Just the Russian GRU doing Russian GRU type stuff. Kudos to all agencies (USG and allies) for getting this out. www.cisa.gov/news-events/...

Hardcoded credentials in the Signal archiving tool used by the White House is a five-alarm security dumpster fire.

Put it in the Louvre

"Make CISA great again." @thekrebscycle.bsky.social uncorks at #RSAC On @therecordmedia.bsky.social therecord.media/krebs-outrag...

“I dOn’T ThInK I eVeR MeT hIm”

Chris Krebs is America’s next profile in courage. The entire nation should support this honorable and courageous fellow citizen.

Let the cybering begin! Happy to see my friend @thekrebscycle.bsky.social here @cyberlawcon.bsky.social and talking about not only what matters in cyber, but why cyber lawyering matters too.

🗼 🇨🇳 "The Chinese are preparing for war. Are we?" SentinelOne’s @thekrebscycle.bsky.social weighs in on how China's access to the cranes at key U.S. ports could impact homeland security and even the U.S. military. 📺 To learn more, watch the full video clip: s1.ai/CBS-Cranes

RIP Dry January. HTTC

It finally happened. In a recent move I threw out my "box o' cables." I thought, "nah, I'll never need those old things, I'm all modernized and stuff." Welp, today I needed a VGA cord to hook up an old monitor to an old DVR.....

The US says the FBI hacked ~4.2K devices in the US to delete PlugX, malware used by China-backed hackers since 2014, after obtaining warrants in August 2024 (Carly Page/TechCrunch) Main Link | Techmeme Permalink

This never happened. Nope. Never.

Had a blast in Sydney, AUS recording a live "Wide World of Cyber" podcast w/ @patrick.risky.biz. Awesome crowd, timely content, & even better weather (early summer in Sydney ain't bad!). Sadly, no Kangaroo 🦘 sightings, but the biggest bats🦇I've ever seen! 10/10, would do again!

🇦🇺 SentinelOne's @thekrebscycle.bsky.social and @patrick.risky.biz dive deep into China's cyber activities, such as its Salt Typhoon intrusions into American telcos and Volt Typhoon prepositioning within critical infrastructure. What's coming in the next 12-24 months? 👉Watch more: s1.ai/WWC-ccp

Guess you could argue that volt only matters if activated whereas salt matters right now (God these terms are maddening) Either way, I still think that focussing on ripping out whatever remains of Chinese infrastructure as the top priority response to salt flies in the face of the evidence about it

Also think salt, whilst important, is spying. Volt is more strategically significant as it’s a precursor to the disruption of civilian CNI, so way more serious & unlike salt a major departure from (a) norms & (b) previous Chinese ops

Absolutely - it’s salt & the naming are silly & unhelpful (I also posted about that!). I do wonder though if this is a distraction: afaik from the publicly available info Salt wasn’t primarily due to Chinese kit but weaknesses in US (& other western) built, US operated infrastructure 1/2

US Government moving on China associated TP Link as another concern in our cyber supply chain. Growing to dominate the residential WiFi and router market, they are seen as vulnerable and a tool used in hacks. Similar to advisories on Huawei and Kaspersky, move away! www.bloomberg.com/news/article...

'A dozen Western countries - Britain, Germany, Poland, the Netherlands, five Nordic nations and the three Baltic states - agreed on Monday to "disrupt and deter" Russia's shadow fleet.' Including through forcible boarding. www.reuters.com/world/europe...

This week's show is up! As video: risky.biz/video/risky-... As audio: risky.biz/RB775/

Workers are adopting generative AI faster than companies can issue guidelines on how to do so; a survey says ~25% the US workforce already uses the tech weekly (Stephanie Stacey/Financial Times) Main Link | Techmeme Permalink

Great convo here between @patrick.risky.biz and some guy named @thekrebscycle.bsky.social with medium fashion sense.

If listening to @thekrebscycle.bsky.social and yours truly talking about Chinese cyber operations for an hour in front of a live audience in Sydney sounds like a good time to you, boy do I have some great news www.youtube.com/watch?v=MQaV...

According to reporting by the WSJ, anonymous intelligence sources claim the Chinese captain of Yi Peng 3, the ship that cut the underwater cables in the Baltic Sea with its anchor, received instructions directly from Russian intelligence.

Fourteen North Korean nationals have been indicted in a conspiracy to steal U.S. identities in order to get remote IT jobs to enrich the DPRK regime and fund its nuclear weapons program. The FBI shared this poster of the alleged scammers and is offering up to $5 million for info leading to arrest.

When in Phoenix….

Brace yourself, but I'll watch just about anything Orson Welles, Christopher Nolan, Guy Ritchie, & Taylor Sheridan. Yes, I recognize that's likely the first time anyone's ever drawn a line through those four. And sure, a disjointed grouping a little trashy around the edges, but my go-to every time.

About to sit down and record the second last weekly episode for 2024… this year went quick! Great runsheet this week, will be a good ep

Had a great conversation on the China threat with @thekrebscycle.bsky.social this morning in Sydney -- will post audio and video when I get it.

I will be recording a podcast with @thekrebscycle.bsky.social in Sydney on Thursday. There are still a dozen or so tickets left and you can register here if you would like to come: go.sentinelone.com/risky-busine...

As a Georgia native not liking the dawgs or the jackets, damn. This game is amazing.

Saturdays and aircraft carriers - giving the kids a taste of the real thing before they build the boxed up USS Flagg. USS Intrepid Air & Space Museum

After all these years, he still puts on an amazing show… DMB 11/22/24 @ Madison Square Garden

Post a ship that’s neither Star Wars nor Star Trek

Tonight’s The Diplomat commentary (Spoiler Alert): “Who gives a f—- about Scotland? They’re nice, sweet people. They’re cold all the time.” I don’t laugh out loud at shows much, but I sure did here. Watched it again, laughed again. There are better shows, for sure, but this one is easy to like.

This is the closest I've come to an actual non-hyperbolic spit take in a long time

Specifically, to annoy @kenwhite.bsky.social

The chargers’ unis are so pure. At the same time bengals unis are excellent for their flat out distinctiveness and commitment to their mascot meme. Don’t much like either team, but this is as good as you get visually. Note also the teams are opposites helmet/jerseys/pants in their kit.

Watching The Diplomat, but can only see Trowbridge as George Costanza.

What is the worst airport in the US and why is it Las Vegas?

Well today started off kind of weird….

Nvidia CEO Jensen Huang says US chip export controls has put the US tech industry at risk of "enormous damage", as Chinese firms start building their own chips (Financial Times) Main Link | Techmeme Permalink

Timely piece here by @Lingling_Wei on internal clampdown by Chinese security services on foreign businesses and cascading effects on capital flows. https://www.wsj.com/articles/china-crackdown-foreign-companies-chen-yixin-9b403893?st=4ecihtzcz5g22mg

What do we call the passive aggressive “don’t move after ordering the Uber hoping the rider will cancel” thing that seems to be all the rage with Uber drivers recently? And am I the only one still using Uber instead of Lyft?

What is the worst airport in the US and why is it Las Vegas?