's Avatar

@reversemode

Not guilty. https://reversemode.com

97
Followers
19
Following
45
Posts
31.07.2023
Joined
Posts Following

Latest posts by @reversemode

The hackers say they targeted Stryker in retaliation for the bombing of the all-girls school in Iran and that they have wiped more that 200,000 Stryker systems, servers, and mobile devices and stolen 50 terabytes of critical data, forcing Stryker offices in 79 countries to shut down

11.03.2026 15:11 ๐Ÿ‘ 70 ๐Ÿ” 68 ๐Ÿ’ฌ 5 ๐Ÿ“Œ 6
Preview
The mystery of a globetrotting iPhone-hacking toolkit Tools used in a series of hacking campaigns by hackers in Russia, Ukraine, and China may have originated inside U.S. government contractor L3Harris, TechCrunch has learned.

SCOOP: The iPhone mass hacking toolkit used by Russian spies was developed at U.S. military contractor L3Harris, former employees said.

The Coruna toolkit was used against Ukrainians and by Chinese cybercriminals, according to Google. But the toolkit was initially developed for Western governments.

10.03.2026 02:01 ๐Ÿ‘ 219 ๐Ÿ” 123 ๐Ÿ’ฌ 7 ๐Ÿ“Œ 14
Preview
Exclusive: US investigation points to likely US responsibility in Iran school strike, sources say U.S. military investigators believe it is likely that U.S. forces were responsible for an apparent โ€‹strike on an Iranian girls' school that killed scores of children on Saturday but have not yet reach...

www.reuters.com/world/middle...

06.03.2026 18:13 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

Glad that Spain made a stand against this nonsense. The moment of truth for the EU. Letโ€™s see if there is any sovereignty left, or if the only way forward is being a bunch of pathetic US vassals.

04.03.2026 10:08 ๐Ÿ‘ 1 ๐Ÿ” 1 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Cyber-Physical Attacks on Nuclear Safeguards (II) | Ruben Santamarta In the first part, I provided an introduction and context on the cyber-physical aspects of mechanisms to detect and deter nuclear proliferation. In this second part, I will continue introducing the ph...

www.linkedin.com/posts/rubens...

03.03.2026 12:54 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

If that wasnโ€™t the case before, at this point in history you have to be medically stupid to believe any kind of rhetoric coming from the U.S. government.

28.02.2026 14:09 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Cyberattack Targeting Polandโ€™s Energy Grid Used a Wiper A cyberattack that targeted power plants and other energy producers in Poland at the end of December used malware known as a โ€œwiperโ€ that was intended to erase computers and cause a power outage and o...

Exclusive: A cyberattack targeting Poland's energy infrastructure in December used wiper malware that would have erased grid computers and rendered them inoperable had it not been thwarted, a researcher at @ESET told me. The researcher calls the attack "unprecedented" for Poland and "substantial"

23.01.2026 16:33 ๐Ÿ‘ 62 ๐Ÿ” 59 ๐Ÿ’ฌ 2 ๐Ÿ“Œ 7

The cyberattack targeting Poland's Distributed Energy Resources (DER) was a sophisticated operation, showing patterns consistent with the infamous Industroyer malware family. Of the possible scenarios, I believe this is the worst.

www.linkedin.com/posts/rubens...

21.01.2026 10:25 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
What happened in Poland? Part II Based on additional details I've been collecting, it appears the cyberattack was indeed real, probably more sophisticated than expected, and, to be honest, both interesting and concerning. Introductio...

www.linkedin.com/pulse/what-h...

19.01.2026 21:01 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
What happened in Poland? (Part I) | Ruben Santamarta The Polish government announced that Russia is behind a "first-of-its-kind" cyberattack on Poland's Distributed Energy Resources (DERs). If you're a regular reader, that will probably ring a bell abou...

www.linkedin.com/posts/rubens...

16.01.2026 08:09 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Signalโ€™s Censorship Circumvention is susceptible to AiTM attacks TL;DR This post describes the conditions and technical details that enable Adversary-in-The-Middle (AiTM) attacks against Signal when Cens...

I've just published "Signal's Censorship Circumvention is susceptible to AiTM attacks".
It is possible to carry out Adversary-in-The-Middle (AiTM) attacks against Signal when Censorship Circumvention is enabled, but E2EE layer is not affected. www.reversemode.com/2026/01/sign...

14.01.2026 10:31 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

โ€œThe failed attack aimed to disrupt the communication between renewable installations and the power distribution operatorsโ€

13.01.2026 17:05 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
2026: Time to Update our Threat Model Capabilities remain, but intentions can shift overnightโ€ฆthe significance of this basic idea behind any defense strategy has become very real in recent days. For anyone who might be interested, in this...

For anyone who might be interested, in this post Iโ€™ll share my updated approach to cyber-physical security research for this year (and likely for the years ahead), from the perspective of a European citizen and independent researcher. www.linkedin.com/pulse/2026-t...

08.01.2026 15:10 ๐Ÿ‘ 0 ๐Ÿ” 1 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

Fucking fascists

06.01.2026 00:45 ๐Ÿ‘ 2 ๐Ÿ” 1 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Hacktivist deletes white supremacist websites live on stage during hacker conference | TechCrunch A hacker known as Martha Root broke in and deleted three white supremacists websites at the end of a talk during the annual hacker conference Chaos Communication Congress in Germany.

NEW: A hacktivist dressed as Pink Ranger from the Power Rangers wiped three white supremacist websites on stage at the end of a talk at a hacker conference.

The hacker also published usersโ€™ data on the website okstupid.lol.

