iiinova — where your digital self keeps evolving

Matthijs R. Koot @cyberwar.nl · 04/05/2026

Redactionele fout? Want de officiële bron vermeldt “[…] these conventional long-range fires units will include SM-6, Tomahawk, and developmental hypersonic weapons, which have significantly longer range than current land-based fires in Europe. […]” Bron: www.bundesregierung.de/resource/blo...

Joint Statement from United States and Germany on Long Range Fires Deployment in Germany

000

Matthijs R. Koot @cyberwar.nl · 15/08/2025

What WeChat Knows: Pervasive First-Party Tracking in a Billion-User Super-App Ecosystem (August 2025) petsymposium.org/popets/2025/... By Wang et al., presented at PET Symposium 2025. Open Access. Artifacts available at @citizenlab.ca’s GitHub: github.com/citizenlab/w...

021

Matthijs R. Koot @cyberwar.nl · 26/07/2025

Taiwan Bounty: PRC Cross-Agency Operations Target Taiwanese Military Personnel (25 July 2025) jamestown.org/program/taiw... Guangzhou Public Security Bureau issued “wanted” notice offering reward for information leading to apprehension of 20 retired and active personnel in Taiwan’s ICEFCOM command.

000

Matthijs R. Koot @cyberwar.nl · 19/07/2025

Schrijver, P. (2025). Ukrainian Intelligence’s Use of Telegram in Wartime. International Journal of Intelligence and CounterIntelligence, 1–27 doi.org/10.1080/0885... Published online 8 July 2025.

Abstract of Schrijver, P. (2025). Ukrainian Intelligence’s Use of Telegram in Wartime. International Journal of Intelligence and CounterIntelligence, 1–27

066

Matthijs R. Koot @cyberwar.nl · 12/07/2025

“Turns out you can just hack any train in the USA and take control over the brakes. This is CVE-2025-1727 and it took me 12 years to get this published.” nitter.poast.org/midwestneil/... CISA: End-of-Train and Head-of-Train Remote Linking Protocol (10 July 2025): www.cisa.gov/news-events/...

131

Matthijs R. Koot @cyberwar.nl · 17/05/2025

The Chinese Communist Party’s influence over businesses (11 March 2025) kinacentrum.se/en/publicati... Report (.pdf, 69 pages) www.ui.se/globalassets... From the Swedish National China Centre (NKK), commissioned by Sweden’s MoD. Co-authored by Oscar Almén (FOI) and Hanna Carlsson (NKK).

020

Matthijs R. Koot @cyberwar.nl · 05/02/2025

Cyber Threat Intelligence meets the Analytic Tradecraft (Dec 2024) doi.org/10.1145/3701... Open Access 'we present [a] framework aiming at [how] the quality of CTI can be improved through such a combination of traditional intelligence analysis and CTI' In ACM Trans. on Privacy and Security 28:1.

000

Matthijs R. Koot @cyberwar.nl · 03/02/2025

Finnish Military Intelligence Review 2025 (7.5MB .pdf, January 2025, 48 pages) puolustusvoimat.fi/documents/19... "[...] This third published [review] describes Finland’s military operating environment & developments in that environment, as well as [the] Finnish Defence Intelligence (FDI). [...]"

021

Matthijs R. Koot @cyberwar.nl · 25/12/2024

Commercially sourced intelligence: friend or foe? (2024) doi.org/10.1080/0268... Authors: Vivi Ringnes Berrefjord (Norwegian Institute for Defence Studies) and Tor Erling Bjørstad (mnemonic AS). Published online 24 December 2024 in Intelligence and National Security (INS). Open access.

051

Matthijs R. Koot @cyberwar.nl · 18/12/2024

New US DOD report: Military and Security Developments Involving the People’s Republic of China 2024 (9MB .pdf, 182 pages, 18 December 2024) media.defense.gov/2024/Dec/18/... China Military Power Report (CMPR) Fact Sheet (0.2MB .pdf, 2 pages, 18 December 2024) media.defense.gov/2024/Dec/18/...

