Nostr notes by Metacurity

Say farewell to the most intensely cyber-aware month in history ...

2026-10-30T13:01:11Z

Say farewell to the most intensely cyber-aware month in history by checking out today's Metacurity for the most critical infosec developments you should know, including

--How North Korean hackers pulled off the biggest crypto heist in history,
--Polymarket halts trading after third-party hack drains $2.65m,
--Backdoored Claude Code extension plants SSH backdoor in Cursor,
--Mistral touts Le Chonk as top open-weight coding and cybersecurity AI,
--Accenture contractor's Claude Code agent exposes Pentagon credentials,
--GSA audit finds sensitive files improperly shared on Google Drive,
--Unsecured CitySourced database exposed 42m documents,
--GCHQ can't account for thousands of sensitive storage devices,
--Fake iOS crypto app drains 27 wallets,
--Chinese hackers use DeepSeek and AI tools to attack 200 organizations,
--Proton CEO blasts security concerns as "loser thinking" amid AI push,
--Hackers exploit critical Drupal Commerce vulnerability,
--Florida student aid breach exposes data on 4.9m people,
--Icepick's DHS contractor database returns under new domain,
--Nvidia CEO's allegedly caught in a Chinese honeypot situation,
--Cyber defenders face burnout amid AI-powered attack surge
https://www.metacurity.com/how-north-korean-hackers-pulled-off-the-biggest-crypto-heist-in-history/

The Dutch NCSC website status right now. "Due to ...

2026-10-21T11:45:42Z

The Dutch NCSC website status right now.

"Due to vulnerabilities in PHP, we have temporarily taken the NCSC website offline as a precaution. We're working to get the website back up and running as quickly as possible. For updates, please check out advisories.ncsc.nl (Dutch only)."

h/t Ciaran Martin (npub1g3n…kzaf)
https://www.ncsc.nl/index-en.html

Holy sh*t. "A few months into President Donald Trump’s ...

2026-10-19T10:30:35Z

Holy sh*t.

"A few months into President Donald Trump’s second term, political appointees at the Department of Homeland Security made an unusual request of its agency focused on cybersecurity: Secretly acquire a voting machine and hack it."

"Moreover, the agency had been directed not to alert the voting machine company if it uncovered flaws, contrary to its standard practices."

"The CISA employees repeatedly told the political appointees that their request was impossible, in part because the agents capable of pulling off such an operation had just been laid off by Elon Musk’s Department of Government Efficiency initiative. The appointees eventually stopped pressing CISA."

https://www.propublica.org/article/cisa-election-security-donald-trump

"H2O Retailing Corp. is the latest major company among the ...

2026-10-19T10:18:56Z

"H2O Retailing Corp. is the latest major company among the many in Japan that are disclosing massive data breaches almost daily, which are exposing millions of customer records and revealing weaknesses in corporate cybersecurity."
https://www.asahi.com/ajw/articles/16976490

I spent a lot of time talking with cyber folks at cons during ...

2026-10-14T14:09:58Z

I spent a lot of time talking with cyber folks at cons during September, and without prompting, they told me over and over again how the frontier labs are just failing cybersecurity 101.

So check out my latest CSO piece on how bad security practices and not agents with minds of their own cause those "rogue" hacking incidents.

Thanks to everyone who spoke with me, and thanks to Rob T. Lee, Gary McGraw, and Dan Wallach for their further thoughts.
https://www.csoonline.com/article/4234854/ai-agents-arent-going-rogue-frontier-labs-are-skipping-security-basics.html

H&M targeted by hackers behind Asos cyberattack ...

2026-10-12T12:26:35Z

H&M targeted by hackers behind Asos cyberattack
https://www.thetimes.com/business/companies-markets/article/h-and-m-xbnlq60g7

“Those agents are doing exactly what they’ve been asked to ...

2026-10-02T11:30:23Z

“Those agents are doing exactly what they’ve been asked to do,” LeCun said. “They were supposed to be in sandboxes, but the sandboxes were leaky and horribly designed.”

https://fortune.com/2026/10/01/yann-lecun-anthropic-ceo-dario-amodei-deluded-crazy-cybersecurity/

There is so much cyber news going on this week that one could be ...

2026-09-02T10:35:29Z

There is so much cyber news going on this week that one could be forgiven for missing this: ShinyHunters launched a ransomware attack on Jack Henry, one of the largest core banking technology providers in the United States.
https://ir.jackhenry.com/news-releases/news-release-details/jack-henry-issues-statement-response-cybersecurity-incident

Read the whole. He was not saying attribution didn't matter.

2026-08-27T21:23:25Z

In reply to nevent1q…w32v
_________________________

Read the whole. He was not saying attribution didn't matter.

RE: https://infosec.exchange/@metacurity/117167870737283207 ICYMI ...

2026-08-27T21:03:50Z

RE: https://infosec.exchange/@metacurity/117167870737283207

ICYMI

“From a cyber defender standpoint, we don’t care; it could be Martians, it could be Iranians, it could be Americans,” Sean Tufts says. “We need to be better, and if someone’s proving they have these capabilities, then we need to take that warning.”

quoting
note170w…5cl6

The attack on a small UK energy generator caused no blackout and threatened no national systems, highlighting how adversaries can target critical infrastructure’s vast, poorly defended “long tail," and still create disruption, fear, and headlines.

Check out my latest CSO piece for more details.

Many thanks to Josh Picolet of Team Cymru, Phil Tonkin from Dragos, and Sean Tufts of Claroty for their insight.
https://www.csoonline.com/article/4214535/critical-infrastructures-long-undefended-tail-exposed-by-uk-energy-attack.html

The attack on a small UK energy generator caused no blackout and ...

