"A Russian citizen suspected of hacking IT systems of Polish companies was arrested in Krakow, Polish Interior Minister Marcin Kierwinski said on Thursday." www.reuters.com/world/poland...

AI assistants make widespread errors about the news, new research shows reut.rs/4qkIfvx

Taiwan having to defend itself against both China AND Russia would be a tall order. www.washingtonpost.com/world/2025/0...

Dubai chocolate is a psyop

1/ China’s cyber capabilities didn’t start top-down, they started with raw hacking talent. The new CSS/ETH report "Before Vegas" traces how informal talent shaped China’s cyber ecosystem, moving from online forums to industry leaders (link in thread).

2/2 Russia at will. Although he claims to be apolitical, he denies responsibility for the crimes that are enabled by his platform. He loves to dish out advice to Western politicians, but hates paying taxes and prefers to live in a dictatorship. In short, he embodies the stereotypical Russian.

Following long practice of US gov indicting Chinese/Russian state hackers for breaching US systems, China has named and issued warrants for 3 NSA workers it says were behind hacks of China systems during Asian Winter Games. Also says University of California and Virginia Tech participated in attacks

ESET disputes Microsoft's classification of the FamousSparrow APT as part of the Salt Typhoon group. ESET believes the two APTs may be using a shared digital quartermaster (malware and tools developer). www.welivesecurity.com/en/eset-rese...

When the answer to "are you cheating on me?" is "who told you that?" and not "no"

@hpiedcoq.bsky.social 🇷🇺👀

Extraordinary comment from Tory MP Graham Stuart: “We have to consider the possibility that President Trump is a Russian asset. If so, Trump's acquisition is the crowning achievement of Putin's FSB career.” (Narrator: It’s extraordinary because our own gd government didn’t say it first.)

It shouldn’t take a panic over Chinese AI to remind people that most companies in the business set the terms for how they use your private data. And when you use their AI apps, you’re doing work for them, not the other way round.

being able to walk away from the internet, even via laptops was nice

Ah yes. We're at the 'pUt It On ThE bLoCkChAiN' stage.

It's like Ivanti. Every month is zero-day awareness month.

I can never fully know if I already read this "Fortinet 0day in the wild" article 3 weeks ago or if it’s new. Ha, never mind! It’s new 🥲

LeMonde investigation finds that members of a French nuclear-armed submarine crew inadvertently shared sensitive information about the patrol schedule of the ship via the Strava workout app: www.lemonde.fr/videos/artic...

We're witnessing the evolution of ransomware. Yesterday someone informed us of the existence of the new TTP of AWS S3 extortion. More specifically, Threat Actors abusing the Amazon Key Management Service (KMS) to encrypt company AWS buckets (or any cloud provider).

incredibly detailed piece on Salt and Volt Typhoon (apparently named as if they're brothers) "a cybersecurity vendor notices the activity and flags it to the port's cybersecurity chief, who examines it and decides it's a false alarm. He heads to lunch at Whataburger." www.wsj.com/tech/cyberse...

BREAKING: court finds NSO Group liable for #Pegasus hacking of #WhatsApp users. Big win for spyware victims. Big loss for NSO. Bad time to be a spyware company. Landmark case. Huge implications. 1/ 🧵

This aspect of restructuring authority between NSA and USCYBERCOM in light of a dual-hat split is one I hadn’t considered before:

I don’t normally get worked up about the naming threat actors thing. But the Volt & Salt Typhoon is a disaster as it’s so hard for non-specialists to tell them apart: - Salt is Snowden style espionage by China against US - Volt is a direct 🇨🇳 military threat to degrade western infrastructure 1/2

The US Treasury has sanctioned Sichuan Silence, the Chinese company that developed exploits against Sophos firewalls home.treasury.gov/news/press-r...

