#threat-actor — Public Fediverse posts

How many critical services are tied to abominations like #reCAPTCHA and #SafetyNet API? #Banking, #Healthcare, #eCommerce, #PublicServices, #PublicTransport, #RideHailing and even #WeatherServices. What are the implications of every citizen having to seek permissions from a trillion-dollar MNC to access any of them?

Check out #PRISM to see who Google silently shares this data with. #Google is a serious #state_sponsored #ThreatActor against individuals & national #sovereignty.

[3/6]

Here are four of the ten looping Claude user quotes on anthropic.com homepage... Mind you, these are not dynamic, they chose these explicitly. Are they trying to represent user sentiment accurately or are they reading these very differently than I am?

I went there after watching this talk: "Nicholas Carlini - Black-hat LLMs", from one of their engineers. There's definitely good work by talented and conscientious people that's going on there.

I'm rewriting this post because I'm cynical of corporate motives but I also don't think that interpreting everything cynically is helpful. Even after the VC funding runs out (hopefully before we destroy the planet and society), these tools won't disappear especially for malicious actors. So if they're also building tooling to mitigate harm / defend against threat actors, do I dare to hope they're reading the quotes the same way I am? Or is it more of:

I feel like I'm creating more dependency than knowledge.

#AI #Anthropic #Claude #Blackhat #LLM #SoftwareSecurity #Cybersecurity #ThreatActor

Hey Fediverse, especially folks that working in infosec or cybersecurity field.

Several years ago, I remember that Microsoft added a new Threat Actor in their classification list for Britain based APT.

I tried to search again, but I didn't find anything anymore regarding this.

Anyone has any pointer?

#Fediverse
#Infosec
#Cybersecurity
#ThreatActor
#APT
#ThreatIntel

The Rise and Fall of SiegedSec - Flare

https://flare.io/learn/resources/blog/rise-and-fall-siegedsec

Short summary: https://hackerworkspace.com/article/the-rise-and-fall-of-siegedsec-flare

#threatactor #cybersecurity #threatintelligence

@kims The rest of the world already knows the U.S. can't be trusted. It’s the majority of Americans (not anyone engaged enough to be on the fediverse, of course) who are only just now starting to learn that the world views the U.S. this way.
#RogueState #ThreatActor #ChaosActor

https://mas.to/@fsinn/115851374547884777

⚠️ New threat actor on the radar ⚠️ 🥷🏻 AtomSilo Ransomware 🗓️ added on February 24 🥢 Overview AtomSilo was first observed in September 2021, historically attributed to the Chinese state-sponsored cluster known as BRONZE STARLIGHT. #ransomNews #cybersecurity #threatactor

Check out my latest article, “Digital Defense Against the Dark Arts”
https://wfryer.substack.com/p/digital-defense-against-the-dark

Join me now in the "Zoom Room of Requirement" :-)

#MediaLit #MediaLiteracy #disinfo #HarryPotter #selfdefense #Russia #badactor #threatactor #edtechSR

How China’s “Walled Garden” is Redefining the Cyber Threat Landscape https://www.allforgardening.com/1585322/how-chinas-walled-garden-is-redefining-the-cyber-threat-landscape/ #apt #china #ChineseSpeakingThreatActors #garden #ThreatActor #webinar

He called himself an ‘untouchable hacker god’. But who was behind the biggest crime Finland has ever known? https://www.theguardian.com/technology/2026/jan/17/vastaamo-hack-finland-therapy-notes
#cybersecurity #datatheft #medical #psychiatrist #threatactor

Who Is Dark Storm? The Threat Actor European Security Teams Can’t Ignore https://thecyberexpress.com/dark-storm-threat-actor-profile/ #CybleCyberThreatIntelligencePlatform #CyberThreatIntelligencePlatform #governmentagenciesinEurope #proRussianhacktivistgroup #hacktivistalliances #cyberadversaries #TheCyberExpress #FirewallDaily #ThreatActors #DDoSattacks #ThreatActor #CyberNews

Albanese Physical Therapy Data Breach Exposes Patient Records https://dailydarkweb.net/albanese-physical-therapy-data-breach-exposes-patient-records/ #AlbanesePhysicalTherapy #CyberSecurity #DataBreaches #Pennsylvania #UnitedStates #threatactor #databreach #Healthcare #datasale #PHI #PII