2026-08-27T14:10:24Z

The attack on a small UK energy generator caused no blackout and threatened no national systems, highlighting how adversaries can target critical infrastructure’s vast, poorly defended “long tail," and still create disruption, fear, and headlines.

Check out my latest CSO piece for more details.

Many thanks to Josh Picolet of Team Cymru, Phil Tonkin from Dragos, and Sean Tufts of Claroty for their insight.
https://www.csoonline.com/article/4214535/critical-infrastructures-long-undefended-tail-exposed-by-uk-energy-attack.html

Not sure what happened, but a Microsoft update somehow wiped out ...

2026-08-24T16:46:02Z

Not sure what happened, but a Microsoft update somehow wiped out all my Notepad tabs, I think.

I googled suggested solutions and can't find any that work.

If this has happened to you, can you guide me to a solution that worked for you? Thank you.

An Iranian-linked cyberattack knocked a small British power ...

2026-08-24T14:40:01Z

An Iranian-linked cyberattack knocked a small British power generator offline for four days last month, putting a spotlight on the security of smaller energy facilities.

Check out today's Metacurity for more on what happened in the UK and other top infosec developments you might have missed over the weekend, including

--GTA VI hacker leaks gameplay and map,
--Hackers claim 6.1 TB theft from Italian schools,
--CISA warns of exploited MLflow flaw,
--OpenAI warns of persistent AI cyberattacks,
--Anthropic puts Mythos 5 to work on cyber defense,
--Anthropic customers balk at pricey Fable 5,
--Black Hat and DEF CON attendee phishing campaign weaponizes Google Docs,
--OpenAI calls for stronger California AI law,
--Apollo confirms breach after social engineering attack,
--Irregular postmortem leaves key questions unanswered,
--Latvia road agency faulted for late breach reporting,
--Medusa ransomware victim count tops 500,
--Thousands of leaked AWS keys remain active,
--Malware targets Android car head units,
--ToxicPanda expands Android attack arsenal,
--New Zealand moves to ban social media for under-16s,
--Prevalent AI raises $22 million,
--Munich Re buys At-Bay for $575m
--Lawmakers seek probe of CISA staffing cuts,
--TikTok settles children’s privacy case for $400m,
--Google launches tool to expose image context,
--Flock builds AI to identify and track drivers,
--Flock CEO calls for privacy-safety “compromise”
https://www.metacurity.com/iran-linked-uk-power-generator-attack-exposes-a-cybersecurity-blind-spot/

A BBC investigation found NHS Blood and Transplant (NHSBT) sent ...

2026-08-14T11:25:04Z

A BBC investigation found NHS Blood and Transplant (NHSBT) sent the names, dates of birth and types of organs being offered or needed to members of hospital transplant teams who were using pagers, unaware they were not encrypted
https://www.bbc.com/news/articles/clyj92j210do

"A former OpenAI employee described what was often a grueling ...

2026-08-10T10:31:23Z

"A former OpenAI employee described what was often a grueling work culture marked by frequent 'crisis meetings, ' working on weekends, and 'super cut-throat' performance reviews that would see colleagues suddenly let go."
https://www.bbc.com/news/articles/cvgx4yd1gl2o

ICYMI, my latest CSO piece is about the coordinated cyber attack ...

2026-07-31T09:42:47Z

ICYMI, my latest CSO piece is about the coordinated cyber attack on 30 Minnesota water utilities and how it has alarmed industrial cybersecurity specialists because it is the first distributed campaign against dozens of small utilities linked by a common operational technology weakness.

Many thanks to Markus Mueller, Ron Fabela, Scott Caveza and Cynthia Kaiser for their insights.
https://www.csoonline.com/article/4203638/a-coordinated-attack-hit-30-minnesota-water-systems-who-did-it-and-what-does-a-rockwell-notice-add-to-the-picture.html

Nostr event nevent1qqsdcszhjkf5772s6nmq7f57en2vgq0w7aatcm5v5yxd9q469g2qd9czypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t665jlkgsa

2026-07-27T14:20:33Z

https://www.csoonline.com/article/4201761/openai-not-part-of-the-new-open-secure-ai-alliance.html

Check out today's Metacurity for the most critical infosec ...

2026-07-27T13:27:57Z

Check out today's Metacurity for the most critical infosec developments you may have missed since Friday, including

--OpenAI missed rogue agent,
--Hugging Face breach reshapes open-v-closed AI,
--Firms abandon AI lab loyalty,
--Open-weight AI's Kubernetes moment
--China pushes open-weight AI,
--Washington splits on Chinese AI,
--N. Korea expands its intelligence apparatus,
--Hackers hijack hotel Wi-Fi to steal Microsoft 365 accounts,
--DOJ tests privacy limits with GrapheneOS prosecution,
--Malware found in Steam’s biggest indie game,
--Google unveils a simpler threat actor naming scheme,
--Dutch Olympic speed skating venue hit by The Gentlemen,
--Tribeca Festival leak exposed celebrity contact information,
--Companies return to entry-level human hiring in the AI era,
--Comic-Con bans Meta smart glasses,
--AI guardrails fail on mass-casualty prompt
https://www.metacurity.com/ai-watch-openais-hacking-agent-breach-signals-a-fracturing-ai-order/

"We now have more details of what happened. Every time we ...

2026-07-27T10:53:58Z

"We now have more details of what happened. Every time we learn more details, it somehow makes things seem worse."
https://thezvi.substack.com/p/more-on-an-internal-openai-model

The feds have returned to Black Hat/DEFCON ...

