@julianferdinand.bsky.social
Threat Research @ Recorded Future. Previously @ Security Research Labs. He/Him. 🏳️🌈
In Sirotin’s case, the fatal mistake came in the form of two online purchases — a knife, bought with the same email address used to rent the suspicious servers discovered by investigators, and a pair of plane tickets he had bought for his parents
on.ft.com/4hhtmGd
NOW: US court permanently bans Pegasus spyware maker from hacking WhatsApp.
NSO Group can't help their customers hack WhatsApp etc. ether. Must delete exploits & R&D.
Bad news for NSO. Huge competitive disadvantage for the notorious company.
Big additional win for WhatsApp 1 /
The response to SolarWinds really nerfed the viability of traditional software supply chain compromise and China got the message. The shift to operational enablement compromises ain’t going anywhere and is more viable for the long term.
17.10.2025 18:33 — 👍 4 🔁 2 💬 0 📌 0
Wikipedia is seeing a significant decline in human traffic because more people are getting the information that’s on Wikipedia via generative AI chatbots that were trained on its articles and search engines that summarize them without actually clicking to the site
www.404media.co/wikipedia-sa...
Paragon Solutions (US) has terminated its 🇺🇸 lobbying registration with law firm Holland & Knight. The filing is dated 15 October, but the termination took effect on 25 April. Paragon’s owner, AE Industrial Partners, still maintains an active registration.
17.10.2025 11:09 — 👍 3 🔁 2 💬 1 📌 0
Researchers at NTT present an analysis of OtterCandy and detail the update observed in August 2025. This malware was used by WaterPlum (also known as Famous Chollima or PurpleBravo). jp.security.ntt/insights_res...
17.10.2025 08:43 — 👍 2 🔁 2 💬 0 📌 0
-The F5 hack
-EU MEP files criminal complaint against Hungary PM over hacking
-Bulletproof hoster shuts down due to political reasons
-PowerSchool hacker sentenced to four years
-Four airports hacked across NA
Newsletter: news.risky.biz/risky-bullet...
Podcast: risky.biz/risky-bullet...
Recording of our REcon talk about a 2017 iOS persistence exploit used by NSO's Pegasus—and other threat actors too—is out. @billmarczak.org and me of @citizenlab.ca at @reconmtl.bsky.social.
youtu.be/ZlopMtjsVRw
🇭🇺🕵️♂️ Nach unserer @spiegel.de @derstandard.at @papertrailmedia.de @direkt36.bsky.social Recherche: Péter Magyar – heute Oppositionsführer, früher Diplomat in Ungarns EU-Vertretung in Brüssel – bekräftigt Spionagevorwürfe gegen Orbáns Regierung: „allgemein bekannt“ www.derstandard.at/story/310000...
16.10.2025 12:55 — 👍 28 🔁 10 💬 2 📌 0New from last night: F5 CEO François Locoh-Donou is personally briefing customers about the China-linked hackers who were in the company’s network for at least 12 months
16.10.2025 11:35 — 👍 16 🔁 13 💬 0 📌 0
Scoop : révélations sur le "Group 78", l'unité secrète du FBI chargée de faire la guerre aux cybercriminels, quitte à utiliser des méthodes illégales et au risque de faire dérailler les enquêtes judiciaires européennes (avec @flrnd.bsky.social et @kaibiermann.bsky.social). Thread ⤵️
16.10.2025 04:42 — 👍 17 🔁 25 💬 2 📌 0
This one's a wild/messy one: Cyber giant F5, which serves most of the Fortune 500, said unknown government hackers had 'long term' access to its network:
• stole source code, some customer data
• accessed undisclosed vulns in BIG-IP
• DOJ allowed F5 to delay public notice citing national security
-Windows 10 reaches End-of-Life
-CISA layoffs didn't touch cyber personnel
-US seizes $15 billion from cyber scam compound operator
-Secure Boot bypass impacts 200k Framework systems
-German police take down 1,400 scam sites
Podcast: risky.biz/RBNEWS491/
Newsletter: news.risky.biz/risky-bullet...
🚨🚨🚨 Reuters journalists have discovered an enormous, secret mass grave in Syria — likely with tens of thousands of bodies. The graves are part of 2-year conspiracy by Assad’s forces to excavate one of Syria’s largest known mass graves and hide bodies in the desert. www.reuters.com/world/middle...
14.10.2025 18:16 — 👍 26 🔁 13 💬 2 📌 1
EXCLUSIVE: Thousands of leaked messages show leaders of Young Republican groups joking about gas chambers, slavery and rape in a private Telegram chat.
