Miami, which could not win the ACC, will play for the championship. Makes you wonder what UConn, which beat the ACC champ, and went undefeated* could have done if the powers at be hadn’t conspired to exclude UConn from the playoff. *in regulation

The “prosecute the former regime at every level” candidate has my vote in 2028.

This campaign got written up by CNCERT, though they have a more chaste explanation for the name than I would have given. www.secrss.com/articles/86568

Amazing innovation happening in Philadelphia (6/10)

I'm hiring a senior threat researcher! If you want to help me build out a team to track the most advanced actors targeting cloud environments, this is the job for you. This job is open to remote, but us-bases only. Feel free to reach out with questions. www.wiz.io/careers/job/...

I'm hiring a senior threat researcher! If you want to help me build out a team to track the most advanced actors targeting cloud environments, this is the job for you. This job is open to remote, but us-bases only. Feel free to reach out with questions. www.wiz.io/careers/job/...

We just launched our new and expanded Adversarial Threat Report! We've been reporting on online threats like foreign interference for 7 years, but today's report expands our work to cover fraud, scams, and AI security threats. There's a ton in the report, I'll try to break it down in this thread. 1/

An article that perhaps got lost in the shuffle - on record interviews with senior Dutch intelligence officials where they lament the firing of fmr NSA director Tim Haugh and reveal they are being more careful sharing intel with US partners volkskrant.nl/binnenland/n...

New from the @wizsecurity.bsky.social team on what we're seeing post CVE-2025-55182 exploitation. www.wiz.io/blog/nextjs-...

Duke, which lost to UConn (like every team that reached a result with UConn in 60 minutes did) won the ACC. PUT UCONN IN THE PLAYOFF

Shout out to whoever is exploiting CVE-2025-55182 to drop cryptominers and using "reactOnMynuts" as your campaign code.

A new blog this evening from Amazon Threat Intelligence detailing ongoing China-nexus cyber actors leveraging React2Shell (CVE-2025-55182): aws.amazon.com/blogs/securi...

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...

An update on Sha1-Hulud from the team here @wizsecurity.bsky.social. Rami & Shay break down how we've seen it spread, the types of environments targeted and what secrets have been leaked. www.wiz.io/blog/shai-hu...

Pete must be held accountable. This is not the opinion of some reactionary lib. I get accused all the fucking goddamn time of being the mainstream. People need to be adjudicated for this. There are ideals of what an American thinks they are that have been violent violated here. We demand justice.

Heads up for East Coast people waking up.

New report from Positive Technologies vivisects recent (2024-2025) APT31 attacks targeting Russian IT firms specifically government contractors and integrators ptsecurity.com/research/pt-...

“Providing tech services to supercharge ICE operations while blocking tools that support accountability of ICE officers is entirely backwards." - @kateruane.bsky.social www.404media.co/google-has-c...

Never assume your audience knows what acronyms stand for.

Remember NFTs? 😂😂😂😂😂😂😂

An interesting article talking about public attribution and the lack thereof in Indonesia and India on @bindinghook.bsky.social. bindinghook.com/india-and-in...

New Iran drop from me tracking an attribution nightmare - UNK_SmudgedSerpent! A little Charming, a little Muddy, and a lot C5. Targeting policy experts with benign conversation starters, health-themed infra, OnlyOffice spoofs, and RMMs. Check out the full story www.proofpoint.com/us/blog/thre...

It's a good night, but I'm a little concerned that New York is going to have a mayor that knows this song: youtu.be/WZzCHcMKyDc?... #NESCAC

I love kids. I have two of them. They’re amazing. However, kids are the absolute least self aware, clumsiest little puffins on the planet. Please don’t drive tonight unless you have to, and if you do drive, drive super slow and pay 100% attention at all times. Happy Halloween! 🎃 👻 💀 #PublicHealth

The romantic fables of peoplehood, of real “men with chests” (Fukuyama 2018) who make national histories… once you treat debates about liberalism in the Global South as reflecting the same common impulses that motivates illiberal politics everywhere else, you begin to see our common humanity /end

Follow this thread 👇 With the inaugural SOS just 18 days away, we'll be highlighting a few of the amazing talks you'll be hearing on October 28 in Brussels! stateofstatecraft.com/agenda Get a ticket while you still can! 🎟️🎟️🎟️

"What if, in the process of trying to ban AI products that quite actually encourage children to kill themselves, we wind up banning chatbots that help children cheat on their homework, diminish their propensity for critical thought, and lead to the development of other forms of AI psychosis?"