2026-07-16T20:09:24Z

The feds have returned to Black Hat/DEFCON

https://www.businesswire.com/news/home/20260716737340/en/Black-Hat-USA-2026-Keynotes-to-Address-AIs-Impact-on-Cyber-Operations-Defense-Strategy-and-Vulnerability-Research

I sat down with cybersecurity pioneer and distinguished professor ...

2026-07-14T15:11:07Z

I sat down with cybersecurity pioneer and distinguished professor of computer science at Purdue University, Gene Spafford @spaf -- who wrote the foreword to my book on the NIST Cybersecurity Framework -- to discuss why we need stalwart frameworks such as the NIST CSF more than ever in the AI era.

One fascinating point he made: AI isn't uncovering new vulnerabilities; it's exposing old ones, which Gene calls a form of willful tech debt.

Willful debt is the security investment an organization, mostly vendors, chose to skip, the same way you'd choose a new TV over paying the electric bill. AI just makes the consequences show up faster.

Watch his explanation below and read more about our full conversation at https://cyberriskbook.com/ai-wont-save-you-from-weak-cybersecurity-fundamentals/
#CyberSecurity #NIST #NISTCSF #RiskManagement

"CyberScoop spoke with several Secretaries of State who said ...

2026-07-13T21:29:13Z

"CyberScoop spoke with several Secretaries of State who said that the number one threat facing elections in their state is not from a foreign country or AI but their own federal government."
https://cyberscoop.com/trump-administration-eac-firings-doj-election-officials-threat/

Please please stop with this AI chart junk. ...

2026-07-10T13:07:24Z

Please please stop with this AI chart junk.

Man, check out this graphic. ...

2026-07-02T14:49:00Z

Man, check out this graphic.

Quite the attendee list for Thiel's masters of the universe ...

2026-06-17T10:16:50Z

Quite the attendee list for Thiel's masters of the universe event. Some people who are genuinely good are on this list.

https://github.com/nzaki-dev/dialog

iRhythm reports cybersecurity breach with protected health data ...

2026-06-15T22:21:33Z

iRhythm reports cybersecurity breach with protected health data accessed

https://www.massdevice.com/irhythm-reports-cybersecurity-breach-health-data/

first time it has happened to me. It was after that long stretch ...

2026-06-14T23:19:12Z

In reply to nevent1q…89m2
_________________________

first time it has happened to me. It was after that long stretch of rain.

I had slugs eat two Swiss chard seedlings and one collard ...

2026-06-14T23:17:05Z

In reply to nevent1q…nrmg
_________________________

I had slugs eat two Swiss chard seedlings and one collard seedling wholesale, leaving nothing. Then they ate another collard seedling leaving only the naked stems. Now all chard and collards are elevated.

Trump's binding operational security directive is out. ...

2026-06-10T15:07:55Z

Trump's binding operational security directive is out.

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

🤣

2026-06-08T16:05:08Z

In reply to nevent1q…l0u6
_________________________

🤣

ChatGPT is getting an overhaul because 'Chat is dead' ...

2026-06-08T16:02:20Z

ChatGPT is getting an overhaul because 'Chat is dead'
https://www.androidauthority.com/chatgpt-overhaul-openai-3675309/?mid=1#cid=3561084

I’ve got a piece coming out on how there has never been a ...

2026-05-25T07:34:36Z

I’ve got a piece coming out on how there has never been a better time to ask for more cyber budget and although it’s not central to my piece, every one i spoke to said security hiring will pick up.

One Job That Is Growing in the A.I. Era? Cybersecurity Experts.

https://www.nytimes.com/2026/05/24/technology/one-job-that-is-growing-in-the-ai-era-cybersecurity-experts.html

This is an incredible graphic from CrowdStrike. ...

2026-05-18T13:09:00Z

This is an incredible graphic from CrowdStrike.

Thousands of Vibe-Coded Apps Expose Corporate and Personal Data ...

2026-05-07T12:02:32Z

Thousands of Vibe-Coded Apps Expose Corporate and Personal Data on the Open Web
https://www.wired.com/story/thousands-of-vibe-coded-apps-expose-corporate-and-personal-data-on-the-open-web/

Police are using surveillance tech to stalk love interests. ...

2026-05-02T15:08:04Z

Police are using surveillance tech to stalk love interests. Dystopia, here we come
https://www.theguardian.com/commentisfree/2026/may/02/flock-police-surveillance-tech-birds-iran-press-freedom?utm_term=Autofeed&CMP=bsky_gu&utm_medium=&utm_source=Bluesky#Echobox=1777733544

"Until just over a week ago, most policymakers had expected ...

2026-04-17T13:12:00Z

"Until just over a week ago, most policymakers had expected the IMF and World Bank meetings to focus on the conflict in the Middle East, tensions in the private credit market, and elevated levels of government debt," and instead they're focusing on Mythos.
https://www.ft.com/content/5760b56a-ec83-46da-a301-4b0e8c73c238?syn-25a6b1a6=1

OK, I just discovered this extremely useful take on Claude Mythos ...

2026-04-13T14:30:27Z

OK, I just discovered this extremely useful take on Claude Mythos and highly recommend it to all cyber practitioners.
https://labs.cloudsecurityalliance.org/wp-content/uploads/2026/04/mythosready.pdf

"The vast majority, about 90%, of the more than 260,000 DHS ...

2026-03-14T13:09:49Z

"The vast majority, about 90%, of the more than 260,000 DHS employees are continuing to work without pay throughout the funding lapse, which began Feb. 14. Employees earlier this month received partial paychecks, compensated only for work hours they completed prior to the start of the shutdown."
https://federalnewsnetwork.com/government-shutdown/2026/03/many-dhs-employees-miss-first-full-paychecks-as-shutdown-continues/?readmore=1

A quiet but significant expansion of the US surveillance ...

