Zach Edwards @thezedwards.bsky.social · 27/09/2026We're a decade past Cambridge Analytica ad targeting scandals and even Facebook still doesn't expose the native FB likes/interests being used to target ads. Microtargeting is largely invisible. We've got the same problems with open web programmatic advertising - but there are standards to help!🧵 241
Zach Edwards @thezedwards.bsky.social · 18/09/2026This is a fabulous piece from @mharrisondupre.bsky.social & Jon Christian about AI slop websites from BBM. fun-fact: I was able to literally 1-shot prompt the DecryptAds MCP to build this entire map of their publisher sites through countless pivots into low density accountIDs + other IDs... 🧵 130
Zach Edwards @thezedwards.bsky.social · 17/09/2026It's great news that Nightmarestresser was taken down! but other folks covering this have missed the connections to Russia... a few thoughts from me, thanks for writing up this piece to give more folks more context! @mattkapko.com @cyberscammonitor.bsky.social cyberscoop.com/fbi-seizes-n...cyberscoop.comAuthorities seize popular, long-running DDoS-for-hire service domainsLaw enforcement agencies, including the FBI and RCMP, seized domains for NightmareStresser, a prolific DDoS-for-hire operation linked to hundreds of thousands of attacks. 030
Reposted by Zach EdwardsZack Whittaker @zackwhittaker.com · 17/09/2026I chatted with @thezedwards.bsky.social about the theft of 150+ million US/Canadian driver's licenses that he helped to confirm, and why this breach is a national security and privacy disaster unlike anything else. Plus: More on Florida's drivers' leak, and why Revolut gave hackers customers' data.this.weekinsecurity.comA breach of over 150 million U.S. and Canadian driver's license photos is an anonymity disasterThe breach links the names and photos of millions of people across North America. One expert said this is likely the largest database of facial images ever breached. 1159
Zach Edwards @thezedwards.bsky.social · 16/09/2026ofac.treasury.gov/recent-actio... // interesting news today that the senior managers of Tamyna AG were removed from sanctions -- they were alleged to support an effort to acquire hardware for Russia’s nuclear weapons laboratories. Some details @ www.hsfkramer.com/en_US/notes/...ofac.treasury.govRussia-related Designations Removals; Counter Narcotics Designation Removal; Issuance of Amended Venezuela General License and Frequently Asked Question | Office of Foreign Assets ControlAn official website of the United States government 000
Zach Edwards @thezedwards.bsky.social · 15/09/2026I’m out today with some new casino research I’ve been working on for a few months with the team at @Infoblox. If you work with malware, or have any purview over blocking malware threats, you need to keep reading and not ignore this report even though it's "about casinos." 🧵 100
Zach Edwards @thezedwards.bsky.social · 12/09/2026We have ASN data in DecryptAds now! blog post @ decryptads.com/blog/posts/a... This is a *huge* upgrade because now you can take something like the spamhaus drop list @ www.spamhaus.org/drop/asndrop... and hunt for publishers w/ programmatic ads on bulletproof hosting providers. More soon! 🖖decryptads.comASN/BGP explorer and the ASN watchlistEvery hostname resolves to an IP. The new ASN/BGP explorer and watchlist put origin, neighborhood, corpus co-location, and prefix hops in DecryptAds. 000
Zach Edwards @thezedwards.bsky.social · 11/09/2026Fabulous new research from Victor Ilie "The Kremlin’s Digital Pirates: How Russian Tracking Pixels Harvest Romanians’ Data to Fund Conspiracies and Extremism" snoop.ro/the-kremlins... // A few comments from me in there. I'll have more to say this on this soon!snoop.roThe Kremlin’s Digital Pirates: How Russian Tracking Pixels Harvest Romanians’ Data to Fund Conspiracies and Extremism - SnoopThis investigation reveals what data is harvested from Romanians, who ends up receiving it, and why the ads shown on platforms with conspiratorial and extremist content are among the most valuable to ... 023
Zach Edwards @thezedwards.bsky.social · 10/09/2026It appears like all of the recent articles about the LG TV privacy disaster haven't mentioned that LG also owns an ad network and collects data across nearly 3,000 websites and apps. decryptads.com/ad_system_si... So all this "unplug your LG TV from the internet" advice only partially helps. 120
