Live and recent posts from across the Fediverse tagged #osint, aggregated by home.social.
Friday, October 16, 2026
Order limiting Starlink access for Ukraine's military came from within White House, Reuters reports . . . . . 'Incoherent,' 'deeply problematic,' & 'bad,' Europe reacts to Trump's recent pro-Russian turn . . . . . Ukraine destroys 4 Russian Su-34 bomber jets, damages 2 with Neptune missile . . . . . and morehttps://activitypub.writeworks.uk/2026/10/friday-october-16-2026/
🆒 Cool new feature at Scan Malware:
You can now explore relationships between websites using interactive graph visualizations, with multiple layout options
This makes it easier to discover connections between malicious websites that share common indicators, even when they're one or two hops away
The feature is on the "Pivot" tab ➡ and click "Open in graph". Also useful in OSINT investigations
#CyberSecurity #ThreatIntelligence #MalwareAnalysis #OSINT #GraphVisualization #ThreatHunting #ScanMalware
🟡 AirDefense | 6/10
🇮🇱 🇱🇧
Air defense activated in Upper Galilee (Israel)
Israeli air defense systems were activated in the Upper Galilee region this morning. The reason for activation remains unconfirmed.
IC Brief Morning — 2026-10-16
Moscow is expanding hostage leverage beyond the Imai detention to multiple bilateral fronts, with same-day arrests of a Swedish citizen and Japanese journalist. Russian authorities will very likely charge the Swedish detainee by late November, assuming Moscow pursues prosecution rather than quiet deportation. Japanese officials are likely to gain consular access to Imai by November 6; denial would signal Moscow intends prolonged detention for leverage. Hamburg's conviction attributing an assassination plot to the Quds Force gives Berlin formal grounds to act, but Ali S. will very likely appeal by October 30, leaving it contested.
Western oversight shows no sign of formal action on several threats before year-end. The Pentagon is very unlikely to release its Minab strike review by mid-December. Moderate confidence rests on the absence of any release timeline. The Inspector General is unlikely to confirm a Starlink disruption investigation by December 15, and regulators are unlikely to act on Discover-Tech's spyware by November 30, leaving ad exchanges as an unmitigated delivery vector.
DOJ is likely to charge at least one facilitator in the North Korean laptop-farm network by year-end. Low confidence reflects the absence of any public complaint. The Terry deferred prosecution agreement, resolving FARA charges without trial, weakens the statute's deterrent against foreign influence in think tanks.
Organized cybercrime: the Crime-as-a-Service model #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/organized-cybercrime-the-crime-as-a-service-model/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog
🟢 Diplomacy | 6/10
🇺🇦 🇺🇸 🇷🇺
Zelensky: ordered military to observe Trump's energy ceasefire - Russia struck energy infrastructure that same night
Zelensky said he ordered his military to support the energy ceasefire proposed by Trump despite no direct talks on it. That same night, Russian forces struck Ukrainian energy infrastructure.
Trust without institutions: crypto and blockchain #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/trust-without-institutions-crypto-and-blockchain/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog
🟢 Diplomacy | 3/10
🇨🇳 🇮🇱 🇵🇸
China urges Israel to stop 'forced establishment' of West Bank settlements
China's Foreign Ministry urged Israel to halt settlement expansion in the West Bank, describing it as the 'forced establishment' of settlements. The statement came amid rising tensions around Palestinian territories.
🔴 DroneAttack | 9/10
🇺🇦 🇷🇺
Massive jet-powered drone launch across Ukraine: threat to 8 regions
Russian jet-powered drones tracked heading toward Slavutych (Chernihiv region), Chornobyl (Kyiv region), Ruzhyn (Zhytomyr region), Borshchiv and Chortkiv (Ternopil region), Rivne (Rivne region), Sokyriany and Kelmentsi (Bukovyna), Dolynska (Kirovohrad region), Odesa and Ovidiopol (Odesa region). Some drones enter from Bryansk region (Russia). Threat is active, alert ongoing.