2026-03-13T13:32:16Z

A quiet but significant expansion of the US surveillance apparatus is taking shape inside DHS — built from travel databases, biometric systems, location data markets, AI analytics, and tools like Palantir’s ELITE platform.

In this report, I trace how investigative reporting from Mother Jones, Wired, and 404 Media reveals the architecture of a system capable of tracking Americans’ movements, identities, and digital lives.

Available to Metacurity paid subscribers.
https://www.metacurity.com/the-homeland-security-surveillance-machine/

This is for Wynn Resorts. ShinyHunters demands $1.5M not to leak ...

2026-02-20T18:34:08Z

This is for Wynn Resorts.

ShinyHunters demands $1.5M not to leak Vegas casino and resort chain data
https://www.theregister.com/2026/02/20/shinyhunters_wynn_resorts/?utm_source=dlvr.it&utm_medium=bluesky

It's downright weird that McDonald's is leading a ...

2026-02-05T11:40:04Z

It's downright weird that McDonald's is leading a campaign to advise us to use more secure passwords.

McDonald's is not lovin' your bigmac, happymeal, and mcnuggets passwords
https://www.theregister.com/2026/02/02/mcdonalds_password_advice/

If I am reading this correctly, Northern Ireland police, who just ...

2026-02-04T12:05:29Z

If I am reading this correctly, Northern Ireland police, who just received compensation of £7,500 per officer for having their personal details published in error on the internet, were revictimized today when the Northern Ireland court system again published their personal details.
https://www.belfasttelegraph.co.uk/news/northern-ireland/it-defies-belief-names-of-psni-officers-published-on-court-website-in-new-breach/a122899735.html

ICE wants all the federal funding , all the government data, all ...

2026-01-28T13:09:45Z

ICE wants all the federal funding , all the government data, all the surveillance technology it can get its hands on. Now it wants to track people using data it can source from technology and advertising companies. It is a malignant black hole.

ICE knocks on ad tech’s data door to see what it knows about you

https://www.theregister.com/2026/01/27/ice_data_advertising_tech_firms/

Wow. “Booz Allen failed to implement adequate safeguards to ...

2026-01-26T15:26:27Z

Wow.

“Booz Allen failed to implement adequate safeguards to protect sensitive data, incl. the confidential taxpayer information it had access to through its contracts with the Internal Revenue Service.”

Treasury Cancels Contracts with Booz Allen Hamilton

https://home.treasury.gov/news/press-releases/sb0371

This piece makes the interesting case that accountants can be a ...

2026-01-20T11:35:44Z

This piece makes the interesting case that accountants can be a first line of defense against cyber threats.

Research reveals a surprising line of defence against cyber attacks: accountants
https://theconversation.com/research-reveals-a-surprising-line-of-defence-against-cyber-attacks-accountants-272428

Target's dev server offline after hackers claim to steal ...

2026-01-13T11:23:30Z

Target's dev server offline after hackers claim to steal source code

https://www.bleepingcomputer.com/news/security/targets-dev-server-offline-after-hackers-claim-to-steal-source-code/

Confusing, right? But that video shows total obliteration of one ...

2026-01-05T12:33:19Z

In reply to nevent1q…kdhd
_________________________

Confusing, right? But that video shows total obliteration of one of the substations -- why even bother with cyber if you're going to do that?

So Venezuela's energy ministry is saying the attack that ...

2026-01-05T11:26:20Z

So Venezuela's energy ministry is saying the attack that brought down the power grid in Caracas was a physical assault on substations and not a cyber attack.
https://mppee.gob.ve/?p=103279

This contradicts Trump's statement about the US having "expertise" and also the NYT's reporting that the attack "began with a cyberoperation that cut power to large swaths of Caracas." 2/2
https://www.nytimes.com/2026/01/03/us/politics/trump-capture-maduro-venezuela.html

Corpoelec's website is not only down for maintenance, it's not accessible at all today. https://corpoelec.gob.ve/

Nostr event nevent1qqsxdud9zzfswyl37ezk8y70t99t4kyhxs98727u0hl4q9ev7er0x0szypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t665tu3cgv

2026-01-04T07:51:25Z

https://www.nytimes.com/2026/01/03/us/politics/trump-capture-maduro-venezuela.html

“Inside Venezuela, the effort began with a cyberoperation that cut power to large swaths of Caracas, shrouding the city in darkness to allow the planes, drones and helicopters to approach undetected.”

Good god “At least six career staffers at the Cybersecurity and ...

2025-12-22T09:17:44Z

Good god

“At least six career staffers at the Cybersecurity and Infrastructure Security Agency were suspended with pay this summer after organizing a polygraph test that the agency’s acting director, Madhu Gottumukkala, failed.”

https://www.politico.com/news/2025/12/21/cisa-acting-director-madhu-gottumukkala-polygraph-investigation-00701996?utm_source=dlvr.it&utm_medium=bluesky

South Korea’s government is mobilizing an all-hands response to ...

2025-12-18T12:18:51Z

South Korea’s government is mobilizing an all-hands response to a data breach at e-commerce giant Coupang. The CEO was forced to resign and might face charges.

When has any US company or CEO been held to this level of accountability for a breach?
https://www.koreaherald.com/article/10639379

A Singaporean man was sentenced to prison and fined for teaching ...

2025-12-11T12:52:45Z

A Singaporean man was sentenced to prison and fined for teaching others how to use malware, the first known conviction for teaching malware tutorials.

Man gets jail for filming malware tutorials for syndicate; 129 Singapore victims lost S$3.2m
https://www.channelnewsasia.com/singapore/malaysian-malware-android-phones-129-victims-singapore-32-million-5569846

Nostr event nevent1qqs90sgg3upanjq50fu4ms6cd3ghs8eu5h3xlknecra74nhs5k6amfgzypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t665d7w0nf

2025-12-09T06:54:16Z

https://www.koreatimes.co.kr/business/companies/20251209/police-raid-coupang-over-massive-data-breach
This is what happens when you do bad cybersecurity.

