Już 8 kwietnia zapraszam serdecznie na SECURE 2026 organizowany przez NASK i CERT.PL, a w szczególności moją prezentację "Śledzenie i analiza infrastruktury typu ORB w praktyce threat intelligence". Do zobaczenia! Link do rejestracji: www.secure.edu.pl/register

At Standard Chartered Cyber Intelligence Centre once again we are hiring, as we are looking for a colleague in US to support intelligence ops focused on ransomware affiliates. Join us for discovery and tracking of emerging groups, and translating intelligence to operational outcomes.1/4

Thanks for this post. I'm really tired of basic-ass analyses that go like "well based on historical patterns we expect retaliatory attacks". If you are doing an actual analysis perhaps there are few more factors that impact the Iranian capabilities currently and you might want to consider those.

Annual report by the Välisluureamet / Estonian Foreign Intelligence Service is always a must read, but what struck me most in this edition was this passage right in the foreword: 1/6

For folks looking for Notepad++ IoCs, @rapid7.com just dropped a write-up. www.rapid7.com/blog/post/tr...

W piątek CERT.pl opublikował oczekiwany raport dotyczący ataku na sieć energetyczną, który miał miejsce w grudniu ubiegłego roku. Raport jest naprawdę świetny pod względem technicznym, jednak nie tylko szczegóły ataku są tam interesujące. 1/12

Speaking of international tensions, fact that Łukasz Żal was not nominated for Hamnet is Greenland level outrageous.

Rutte should get the Nobel Prize

This is how you announce European strategic autonomy.

Well deserved www.polskieradio.pl/395/7791/Art...

Quite reasonable take on cyber and Venezuela. While I sympathise with infosec community being sick of 'zomg cyber nuclear blackout' being hyped up, I think it is also bit silly to downplay a simple fact that country with cybercommand can deploy offensive cyber ops. www.nytimes.com/2026/01/15/u...

Truly 300iq takes in prediction market space - „If you pay an insider for insider information you will get higher probability answer”. Learning about stock regulations on insider trading like why executives have to schedule sale of stock would make their heads blow up like a T72 turret.

To zawsze przywilej i zaszczyt móc współtworzyć Polski Blue Team podczas Locked Shields i uczestniczyć w budowaniu zdolności Sojuszu w zakresie cyberobrony. Tradycyjnie bardzo dziękuje DKWOC, @gtworek.bsky.social, CCDCOE i oczywiście wszystkim uczestnikom!

As usual there are issues and speed bumps but in general I feel that PL and European defense/deterrence capabilities development is gaining momentum adequate to the situation. The only variable we can't control is Russia's willingness to commit national suicide. www.polskieradio.pl/395/7784/Art...

To say that the new Switzerland's security policy strategy is remarkable is to say nothing. Probably as much of a pivot towards heightened readiness to Russia threat and military cooperation with Europe as possible while upholding neutrality related positions.

Good timing, less than two weeks after I gave a talk at #OMHconf on involvement of private entities in state cyber ops ;) www.bloomberg.com/news/article...

Finally!

Bardzo dziękuje wszystkim którzy wysłuchali mojej prezentacji na #OMHconf. Biorąc pod uwagę jak wysoki był poziom prelekcji ścieżki Cyberwar to naprawdę wielkie wyróżnienie, że to właśnie moja została najlepiej oceniona. Mam nadzieję, że uda mi się co najmniej utrzymać ten poziom :)

I will be thinking about this piece by @shaneharris.bsky.social for some time and you should too. Astonishing account of journalist handling a source in high risk environment. IMHO mandatory read for folks in security and intel line of work. www.theatlantic.com/magazine/202...

Recently I had pleasure of joining @arunninghacker.bsky.social and the rest of No Name Podcast crew to discuss threat intelligence and counterintelligence, what does S stand for in TTP, or how escalatory are cyber operation. Join us here on platform of your choice nonamepodcast.org/podcast/no-n...

Kolejna świetna edycja #OMHconf za nami. Bardzo dziękuje organizatorom za możliwość wystąpienia tutaj już po raz trzeci, tym którzy oglądali moje wystąpienie (na żywo bądź nagranie :D) i wszystkim z którymi miałem okazję porozmawiać podczas wydarzenia. Do zobaczenia za rok!