Figment POS Data Breach Results in Stolen Source Code https://dailydarkweb.net/figment-pos-data-breach-results-in-stolen-source-code/ #sourcecodeleak #CyberSecurity #DataBreaches #PointofSale #threatactor #databreach #FigmentPOS #CloudPOS #Jordan #POS

ShinyHunters Site Message Changes After Arrest Reports https://dailydarkweb.net/shinyhunters-site-message-changes-after-arrest-reports/ #websitedefacement #scatteredspider #lawenforcement #CyberSecurity #CyberAttacks #ShinyHunters #threatactor #infosec #SLSH

Threat Actor Website ‘shinyhunte.rs’ Defaced in Apparent Feud https://dailydarkweb.net/threat-actor-website-shinyhunte-rs-defaced-in-apparent-feud/ #websitedefacement #scatteredspider #hackerconflict #CyberSecurity #CyberAttacks #ShinyHunters #threatactor #infosec

OMH SCIENCE Group Targeted in Network Access Breach https://dailydarkweb.net/omh-science-group-targeted-in-network-access-breach/ #UnauthorizedAccesses #IndustrialMachinery #OMHSCIENCEGroup #CyberSecurity #networkaccess #cyber-attack #threatactor #databreach #China

Kanał ZERO Data Breach Exposes User and Financial Data https://dailydarkweb.net/kanal-zero-data-breach-exposes-user-and-financial-data/ #CyberSecurity #financialdata #DataBreaches #threatactor #databreach #KanałZERO #dataleak #Poland #media

Beamtin: Ich kann Sie nicht allein im Büro lassen. Sie könnten ja Akten klauen. Mein Chef ist da sehr dahinter.

Ich: Also wenn ich hier Akten klauen wollte, dann über das Internet.

Beamtin: Ja, so wie unsere IT aussieht, wäre das der bessere Weg

Ich: ....?!

#Degitalisierung #Datenschutzbubble #threatactor #Deutschlandsymbolbild #bmds

Pakistani ISP Skyfi Network Allegedly Breached – Full System Access Sold Online https://dailydarkweb.net/pakistani-isp-skyfi-network-allegedly-breached-full-system-access-sold-online/ #networksecurity #DataBreaches #SkyfiNetwork #cyberattack #threatactor #databreach #Pakistan #webshell #ISP

Stone Panda (APT 10) continues global espionage campaigns tied to China’s MSS.
🎯 Targets: healthcare, defense, academia
🛠️ Tools: Mimikatz, BloodHound, Impacket
🌍 Active in the U.S., UK, Japan, India & more
Espionage vs disruption — which do you see as their long-term mission?
Follow @technadu for continuous APT tracking.

#StonePanda #APT10 #CyberEspionage #ChinaAPT #ThreatActor #Cyble

Threat Actor Allegedly Sells Administrative Access to Crypto Exchange for $5,000 https://dailydarkweb.net/threat-actor-allegedly-sells-administrative-access-to-crypto-exchange-for-5000/ #UnauthorizedAccesses #cryptocurrency #CyberSecurity #exchangehack #threatactor #cybercrime #databreach #API

Ghana Postal Service Allegedly Breached – Database and System Access for Sale https://dailydarkweb.net/ghana-postal-service-allegedly-breached-database-and-system-access-for-sale/ #UnauthorizedAccesses #GhanaPostalService #CyberSecurity #databaseleak #threatactor #databreach #webshell #Ghana

Kirkpatrick Partners LLC Allegedly Suffers Data Breach – Exposing Information of 36,556 Users https://dailydarkweb.net/kirkpatrick-partners-llc-allegedly-suffers-data-breach-exposing-information-of-36556-users/ #KirkpatrickPartners #CyberSecurity #DataBreaches #threatactor #databreach #dataleak #userdata