Police reportedly seek to check for possible lapses in Coupang's security, while tracking down the suspect behind the leak. cybersecurity.

Nostr event nevent1qqs89hawg6mp5d8wfyswtckasnuhaah53z564xshemcrjc8wt0hfp0gzypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t665kmqm55

2025-11-25T00:06:55Z

https://www.clickondetroit.com/news/local/2025/11/22/campbell-soup-exec-caught-on-secret-recording-slamming-product-people-who-buy-it/
The exec caught on the recording was Campbell’s CISO.

Nostr event nevent1qqsfclskkkgls9936qjltammz0vlpqtp2m7rk8c9f4ypd7n3whwtruszypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t665d83hc4

2025-11-24T09:18:50Z

https://www.theguardian.com/technology/2025/nov/24/civil-liberties-groups-call-for-inquiry-into-uk-data-protection-watchdog

Dozens of civil liberties campaigners and legal professionals are calling for an inquiry into the UK’s data protection watchdog, after what they describe as “a collapse in enforcement activity” after the scandal of the Afghan data breach.

The US and the UK are going after bulletproof hosting companies. ...

2025-11-19T14:05:39Z

The US and the UK are going after bulletproof hosting companies.

United States, Australia, and United Kingdom Sanction Russian Cybercrime Infrastructure Supporting Ransomware
https://home.treasury.gov/news/press-releases/sb0319

All those allegations that China is using TP-Link routers to spy ...

2025-11-19T11:08:21Z

All those allegations that China is using TP-Link routers to spy or to lay the groundworks for attacks or whatever have cost the California-based but Chinese-owned company $1 billion, according to a lawsuit filed by TP-Link against Netgear.

Fwiw, the allegations began in Washington and were wholly unfounded, but that hasn't slowed the drumbeat to ban TP-Link.

https://www.csoonline.com/article/3504775/no-evidence-that-tp-link-routers-are-a-chinese-security-threat.html

https://www.bloomberg.com/news/articles/2025-11-19/netgear-accused-by-rival-of-china-smear-to-stoke-security-fear

Nostr event nevent1qqsfzdaf06355dmrdsn63yvk7z87kmqsyxjh3pf3czumaawlsmkykcczypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t665wclt0z

2025-11-19T06:04:39Z

https://world.kbs.co.kr/service/news_view.htm?lang=e&Seq_Code=197518
Crazy times in South Korean cyber.

There has been an insane amount of high-profile cybersecuriy ...

2025-11-17T13:43:24Z

There has been an insane amount of high-profile cybersecuriy developments since Friday morning, so check out today's Metacurity for what you might have missed over the weekend, including

--US issues seizure warrants for Starlink terminals in Myanmar cyberscam compounds,
--US citizens plead guilty to aiding DPRK IT worker fraud,
--$28B tied to cybercrime activity over the last two years,
--Princeton got hit by a data-stealing cyberattack,
--Anthropic's report of autonomous AI Chinese hacks hits pushback,
--Cybercom invests in cyberwarfare AI agents,
--German legislature approves ban on selected Chinese kit,
--Taiwan warns of security flaws and misinformation in Chinese LLMs,
--Dutch police seize thousands of bulletproof hosting servers,
--UK prosecutors seize $5.4m from Twitter hacker,
--Russian man busted in Phuket could be Russian intel officer wanted by FBI,
--Breach of Somalia's electronic visa platform has wide implications,
--Hacked CCTV videos from Indian maternity ward sold on Telegram,
--Husband of the founder of Korean sportswear brand Andar sentenced for helping DPRK hackers,
--Critical FortiWeb flaw patched,
--Logitech confirms Clop attack,
--AIPAC breach affects 810 people,
--FBI is trying to unmask Archive[dot]is operator,
--Security pros agree senior management is responsible for security compliance,
--Crypto ATMs outnumber Wells Fargo ATMs,
--Devices for stealing keyless cars fetch $20k
https://www.metacurity.com/us-issues-seizure-warrants-for-starlink-terminals-in-myanmar-cyberscam-compounds/

"Twenty’s contracts are a rare case of an AI offensive ...

2025-11-17T12:36:14Z

"Twenty’s contracts are a rare case of an AI offensive cyber company with VC backing landing Cyber Command work; typically cyber contracts have gone to either small bespoke companies or to the old guard of defense contracting like Booz Allen Hamilton or L3Harris."

The Pentagon Is Spending Millions On AI Hackers
https://www.forbes.com/sites/thomasbrewster/2025/11/15/pentagon-spends-millions-on-ai-hackers/

"Dutch government bodies were unpleasantly surprised by news ...

2025-11-12T10:24:09Z

"Dutch government bodies were unpleasantly surprised by news that an American tech firm has acquired the Dutch cloud company Solvinity, the Financieele Dagblad reported.

Several governments opted for working with Solvinity precisely to reduce dependence on American technology firms"
https://nltimes.nl/2025/11/12/dutch-governments-caught-guard-american-tech-firm-buying-dutch-cloud-company?utm_source=dlvr.it&utm_medium=bluesky

Omfg "NSO’s new executive chairman, David Friedman, a ...

2025-11-10T12:26:14Z

Omfg

"NSO’s new executive chairman, David Friedman, a former U.S. ambassador to Israel and onetime bankruptcy lawyer for President Trump, said he wants to use his ties to the Trump administration to help rebuild the company’s spyware business in the U.S."