Zach Edwards @thezedwards.bsky.social · 04/09/2026This is fabulous news for members of our military and their families. This will make everyone safer and reduces risk, especially for folks stationed overseas. I was able to share a few thoughts in the piece below from @reuters.com ⤵️ 000
Reposted by Zach EdwardsAlejandra Caraballo @esqueer.net · 02/09/2026This is an absolutely catastrophic data breach of an identity verification vendor 150+ million drivers license scans that includes photos, address, license numbers etc. It includes Pete Hegseth, security researchers, and even the deputy director of the FBI. krebsonsecurity.com/2026/09/fbi-... 271657689
Zach Edwards @thezedwards.bsky.social · 02/09/2026When I was in Vegas for hacker summer camp I went to the "largest cannabis dispensary in the world" (planet13) and they scanned my drivers license apparently using a vendor idscan[.]net. Little did I know my license data would show up for sale on the dark web. krebsonsecurity.com/2026/09/fbi-...krebsonsecurity.comFBI Probes Service Selling 153M+ Drivers Licenses – Krebs on Security 2113
Zach Edwards @thezedwards.bsky.social · 31/08/2026Woof this lawsuit by the Texas AG against Amazon for their second-price auction shenanigans is going to be a wild one to watch -- alleging $4.5 billion in losses... www.texasattorneygeneral.gov/sites/defaul... 111
Zach Edwards @thezedwards.bsky.social · 29/08/2026We launched decryptads.com two weeks ago to help people dumpster dive on the programmatic ad tech ecosystem – the ad tech companies, publishers, apps and accountIDs. We’re building my dream ad tech research tool, but I want to explain why it kicks ass. 🧵decryptads.comDecryptAds — From Hidden Flows to Public InsightDecryptAds maps programmatic ad-tech supply chains from public files — ads.txt, sellers.json, and related signals — so you can trace hidden flows and surface invalid supply. 2125
Zach Edwards @thezedwards.bsky.social · 26/08/2026Really appreciate getting an opportunity to share some thoughts with @cyberscoop.bsky.social about the GTA VI leaks (in-short, imo the threat actors behind it are basically doing pro-bono marketing for a billion dollar corporation and their reward is a likely future arrest) ⤵️ 021
Zach Edwards @thezedwards.bsky.social · 25/08/2026💔donate to the imaginationlibrary.com if you loved Dolly and the work she did for everyone 053
Zach Edwards @thezedwards.bsky.social · 19/08/2026Outrageously good technical research from Dhruv & Dell to provide a behind the scenes look at Flock interfaces! 120
Zach Edwards @thezedwards.bsky.social · 18/08/2026Collect and read real books, subscribe to @404media.co because they solve one important mystery after another 🖖🏻 031
Zach Edwards @thezedwards.bsky.social · 14/08/2026Big thanks to @briankrebs.bsky.social for his time and coverage of our new research tool DecryptAds.com -- check it out @ "Who’s Tracking You? Use This New Service to Find Out" krebsonsecurity.com/2026/08/whos...krebsonsecurity.comWho’s Tracking You? Use This New Service to Find OutIt can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but... 121
Zach Edwards @thezedwards.bsky.social · 14/08/2026Appreciate the shout-out from @adexchanger.com today www.adexchanger.com/daily-news-r... for decryptads.com They wrote "A new tool called DecryptAds hopes to help people identify the webpages where data brokers and trackers operate." *we also help to hunt Made for Advertising AI slop sites 💸⛈️⚖️ 011
Reposted by Zach EdwardsMarielza @marielza.bsky.social · 12/08/2026One can search DecryptAds data by a specific app, ad company, domain, IP address, etc. The tool may also help “to identify suspicious publishers or app makers who could be quietly banned from multiple exchanges without any public notice or fanfare.” 👏 043
Reposted by Zach Edwards404 Media @404media.co · 12/08/2026It's usually very difficult to investigate the advertising industry. A new tool called DecryptAds aims to make it much easier with a massive dataset anyone can query.404media.coThis Tool Unmasks the Shadowy World of Ads that Track Your LocationIt's usually very difficult to investigate the advertising industry. A new tool called DecryptAds aims to make it much easier with a massive dataset anyone can query. 014658
