iiinova — where your digital self keeps evolving

Matt Johansen @mattjay.com · 23/10/2025

Woah. Trenchant, who develops zero-days and surveillance tools for Five Eyes intelligence agencies (US, UK, Canada, Australia, and New Zealand). Has had an insider accused of selling secrets to Russia.

3167

Matt Johansen @mattjay.com · 29/09/2025

This BBC reporter was offered 25% of a ransom payout if he gave hackers access to the corporate network. He played along so we got a look inside their tactic here:

26025

Matt Johansen @mattjay.com · 12/08/2025

I think the separation of dev and prod is one of the most important things we need to solve in AI coding land. Keys. Secrets. Deployment. All that jazz. None of the tools help, if anything they make it super easy to do wrong.

170

Matt Johansen @mattjay.com · 05/08/2025

Panel on bootstrapping vs. VC money. @haroonmeer.canary.love : “With bootstrapping you need to be careful to not be timid when it’s time to be bold” Just great life advice in general. Will remember this quote forever. Oh and @hdm.io and @andrewmorr.is are cool too.

030

Matt Johansen @mattjay.com · 31/07/2025

This is a fun vuln youtu.be/jsygONOr_f4

071

Matt Johansen @mattjay.com · 25/07/2025

That viral women's only dating app 'Tea' was hacked by some 4chan users. They didn't phish, social engineer, or use some crazy hacker technique either - the database was just public

4104

Matt Johansen @mattjay.com · 25/07/2025

Hey so… don’t do this.

0142

Matt Johansen @mattjay.com · 17/07/2025

Someone can buy this extension that is tied to tons of peole's salesforce account and just ...get access to all that info. (h/t @johntuckner.me)

182

Matt Johansen @mattjay.com · 15/07/2025

If I was a bad guy who was looking for memory vulns, I'd be ALL OVER these new hotness web browsers. (Comet, Arc, etc.) Market share is small but much more valuable targets. - Teams behind them way smaller than ...Google

2112

Matt Johansen @mattjay.com · 11/07/2025

Wild trend this week of legitimate apps and extensions turning into malware. youtu.be/o9XBXeX0_5E

032

Matt Johansen @mattjay.com · 10/07/2025

I just can't believe how successful ClickFix campaigns are right now. And now FileFix on top of it...

170

Matt Johansen @mattjay.com · 06/07/2025

Which Windows drivers keep Microsoft’s security engineers busiest - and which ones do attackers actually exploit? Artem Baranov did the dang math. He scraped every CVE bulletin from Jan 2022 through May 2025 and built a clean data set of kernel-mode driver patches.

1111

Matt Johansen @mattjay.com · 03/07/2025

🚨 New macOS backdoor alert: North-Korean hackers are disguising a Zoom update that drops malware built to hijack laptops and steal data & passwords. If you or your devs run macOS, keep scrolling.👇

286

Matt Johansen @mattjay.com · 02/07/2025

Microsoft just put out a detailed threat intel report on North Korean threat actors who keep getting hired for remote jobs at US companies. They also outline how they're using AI to level up. Here's some highlights:

193

Matt Johansen @mattjay.com · 01/07/2025

Been reading more and more about governments hacking their own citizens with spyware. They seem to be finding any excuse - journalists. politically active people. social media posts. Whatever they want. Then they do it with zero click 0days silently. Wild. youtu.be/zqY2A112bAQ

1132

Matt Johansen @mattjay.com · 27/06/2025

If Austin, Texas got a pro sports team I fear I’d make it my entire personality.

050

Matt Johansen @mattjay.com · 25/06/2025

I dove deeper into that AI Agent becoming #1 on the HackerOne leaderboard. youtu.be/lC2Ornloj24

110

Matt Johansen @mattjay.com · 24/06/2025

Are AI hacking agents happening?

250

Matt Johansen @mattjay.com · 24/06/2025

I’ve spent at least 2 nights in each time zone in the lower 48 in the last two weeks. Safe to assume my routine is absolutely f’d. I keep saying I’ll figure it out after I dig out of my massive backlog…

060

Matt Johansen @mattjay.com · 22/06/2025

Sunday scaries big time when I’m leaving this to go back to reality.

2380

Matt Johansen @mattjay.com · 17/06/2025

Breaking: House Oversight's top Dem Rep. Lynch requests Microsoft provide info on DOGE staffer's GitHub repo. It allegedly contains code to extract data from the NLRB's case management system.

23412

Matt Johansen @mattjay.com · 13/06/2025

UNFI (major distributor for Whole Foods + 30k grocery stores) hit with cyber incident. Critical systems offline since June 5. Significant supply chain disruptions ongoing. Heres what we know. 🧵

272

Matt Johansen @mattjay.com · 12/06/2025

Congrats on the time off everybody. Go touch some grass while the Internet reboots.