Israeli Spyware Maker NSO Gets New Owners, Leadership and Seeks to Mend Reputation
https://www.wsj.com/tech/israeli-spyware-maker-nso-gets-new-owners-leadership-and-seeks-to-mend-reputation-166ac50e?gaa_at=eafs&gaa_n=AWEtsqeTjThMB1_h1W1ewQnjnyji8Htzivc14xAyjmLD1jhojtWHS59ZMrQZW_ozWhc%3D&gaa_ts=6911d050&gaa_sig=bi4oz-fCkxtxpjHUj04ELh9BhkSPKU3Napkc4HbMWl5aa923Ah-Y4oBjTZW_Nsdg2DxfRCpo4QqTPBBI_MEqpA%3D%3D

"Donald Trump's clampdown on the U.S. Consumer Financial ...

2025-11-03T22:02:53Z

"Donald Trump's clampdown on the U.S. Consumer Financial Protection Bureau earlier this year has compounded IT security lapses at the agency through the cancellation of contracts"

US CFPB data security 'not effective' after Trump clampdown, watchdog report says
https://www.reuters.com/sustainability/boards-policy-regulation/us-cfpb-data-security-not-effective-after-trump-clampdown-watchdog-report-says-2025-11-03/

Kevin, I have to reiterate, MIT did not talk to me. You need to ...

2025-11-03T18:48:25Z

In reply to nevent1q…2l4j
_________________________

Kevin, I have to reiterate, MIT did not talk to me. You need to correct your piece.

Open-source security group pulls out of U.S. grant, citing DEI ...

2025-10-29T20:50:59Z

Open-source security group pulls out of U.S. grant, citing DEI restrictions
https://cyberscoop.com/python-software-foundation-rejects-federal-grant-funding-citing-dei-restrictions/

There is never a let-up in crucial infosec news, so check out ...

2025-10-16T13:13:00Z

There is never a let-up in crucial infosec news, so check out today's Metacurity for the developments you should know, including

--CISA warns agencies to update F5 appliances after breach disclosure,
--Sources say China hacked classified UK systems for over a decade,
--Some observers think a secret US cybercrime-fighting group doxxed a Russian ransomware kingpin,
--Microsoft is moving Surface manufacturing out of China,
--Pro-Palestine activists hacked four N. American PA systems,
--Dota 2 YouTube channel was hijacked to promote fraud,
--Criminals behind Bittensor hack laundered funds with anime NFTs,
--Cyberespionage group Mysterious Elephant is growing more sophisticated,
--German spyware victims sue Viktor Orbán,
--Vendor to Spanish retailer Mango experienced unauthorized access,
--Using AI to cover up AI usage,
--Man blames public Wi-Fi for getting totally pwned
https://www.metacurity.com/cisa-warns-agencies-to-update-f5-appliances-after-breach-disclosure/

Wow, a lot happened in the cybersecurity world over the weekend, ...

2025-10-13T12:08:30Z

Wow, a lot happened in the cybersecurity world over the weekend, so check out today's Metacurity for the most critical infosec developments you might have missed, including

--The White House fired 176 CISA employees on Friday, with more layoffs feared,
--Scattered Lapsus$ Hunters leaked 5m Qantas, 23m Vietnam Air customers' records,
--Spanish cops dismantle GXC Team,
--Dutch gov't warns of China's Nexperia security risks,
--Breach of crypto betting platform Shuffle exposes user data,
--FCC chair says sites have removed barred Chinese electronics
--N. Korean scammers now posing as architects,
--Korean government launches KT Telecom probe related to breach,
--OTA updates leave Jeeps bricked,
--CEO of UniCredit bank was targeted with Graphite spyware,
--NIH uses sensitive medical equipment from Chinese company with espionage track record,
--Trump withdraws nomination of Gen. William Hartman,
--Criminals are scamming driver's license seekers,
--World's biggest botnet is drawing power from telco-hosted IoT devices,
--Apple ups bug payouts for spyware to $2m,
--Hackers stole data from UK top screen industry union Bectu,
--Hackers stole massive amounts of data from Banco Hipotecario del Uruguay,
--A cyber incident hit Sugar Land, TX,
--Michigan City, IN hit by a ransomware attack,
--Resistant AI raised $25m in Series B,
--1Password sells $75m stake to Utah Jazz owners,
--Google's OSV database fixes undercount,
--AI might kill us with pathogens
https://www.metacurity.com/the-white-house-fired-176-cisa-employees-on-friday-with-more-layoffs-feared/

Yeah, I read that - it had to have been labeled that under a ...

2025-10-08T10:47:26Z

In reply to nevent1q…smre
_________________________

Yeah, I read that - it had to have been labeled that under a previous government. So, I guess it's that simple.

This is hard for me to understand. I mean, why not label China as ...

2025-10-08T10:44:07Z

This is hard for me to understand. I mean, why not label China as a security threat?

I understand that China is a powerful economic partner, but I'm missing something here.

China spy case collapse due to Labour government, prosecutors say
https://www.cityam.com/china-spy-case-collapse-due-to-labour-government-prosecutors-say/?mid=1#cid=3153100

Employees regularly paste company secrets into ChatGPT ...

2025-10-08T09:16:25Z

Employees regularly paste company secrets into ChatGPT
https://www.theregister.com/2025/10/07/gen_ai_shadow_it_secrets/

Asahi ships beer using paper and fax after ransomware attack ...

2025-10-04T10:52:21Z

Asahi ships beer using paper and fax after ransomware attack
https://www.japantimes.co.jp/business/2025/10/04/asahi-paper-fax-orders/

"If you think you might be burning out, you're already on ...