Women in modern offensive security #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/women-in-modern-offensive-security/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog
CVE Alert: CVE-2026-108437 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108437-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108437 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108433 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108433-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108433 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108428 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108428-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108428 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108430 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108430-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108430 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108431 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108431-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108431 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108429 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108429-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108429 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108432 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108432-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108432 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108427 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108427-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108427 #microsoft #microsoft-365-apps-for-enterprise
CVE Alert: CVE-2026-108426 - Microsoft - Microsoft 365 Apps for Enterprise - https://www.redpacketsecurity.com/cve-alert-cve-2026-108426-microsoft-microsoft-365-apps-for-enterprise/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-108426 #microsoft #microsoft-365-apps-for-enterprise
🔴 DroneAttack | 7/10
🇺🇦
Jet UAVs over Dnipropetrovsk region: Prosiana, Synelnykove, Samar, Mahdalynivka, Solone
Jet-powered UAVs tracked heading toward Prosiana, Synelnykove, Samar, Mahdalynivka and Solone in Dnipropetrovsk region. Simultaneous movement along multiple axes within one region. Threat is active.
#OSINT #NewsGroup #Ukraine #Dnipropetrovsk #AirAlert #JetUAV
Digital addiction: when devices take over #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/digital-addiction-when-devices-take-over/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog
🟡 TransportAccident | 3/10
🇫🇷 🇬🇧
Bus collides with train on French side of Channel Tunnel - 19 injured
A bus collided with a stopped train on the French side of the Channel Tunnel. Nineteen people were injured. Tunnel traffic was disrupted.
I'm looking for folks to test out a deep investigative tool. If you work in #OSINT, #journalism, #ediscovery, or something adjacent, I'd love to talk to you. Just reach out here privately 🔍
#research #civictech #datajournalism #investigativejournalism
Так би мовити - стоїмо.
From open sources:
Melnikova competes for CSKA, the army club under the Defence Ministry, Kalmykova for Dynamo, contract with a Rosgvardia, Listunova, a Z jacket at the 2022 Putin rally.
Not just pretty faces. Part of propaganda machinery too.
#politics #sport #propaganda #osint
https://www.bbc.co.uk/sport/gymnastics/articles/cm2kev4q7p59o
Organized cybercrime: the global fraud factories #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/organized-cybercrime-the-global-fraud-factories/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog
IC Brief Morning — 2026-10-15
Russia's covert campaign is expanding from criminal-proxy sabotage to hostage diplomacy, while Washington retains leverage over Kyiv through intelligence-sharing ambiguity. Imai's release from Russian custody by year-end is very unlikely; Moscow will hold the journalist for swap leverage Japan lacks assets to match. A confirmed US suspension of intelligence sharing with Ukraine is unlikely by November 30, assuming Kyiv maintains its current pause on refinery strikes, but Tuesday's unwarned ballistic missile strike shows degraded transmission can pressure Kyiv without a formal cutoff. A second strike landing without warning would reinforce the deliberate-throttling reading over the technical-failure explanation.
Western judicial responses to proxy operations face evidentiary gaps. Germany's courts will likely transfer the two Starlink arson suspects to Poland by November 30, providing the first courtroom test of Warsaw's claim that Russian intelligence commissioned the sabotage. UK authorities are unlikely to charge anyone over the Fairford incident by November 15; without admissible evidence tying proxies to Tehran, IRGC proscription rests on intelligence attribution alone.
The Bundestag will likely pass Germany's BND reform bill by year-end, though expert testimony flagging unconstitutionality points to narrower hack-back authorities. FBI Director Patel is unlikely to travel to Russia by year-end; the retracted false report and congressional pressure give him cover to delay.
CVE Alert: CVE-2026-94197 - F5 - NGINX Ingress Controller - https://www.redpacketsecurity.com/cve-alert-cve-2026-94197-f5-nginx-ingress-controller/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-94197 #f5 #nginx-ingress-controller
CVE Alert: CVE-2026-110648 - adamarcanov - compress-fonts - https://www.redpacketsecurity.com/cve-alert-cve-2026-110648-adamarcanov-compress-fonts/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110648 #adamarcanov #compress-fonts
CVE Alert: CVE-2026-110633 - Report One - MyReport Updater - https://www.redpacketsecurity.com/cve-alert-cve-2026-110633-report-one-myreport-updater/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110633 #report-one #myreport-updater
CVE Alert: CVE-2026-110641 - runnerty - @runnerty/executor-decompress - https://www.redpacketsecurity.com/cve-alert-cve-2026-110641-runnerty-runnerty-executor-decompress/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110641 #runnerty #runnerty-executor-decompress
CVE Alert: CVE-2026-110623 - papermerge - papermerge-core - https://www.redpacketsecurity.com/cve-alert-cve-2026-110623-papermerge-papermerge-core/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110623 #papermerge #papermerge-core
CVE Alert: CVE-2026-110628 - kanbn - kan - https://www.redpacketsecurity.com/cve-alert-cve-2026-110628-kanbn-kan/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110628 #kanbn #kan
CVE Alert: CVE-2026-110646 - beganovich - snappdf - https://www.redpacketsecurity.com/cve-alert-cve-2026-110646-beganovich-snappdf/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110646 #beganovich #snappdf
CVE Alert: CVE-2026-110621 - Swetrix - swetrix - https://www.redpacketsecurity.com/cve-alert-cve-2026-110621-swetrix-swetrix/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110621 #swetrix #
New Sponsor Alert: Across the Grid Analytics 🎉
We are proud to have Across The Grid supporting the #TraceLabs Global OSINT Search Party on October 24th!
