Catalin Cimpanu

Looks like it's gonna be one hell of a boring F1 year 🥱

Exclusive | China Suspected in Breach of FBI Surveillance Network The FBI said it has addressed ‘suspicious activities’ on its networks.

News: U.S. investigators believe Chinese hackers are behind a cyber intrusion on an internal FBI computer network that holds information related to some domestic surveillance orders, in what would be the latest Chinese compromise of wiretap systems www.wsj.com/politics/nat...

former infosec Robbie would go thru this with a fine tooth comb. Current Robbie is going to make himself some guacamole for lunch.

Top 10 artificial intelligence security actions: A primer - ITSAP.10.049 - Canadian Centre for Cyber Security Our top AI security actions are designed to help organizations of all sizes and sectors strengthen their cyber resilience.

The Canadian Centre for Cybersecurity released some artificial intelligence security actions. In an era of rapid advancements in AI, organizations face new security risks.

Read more below:
www.cyber.gc.ca/en/guidance/...

#cybersecurity
@andyjabbour.bsky.social
@campuscodi.risky.biz

Threads thread: thriller_instinct 3d Is it okay to bully 40 and 50 year olds who are on social media just for being on it, cuz like why are you here - 254 Q 3.1K G 28 746 corporateash 18h ••• My ICQ UIN is 7231680. That number is burned into my consciousness. I inadvertently learned that you could see private conversations in public chat rooms when using Telnet instead of a browser on GeoCities. I can tell you the difference in audible dial-up handshakes between 1200, 2400, 14.4 kbps modems. I needed a edu email address to join Facebook after my university was admitted. We were here at the beginning. We made social media. You wouldn't be in my Top 8. I have usernames older than you. 852 Q62 G6 72

“I have usernames older than you.”.
Holy shit

Mozilla says Claude Opus 4.6 found 100+ bugs in Firefox in two weeks in January, 14 of them high-severity, more than the bugs typically reported in two months (Robert McMillan/Wall Street Journal)

Main Link | Techmeme Permalink

-Iranian hackers are scanning for security cameras to aid missile strikes
-Israel bombs Iran's cyber headquarters
-CISA's CIO leaves
-Authorities take down LeakBase and Tycoon 2FA
-Mexico mandates SIM registration to real IDs

Newsletter: news.risky.biz/risky-bullet...
Podcast: risky.biz/RBNEWS534/

-Taiwan indicts scammers
-Phobos admin pleads guilty
-Malvertising surpasses email for malware delivery
-Malicious Chromium extension steals chatbot history
-Qilin was the 2025 ransomware king
-KodexGlobal accounts for sale
-New BoryptGrab malware
-Dust Specter APT targets Iraq

This shit is so pathetic it's hard to put into words.

Reverse-engineered Coruna - a nation-state iOS exploit kit - from raw JavaScript. 28 modules + MUCH MORE!
www.nadsec.online/blog/coruna
www.nadsec.online/blog/coruna-...
(technical analysis more interesting, read coruna blog post first, technical analysis looks better on github, link on-site)

-Doppelgänger/RRN network exposed
-90 zero-days exploited last year
-New Cisco SD-WAN and VMware Aria exploitation
-Cisco security updates
-New FreeScout RCE
-Researchers crack Utah's prescription refill AI bot
-MAX app ignores VPN, records real IP
-BlueHat IL postponed

-Taiwan indicts scammers
-Phobos admin pleads guilty
-Malvertising surpasses email for malware delivery
-Malicious Chromium extension steals chatbot history
-Qilin was the 2025 ransomware king
-KodexGlobal accounts for sale
-New BoryptGrab malware
-Dust Specter APT targets Iraq

-YGG torrent portal hacked, data leaked
-Hong Kong cable car service got hacked and is getting extorted
-HungerRush hacked and extorted
-TikTok won't roll out encrypted DMs
-US federal agencies are dumping Anthropic
-Plankey leaves Coast Guard role
-China's new five-year plan focuses on AI

-Iranian hackers are scanning for security cameras to aid missile strikes
-Israel bombs Iran's cyber headquarters
-CISA's CIO leaves
-Authorities take down LeakBase and Tycoon 2FA
-Mexico mandates SIM registration to real IDs

Newsletter: news.risky.biz/risky-bullet...
Podcast: risky.biz/RBNEWS534/

Hungary seizes Ukrainian cash reserves in Hungary, in a breach of EU and international law.

