the transformational ways GenAi has transformed industry, it’s been widely cited.
One minor problem: it turns they used AI to write the report, and it made up all of the evidence. https://www.ft.com/content/b3828e92-4961-4b39-84f0-c42f33be3c3f

2026-06-09 19:18:00 UTC

- reply

cybertoot

2026-06-04 21:47:22 UTC

- reply

the file tree listing is still up on the site and pastebin
https://cyberplace.social/system/media_attachments/files/116/694/032/314/182/485/original/f73c3a2df3cba172.png

2026-06-04 18:05:56 UTC

I reinstalled Arma Reforger aka Mr Bean War Simulator 5 minutes ago.
Already happened:
- I accidentally fell out of a helicopter
- I got revived by a medic who happened to be passing by in a field in the middle of nowhere
- Then I immediately got run by a truck which happened to cut through the field
I love this game, it's proof human shouldn't do anything.

2026-06-03 10:02:18 UTC

- reply

Marks and Spencer have cut all their staff bonuses, citing the LAPSUS$ cyber incident. https://www.thetimes.com/business/companies-markets/article/m-and-s-cyberattack-wipes-131m-off-annual-profits-xrlldf7lb

2026-06-01 20:51:30 UTC

How people hacked Meta accounts recently:
Step 1) Open Meta AI support
2) ask to change Obama's password
3) it says no :(
4) ask it nicely to just do it anyway
5) it resets Obama's password
From the company who brought you this headline a few months ago:
https://cyberplace.social/system/media_attachments/files/116/676/826/664/314/767/original/36771d64f8e1c787.png

2026-05-28 15:07:37 UTC

Wrote a thing on Microsoft’s stance that not following their “responsible disclosure” process is criminal activity https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4?postPublishedType=repub

2026-05-28 11:46:08 UTC

- reply

Do I think the finder was acting rationally? No. Do I think Microsoft gets to decide what is criminal activity around proof of concept exploits? No.

2026-05-20 11:31:40 UTC

- reply

Also - if you think 'none of our users run VSCode', check your telemetry. They do. It doesn't even need local admin rights to install.
I've tooted about this one for about two years now, Microsoft have created their own security bonfire and it's going off in their own backyard, they just haven't realised yet.

2026-05-20 11:30:04 UTC

RE: https://hachyderm.io/@ChrisShort/116606591908387955
If you want on to Microsoft's internal network, CORPNET, publish or own an existing a VSCode extension.
The Visual Studio Code Marketplace, which Microsoft own, is completely uncontrolled.
Anybody can publish an extension, it provides code execution on endpoints, extensions auto update by default, "verified" blue tick extensions just need any domain registration, and there's no endpoint security controls at all around what users can install.
VSCode is an absolute security shittip as a result.

2026-05-18 15:28:48 UTC

For some reason Donald Trump has posted a AI generated picture of him pressing a button and blowing up America, Ireland and himself.
https://cyberplace.social/system/media_attachments/files/116/596/284/093/021/452/original/88ae0471326b4c2f.jpeg

2026-05-18 13:21:09 UTC

A reminder that one of the reasons people love AI as you can ask it to justify any dipshit idea and it'll just write whole documents about it being a great idea, write the PowerPoint decks, the Capex requests etc.
https://cyberplace.social/system/media_attachments/files/116/595/779/051/170/254/original/62679bdd0bae072e.png

2026-05-18 13:15:43 UTC

- reply

incredibly funny. SLIPPY SPIDER!

2026-05-18 12:24:02 UTC

- reply

it does in MS world :D as it sends a push prompt to the authenticator app regardless

2026-05-18 09:40:44 UTC

- reply

most companies do

2026-05-18 08:07:07 UTC

RE: https://techhub.social/@Techmeme/116594072188375601
The Metaverse stuff in Teams was such a waste of time. Trend chasing a trend which never existed in the first place. With my AI avatar I used to robot dance in meetings to piss people off.
#note1m3m…wedj

2026-05-18 08:01:16 UTC

The consequence of going passswordless:
https://www.reddit.com/r/cybersecurity/s/7KIJL7R0Zz

2026-05-11 19:07:14 UTC

Chuckle chuckle vision, chuckle vision, chuckle chuckle vision!
https://www.bbc.co.uk/news/articles/c5yx757w048o