Berlin

“James Comey’s rights and liberties are not the only ones at risk today. So is your own right to participate in free and fair elections in order to render a verdict on Trump’s invasion of those rights and liberties.” From @davidfrum.bsky.social apple.news/AX8_ub4UHR0G...

🚨 #Shai-Hulud: Major npm supply chain attack. 100+ packages weaponized with stolen GitHub tokens, stealing secrets, hijacking repos, and auto-propagating like a worm. Guidance + detections inside www.wiz.io/blog/shai-hu...

New from 404 Media: airlines are selling *5 billion* ticketing records to the government for warrantless searching, per new docs we obtained. ARC is a data broker owned by United, American, Delta, etc. Then sells peoples' travel info to ICE, Secret Service, FBI etc www.404media.co/airlines-sel...

A private individual with power to get public servants fired, put them at physical risk, get them investigated, threaten their post government careers, go after their families and defame them with fantasies is an enormous threat to our national security and public well being. This can't stand.

A fun investigation from the team here at @wizsecurity.bsky.social www.wiz.io/blog/wiz-dis... Showing how leaked/stolen AWS keys can be used to enable other financially motivated schemes. (s/o to our friends at Proofpoint who helped us get some context on the phishing emails)

Now up to 22 different Cinnamon Toast Crunch related products. The quest continues.

I can't speculate on Trump's health in this new press conference but he just ribbed Alabama Senator Tommy Tuberville over Bama losing badly on Saturday. Tuberville coached Auburn, Bama's big in-state conference rival.

TL;DR I am launching my #startup and we are going to change how to evaluate,cluster and reason about #malware, delivering accurate,contextual intelligence on samples. Say Hi to RationalEdge @rationaledge.bsky.social rationaledge.io #threatintel #threathunting #cti #reverseengineering #detection 1/9

The summer of 2025. What we were promised Vs What we got

On the left: Nate Cavanagh, a 28-year-old DOGE staffer and college dropout. On the right: Mohammad Halimi, a 53-year-old exiled Afghan scholar. This is the story of how DOGE targeted Halimi on social media. Then the Taliban took his family. 🧵

1/ We've just released a new report uncovering new infrastructure tied to multiple activity clusters linked to the Israeli spyware vendor #Candiru across several countries. Full report: www.recordedfuture.com/research/tra...

⚡Meet our Lightning Talk speakers at #BindingHookLive: @euben.bsky.social, @melissakgriffith.bsky.social, @benread.bsky.social, @disclosing.observer, Lena Riecke and Selena Larson! Request your invite: bindinghooklive.com

🍎 machofile 🍏 first official release is finally live: github.com/pstirparo/ma... It is a python module to parse #Mach-O binary files, with a focus on malware analysis and reverse engineering. machofile is self-contained. #macho #ios #reverseengineering #detection #threathunting #threatintel 1/3

This thread has somehow hit 20 different Cinnamon Toast Crunch-related products.

@volexity.com is looking to grow our Threat Intelligence team. New job posting for Senior Analyst role is up here: www.volexity.com/company/care... If you have any questions, don't hesitate to ask.

New from me: China has been ramping up its public attribution against Taiwan, likely in an attempt to shift the conversation on cyber intrusions and pressure the island and they're using their private sector cybersecurity companies to do it. Read the piece, but a few highlights, take aways in this 🧵

#PublicAttribution of cyber activities is #China’s latest technique for pressuring #Taiwan and shaping the international dialogue around #cybersecurity. @benread.bsky.social digs into the details on Binding Hook: bindinghook.com/articles-hoo...

New from the one and only pun-king @mkyo.bsky.social on the increased and ongoing Chinese targeting of semiconductor-related organisations in Taiwan. Edge device exploitation may be the TTP of the moment, but Chinese groups still go phishing when the chips are down www.proofpoint.com/us/blog/thre...

As part of @gmfus.bsky.social's Taiwan-EU-US policy fellowship, I wrote about the opportunity Europe has to build cyber defense links with Taiwan and how it would benefit both sides. Read that and the other 10 pieces from the other fellows here: www.gmfus.org/news/next-ge...

17th and 18th varieties discovered in upstate New York