2025-09-30T08:47:59Z

"If you think you might be burning out, you're already on your way there," says Andrew Tillman, former head of cyber risk and assurance for the UK's Health Security Agency.

Why burnout is a growing problem in cybersecurity
https://www.bbc.com/news/articles/cgqn8e4e700o

Wow. The UK government is thinking of bailing out JLR. What a ...

2025-09-25T09:13:10Z

Wow. The UK government is thinking of bailing out JLR. What a case study on how absolutely critical cybersecurity risk management is.

Government considers financial support for JLR suppliers
https://www.bbc.com/news/articles/c62nv0xx32go

Nostr event nevent1qqst64uq82r7y8gkad8mf9zzllwyrmcc7d65g4dvf03cpfqtstslvvszypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t665kct6ve

2025-09-23T18:22:21Z

https://www.wired.com/story/sim-farm-new-york-threatened-us-infrastructure-feds-say/

“Despite speculation in some reporting about SIM farm operation that suggests it was created by a foreign state such as Russia or China and used for espionage, it’s far more likely that the operation’s central focus was scams and other profit-motivated forms of cybercrime”

Thanks @npub1qax…dr3u @npub1vc3…axsh, neutrality is not an ...

2025-09-21T15:50:31Z

In reply to nevent1q…jukc
_________________________

Thanks Sam Bowne :donor: (npub1qax…dr3u)
BrianKrebs (npub1vc3…axsh), neutrality is not an option anymore. I do my spouting off over at bluesky for the most part.

"Noah Urban’s role in the notorious Scattered Spider gang ...

2025-09-19T11:48:59Z

"Noah Urban’s role in the notorious Scattered Spider gang was talking people into unwittingly giving criminals access to sensitive computer systems."

‘I Was a Weird Kid’: Jailhouse Confessions of a Teen Hacker
https://www.bloomberg.com/news/features/2025-09-19/multimillion-dollar-hacking-spree-scattered-spider-teen-s-jailhouse-confessions

I am begging...does anybody know how to stop Microsoft from ...

2025-09-10T09:52:32Z

I am begging...does anybody know how to stop Microsoft from automatically shutting down my laptop, ever? There is supposedly a setting to disable this but I can't find it. This is the fourth or fifth time it's happened that has set me back in terms of things I'm working on.

The Untold Saga of What Happened When DOGE Stormed Social ...

2025-09-08T11:41:24Z

The Untold Saga of What Happened When DOGE Stormed Social Security
https://www.propublica.org/article/inside-doge-social-security-takeover-leland-dudek

Euro banks block billions in rogue PayPal direct debits after ...

2025-08-28T12:21:24Z

Euro banks block billions in rogue PayPal direct debits after fraud glitch
https://www.theregister.com/2025/08/28/euro_banks_block_paypal_direct_debits/

I asked Sherrod, and she said all they know is that they are a ...

2025-08-27T18:45:07Z

In reply to nevent1q…pznq
_________________________

I asked Sherrod, and she said all they know is that they are a financially motivated threat actor but aren't capable of much attribution beyond that.

Microsoft issued a blog post today on a new hellacious ransomware ...

2025-08-27T18:05:56Z

Microsoft issued a blog post today on a new hellacious ransomware attack by Storm-0501 that hops from on-prem assets to the cloud and then deletes everything it can, including backups, while encrypting everything else.

Thanks to [@sherrod_im](https://twtr.plus/users/sherrod_im ) DiGrippo for sharing her thoughts with me on this brutal new attack chain.
https://www.csoonline.com/article/4046438/storm-0501-debuts-a-brutal-hybrid-ransomware-attack-chain.html

This is just sensationally bad: Microsoft struck a deal with the ...

2025-08-06T12:27:52Z

This is just sensationally bad: Microsoft struck a deal with the Israeli secret intelligence arm Unit 8200 that allowed it to build a powerful new mass surveillance tool that collects and stores recordings of millions of mobile phone calls made each day by Palestinians in Gaza and the West Bank.

‘A million calls an hour’: Israel relying on Microsoft cloud for expansive surveillance of Palestinians
https://www.theguardian.com/world/2025/aug/06/microsoft-israeli-military-palestinian-phone-calls-cloud

27 Behind the Scenes Polaroid Snapshots From the Making of the ...

2025-08-03T21:09:17Z

27 Behind the Scenes Polaroid Snapshots From the Making of the 1995 Cult Classic “Hackers”
https://www.vintag.es/2025/07/hackers-polaroids.html

Nostr event nevent1qqs2ux7lz2j7luvv47fzkkc8z62hrdpykq0gpqfmqa6a2dtpqzxqhvgzypagmrtw4apcck4kanpx6xj8h7e3xrwegu070j3ulddxtakv6t66535z80l

2025-08-03T08:21:35Z

https://www.tomshardware.com/tech-industry/cyber-security/leading-phone-repair-and-insurance-firm-collapses-after-paying-crippling-ransomware-demand-cutting-100-employees-to-just-eight-wasnt-enough

Leading phone repair and insurance firm collapses after paying crippling ransomware demand — Cutting 100+ employees to just eight wasn’t enough

OMFG "A hacker compromised a version of Amazon’s popular AI ...

2025-07-23T13:55:47Z

OMFG

"A hacker compromised a version of Amazon’s popular AI coding assistant ‘Q’, added commands that told the software to wipe users’ computers, and then Amazon included the unauthorized update in a public release of the assistant this month"
https://www.404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent/?ref=daily-stories-newsletter

"Cognizant was not duped by any elaborate ploy or ...

2025-07-22T19:46:44Z

In reply to nevent1q…nkpr
_________________________

"Cognizant was not duped by any elaborate ploy or sophisticated hacking techniques," according to a copy of the lawsuit reviewed by Reuters. "The cybercriminal just called the Cognizant Service Desk, asked for credentials to access Clorox's network, and Cognizant handed the credentials right over."