Why the f*ck does my Windows trying to reach browser.events.data.msn[.]cn

"The networks are still compromised, and booting the hackers out could involve physically replacing “literally thousands and thousands and thousands of pieces of equipment across the country,” specifically outdated routers and switches" 🕵️‍♂️

More people should use QubesOS

Seems kind of important that Bruno Kahl, head of german foreign intelligence, said that it's his assessment that Russia by the end of this decade will be in a position to initiate an attack against NATO www.spiegel.de/politik/bnd-...

It’s a matter of time, Chinese media/bots will eventually target this platform as well.

CTI is the cause of my brainrot but I really cooked on this #salttyphoon #telecomhack

Firefox, Thunderbird, Tor Browser RCE: www.welivesecurity.c...

Bonjour, Bienvenue dans ce live-skeet du procès de Florent Curtet, ce trentenaire poursuivi pour des extorsions numériques, jugé en cette fin de mois à Paris par le tribunal judiciaire.

👏IF YOU HAVE A VPN APPLIANCE 👏ON YOUR NETWORK AND 👏YOU DON'T HAVE 2FA OR OTHER VERIFICATION 👏JUST USERNAME/PASSWORD CREDS 👏YOU HAVE AN OPEN DOOR TO YOUR NETWORK 👏YOU ARE GOING TO GET RANSOMWARED

Just got a TLS certificate error on bsky.app for a while. Showing the cert for ism[.]bible. The fuck?

Nearest Neighbor? Espionage. www.wired.com/story/russia... Salt Typhoon? Espionage. wapo.st/3CHK3dQ GRU’s use of Moobot? Espionage. www.justice.gov/opa/pr/justi... MSS hack of MSFT? Espionage. www.cisa.gov/sites/defaul... SolarWinds? Espionage. www.lawfaremedia.org/article/sanc...

Why is it *ALWAYS* UTC+8 👀🇨🇳

This is your reminder that DMs here are _not encrypted_. They're not even really part of ATProto. It's on the roadmap, but that's not the case now. DMs are centralized and unencrypted. Behave accordingly.

Close access technical operations are never going away; there’ll always be at least edge cases requiring physical proximity to target. But given the risks involved, pursuing remote means to achieve “close”-style tactics is likely a trend that has been ongoing but only just now coming into the light.

Russian spies—likely Russia's GRU intelligence agency—used a new trick to hack a victim in Washington, DC: They remotely infected another network in a building across the street, hijacked a laptop there, then breached the target organization via its Wifi. www.wired.com/story/russia...

The “messy middle between war and peace is not the only grey zone that hackers are exploiting. They are also straddling the line between “crime and statecraft” and the distinction between “espionage and attacks”." Read my latest piece in Articles of War below.

Bluesky be like

Much like the conservation of mass-energy, the "detection evasion paradox" suggests that detection surface area cannot be created nor destroyed, only transformed or transferred to another form. Every attempt to hide generates a new signal.

We are excited to announce #Trump has nominated our very own Park Jin Hyok as director of the #FBI.

The X social network is being weaponized by both its CEO and Russia. It’s more of a botnet now. Sad world.

Oopsec

Vulnerability names: this is log4shell. We named it this way because it's in log4j and gives you shell. Threat actor names: this is HAIRY EEL, aka VIOLIN HIPPO, no relation to VEXING MACKEREL. Also known as APT-74, formely APT-C-92. We named it this way because he's a guy in Bulgaria

CrowdStrike has identified a new China hacking group that's been targeting telecom networks since at least 2020. The group has primarily targeted networks in SE Asia and Africa — but it also have the ability to use their access to breach other networks. www.axios.com/2024/11/19/c...

The two submarine cables that are cut: #CLion1 - between #Finland and #Germany #BSC - between #Sweden and #Lithuania yle.fi/a/74-20125395 Thank you @henrikytonen.bsky.social for the correction of the second cable name!

Oh, I never posted my gotofail story on here. Early 2014, someone came to me about a catastrophic vulnerability in Apple's TLS implementation. I shit you not, they'd overheard someone at a bar drunkenly bragging about how they were going to sell it to a FVEY intelligence agency for six figures.