2026-05-11 15:23:13 UTC

- reply

xAI investors
https://cyberplace.social/system/media_attachments/files/116/556/627/272/755/418/original/09b1bb6c88c07643.mp4

2026-05-11 15:21:46 UTC

- reply

Microsoft shareholders
https://cyberplace.social/system/media_attachments/files/116/556/621/529/056/321/original/bdce684a9ad33f16.mp4

2026-05-11 15:19:33 UTC

curl's has had 188 CVEs.
Mythos was ran on it... and found one low severity CVE.
Nvidia shareholders:
https://cyberplace.social/system/media_attachments/files/116/556/609/585/299/208/original/791429106c93ad13.mp4

2026-05-10 22:29:58 UTC

Vodafone were being held to ransom by some organised crime clowns. Vodafone refused to pay, good on 'em, break the cycle of crime clowns.
It's not "full infrastructure" as claimed (it's only a 5gb file), nor is it VMware ESXi as originally claimed.
https://cyberplace.social/system/media_attachments/files/116/552/573/055/550/983/original/d8e81e45d09a348d.png

2026-05-04 16:02:01 UTC

- reply

and yes, it's this clown
https://cyberplace.social/system/media_attachments/files/116/517/143/597/763/968/original/87ce567f077bc0c9.png

2026-05-04 16:00:31 UTC

me tweet from last week about the world going to shit around the time Gamestop realised it could just pretend to be a functioning mega company, so have this video with the CEO trying to explain how they'll buy eBay instead.
https://cyberplace.social/system/media_attachments/files/116/517/133/324/614/553/original/480e6ab42b1b3e47.mp4

2026-04-30 12:21:05 UTC

- reply

Here's a question - re the Microsoft Vibing thing.
Microsoft didn't disclose they were behind Vibing, multiple staff pretended on Github it was an open source community project (it wasn't), one specifically said they weren't involved (they were), they collected screenshots and mic recordings, and it had no security, compliance or AI review by Microsoft.
Is that okay?

2026-04-29 16:46:09 UTC

- reply

I’ve updated my write up. https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7
https://cyberplace.social/system/media_attachments/files/116/489/005/430/159/646/original/dd403a260d759189.jpeg

2026-04-24 12:25:10 UTC

- reply

Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing.
It’s a very strange situation where MS were covertly operating an AI service, while pretending it was an open source project.

2026-04-24 08:45:01 UTC

- reply

I withheld a load of details from the blog on this so far btw, if you're a researcher and want a laugh pull the binaries and have a look at what the MS Research team were doing and poke the backend.
Something tells me Microsoft are going to end up freezing the Azure backend for Vibing and having a security incident.
https://cyberplace.social/system/media_attachments/files/116/458/790/281/790/444/original/793d02f38e5a64fb.mp4

2026-04-23 23:18:58 UTC

- reply

Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”.
https://cyberplace.social/system/media_attachments/files/116/456/572/411/789/865/original/e475c4ec2d046316.jpeg

2026-04-23 16:07:41 UTC

- reply

This Vibing one is a fun blog btw as every page it gets to be a bigger version of this
https://cyberplace.social/system/media_attachments/files/116/454/877/590/781/137/original/6967f4101ba8c984.mp4

2026-04-23 15:59:01 UTC

New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened.
https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7

2026-04-17 13:22:35 UTC

RE: https://infosec.exchange/@metacurity/116420216155655162
Mythos is quickly becoming its own mythological beast.
They’ve automated the vulnerability hype train - an expression I used where researchers would find real vulnerabilities, which had no real impact in the real world. People would get very excited for no reason. Now they’ve automated that process with execs.
#note1e57…du0g

2026-04-15 11:46:49 UTC

- reply

Anthropic: we can't release our vuln research as it will end the internet as we know it!!1!
Me: if I release Teams Roulette I'll probably cause global chaos with people getting their knobs out in board meetings
https://cyberplace.social/system/media_attachments/files/116/408/555/607/595/490/original/bb5138a4efe55296.mp4