Zach Edwards @thezedwards.bsky.social · 12/08/2026So proud to launch our new startup today -- decryptads.com -- check out the coverage today from @josephcox.bsky.social and the team at @404media.co about why we're tackling this important privacy, ad tech and security challenge. 162
Zach Edwards @thezedwards.bsky.social · 12/08/2026Tomorrow is launch day for decryptads.comstatic.klipy.comExcited Excited DogAlt: Tiny excited dog that has fluffy white body and brown and black face tapping a marble floor with front paws 120
Zach Edwards @thezedwards.bsky.social · 07/08/2026Absolutely bananas follow-up on this research - the threat actor we doxxed was found dead recently www.yahoo.com/news/videos/...yahoo.comAlleged scammer targeting former NFL players found deadAuthorities are investigating the death of Mohamed Coulibaly who was accused of targeting multiple former NFL players with a fake e-commerce scheme. 141
Zach Edwards @thezedwards.bsky.social · 07/08/2026Some odd Colombian and Sinaloa drug traffickers removed from the OFAC Treasury sanctions list today 👀 ofac.treasury.gov/recent-actio...ofac.treasury.gov 100
Zach Edwards @thezedwards.bsky.social · 05/08/2026First Apples “Hide my Email” was proven to be broken, now “Private Relay” - this tech has been the backbone of Apples privacy commitments for years and now we know they’ve been broken for god knows how long. Reminder: Apple and Google’s MAID products are the backbone of global data brokers. ⛈️⚖️🖖🏻 01510
Zach Edwards @thezedwards.bsky.social · 03/08/2026The power of app-ads.txt pivots to uncover a network of suspicious VPN mobile apps… ⬇️⛈️⚖️🖖🏻 011
Zach Edwards @thezedwards.bsky.social · 25/07/2026Me and a couple cool folks are cooking up something extra special at DecryptAds.com for everyone who wants to better understand data sharing from publisher websites / apps & ad tech companies...a real research tool for hunting the programmatic ecosystem... (and this tool isn't vibe coded).⛈️⚖️🖖decryptads.comWhat DecryptAds analyzes — and why it matters — DecryptAdsHow DecryptAds helps researchers and the public understand the programmatic advertising ecosystem — auto-investigation, publisher and ad-system profiles, geo-risk, data brokers, declaration fingerprin... 210
Zach Edwards @thezedwards.bsky.social · 22/07/2026great visual investigation into how your data flows from a credit check through a private company and into the hands of the government. These systems are lynchpins for the modern economy but without guardrails on using the data for gov investigations, the 4th amendment is essentially for sale. 000
Zach Edwards @thezedwards.bsky.social · 15/07/2026A big piece about a novel finance scam from Jacob Adelman at Barron's dropped today that I worked on. The details are jaw dropping so I want to go through a few facts. read the piece (gift link) @ www.barrons.com/articles/nfl...barrons.comNFL Players Targeted in E-Commerce Scheme Using Fake Shopify StoresThe alleged scam, organized by a 24-year-old from Philadelphia, offered NFL players ownership of bogus websites as a place to park cash from their lucrative careers. 112
Zach Edwards @thezedwards.bsky.social · 12/07/2026I was in Yellowstone park for a week and a half and just got back a few days ago. We actually camped in that Bridge Bay campground where that recent bison attack occurred. The park is beautiful and extremely special but it’s super important to appreciate the animals are wild and can be dangerous. 🖖🏻 130
Zach Edwards @thezedwards.bsky.social · 11/07/2026I love that we can see @linamkhan.bsky.social in these NYC policy decisions. The next Democratic President would be wise to consider reappointing her to the FTC if she’s willing to do it. We’d all be the better for it. 🖖🏻 051
Zach Edwards @thezedwards.bsky.social · 11/07/2026We need more hot takes on HTTP 402!static.klipy.comPlaying With My Money Is Like Playing With My EmotionsAlt: gif from Friday the movie with Big Worm sitting in his car with turquoise rollers in his hair saying, "Playing With My Money Is Like Playing With My Emotions" 010
Zach Edwards @thezedwards.bsky.social · 07/07/2026How many of your favorite publishers do you think are partnering w/ ad tech data brokers & foreign ad tech orgs based in risky jurisdictions? How do you think the global mobile location data brokers get their data? Via secret partners sharing via black helicopters? Or via disclosed ad partners? 👀 010