The Hidden Front: Iran, Cyber Warfare, and the Looming Threat to U.S. Critical Infrastructure – Source: www.cyberdefensemagazine.com https://ciso2ciso.com/the-hidden-front-iran-cyber-warfare-and-the-looming-threat-to-u-s-critical-infrastructure-source-www-cyberdefensemagazine-com/ #rssfeedpostgeneratorecho #criticalinfrastructure #cyberdefensemagazine #cyberdefensemagazine #CyberSecurityNews #nationalsecurity #digitalwarfare #Cybersecurity #Cyberattack #threatactor #binarycode #powergrid #hacker

Global Organizations Targeted in Alleged Access Sale https://dailydarkweb.net/global-organizations-targeted-in-alleged-access-sale/ #UnauthorizedAccesses #CyberSecurity #networkaccess #PulseSecure #threatactor #databreach #government #darkweb #CISCO #RDP #VPN

Alleged Sale of Network Access to Saudi Construction Firm https://dailydarkweb.net/alleged-sale-of-network-access-to-saudi-construction-firm/ #UnauthorizedAccesses #CyberSecurity #Construction #cyberattack #SaudiArabia #threatactor #databreach #RDPaccess

Spanish Government Network Access Allegedly Compromised https://dailydarkweb.net/spanish-government-network-access-allegedly-compromised/ #UnauthorizedAccesses #networksecurity #CyberSecurity #threatactor #databreach #government #Alleged #España #Spain #RDP

Telegram Is Cooperating With Authorities, For Now - This is good news for the benign side of the cyber world. What we in the #DDoS mitigation industry observe are Telegram channels for e.g. #marketplaces for #DDoSforhire services or #threatactor coordination.

Seeing that #Telegram seizes to be the safe haven for shady, or straight up illegal activities that are a burden to the #Internet at large is really good news.

Hey #CyberSecurity pros! 👋 Ready to dive into the latest threats and breaches making headlines?

Our latest blog post is packed with need-to-know info to keep you ahead of the curve.

🗞️ https://opalsec.io/daily-news-update-thursday-march-27-2025-australia-melbourne/

Here's a quick rundown of what's inside:

🕵️‍♂️ FamousSparrow's Return: The Chinese government-backed hacking group is back, targeting organizations in North America. Important distinction: ESET insists on tracking them separately from Salt Typhoon. Remember to prioritize TTPs and IOCs/IOAs accordingly!

🗄️ RedCurl's Ransomware Twist: This corporate espionage group is now deploying "QWCrypt" ransomware, targeting Hyper-V servers. Phishing emails with malicious IMG attachments are the initial attack vector.

😬 StreamElements Data Breach: A third-party service provider suffered a breach, exposing data of 210,000 customers.!

🏛️ NSW Court System Data Theft: Sensitive documents, including AVOs, were stolen from the NSW Online Registry website. This could have serious consequences for victims of domestic violence.

👨‍🎓 NYU Website Defacement: A hacker compromised NYU's website, leaking personal data of over 1 million students. Even with good intentions, the collateral damage is unacceptable.

💰 Defense Contractor Fined: MORSE Corp will pay millions for failing to meet federal cybersecurity requirements. Third-party risk management is crucial!

🤖 Atlantis AIO Automates Credential Stuffing: This new platform automates credential stuffing attacks against 140 online services. Stay vigilant against brute force attacks!

🚨 Chrome Zero-Day Exploited: Google patched a zero-day vulnerability exploited in espionage campaigns targeting Russian organizations. Keep your browsers updated!

👦 UK Warns of 'Com Networks': The UK's NCA is warning of a growing threat from online networks of teenage boys who are "dedicated to inflicting harm and committing a range of criminality." A very worrying trend that we need to be aware of.

Ready for the full scoop? Read the full blog post here 👉 https://opalsec.io/daily-news-update-thursday-march-27-2025-australia-melbourne/

#Cybersecurity #InfoSec #DataBreach #Ransomware #ThreatIntelligence #DataPrivacy #ZeroDay #FamousSparrow #RedCurl #StreamElements #NSWCourts #NYU #MORSECorp #AtlantisAIO #Chrome #ComNetworks #SecurityNews #CybersecurityThreats #InfoSecurity #CyberAttack #DataSecurity #PrivacyMatters #Vulnerability #Cybercrime #ThreatActor #ESET #SaltTyphoon #NIST #ZeroTrust #SaltTyphoon #CriticalInfrastructure