2026-04-11 09:10:15 UTC

- reply

lol at the idea Rochdale canal is going to cool an AI data center
https://cyberplace.social/system/media_attachments/files/116/385/288/007/879/283/original/57fe892c8ab43283.png

2026-04-10 08:21:27 UTC

lol of the day - noticed I’m quoted in this article, but I never spoke to the publication and the quotes are made up. They use GenAI during article creation and just made up what I thought 🤣 https://www.techbuzz.ai/articles/hacker-siphons-700k-from-u-k-energy-firm-in-payment-redirect
https://cyberplace.social/system/media_attachments/files/116/379/433/857/702/050/original/a29d34dc566d9297.jpeg

2026-04-03 11:16:45 UTC

Microsoft Copilot terms of service have been updated to include this gem: "Copilot is for entertainment purposes only." https://www.theregister.com/2026/04/02/copilot_terms_of_service/

2026-03-24 22:50:06 UTC

- reply

Stryker filed an 8-K with the SEC saying no indication of malware on their environment - yet Palo-Alto's DFIR statement says they have removed malware from Stryker's environment.
https://cyberplace.social/system/media_attachments/files/116/286/590/611/381/869/original/01633fe4c07fc378.png
https://cyberplace.social/system/media_attachments/files/116/286/593/701/195/759/original/9eb211620a9e8360.png

2026-03-13 17:46:07 UTC

- reply

Handala statement on their hack of Stryker
https://cyberplace.social/system/media_attachments/files/116/223/112/468/279/176/original/a30ee701268d5055.png

2026-03-12 13:31:12 UTC

- reply

Stryker have filed an 8-K with the SEC for their wiper incident.
"The Company has no indication of ransomware or malware and believes the incident is contained."
Almost like they lived off the land..
https://www.sec.gov/Archives/edgar/data/310764/000119312526102460/d76279d8k.htm
https://cyberplace.social/system/media_attachments/files/116/216/448/207/205/481/original/2566c196033857f1.png

2026-03-11 19:22:01 UTC

- reply

There’s an entire thread tracking Handala above btw, goes back multiple years. Some bits need follow links to the thread as I broke it.
Their MO is break in, lay low for months, when target interesting exfiltrate data and then delete everything including org backups. They pivot to domain admin early and then sit on access for later. They live off land and live off org IT documentation.

2026-03-11 18:27:52 UTC

- reply

Handala have claimed responsibility to me, saying they wiped about a quarter of a mil endpoints.

2026-03-11 13:26:04 UTC

- reply

Handala appear to have fully wiped a company called Stryker, a global healthcare company.
Not in the link but they've got into AD, and wiped all the devices with Intune etc etc.
https://www.irishmirror.ie/news/irish-news/stryker-cyber-attack-thousands-irish-36850017

2026-03-05 08:05:28 UTC

https://cyberplace.social/system/media_attachments/files/116/175/531/342/495/194/original/71d78ee2d4465a91.jpeg
https://cyberplace.social/system/media_attachments/files/116/175/531/384/884/942/original/cead59a46f5992e0.jpeg

2026-02-11 12:29:48 UTC

A female OpenAI executive who raised concerns about the upcoming ‘Adult Mode’ - which lets you sex ChatGPT girlfriends - has been fired for ‘sexual discrimination against men’
https://www.wsj.com/tech/ai/openai-executive-who-opposed-adult-mode-fired-for-sexual-discrimination-3159c61b

2026-02-06 20:51:27 UTC

- reply

https://www.yahoo.com/news/articles/internet-sleuths-just-found-something-141718078.html
https://cyberplace.social/system/media_attachments/files/116/025/660/158/778/382/original/8a95eee455ee9510.jpeg
https://cyberplace.social/system/media_attachments/files/116/025/660/203/804/557/original/8c4bf4b78f292f36.jpeg
https://cyberplace.social/system/media_attachments/files/116/025/660/246/921/831/original/3f5885aee6026a66.jpeg

2026-02-03 14:07:45 UTC

- reply

Reuters reports Grok is still generating non-consensual sexualised images of people - even when told the subjects don’t consent. https://www.reuters.com/business/despite-new-curbs-elon-musks-grok-times-produces-sexualized-images-even-when-2026-02-03/