ICE detains reporter Estefany Rodríguez in Nashville - Nashville Banner Reporter Estefany Rodríguez, detained by ICE with no arrest warrant, may face deportation. Her attorneys seek immediate review of the legality of her case.

ICE has arrested and detained a Nashville journalist who reported stories critical of ICE. She’s married to a U.S. citizen and has been seeking asylum here after fleeing death threats in Colombia because of her journalism there.

They’ve already sent her to Louisiana.

FBI is probing ‘suspicious’ breach into bureau networks Initial reporting tied the incident to the FBI’s wiretap systems, which are used to lawfully surveil suspected criminals and spies.

David DiMolfetta
“Initial reporting tied the incident to the FBI’s wiretap systems, which are used to lawfully surveil suspected criminals and spies.” www.nextgov.com/cybersecurit...

Iran warns people who dare defy internet blackout Iranian authorities were issuing warnings to people connecting to the internet in defiance of a communications blackout that had left the Islamic republic largely cut off from the outside world, witne...

Iranian authorities have threatened to arrest citizens who connect to the internet in defiance to a communications blackout imposed by the state.

Iranian police sent SMS warnings to all citizens earlier this week.

www.france24.com/en/live-news...

The Hong Kong cable car service is getting ransomed... sweet! </sarcasm>

hk.on.cc/hk/bkn/cnt/n...

The DomainTools security team has published a comprehensive report on the current 2026 infrastructure of Russian disinformation group Doppelgänger (aka RRN) and their latest operational priorities

They also have a new RSS feed, so update that too

dti.domaintools.com/research/dop...

MuddyWater Exposed: Inside an Iranian APT operation MuddyWater espionage campaign exposed

The Ctrl-Alt-Intel team has dumped the content of misconfigured command and control servers linked to the MuddyWater Iranian APT, aka Static Kitten, Mango Sandstorm, Earth Vetala, Seedworm, and TA450

ctrlaltintel.com/threat%20res...

Quarkslab has published details on three bugs it found in the Avira antivirus.

The bugs are unfixed because Gen Digital tried to force researchers into some sort of NDA via Bugcrowd.

blog.quarkslab.com/avira-deseri...

Some drama on the French torrent scene where hackers breached and leaked YGG data after the portal rolled out a paid mode that limited users to 5 torrents/day

They accused the site of DDoSing rival sites, purging critical accounts, and storing card details for 54,000 users

yggleak.top/fr

Malicious Packagist Packages Disguised as Laravel Utilities ... Malicious Packagist packages disguised as Laravel utilities install an encrypted PHP RAT via Composer dependencies, enabling remote access and C2 call...

Socket Security has found three malicious PHP packages on the Packagist repo that deploy a remote access trojan inside compromised projects

socket.dev/blog/malicio...

All Mexico Cellphone Users Must Register by June 30, 2026 From 2026, Mexico's law requires that all Mexican cellphone numbers, whether on contract or prepay phone plans, are associated to a verified and registered user

All Mexican citizens must register their SIM cards and associate it with a government ID by the end of June.

The new requirement applies to subscription, prepay, and eSIMs alike.

www.mexperience.com/all-mexico-c...

Plankey was brought in under the new administration. He was put in a role that seemed to have been created for him (Secretary of the CG), and which didn't really seem to have a purpose beyond inserting a political appointee into the CG. Looks like he's no longer in the admin's good graces...

China's new five-year plan calls for AI throughout its economy, tech breakthroughs China's new five-year policy blueprint laid out its ambitions to ​aggressively adopt artificial intelligence throughout the world's second-biggest economy and dominate emerging technologies such as qu...

The Chinese government has published the country's next five-year plan, which has AI, chips, space, nuclear, and quantum technologies at its center

www.reuters.com/world/asia-p...

Jeff Bezos Gathering Money to Buy Companies Gutted by AI Jeff Bezos and other deep-pocketed investors are circling like vultures as AI-related selloffs create a "massive buying opportunity."

AI is powering a new US robber baron era

futurism.com/future-socie...

This is why I dropped them last year... too much focus on AI bullshit... too little actual grammar mistake prompts

They also trashed their web UI, which sometimes required 2-3 interactions with the mouse for what used to be simple keyboard shortcuts. A literal UI/UX seppuku

My oh my... I hope they didn't store all their cyberz and computers in the same building /s

www.politico.com/news/2026/03...