Inside rising GOP leaders’ racist chats — obtained by POLITICO and spanning more than 7 months👇
🚨 NEU: “Wir können dafür ins Gefängnis kommen”– dieser Satz steht im Zentrum unserer neuen Recherche. 🚨
Es wird verrückt: Strafbare Sanktionsumgehung, ein Undercover-Einsatz, ein überwachter Vatikan-Reporter, prominente Opfer & Red Bull. Willkommen zu #SurveillanceSecrets
Researchers pointed a satellite dish at the sky for 3 years and monitored what unencrypted data it picked up. The results were shocking: They obtained thousands of T-Mobile users' phone calls and texts, military and law enforcement secrets, much more: www.wired.com/story/satell... 🧵👇
14.10.2025 01:03 — 👍 896 🔁 464 💬 20 📌 45
If new legislation passes, Ukraine’s Cyber Forces will conduct military cyber operations, gather intelligence, hunt threats in cyberspace and defend military systems while building secure infrastructure for the country's armed forces therecord.media/ukraine-take...
13.10.2025 17:51 — 👍 3 🔁 3 💬 0 📌 0
An all-new Three Buddy Problem for your weekend earholes. Apple exploits chains, Oracle + ransomware, Ivanti 0days, VT pricing tiers @craiu.bsky.social @jags.bsky.social
youtu.be/qPj9_8azAvk?...
Costin on million-dollar "tactical suitcases" with iPhone wireless proximity exploits @craiu.bsky.social @jags.bsky.social
www.youtube.com/shorts/r3vu_...
-Microsoft revamps Edge's "IE Mode" after zero-day attacks
-FBI seizes Salesforce extortion site
-New round of CISA layoffs
-Apple doubles bug bounty rewards
-White House rescinds NSA&CyberCom chief nomination
Newsletter: news.risky.biz/microsoft-re...
Podcast: risky.biz/RBNEWS490/
SCOOP: Spyware maker NSO Group confirmed to us that the company has been acquired by a U.S. investment group.
NSO's spokesperson said the group "has invested tens of millions of dollars in the company and has acquired controlling ownership," but declined to say who is behind the investment.
As Apple expands its bug bounty, I spoke with VP Ivan Krstić about the significance + recent big swings like Memory Integrity Enforcement. These steps protect all users, but particularly those targeted by spyware: “We feel a great moral obligation to defend those users” www.wired.com/story/apple-...
10.10.2025 13:06 — 👍 21 🔁 8 💬 0 📌 2
NEW: Pegasus spyware coming to America?
An ex-Adam Sandler producer with ties to China is trying to acquire NSO Group.
Again.
Simonds fronted this before in 2023 & failed. But the backers haven't given up. Why?
Where is the money coming from? 1/
www.globes.co.il/news/article...
-EU scraps Chat Control vote
-Ukraine establishes a Cyber Force
-CISA workers reassigned to immigration enforcement
-Teenagers arrested for Kido hack
-Salesforce will not pay the ransom
-US Court halts FCC data breach rules
Newsletter: news.risky.biz/risky-bullet...
Podcast: risky.biz/RBNEWS489/
Germany’s AfD expels Hamburg lawmaker Robert Risch over participation in far-right congress in St. Petersburg
The Sept. 12 congress at the Mariinsky Palace brought together radical nationalists and neo-Nazis from 14 countries, from Hungary to Argentina.
The hack against software giant Red Hat is part of a larger campaign that is targeting AWS cloud accounts.
A group named the Crimson Collective is using compromised IAM accounts to access and pilfer corporate AWS environments.
www.rapid7.com/blog/post/tr...
Hungary uses spies within the EU to close an information gap due to their public positioning in political matters that often is at odds with what the bloc is doing/saying
www.spiegel.de/ausland/eu-w...
According to reconstructions, in Dec 2024 the ☎️number used by Caltagirone was added to a WhatsApp chat with contacts known to him, within which a PDF file had been shared. Shortly afterwards, the chat & the PDF disappeared.
✍️ @faffa42.bsky.social & Gianluca Paolucci.
www.lastampa.it/economia/202...
🚨 According to @irpimedia.eu & @lastampa.bsky.social, prominent 🇮🇹 Italian businessman Francesco Gaetano Caltagirone has been added to the list of people who last January received a message from WhatsApp informing them that they had been targeted with Paragon's Graphite #spyware.
09.10.2025 04:55 — 👍 6 🔁 6 💬 1 📌 1
