I can’t even keep up with this talk, they just showed two different(?) PoCs that spoof perfectly credible signatures from Satoshi and Angela Merkel. The talk started with them booting a spoofed Fedora ISO after checking the signature. 14 vulns, 9 unpatched.

At the gpg.fail talk and omg #39c3 You can just put a \0 in the Hash: header and then newlines and inject text in a cleartext message. Won’t even blame PGP here. C is unsafe at any speed. gpg has not fixed it yet.

megalag with a follow up to the honey/paypal investigation, this time analyzing the source code, among other things. walks you through console/network. 50+ mins, so take your time. www.youtube.com/watch?v=wwB3...

big fan of these writeups, especially coming from these two reporters who amaze me all the time

Curious to learn what good blogposts/threads you read on pivoting and APT operations this year that you found enlightening. Trying to do the pivoting a bit more and while this is pretty easily doable for DPRK-related actors these days, imho, I am sure there's has been much I've missed.

ColdFusion++ Christmas Campaign: Catching a Coordinated Callback Calamity https://www.labs.greynoise.io/grimoire/2025-12-26-coldfusion/

“Taken together,” Zakharov said, “it has never been easier to find private Russian data on the market.” www.theguardian.com/world/2025/d...

If you're going to be at #39C3, let me know! Happy to meet. Always a thrill to be a this conference, pre-covid was the last time I went, so pretty excited tbh.

Für die, die beim Kongress sind, Hakan aus unserem Team ist ebenfalls dort und freut sich sehr, wenn ihr Hallo sagt.

If you're going to be at #39C3, let me know! Happy to meet. Always a thrill to be a this conference, pre-covid was the last time I went, so pretty excited tbh.

"The announcement on Wednesday comes after a week of intermittent releases as required by a new transparency law that Congress passed last month." edition.cnn.com/2025/12/24/p...

I wanted to figure out what changed between the DOJ's initial Epstein Files Vol. 8 document dump (which they quickly pulled) and the version they replaced it with. I had a few hours of free time for PDF forensics hacking today. Here's my initial analysis of what changed: github.com/chad-loder/e...

„The exchange was among dozens of transcribed phone conversations, text messages and group chats shared … by a group of Syrian activists who say they hacked the phones of top Assad commanders before the regime’s collapse and have been monitoring them ever since“ www.nytimes.com/2025/12/24/w...

Die US-Behörden haben nun die lange erwarteten Epstein-Unterlagen veröffentlicht. Wir hatten aber schon vorab Zugang zu einem Leak, das etwa 20.000 E-Mails und Anhänge aus Jeffrey Epsteins privatem Postfach enthält - und haben Spuren nach Deutschland gefunden. (1/3) www.spiegel.de/ausland/jeff...

„Guan posted videos that were viewed by many human-rights watchers as confirming earlier reports, including findings by BuzzFeed News, about the camps. “​​If he is deported, he will certainly face a very severe prison sentence due to the social impact of this incident,” www.wsj.com/world/china/...

This week's newsletter is about analyzing ChatGPT-share conversations with pandas and what kinds of things ChatGPT is or was looking for once you open(ed) up that conversation in your browser. That screenshot is ChatGPT telling me that they're basically oversharing buttondown.com/readwrite/ar...

This week's newsletter is about analyzing ChatGPT-share conversations with pandas and what kinds of things ChatGPT is or was looking for once you open(ed) up that conversation in your browser. That screenshot is ChatGPT telling me that they're basically oversharing buttondown.com/readwrite/ar...

“Asian wife sharing,” Pentagon press policy, and me: Journalism in the second Trump administration gets personal. www.motherjones.com/politics/202...

“The only free cheese is in the mousetrap.” Google promised publishers crumbs instead of a cake and even those never materialized somehow talkingpointsmemo.com/tpm-25/we-tr...

The EU Commission did not blink, it seems. It announced today a fine of $120M on X for several violations including deceptive design of the blue checkmark

WASHINGTON (AP) — Pentagon knew September boat attack left survivors but still launched a follow-on strike to sink vessel, AP sources say.

@justinseitz.bsky.social regarding the "ghosts in the graph" newsletter, I (mis)read you "spending tens of thousands of dollars" and had to put my cake down for a bit of contemplating

For this week's newsletter, I wrote a short tutorial on how to grab data/archived sites from the Wayback Machine, using ChatGPT-share as an example. buttondown.com/readwrite/ar...

