The Moloch

22/04/2025

Weighing in on the claims from the NLRB whistleblower. I hope more people are brave enough to give us insight into what DOGE is up to. Cybersecurity and user privacy are not optional for oligarchs.

Earlier this week, whistleblower Daniel J. Berulis, a federal DevSecOps architect at the National Labor Relations Board (NLRB), filed explosive disclosures with Congress and the U.S. Office of Special Counsel.

13/03/2025

TC: "This is by our count the third known round of job cuts to affect CISA employees since January 20."

Affected staff say more than 100 employees working to protect U.S. government networks were ‘axed’ with no prior warning

13/03/2025

Missed this one.
Haaretz: Israeli Gun Owners Exposed in Iranian Hack-and-leak
"The licensing department is currently under investigation by the police anti-corruption unit following a[n] investigation on the unauthorized distribution of gun permits."

01/03/2025

Another thing to remember: last week, the UK started compelling Apple to weaken encryption protections for the benefit of law enforcement. I guess the UK hadn't had enough major data leaks, or enough of its police state.

Apple is scrapping its most advanced security encryption feature for cloud data in Britain, the company said on Friday, an unprecedented response to government demands for access to user data.

01/03/2025

"The Android phone of one student protester was exploited and unlocked by a sophisticated zero-day exploit chain targeting Android USB drivers, developed by Cellebrite…"

Cellebrite's zero-day exploit bypassed an Android lock screen to access a Serbian activist’s phone. Amnesty links attack to Linux kernel flaws.

01/03/2025

"The Trump administration has publicly and privately signaled that it does not believe Russia represents a cyber threat against US national security or critical infrastructure."

Recent incidents indicate US is no longer characterizing Russia as a cybersecurity threat, marking a radical departure: ‘Putin is on the inside now’

01/03/2025

"…it is more evidence of the White House’s efforts to normalize ties with Moscow."

Recent incidents indicate US is no longer characterizing Russia as a cybersecurity threat, marking a radical departure: ‘Putin is on the inside now’

17/02/2025

Since the start of the month, there have been no less than sixty claims and publications of major data breaches from Indonesia. Many are from government systems.

Since the start of the month, there have been no less than sixty claims and publications of major data breaches from Indonesia. Many are from government systems.

14/02/2025

A team Microsoft calls BadPilot is acting as Sandworm's “initial access operation,” the company says. And over the last year it's trained its sights on the US, the UK, Canada, and Australia.

A team Microsoft calls BadPilot is acting as Sandworm's “initial access operation,” the company says. And over the last year it's trained its sights on the US, the UK, Canada, and Australia.

14/02/2025

“I think there's just a general under-appreciation for how aggressive they are being in turning telecommunications networks into Swiss cheese.” What a great time to be firing federal employees.

Despite high-profile attention and even US sanctions, the group hasn’t stopped or even slowed its operation, including the breach of two more US telecoms.

14/02/2025

"The U.K.’s Home Secretary served Apple with a secret order last month,
directing the company to weaken the security of its iCloud backup service to facilitate government spying."

09/02/2025

"An individual approached a checkpoint at the Territorial Center for Employment and Social Assistance carrying a bag and asked to deliver an alleged package. At that moment, an explosion occurred."

Russia's intelligence recruits Ukrainians for terror attacks via messaging apps and forums, offering quick pay, Ukraine's law enforcement warns.