Już jutro widzimy się na #OMHconf, więc zapraszam serdecznie jeżeli będziecie chcieli posłuchać jak to outsourcing odważnie wkracza w świat cyber operacji. A nawet jeżeli nie, to agenda jest tak napakowana treścią, że napewno znajdzie coś dla siebie. Say hi if you are there ;)

Już 2 grudnia widzimy się w Warszawie na #OMHconf gdzie opowiem jak jak sektor prywatny odważnie wkracza w świat ofensywnych operacji cyber. Jeżeli więc chcecie posłuchać o warunkach pracy kontraktorów waszych ulubionych APT czy tym jak outsourcing pomaga ciąć koszty cyber włamań to czekam 🕵️‍♂️

. @bindinghook.bsky.social Live was an absolutely amazing event. Combination of tech, legal, and strategy aspects was perfect, even more impressive given that it was a single day event. Not a single talk that would not be intersting/useful to me. Congrats @virtualroutes.bsky.social!

As always it was pleasure and honour to visit Jesus College in the University of Cambridge and all the squirrels living there :) The Cambridge Economic Symposium is going strong now in its 42nd year and I was very proud to provide frontline perspective on cyber enabled financially motivated ops!

Off to London and then Cambridge to represent Standard Chartered Cyber Intelligence Centre at the Cambridge International Symposium on Economic Crime. As always very much looking forward to this incredible forum and catching up with distinguished guests of the Symposium. Say hi if you’ll be there 😊

Sometimes you just know that a picture is one for history books. You can be also pretty sure about how related events will be described.

I have recently fallen into rabbit hole of subreddits where folks claim to be in relationships with LLMs and holy shit equating belief in LLM sentience with belief in god is one of the most cyberpunk things I’ve seen in a while.

Excited to share that I will speaking at the Cambridge Economic Crime Symposium about cyber-enabled financial crime. Particularly, how it is not only a domain of eCrime actors but also state-nexus groups, for whom it might serve as a useful platform for sanction evasion. See you in Cambridge!

Alex doing the unpleasant but much needed job.

'The people who have crippled you, you want to see them burn' RIP Ozzy :( www.youtube.com/watch?v=mfTp...

Standard Chartered Threat Intelligence team is looking for a new colleague who will help us with task automation, and particularly squeezing out even more juices from The Vertex Project Synapse platform we are using. 1/2

I hate this so much I can repost but I won't give a like.

I have finally managed to finish McCarthy's Blood Meridian and just wow. Because of how hyped up this book is I almost expected to be underwhelmed but nope. Absolutely incredible piece of literature and the prose is simply mesmerising.

W dzisiejszym odcinku Cyberpunk 2077 czy rzeczywistość posłowie na Sejm RP 'witają' i 'chcą' nadawać obywatelstwo' modelowi językowemu po tym jak wielka korporacja dostosowała parametry modelu tak, że generuje treści zgodne z ich światopoglądem. PS William Gibson nie doszacował.

The buck stops ummmmmm..... somewhere?

[PL] Moje występnie z zeszłorocznego Oh My Hack jest już dostępne na YT. Zapraszam więc wszystkich zainteresowanych strategicznym i politycznym wymiarem odpowiedzi na cyber operacje :) 1/2 www.youtube.com/watch?v=72sk...

Recording of my CyCon panel just dropped on YT so you can enjoy my rant on the security posture of edge devices :) And on the more constructive side, some thoughts on the future of tracking threat actors and a discussion on how defenders' advantage comes into play. www.youtube.com/watch?v=HC20...

If you ever doubted the power of OSINT, just remember that the man with access to the most powerful intelligence apparatus in the world still feels the need to retweet random OSINT accounts.

Use Signal. We promise, no AI clutter, and no surveillance ads, whatever the rest of the industry does. <3

Nice! Forza Robert 🏎️

The Lego Baker Street set absolutely slaps 😍

Resting before running against Trump in 2028.

More CVE-2024-42009 exploitation from invoice[@]b-s-r[.]eu from May 29, 2025 Same subject and payload that CERT-PL found, but sent via TOR node instead of freemail provider cert.pl/en/posts/202...

Heading out to Netherlands for Hague #TIX 😊 Very much looking forward to all the talks and say hi if you’ll be there!

Omg once again my reading pile is slowly and steadily getting out of control. Thx a lot #CyCon!

CyCon was one of the most impressive events I've attended in a long time. Even more so it was such an honor and pleasure to be able to contribute. Thank you to all who made it happen and deepest gratitude to the Ukrainian delegation - your courage and perseverance should be inspiration to all of us.

Extremely honoured to be at #cycon2025! Yesterday super interesting workshop on wargaming and today great official start of the event. Tomorrow I’ll be presenting my research on implications of insecurity of edge devices so pls send good vibes :D