2026-02-03 14:02:38 UTC

- reply

The UK’s Information Commissioners Office has opened another investigation into X, citing serious concerns about the company’s behaviour around AI. https://www.bloomberg.com/news/articles/2026-02-03/elon-musk-s-xai-faces-second-uk-probe-for-grok-sexualized-images?embedded-checkout=true

2026-02-02 23:35:43 UTC

- reply

Microsoft is reviewing its Copilot+ integrations, and is saying internally that Microsoft Recall has failed.
https://www.windowscentral.com/microsoft/windows-11/microsoft-is-reevaluating-its-ai-efforts-on-windows-11-plans-to-reduce-copilot-integrations-and-evolve-recall

2026-02-02 19:55:19 UTC

- reply

Thank you to everybody who donated to this. My brother died last night. Enough was raised to save the house for his family, which means a thing.
Also, Fuck Cancer.

2026-01-31 10:07:59 UTC

Remember that time I ended up in court with Elon Musk after he bet me the cave diver was a pedo?
Anyway, here’s Elon begging Jeffrey Epstein for crazy parties on his private island, several years after Epstein was convicted of sex trafficking girls.
https://cyberplace.social/system/media_attachments/files/115/989/152/781/483/797/original/6a3321b418dabc6d.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/801/685/071/original/bc2967f3e8b6f93c.jpeg
https://cyberplace.social/system/media_attachments/files/115/989/152/814/991/715/original/9207647ace61a0e0.jpeg

2026-01-26 11:22:30 UTC

- reply

EU opens formal probe into X over Grok deepfakes.
They will be looking at what controls xAI had. Spoiler: you could reply to any woman on X and ask it to remove her clothes, do not many controls.
https://www.ft.com/content/f5ed0160-7098-4e63-88e5-8b3f70499b02
https://cyberplace.social/system/media_attachments/files/115/961/126/815/274/254/original/9bd71c4b4f3b59e8.jpeg

2026-01-21 11:13:48 UTC

The UK gov has today published the Joint Intelligence Committee report, presented at COBRA, called “Global biodiversity loss, ecosystem collapse and national security”.
Findings include “every critical ecosystem is on a pathway to collapse (confidence rating HIGH)”
The report is worth a read as it basically lays out how the next decade or two are going to play out.
https://assets.publishing.service.gov.uk/media/696e0eae719d837d69afc7de/National_security_assessment_-_global_biodiversity_loss__ecosystem_collapse_and_national_security.pdf
https://cyberplace.social/system/media_attachments/files/115/932/788/008/462/611/original/f8b69a30371ec95a.jpeg
https://cyberplace.social/system/media_attachments/files/115/932/788/039/356/022/original/e6132b8be79263fe.jpeg

2026-01-20 20:49:14 UTC

lol https://seclists.org/oss-sec/2026/q1/89
The telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USER environment variable received from the client as the last parameter.
If the client supply a carefully crafted USER environment value being the string "-f root", and passes the telnet(1) -a or --login parameter to send this USER environment to the server, the client will be automatically logged in as root bypassing normal authentication processes.

2026-01-19 21:27:16 UTC

- reply

Microsoft are upselling security controls for Microsoft Recall, which allow orgs to limit what it records specifically - if the org pay for Microsoft Purview.
I’ve had a look at how this works under the hood, it is using undocumented features in Recall. https://learn.microsoft.com/en-us/purview/dlp-recall-get-started
https://cyberplace.social/system/media_attachments/files/115/923/872/405/480/668/original/f1e8f29ac6750d23.jpeg

2026-01-14 23:50:37 UTC

- reply

X has finally climbed down over Grok generating non-consensual undressing, after many of the major regulators got involved.
I’d strongly recommend countries have robust laws and regulation in place for GenAI being used to brutalise women and minorities as ultimately the whole episode shows it’s only external pressure that will hold companies accountable, not self regulation and common sense. X basically tried to monetise incels harassing people.
https://cyberplace.social/system/media_attachments/files/115/896/117/925/141/358/original/192779689620e68f.jpeg

