Famed Russian spy hunter Christo Grozev claimed on this podcast four months ago that North Korea hacked the Democratic National Committee in 2016 and passed the info to Russia, which in exchange divulged access to Bangladesh Bank. 🤔 #infosec Passage at 13m 31s: www.youtube.com/watch?v=dimh...

Accused ALPHV/BlackCat ransomware affiliate Ryan Goldberg made US$214,000 a year working in incident response for Sygnia but told the FBI he was in debt as the reason for getting involved in ransomware, according to court documents. He initially denied involvement in the attacks. #infosec

Winnie wanted to lay on the keyboard so I guess this is the second-best position. 😀

@daveaitel.bsky.social One question that popped into my head re: AIs finding bugs is what happens when adversaries start using them to find bugs and develop exploits at scale. Is it going to be mayhem?

Three U.S. nationals who worked in incident response and ransomware negotiations allegedly became ALPHV/Black Cat affiliates and conducted at least five attacks over two years. #infosec cyberscoop.com/incident-res...

Terrific discussion with OpenAI's @daveaitel.bsky.social on @ryanaraine.bsky.social's Three Buddy Problem podcast about Aardvark, which is OpenAI's new agentic bug-hunting tool. It's a must listen if you're in security. #infosec www.youtube.com/watch?v=EwMJ...

Here's an analysis from @intel471.bsky.social of the delicate dynamics in play regarding a secret U.S. FBI task force called Group 78 that European law enforcement officials say used covert tactics to disrupt the Black Basta ransomware group. #infosec www.intel471.com/blog/the-fbi...

A Romanian prisoner hacked a prison management platform, changing permissions to allow inmates to view porn and padding their commissary accounts by increasing their balances. Great story by @campuscodi.risky.biz in Risky Business News. #infosec news.risky.biz/risky-bullet...

Bruce Schneier on how security may be impossible for web-enabled LLMs: "We built a system that trusts everything, and now we hope for a semantic firewall to keep it safe. The adversary isn’t inside the loop by accident; it’s there by architecture." #infosec www.schneier.com/blog/archive...

Le Monde reports of a secret FBI unit called Group 78 tasked with using covert tactics to disrupt Russian ransomware groups. The Europeans were not happy about it. #infosec

Very interesting research into a very serious Microsoft Entra bug (CVE-2025-55241). dirkjanm.io/obtaining-gl...

The Register reports Microsoft has cut off Chinese vendors from its MAPP program, which gives advanced warning of pending patches so vendors can prepare. #infosec www.theregister.com/2025/08/21/m...

A new episode of @intel471.bsky.social's Cybercrime Exposed podcast is out! DukeEugene is a Russian Android malware dev who has a big problem, and he puts everything on the line to solve it. Link to pod here: www.intel471.com/resources/po...

Trail of Bits has open-sourced its Buttercup Cyber Reasoning System, an AI tool that can find vulnerabilities in open source repositories and then patch them using a multi-agent AI patcher. #infosec Project here: github.com/trailofbits/...

Phrack turns 40. The digital drop is live. Download it. Archive it. Pass it on. 💾 www.phrack.org #phrackat40 #phrack72

Onery Apple decided to comply with right-to-repair laws by making spare parts available but for massively, makes-no-sense prices. A $20 charge port is being sold for $250. Outrageous. By @404media.co. www.404media.co/apple-is-sel...

Well, if this is accurate so be it - fair, scoped play. At least US spies didn't try to exploit every vulnerable one it found on the internet, like (ahem). #infosec www.theregister.com/2025/08/01/c...

Some 110,000 ChatGPT conversations that were (inadvertently?) allowed by users to become discoverable via search engines were picked up in the Wayback Machine. www.digitaldigging.org/p/chatgpt-co... #infosec

Holy shit, they did it. They wrote the headline.

@campuscodi.risky.biz Coming off the SharePoint flaw mess, I found this line in the Risky Bulletin hilarious 🤣.

Microsoft has introduced linkable token identifiers, which allow for greater precision when tracking the use of compromised credentials by differentiating between valid and malicious sessions. #infosec techcommunity.microsoft.com/blog/microso...

Jacob Larsen is an #infosec pro who was involuntarily pulled into the dark world of doxing. I spoke with him about doxing's effects, how sites like Doxbin use legal loopholes and how to defend against being doxed. Latest Studio 471 podcast from @intel471.bsky.social www.youtube.com/watch?v=y5AO...

The administrator of the XSS cybercrime forum has been arrested in Kyiv. #infosec www.europol.europa.eu/media-press/...

The infamous XSS cybercrime forum appears to have been seized. #infosec

R.I.P Ozzy.

Update: Microsoft has released security updates that fully protect customers using all supported versions of SharePoint affected by CVE-2025-53770 and CVE-2025-53771. Customers should apply these updates immediately. Full guidance and detection details: msft.it/6010sDzSE.