Good case management wins cases. Their investigation suite keeps a case together - table, timeline, whiteboard, report writer, fully offline - and they're making it FREE for participants during the CTF. 🔥
Thank you to the Across The Grid team for backing the community that does this work. ❤️
🌐 To learn more about that they do, visit: https://acrossthegrid.net/index.html
🔍 Sponsor Spotlight: Forensic OSINT
Thanks to #ForensicOSINT for backing the Trace Labs Global OSINT Search Party CTF on October 24th!
Their Chrome extension captures online evidence forensic-grade - hashed, timestamped, structured report, court ready. Because a great find that disappears is no find at all.
Thank you to Ritu Gill, and the Forensic OSINT team for making our investigators' work defensible. 💙
To learn more, visit: https://www.forensicosint.com/
CVE Alert: CVE-2026-110618 - pppscn - SmsForwarder - https://www.redpacketsecurity.com/cve-alert-cve-2026-110618-pppscn-smsforwarder/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110618 #pppscn #smsforwarder
CVE Alert: CVE-2026-110616 - nullclaw - NullHub - https://www.redpacketsecurity.com/cve-alert-cve-2026-110616-nullclaw-nullhub/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110616 #nullclaw #nullhub
CVE Alert: CVE-2026-88829 - Red Hat - Red Hat Hardened Images - https://www.redpacketsecurity.com/cve-alert-cve-2026-88829-red-hat-red-hat-hardened-images/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-88829 #red-hat #red-hat-hardened-images
CVE Alert: CVE-2026-104939 - F5 - NGINX Ingress Controller - https://www.redpacketsecurity.com/cve-alert-cve-2026-104939-f5-nginx-ingress-controller/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-104939 #f5 #nginx-ingress-controller
CVE Alert: CVE-2026-110615 - jishenghua - jshERP - https://www.redpacketsecurity.com/cve-alert-cve-2026-110615-jishenghua-jsherp/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110615 #jishenghua #jsherp
CVE Alert: CVE-2026-90954 - Red Hat - Red Hat Hardened Images - https://www.redpacketsecurity.com/cve-alert-cve-2026-90954-red-hat-red-hat-hardened-images/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-90954 #red-hat #red-hat-hardened-images
CVE Alert: CVE-2026-110690 - coderaiser - cloudcmd - https://www.redpacketsecurity.com/cve-alert-cve-2026-110690-coderaiser-cloudcmd/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110690 #coderaiser #cloudcmd
CVE Alert: CVE-2026-110284 - lifterlms - LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - https://www.redpacketsecurity.com/cve-alert-cve-2026-110284-lifterlms-lifterlms-wp-lms-for-elearning-online-courses-quizzes/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-110284 #lifterlms #lifterlms-wp-lms-for-elearning-online-courses-and-quizzes
CVE Alert: CVE-2026-107631 - davidevalerio - Record of Consent Extension for Complianz - https://www.redpacketsecurity.com/cve-alert-cve-2026-107631-davidevalerio-record-of-consent-extension-for-complianz/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-107631 #davidevalerio #record-of-consent-extension-for-complianz
CVE Alert: CVE-2026-93885 - blackworks1 - Cryptocurrency Donation Box – Bitcoin & Crypto Donations - https://www.redpacketsecurity.com/cve-alert-cve-2026-93885-blackworks1-cryptocurrency-donation-box-bitcoin-crypto-donations/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-93885 #blackworks1 #cryptocurrency-donation-box-bitcoin-and-crypto-donations