2026-01-13 15:20:48 UTC

- reply

A new YouGov survey shows that the British public overwhelmingly believe AI companies should not be allowed to generate such imagery. Fully 96% of Britons say that firms should not be allowed to generate ‘undressed’ images of children (only 1% say they should), with 87% saying the same regarding such images of adults (5% think this is ok). https://yougov.co.uk/technology/articles/53828-ai-tools-should-not-be-allowed-to-make-undressed-images-say-britons
https://cyberplace.social/system/media_attachments/files/115/888/454/680/555/353/original/1f02fac03552f666.jpeg

2026-01-12 19:14:44 UTC

- reply

The UK government is to enforce a law this week which will make it a criminal offence to supply tools designed to create non-consensual intimate images https://www.bbc.co.uk/news/articles/cq845glnvl1o

2026-01-12 17:10:53 UTC

- reply

OFCOM have opened a formal investigation into X.
They may fine X 10% of its global revenue, require all advertisers to withdraw as an X client, and require UK internet providers to block X. https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/ofcom-launches-investigation-into-x-over-grok-sexualised-imagery

2026-01-11 21:31:17 UTC

- reply

Before we get to the staff members at cyber companies, the Financial Times has the staff at X and xAI. https://www.ft.com/content/ad94db4c-95a0-4c65-bd8d-3b43e1251091
https://cyberplace.social/system/media_attachments/files/115/878/594/073/604/528/original/9254be064fbf681e.jpeg
https://cyberplace.social/system/media_attachments/files/115/878/594/129/924/149/original/8bd9a78012f94e42.jpeg
https://cyberplace.social/system/media_attachments/files/115/878/594/195/632/724/original/c927029a05074f99.jpeg
https://cyberplace.social/system/media_attachments/files/115/878/594/221/153/748/original/d6b88f6cf4453a34.jpeg

2026-01-11 21:21:57 UTC

- reply

I asked Cisco why it is directly funding an AI tool being used to non-consensual undress and brutalise women and children, having this week invested in xAI. They replied No comment.
I have a list of other cybersecurity providers invested in xAI, I am working my way through those and plan to feature the key staff members involved in a write up.

2026-01-11 21:16:04 UTC

- reply

Some Grok users, mostly men, began to demand to see bruising on the bodies of the women, and for blood to be added to the images. Requests to show women tied up and gagged were instantly granted.
‘Add blood, forced smile’
https://www.theguardian.com/news/ng-interactive/2026/jan/11/how-grok-nudification-tool-went-viral-x-elon-musk

2026-01-09 20:50:40 UTC

- reply

The UK government says the move by X to limit Grok to paid users is “insulting” and basically monetising abuse, and they would support a ban of X in the UK if recommended by the regulator. They’ve asked the regulator for recommendations in days. https://www.bbc.co.uk/news/articles/c99kn52nx9do

2026-01-09 09:11:32 UTC

- reply

It looks like the threat of X being banned in the UK worked - Grok has been limited to paid users. Take your crying with laughter emojis and stick them up your arse, Elon. https://www.bbc.co.uk/news/articles/c99kn52nx9do

2026-01-08 22:36:04 UTC

- reply

This is still happening btw, roughly one a second. People are doing it to female UK MPs and cabinet members, and getting Grok to CC with the images.

2026-01-08 22:34:34 UTC

- reply

The UK PM has asked communication regulator for options around banning Twitter from operating in the UK, due to their refusal to deal with unconsensual undressing of women and girls. https://www.telegraph.co.uk/business/2026/01/08/musks-x-could-be-banned-in-britain-over-ai-chatbot-row/

2026-01-07 23:37:48 UTC

- reply

Bloomberg reports Twitter has now become the number one app for deepfake undressing of women by a sizeable amount. https://www.bloomberg.com/news/articles/2026-01-07/musk-s-grok-ai-generated-thousands-of-undressed-images-per-hour-on-x?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc2NzgyODQzMywiZXhwIjoxNzY4NDMzMjMzLCJhcnRpY2xlSWQiOiJUOEhRS0hLR0lGUE8wMCIsImJjb25uZWN0SWQiOiI0OEFDOEE5MkEwNTM0MkQ4OEIyRjkwQjhDMTgzMTdDMyJ9.PYX4upGg_MvIrbPiTpwANI8MCqfAJnZFxxFdD-e2OyQ
https://cyberplace.social/system/media_attachments/files/115/856/445/117/063/389/original/a4ebd8f03b671776.jpeg

