Sign in

Matthew Cashew

@cashewsec.bsky.social
118 followers 157 following 59 posts

Engineer, Hacker, Pentester, Gamer, and constantly curious.

PostsRepliesMedia
Matthew Cashew @cashewsec.bsky.social · 02/09/2026
153M driver's licenses just leaked on the dark web. The real question is: how do you exfiltrate data for over a year without tripping a single alarm? Cashew Security is taking on new pentest clients. Let's find out if your internal tripwires actually work. krebsonsecurity.com/2026/09/fbi-...
krebsonsecurity.com
FBI Probes Service Selling 153M+ Drivers Licenses – Krebs on Security
010
Reposted by Matthew Cashew
Papa Woof und Krampus und Bleaken @papawoof.bsky.social · 02/03/2025
1117377911
Reposted by Matthew Cashew
vx-underground (automated mirror) @vxundergroundre.bsky.social · 30/01/2025
The Tor Project X account has been compromised.
1305
Matthew Cashew @cashewsec.bsky.social · 14/01/2025
Another suspicious campaign. I wonder what made them start around December instead of waiting for the new year? They could have been the first campaign of 2025. arcticwolf.com/resources/bl...
arcticwolf.com
Console Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on Fortinet FortiGate Firewalls - Arctic Wolf
Arctic Wolf Labs identified a campaign targeting Fortinet FortiGate firewall devices with exposed management interfaces.
030
Matthew Cashew @cashewsec.bsky.social · 30/12/2024
I should do some research and figure out what departments haven't been hacked. www.reuters.com/technology/c...
reuters.com
US Treasury's workstations breached in cyberattack by China, AFP reports
A Chinese state-sponsored actor was behind a cyberattack on the U.S. Treasury Department earlier this month, resulting in unauthorized access to some of its workstations, Agence France-Presse reported on Monday, citing a letter to Congress.
020
Reposted by Matthew Cashew
Jacob Geller @jacobgeller.com · 13/12/2024
UEDA IS MAKING A MECH GAME????!(!!(!(!,!????????
261021127
Matthew Cashew @cashewsec.bsky.social · 10/12/2024
So at some point things will slow down and I can catch my breath, right?
010
Matthew Cashew @cashewsec.bsky.social · 04/12/2024
Excellent research by Zakhar Fedotkin! portswigger.net/research/byp...
portswigger.net
Bypassing WAFs with the phantom $Version cookie
HTTP cookies often control critical website features, but their long and convoluted history exposes them to parser discrepancy vulnerabilities. In this post, I'll explore some dangerous, lesser-known
030
Matthew Cashew @cashewsec.bsky.social · 01/12/2024
This story is such a wild ride. It's a shame a US soldier was likely involved. It's also a shame his username was "Buttholio" and he played Tarkav. #hacker #cyber #usarmy krebsonsecurity.com/2024/11/hack...
krebsonsecurity.com
Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kibe...
000
Matthew Cashew @cashewsec.bsky.social · 29/11/2024
This holiday is fun but it is definitely in the running for most BS American holiday. I got to enjoy some great food though, so I can't complain!
000
Reposted by Matthew Cashew
George Takei @georgetakei.bsky.social · 26/11/2024
They only worried that he’d been caught.
194110141398
Matthew Cashew @cashewsec.bsky.social · 26/11/2024
OSEP material is dense! I thought I'd knock it out quick, but I was so so wrong.
010
Matthew Cashew @cashewsec.bsky.social · 24/11/2024
Here's a very old husky enjoying early afternoon scritches.
120
Matthew Cashew @cashewsec.bsky.social · 24/11/2024
Somehow, I can come away from scrolling on bsky on a Sunday afternoon without feeling crushed by the weight of humans' hate and ignorance. It's nice.
010
Reposted by Matthew Cashew
Anonymous @youranoncentral.bsky.social · 22/11/2024
Life comes at you fast ✨
Human trafficker / rapist talks crap at AnonymousHuman trafficker / rapist finds out about Anonymous
36675061165
Reposted by Matthew Cashew
Janet Ghoulcia (on Vacation 🇯🇵) @gameonysus.bsky.social · 22/11/2024
The energy I’m bringing to the two tens this year. @minnmax.bsky.social
52022
Matthew Cashew @cashewsec.bsky.social · 21/11/2024
So, did Matt Gaetz just lose his entire job by resigning from both the House and his AG nomination? It sounds too good to be true. Well, other than that allowing him to dodge the investigation.
000
Matthew Cashew @cashewsec.bsky.social · 19/11/2024
bsky is growing fast and that's awesome! It also creates a clear opportunity for operators in the cyber domain. Many, new, legitimate accounts are being created. This gives bad actors the opportunity to create sock puppets that are more immediately usable. Stay vigilant about the info you take in!
010
Matthew Cashew @cashewsec.bsky.social · 18/11/2024
As a pentester and security engineer, I found this talk to be very inspiring. I haven't been able to use the tool yet, but you can bet I will soon! youtu.be/bCNnloBaw_U?...
youtu.be
The Dangers of Building a Recursive Internet Scanner by Joel Moore | BSides CHS 2024
YouTube video by BSidesCHS
0144
Matthew Cashew @cashewsec.bsky.social · 16/11/2024
I've been playing Vintage Story lately. It's so refreshing to see a Minecraft-like project that is built from the ground up. I haven't been able to get into Minecraft in many years, but I'm loving Vintage Story! #games #vintagestory
020