Lawsuit says Clorox hackers got passwords simply by asking ...

2025-07-22T19:44:58Z

Lawsuit says Clorox hackers got passwords simply by asking
https://www.reuters.com/legal/government/lawsuit-says-clorox-hackers-got-passwords-simply-by-asking-2025-07-22/

We are on our own now. The mainstream press has abandoned us.

2025-07-15T12:07:25Z

In reply to nevent1q…uuz8
_________________________

We are on our own now. The mainstream press has abandoned us.

Senate strikes AI provision from GOP bill after uproar from the ...

2025-07-01T18:10:24Z

Senate strikes AI provision from GOP bill after uproar from the states
https://apnews.com/article/congress-ai-provision-moratorium-states-20beeeb6967057be5fe64678f72f6ab0

Yeah, it's just part of the game, I guess. But when I talk to ...

2025-06-30T11:54:44Z

In reply to nevent1q…gkqe
_________________________

Yeah, it's just part of the game, I guess. But when I talk to cyber threat intel analysts about what foreign threat actors do to the US, I frequently ask the question: Do we not do the same thing? Like, haven't we hacked China's telecom infrastructure too?

A website developed for the UK Home Office's 2022 ...

2025-06-25T11:25:07Z

A website developed for the UK Home Office's 2022 "flop" anti-encryption campaign has seemingly been hijacked to push a payday loan scheme.
https://www.theregister.com/2025/06/25/home_office_antiencryption_campaign_website/?mid=1#cid=2936061

Don't head out for the weekend until you've checked out ...

2025-06-20T13:40:27Z

Don't head out for the weekend until you've checked out today's Metacurity for the most critical infosec developments you should know, including

--Report of 16 billion credential breach debunked,
--Hegseth is under pressure to find Haugh's replacement,
--Israeli hackers released Nobitex source code,
--Czech president says China and Russia are hacking equals,
--China has repeatedly hacked Russia,
--Ryuk suspect extradited to US,
--Korean megachurch hacked to display DPRK flag,
--Oz kiddie social media ban nears reality,
--Krispy Kreme confirms 160K customers' data stolen,
--Oxford City Council hit by cyber incident,
--Taiwan's Feng Chia University hit by ransomware,
--X account of Andreessen Horowitz hijacked,
--New AI agent protocol can create malicious tickets,
--Banana Squad exploits GitHub to spread malware,
--Reputation-related cyber incidents cost shareholders 27%,
--Tadaweb raises $20m,
--France’s Gendarmerie has 100K Linux machines,
--Cloudflare blocked 7.3 Tbps attack,
--Poverty-stricken workers fired for susceptibility to hacker bribes
https://www.metacurity.com/report-of-16-billion-credentials-breach-debunked/

https://www.bbc.com/news/articles/cvg85r4yr5jo Your most ...

2025-06-18T08:50:33Z

https://www.bbc.com/news/articles/cvg85r4yr5jo
Your most sensitive data is apparently worth £10 but only if you spend £40.

Um, yeah... White House security staff warned Musk’s Starlink ...

2025-06-07T15:05:07Z

Um, yeah...

White House security staff warned Musk’s Starlink is a security risk
https://wapo.st/459sFuR

Exclusive: Legal Practice Board of Western Australia confirms ...

2025-05-28T08:59:49Z

Exclusive: Legal Practice Board of Western Australia confirms Dire Wolf ransomware attack
https://www.cyberdaily.au/security/12158-exclusive-legal-practice-board-of-western-australia-confirms-dire-wolf-ransomware-attack

Good lord. "The brief attack appears to have been a test run ...

2025-05-20T21:44:38Z

In reply to nevent1q…ew96
_________________________

Good lord. "The brief attack appears to have been a test run for a massive new Internet of Things (IoT) botnet capable of launching crippling digital assaults that few web destinations can withstand."

This should be much bigger news. CrowdStrike discovered that ...

2025-05-16T12:34:34Z

This should be much bigger news.

CrowdStrike discovered that state officials in Rhode Island had been unaware for more than five months that its VPN system, managed by Deloitte, had been hacked. Deloitte didn't know until the hackers asked for a ransom.

Now, it looks like RI will sue Deloitte.

https://www.bostonglobe.com/2025/05/15/metro/ribridges-vpn-hack-ri-breach-personal-data-investigation-findings/

Here is the CrowdStrike report.
https://admin.ri.gov/sites/g/files/xkgbur536/files/2025-05/RIBridges%20Investigation%20Summary%20FINAL%20-%20External%20Release.pdf

The Coinbase hack is expected to cost the company up to $400 ...

2025-05-15T11:40:16Z

The Coinbase hack is expected to cost the company up to $400 million, and the company has launched a $20 million reward fund for information leading to the attackers’ arrest and conviction.
https://www.investing.com/news/stock-market-news/coinbase-discloses-security-breach-expects-impact-of-up-to-400m-4047654

"Looking back now on the flag-planting internet movies of ...

2025-05-11T21:39:31Z

"Looking back now on the flag-planting internet movies of 1995, it’s incredible how well they predicted the possibilities and horrors on the horizon."
https://www.fastcompany.com/91330930/30-years-hackers-the-net-predicted-possibilities-horrors-internet-culture-90s

Oh goodie... Generative AI will surpass cybersecurity in many ...

2025-05-07T13:07:54Z

Oh goodie...

Generative AI will surpass cybersecurity in many corporate tech budgets this year

https://www.geekwire.com/2025/generative-ai-tops-cybersecurity-in-2025-tech-budget-priorities-new-aws-study-finds/