For this week's newsletter, I wrote a short tutorial on how to grab data/archived sites from the Wayback Machine, using ChatGPT-share as an example. buttondown.com/readwrite/ar...

“I saw your email, unfortunately I don’t think my dad would respond to this because they think its some ‘scam email,'” said Saif, who told me he turns 16 years old next month. “So I decided to talk to you directly.” krebsonsecurity.com/2025/11/meet...

Record labels had the chance to stand up for copyright against AI scrapers — but now they're folding www.platformer.news/suno-warner-...

"This has created a system where it makes financial sense for people from the entire world to specifically target Americans with highly engaging, divisive content. It pays more. " www.404media.co/americas-pol...

A federal judge has dismissed the charges against former FBI director James Comey, ruling that the former Trump attorney who brought the charges was not legally serving as the U.S. attorney.

X rolled out a new feature overnight showing where accounts are based. This network of “Trump-supporting independent women” that claimed to be “real Americans” are based in Thailand. The photos were stolen from European models & posts pushed pro-Trump lines while targeting Islam and LGBTQ people.

Cryptocurrency backed by Farage donor is used for Russian war effort, investigators say www.theguardian.com/politics/202...

If you're a reporter and want to dive a bit into the command line and how it can help you as a reporter, Jan has an excellent writeup with workable examples. (Some of the tools I shied away from using, but now will look into) buttondown.com/readwrite/ar...

NEW: The White House intervened in a DHS investigation. The target? Sex offender Andrew Tate. The WH person? Paul “Nazi Streak” Ingrassia. Who was previously also Tate’s lawyer. A banger from @robert-faturechi.bsky.social & Avi Asher-Shapiro www.propublica.org/article/andr...

Sometimes, even when you basically know what's been going on, seeing it all in one place is pretty striking -> www.nytimes.com/interactive/...

If you're a reporter and want to dive a bit into the command line and how it can help you as a reporter, Jan has an excellent writeup with workable examples. (Some of the tools I shied away from using, but now will look into) buttondown.com/readwrite/ar...

"AI products would have to create an additional $650 billion a year, indefinitely, to give investors a reasonable 10% annual return. That’s more than 150% of Apple’s yearly revenue," www.wsj.com/tech/ai/when...

New: FBI Director Kash Patel Waived Polygraph Security Screening for Dan Bongino, Two Other Senior Staff www.propublica.org/article/fbi-...

A senior U.S. military officer with no digital warfare experience has emerged as a top contender to lead U.S. Cyber Command and the National Security Agency, Recorded Future News has learned. ✍️ @martinmatishak.bsky.social with the scoop

NEWS: The UK is no longer sharing intelligence with the US about suspected drug trafficking vessels in the Caribbean because it does not want to be complicit in US military strikes and believes the attacks are illegal, sources familiar with the matter told CNN. edition.cnn.com/2025/11/11/p...

Politico is reporting that the breach at the Congressional Budget Office is "ongoing." “Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.

If you're interested in #OSINT, this one might be for you. A short item in this week's newsletter on using Virustotal to find (clues to) leaked data. buttondown.com/readwrite/ar...

“We are talking tens upon tens of thousands of potential dead in five days.” www.newyorker.com/news/the-led...

OpenAI's Sora 2 is flooding social media with videos of women being strangled. Yet another example of generative AI companies failing to prevent users from creating media that violates their own policies against violent content. www.404media.co/openais-sora...

Meta earns $3.5 billion every six months from showing Faceboon and Instagram users 15 billion “higher legal risk” scam ad impressions a day, internal documents state. That haul vastly exceeds how much the company expects regulators To fine it for running scam ads. www.reuters.com/investigatio...

All day, many of you have been asking for a Cheney obituary from me. Get ready:

There could not be a newsletter more perfectly aimed at journalism/data/cyber nerds like me: buttondown.com/readwrite (thank you @hatr.bsky.social, @jls.bsky.social)

The first edition of the newsletter is out in case you're interested: Jan took a brief look at OpenAI’s Atlas browser from a researcher's perspective. buttondown.com/readwrite/ar...

For one of my final stories with @wired.com, I teamed up with @peggylowe.bsky.social at KCUR to dig through a Kansas City, KS police hack Inside were some of the most disturbing misconduct files I’ve ever read—and a secret list of cops the department said couldnt be trusted Here are a few of them:

Scoop: Trump’s OLC head tells lawmakers the War Powers Act doesn’t apply to cartel strikes, and the administration does not need to cease strikes by Monday. www.washingtonpost.com/national-sec...