Our investigation revealed how a little-known Microsoft program could leave some of the U.S. government’s most sensitive data vulnerable to hacking from its leading cyber adversary. TL;DR, these are the 9 biggest takeaways ⤵️

Aldi is selling 50-gram packets of "hand picked" dried mixed forest mushrooms this week if anyone is interested, mmmmm? #Australia

Low-quality bug reports generated by AI are overwhelming open-source projects such as curl and Python. This might necessitate projects moving to bug reporting platforms where security researchers are vetted rather than leaving an open inbox. #infosec www.theregister.com/2025/07/15/c...

Hot stuff: Four picked up in the UK related to the ransomware/extortion attacks against M&S, Co-op and Harrods: www.nationalcrimeagency.gov.uk/news/retail-... #infosec

Would you like an IDOR with that? Leaking 64 million McDonald’s job applications. Nice findings by @zlz.bsky.social‬ + ian.sh/mcdonalds #infosec

A group claiming to be a rebrand of the old RansomedVC operation has returned online as RebornVC and leaked comms from the Medusa RaaS ransomed.biz/medusa/

I seem to have escaped the worst from the Qantas breach -- no phone number, email or physical address was leaked, just name, frequent flyer number and tier. #infosec #australia

Pro-Russian hacktivism campaigns continue to be directed at countries and entities supporting Ukraine. Here's a briefing about new hacktivist groups and the risks. #infosec intel471.com/blog/pro-rus...

#BREAKING: Qantas confirms a cyber incident on a third party platform that held records for 6 million customers. The airline expects a “significant” proportion of the data stored to have been stolen, but passwords, passport details and credit card records were not at risk.

Dozens of anonymous X accounts advocating for Scotland's independence went silent after Iran lost power following Israel's strikes: ukdefencejournal.org.uk/dozens-of-pr...

Spot on. This is the clearest explanation I’ve seen. It ‘s relatable, and humanizes the issue in a way everyone can understand.

Australian police allege this 27-year-old woman hacked the systems of Western Sydney University (she was a former student) to get discounted parking on campus, altered her own academic results and threatened to sell stolen student data on the dark web: www.parranews.com.au/2025/06/woma... #infosec

Kai Logan West (aka Kyle Northern) has been ID'd as IntelBroker, one of the owners of BreachForum and a prolific actor who breached dozens of organizations. Undercover officers bought data from him and tied supplied a BTC address to Ramp and Coinbase accouts in his real name. #infosec

Ouch. The trojanized NetExtender VPN installer isn't digitally signed by SonicWall but rather uses some digital certificate from "Citylight Media Private Limited" which appears to be a company in India. #infosec www.bleepingcomputer.com/news/securit...

X's AI chatbot Grok was asked voluminous questions by users about the Israel-Iran-US conflict and often gave different, inconsistent answers to the same questions. Research by the Atlantic Council's Digital Forensic Research Lab @dfrlab.bsky.social: dfrlab.org/2025/06/24/g...

New Octowave Loader sample is leading to Amatera Stealer deployment over the past week. 0 VT detections on any component of the malware loader. Proofpoint rules detect the outbound C2 traffic. My Yara rule detects the installer.

The Black Basta ransomware gang contracted a person with the nickname Tinker. Tinker came from Conti and had a knack for running call centres, writing phishing emails and ransom negotiations. More here from @intel471.bsky.social's Adversary Intelligence team. intel471.com/blog/a-look-... #infosec

It was a really busy week in cyber. My free weekly newsletter ~this week in security~ features all the news you need to know that you can read through in a breeze. Plus, it includes good news from the week and a featured cyber cat. And, no email open/link tracking. It's out Sundays. Sign up/RSS:

This is the first time I've seen privacy used as a marketing argument for eyeglasses. Is Zenni's claim is accurate? Does deflecting infrared light foil facial recognition/AI-based tracking? #infosec

-Russian hackers abuse app-specific passwords to bypass MFA -Viasat identified as 10th Salt Typhoon victim -Predatory Sparrow hacks Iranian crypto-exchange -Argentina arrests Russian disinfo gang -Passkeys for Meta apps Podcast: risky.biz/RBNEWS440/ Newsletter: news.risky.biz/risky-bullet...

New random password generator: my 2 yr old and some fridge magnets

Some of the hacked funds from Iran's Nobitex exchange -- purportedly attacked by Predatory Sparrow -- are being held in vanity addresses that have variations of "F*ckIRGCterrorists" in the public keys. www.elliptic.co/blog/iranian...

Good story about the murky, mostly lawless world of data brokers and their trade in Australians' personal details. By @joshtaylor.bsky.social #infosec www.theguardian.com/world/2025/j...

Pro tip for reporters covering protests who want to minimize getting hurt: Being in the middle of both sides is the worst place.