The three sites are still down, a week after the live hack.

05.01.2026 18:58 ๐Ÿ‘ 146 ๐Ÿ” 42 ๐Ÿ’ฌ 2 ๐Ÿ“Œ 11

defrag.exe

19.12.2025 22:34 ๐Ÿ‘ 2 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Un navire infectรฉ par un logiciel-espion au cล“ur dโ€™une mystรฉrieuse enquรชte pour espionnage en France EXCLUSIF. Un ressortissant letton a รฉtรฉ mis en examen et รฉcrouรฉ dimanche ร  Paris dans le cadre dโ€™une inquiรฉtante enquรชte pilotรฉe par la DGSI

Yesterday, French newspaper LeParisien published an interesting story "A ship infected with spyware is at the heart of a mysterious espionage investigation in France." www.leparisien.fr/faits-divers...

17.12.2025 11:31 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

So, in case you havenโ€™t heard, a recent upset of an A320:
avherald.com/h?article=52...
Was traced back to, of all things, solar flares disrupting an onboard system:
avherald.com/files/AOT-A2...
The fix is a software patch on most of the 6000 affected aircraft, but it still takes 3 hours to complete

28.11.2025 23:11 ๐Ÿ‘ 9 ๐Ÿ” 3 ๐Ÿ’ฌ 1 ๐Ÿ“Œ 0
Preview
Cyber-Physical Attacks on Nuclear Safeguards (I) | Ruben Santamarta In these series of posts, I will explore the cyber-physical perspective of nuclear safeguards and detail some real-world vulnerabilities I identified during my research.

www.linkedin.com/posts/rubens...

12.11.2025 12:56 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Exclusive: Apple alerts exploit developer that his iPhone was targeted with government spyware A developer at Trenchant, a leading Western spyware and zero-day maker, was suspected of leaking company tools and fired. Weeks later, Apple notified him that his personal iPhone was targeted with spy...

SCOOP: A man who worked on developing hacking and surveillance tools for defense contractor L3Harris Trenchant was notified by Apple that his iPhone was targeted with mercenary spyware.

The developer believes he was targeted after he was wrongly accused of leaking zero-days developed by Trenchant.

21.10.2025 14:54 ๐Ÿ‘ 27 ๐Ÿ” 24 ๐Ÿ’ฌ 2 ๐Ÿ“Œ 3
Preview
What happened at Iberdrola's 'Nรบรฑez de Balboa' PV Power Plant? The "mystery" of what happened at the "Nรบรฑez de Balboa" photovoltaic power plant is, to this day, one of the most significant unresolved q...

www.reversemode.com/2025/10/what...

15.10.2025 11:53 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
The innocuous but interesting case of Signalโ€™s UNENCRYPTED_FOR_TESTING username A couple of months ago I spent some time reading code from Signal (libsignal, Android/iOS apps, server, etc.) and came across some interesti...

www.reversemode.com/2025/10/the-...

05.10.2025 10:29 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

The US Secret Service just saved the world from 80 millions of Antifa SIMs that were about to turn unvaccinated people trans via 5G.

24.09.2025 12:34 ๐Ÿ‘ 2 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
ร‰tats-Unisย : quand la lutte antimigrants s'arme de logiciels espions Un contrat de deux millions de dollars a รฉtรฉ conclu entre l'ICE, lโ€™agence amรฉricaine de contrรดle de lโ€™immigration, et Paragon, รฉditeur sulfureux de logiciels espions ultraperfectionnรฉs. Le bras armรฉโ€ฆ

Iโ€™ve been talking about Paragon and ICE with @france24.com www.france24.com/fr/%C3%A9co-... (french)

04.09.2025 19:12 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Was Von Der Leyenโ€™s Plane the Target of a GPS Jamming Attack? Yesterday, the Financial Times reported that the EU Chief's plane had been the target of a GPS jamming attack while approaching Plovdiv Airport in Bulgaria. However, certain technical details continue...

Was Von Der Leyenโ€™s Plane the Target of a GPS Jamming Attack? I spoke with some of them to gain a clearer understanding of the incidentโ€ฆ
www.linkedin.com/pulse/von-de...

02.09.2025 16:19 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Cyberattack against Iranian Vessels' SATCOM systems Lab Dookhtegan, a self-proclaimed 'hacktivist' group, has conducted a destructive attack against the SATCOM terminals of numerous Iranian vessels, disabling this critical communication link on 39 tank...

Cyberattack against Iranian Vessels' SATCOM systems www.linkedin.com/pulse/cybera...

27.08.2025 10:45 ๐Ÿ‘ 1 ๐Ÿ” 1 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

Coincidentally, Romaniaโ€™s Cernavoda Nuclear Power Plant suffered an automatic shutdown that infamous day. One year later, that remains the only Cernavoda reactor trip event in recent years for which the operator has never published a root cause.

19.07.2025 16:45 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

Wild story. It feels like the hacker didnโ€™t hack their way in, but rather paid their way in.

29.06.2025 16:13 ๐Ÿ‘ 0 ๐Ÿ” 1 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

El tema es que 90 minutos antes del apagรณn, a las 11:00 sin oscilaciones en ese momento, se perdieron 1.2 GW en 10 minutos, de autoconsumo y < 1MW. Y la falta de datos no ha permitido investigar la causa segun los informes oficiales.

22.06.2025 08:34 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

Estรก visto que la observabilidad del autoconsumo es mejorable

22.06.2025 08:17 ๐Ÿ‘ 2 ๐Ÿ” 0 ๐Ÿ’ฌ 1 ๐Ÿ“Œ 0