Zach Edwards @thezedwards.bsky.social · 04/07/2026This Koi report on an alleged Chinese espionage campaign seems to be a complete dumpster fire AI hallucination … ⛈️⚖️ “Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage” www.theregister.com/legal/2026/0... 020
Zach Edwards @thezedwards.bsky.social · 03/07/2026Some comments from me in the piece on this network of 10k+ sites which have been marketed with spam and ads on numerous social networks while impersonating celebrities to push crypto scams ⬇️⛈️⚖️🖖🏻 011
Zach Edwards @thezedwards.bsky.social · 01/07/2026As someone who worked on the investigation to better understand how U.S. spies were likely doxxed & killed due to hundreds of websites launched by the CIA on obscure topics w/ a secret encrypted messaging tool built into them for spy comms (www.reuters.com/investigates...), this is vvv dangerous.reuters.comHow the CIA failed Iranian spies in its secret war with TehranGholamreza Hosseini got caught spying for the CIA in Iran. The story of how he was burned casts light on an epic U.S. intelligence failure. 100
Reposted by Zach EdwardsSenator Ron Wyden @wyden.senate.gov · 26/06/2026Massive win for data privacy this morning 12497123
Zach Edwards @thezedwards.bsky.social · 28/06/2026I’ve always loved that picture of President Obama so like a decade ago I commissioned an artist to paint a version of it on this giant rolling tray. 1131
Zach Edwards @thezedwards.bsky.social · 25/06/2026Some new research from me and the team at Infoblox on a Chinese open source framework being used in hundreds of thousands of scam websites called DCloud Uni-app - lots of good pivots to work off from the indicators we shared! www.infoblox.com/blog/threat-...infoblox.comDCloud Uni-App: One Framework, 236,000+ Scam SitesHow a Chinese open-source framework fuels 236,000+ scam sites across major cloud providers and bulletproof hosts, spread via social engineering. 110
Reposted by Zach EdwardsCatalin Cimpanu @campuscodi.risky.biz · 24/06/2026US removed sanctions on "former or current figures linked to sanctioned Russian banks, the son of oligarch Vladimir Potanin, two Russia-flagged cargo vessels and two Turkish companies previously targeted under Executive Order 14024." www.wttlonline.com/stories/ofac... 074
Zach Edwards @thezedwards.bsky.social · 24/06/2026Very curious about these Russian sanctions removals ofac.treasury.gov/recent-actio...ofac.treasury.gov 041
Zach Edwards @thezedwards.bsky.social · 12/06/2026I'd like to see the U.S. government spending hundreds of millions *every year* in various advertising formats educating the public & especially senior citizens about scams. U.S. victims lost over $20 billion last year and this continues to get worse, and threat actors have so much money to scale up. 010
Zach Edwards @thezedwards.bsky.social · 08/06/2026Great work on this by @dmehro.bsky.social and @dell.bsky.social - just further proves the original story had legs and was accurate. 1241
Zach Edwards @thezedwards.bsky.social · 29/05/2026Keep an eye on this Google Adwords ruling in India... could have significant impacts on search targeting if Google is required to change policies outside of India too... www.reuters.com/business/med... This would be a *gamechanger* for stopping malvertising campaigns which target major brand names.reuters.comIndian court ruling on Google keyword ads could reshape online advertisingAn Indian court ruling that Google infringed the trademark rights of a bathroom fittings maker by allowing rivals to use its name as an advertising keyword could reshape the online ads market, India... 052
Zach Edwards @thezedwards.bsky.social · 28/05/2026How many of your favorite publishers have foreign data brokers listed in their ads.txt + app-ads.txt files?? Folks out here are still wondering how this data pours out of our programmatic ecosystem into these brokers hands. ¯\_(ツ)_/¯ 021
Zach Edwards @thezedwards.bsky.social · 18/05/2026I've been dreading this announcement for weeks. This is one of the most shocking things I've seen from any administration in any country. This whole process would make most dictators blush. 010
Zach Edwards @thezedwards.bsky.social · 10/05/2026The Former Jordan Lake Air Force Space Surveillance Station (AFSSS) in Alabama is available for purchase until May 11th... a great opportunity for a 1,032 +/- ft horizontal antenna if you're in the market for that type of thing... fun hacker campground? realestatesales.gov/asset-detail... 📡🛰️🏕️🎉 000