2026-01-07 23:35:42 UTC

- reply

The Information Commissioners Office has put out a statement on LinkedIn about serious concerns about xAI and Grok. https://www.linkedin.com/posts/information-commissioner%27s-office_new-a-statement-in-response-to-grok-ai-on-activity-7414693804001329153-N6qL?utm_source=share&utm_medium=member_ios&rcm=ACoAACWLjocBFQ8Y5Jn8ptUamSXWFWCD5cA1Rto
https://cyberplace.social/system/media_attachments/files/115/856/436/036/926/950/original/89fbdff9bd186772.jpeg

2026-01-07 23:32:46 UTC

- reply

The Internet Watch Foundation (IWF) says its analysts have discovered "criminal imagery" of girls aged between 11 and 13 which "appears to have been created" using Grok. https://www.bbc.co.uk/news/articles/cvg1mzlryxeo

2026-01-07 22:30:20 UTC

- reply

Wired has a look at videos created on Grok. Includes knives being inserted into vaginas, “very young” people having sex. Around 10% are CSAM and still online. xAI declined to comment.
https://www.wired.com/story/grok-is-generating-sexual-content-far-more-graphic-than-whats-on-x/
https://cyberplace.social/system/media_attachments/files/115/856/166/989/702/743/original/ad03b67d04704da1.jpeg
https://cyberplace.social/system/media_attachments/files/115/856/167/013/470/383/original/bcc078470eaceb99.jpeg

2026-01-07 17:26:32 UTC

- reply

If you're wondering what consequences X has faced: none. At all. A few months ago when Grok called itself MechaHitler, the service was shut entirely for days, the same day. When this happened, Elon laughed.
Grok is still outputting non-consensual deepfake pornography and sexual abuse material at a rate of 1 post per second. Example search:
from:@grok filter:media
Direct link:
https://x.com/search?q=from%3A%40grok%20filter%3Amedia&src=typed_query&f=live

2026-01-07 17:21:37 UTC

- reply

If you're wondering on xAI's stance on this, aside from Elon posting a crying with laughing emoji, Grok's creators have raised a further $20bn from Cisco and such yesterday.
https://www.reuters.com/business/musks-xai-raises-20-billion-upsized-series-e-funding-round-2026-01-06/

2026-01-07 17:19:03 UTC

- reply

Related.
https://cyberplace.social/system/media_attachments/files/115/854/954/315/282/544/original/e71a53cd20498ad6.png

2026-01-07 17:06:43 UTC

I find it interesting that there's loads of people who made a core part of their identity campaigning against trans men being in women's spaces and how it impacts women, who have gone completely silent about Grok being used to undress and brutalise women.
https://cyberplace.social/system/media_attachments/files/115/854/894/791/770/023/original/1eaeed2d12d95464.png
https://cyberplace.social/system/media_attachments/files/115/854/900/845/257/338/original/30249affe4746a7e.png
https://cyberplace.social/system/media_attachments/files/115/854/903/900/772/056/original/f481b8fc28758fd9.png
https://cyberplace.social/system/media_attachments/files/115/854/904/953/522/605/original/eb91726356403cf3.png

2026-01-04 08:22:59 UTC

- reply

Corpoelec’s corporate website is also offline for maintenance.
https://cyberplace.social/system/media_attachments/files/115/835/860/186/614/496/original/9776245f32fe42e9.jpeg

2025-12-29 11:17:00 UTC

- reply

A Christmas lesson:
Cyber people probably shouldn't post full chain exploits which automate stealing secrets on Christmas Day for new vulns in direct competitor products.
I mean, people can post whatever they want.. it would just be nice to have a holiday with family, and all rather than arming teenagers.

2025-12-28 23:18:57 UTC

- reply

So @npub1582…zvg8 has made a MongoBleed log detection tool https://github.com/Neo23x0/mongobleed-detector
I’ve tried it and it works on a pwned server.

2025-12-28 15:56:27 UTC

- reply

Ubisoft's Rainbow Six Siege servers, hosted at i3D, have been offline for a day due to a security incident.
https://cyberplace.social/system/media_attachments/files/115/798/008/378/702/658/original/7891fe3d92e7a448.png