0110

Matt Johansen @mattjay.com · 11/06/2025

Easy security win most startups don't do: A) SSO with mandatory MFA (yubikey preferred) B) Device health check on login. Don't let unpatched OS or browser even login. Do this and you're in the 1%

2217

Matt Johansen @mattjay.com · 10/06/2025

Useless security advice you need to stop giving: "Don't click suspicious links!" Links are made to be clicked. Clicking links should be safe. If clicking a link gets your company hacked, it's a security stack issue, not a "train users to not click links" issue.

2112

Matt Johansen @mattjay.com · 09/06/2025

U.S. labs keep finding *undocumented* cellular radios hidden inside some Chinese-made solar inverters & battery packs Those radios give the gear a second, undocumented path to the internet. Global governments are reacting already: 🧵

3258

Matt Johansen @mattjay.com · 08/06/2025

You know, I'm starting to think all of you are just haters. What a sweet lil guy checking in on me like this.

3150

Matt Johansen @mattjay.com · 07/06/2025

I just had such a bad idea. And then started to have anxiety about all the shit wrong with it. Like chill brain, we didn’t even do it.

1190

Matt Johansen @mattjay.com · 06/06/2025

I'm stoked to be at Sleuthcon - all the talks are completely focused on cybercrime. No vulns, exploits, marketing fluff. Just 1 track floor to ceiling with people who spend their days chasing the baddies.

1121

Matt Johansen @mattjay.com · 06/06/2025

I'm safe. I only ever run: 'npm totally-not-malware'

1110

Matt Johansen @mattjay.com · 05/06/2025

Definitely important for security teams to watch OpenAI feature announcements: "ChatGPT now ingests Google Workspace, Microsoft 365, Dropbox, Box, SharePoint and OneDrive data" www.exponentialview....

3199

Matt Johansen @mattjay.com · 04/06/2025

I'm traveling a bunch this month - hit me with your best book or podcast recommendations you've loved recently.

620

Matt Johansen @mattjay.com · 28/05/2025

nothing like spending happy hour explaining to your friend that no, “zero-trust” is not a personality trait.

2130

Matt Johansen @mattjay.com · 28/05/2025

Did ChatGPT just find its first 0day? I dug into some research that came out about the latest o3 model finding a novel use after a free bug, remotely exploitable in Linux. youtu.be/E4DHu4LQv0U

090

Matt Johansen @mattjay.com · 28/05/2025

I just want my iPod scroll wheel back.

380

Matt Johansen @mattjay.com · 27/05/2025

Tim Cook personally called TX Gov Abbott urging changes/veto to new online child safety bill. Bill would require Apple to implement age verification for all device owners.

3134

Matt Johansen @mattjay.com · 24/05/2025

I'm not big on predictions but I thought of a few things I think are highly probably while out for a drive this morning: - OpenAI obviously has Google and Apple in it's crosshairs, Jony Ive just adds fuel to that. Search + consumer devices.

130

Matt Johansen @mattjay.com · 21/05/2025

The end of this video explains why I’m feeling nostalgic today

1144

Matt Johansen @mattjay.com · 21/05/2025

Microsoft Seizes 2,300 Lumma Stealer Domains in Global Takedown.

191

Matt Johansen @mattjay.com · 21/05/2025

I know my addictive personality, and for that reason I'll never download Balatro.

280

Matt Johansen @mattjay.com · 20/05/2025

Just a boy in a daily battle with his Apple Watch battery.

060

Matt Johansen @mattjay.com · 17/05/2025

Sinners is one of the best movies I’ve ever seen.

3240

Matt Johansen @mattjay.com · 15/05/2025

🚨 Breaking: Coinbase reveals insider threat incident where overseas support agents were bribed to exfiltrate customer data. Company refusing $20M extortion demand, instead offering same amount as bounty for threat actor identification.

183

Matt Johansen @mattjay.com · 15/05/2025

I dug into a few threat intel reports about ClickFix malware campaigns that are booming in popularity. A number of DFIR folks I talked to in the last few weeks told me they've been running ClickFix incidents right now.

130

Matt Johansen @mattjay.com · 09/05/2025

Every time I post 0days on IG I get DMs like this. I’ve become the harbinger of bad news.

2130

Matt Johansen @mattjay.com · 09/05/2025

This recap from @jhaddix.bsky.social and @danielmiessler.bsky.social about RSA is solid. Also just love listening to practitioners talk, especially about AI. Real from the front lines reaction to this stuff. www.youtube.com/watch?v=XbMY...

youtube.com

Reviewing RSA 2025 with Jason Haddix

YouTube video by Unsupervised Learning

030

Matt Johansen @mattjay.com · 08/05/2025

I'm absolutely drowning without a light at the end of the tunnel which is an awful combination.

480