000

Matthijs R. Koot @cyberwar.nl · 05/12/2024

Something to Remember Us By: Device Confiscated by Russian Authorities Returned with Monokle-Type Spyware Installed (5 December 2024) citizenlab.ca/2024/12/devi... at @citizenlab.ca

Key Findings of investigation by First Department and Citizen Lab: Device Confiscated by Russian Authorities Returned with Monokle-Type Spyware Installed

020

Matthijs R. Koot @cyberwar.nl · 30/11/2024

Direct link to report (28MB .pdf, November 2024, 26 pages) go.recordedfuture.com/hubfs/report...

022

Matthijs R. Koot @cyberwar.nl · 19/11/2024

Joint statement by the Foreign Ministers of Finland and Germany on the severed undersea cable in the Baltic Sea (18 November 2024) www.auswaertiges-amt.de/en/newsroom/... More: edition.cnn.com/2024/11/18/e...

030

Matthijs R. Koot @cyberwar.nl · 12/11/2024

Navigating the Landscape of Misinformation and Disinformation: An In-Depth Examination of Existing Frameworks (29 October 2024) www.newamerica.org/future-secur...

Table 1 | Comparing Misinformation and Disinformation

Table 2 | Procedural Categorization of Misinformation and Disinformation Frameworks

Table 3 | Summary of Frameworks Categorization

053

Matthijs R. Koot @cyberwar.nl · 31/10/2024

Principles for state approaches to commercial cyber intrusion capabilities (October 2024) www.chathamhouse.org/2024/10/prin... Direct link to research paper (1MB .pdf, 41 pages): www.chathamhouse.org/sites/defaul...

000

Matthijs R. Koot @cyberwar.nl · 27/08/2024

Cyber Effects in Warfare: Categorizing the Where, What, and Why (2024) tnsr.org/2024/08/cybe... By Jason Healey. Published in Texas Nat'l Security Review, Vol 7, Issue 4, Fall 2024. Novel framework to assess offensive cyber ops based on circumstances of use across different phases of war.

Abstract of paper "Cyber Effects in Warfare: Categorizing the Where, What, and Why"

Table 1: Framework of Offensive Cyber Operations in Wartime

010

Matthijs R. Koot @cyberwar.nl · 14/05/2024

Covert Connections: The LinkedIn Recruitment Ruse Targeting Defense Insiders (8 May 2024) airuniversity.af.edu/JIPA/Display... Direct link to paper (.pdf, 24 pages) media.defense.gov/2024/May/07/...

010

Matthijs R. Koot @cyberwar.nl · 07/05/2024

Commercial Enablers of China’s Cyber-Intelligence and Information Operations (2024) digitalcommons.usf.edu/mca/vol7/iss... Published in Military Cyber Affairs, Vol. 7, Issue 1. Direct link to paper (0.5MB .pdf, 12 pages) digitalcommons.usf.edu/cgi/viewcont...

Paper: Commercial Enablers of China’s Cyber-Intelligence and Information Operations (2024)

000

Matthijs R. Koot @cyberwar.nl · 03/05/2024

Tradecraft observations on the Reichenbach/Fischer espionage case (3 May 2024) intelnews.org/2024/05/03/0... By Nicholas Eftimiades.

000

Matthijs R. Koot @cyberwar.nl · 25/04/2024

US DOJ: Justice Department Charges Four Iranian Nationals for Multi-Year Cyber Campaign Targeting U.S. Companies (23 April 2024) www.justice.gov/opa/pr/justi... Unsealed indictment (5.5MB .pdf, 13 pages) www.justice.gov/opa/media/13... Reward of up to $10M & possible relocation offered.

Up to $10 Million Reward & Possible Relocation

These individuals conducted malicious cyber ops against U.S. firms and government agencies on behalf of Iran's IRGC.

000

Matthijs R. Koot @cyberwar.nl · 04/03/2024

Russian International Money Launderer Pleads Guilty to Illicitly Procuring Large Quantities of U.S.-Manufactured Dual-Use, Military Grade Microelectronics for Russian Entities (29 February 2024) www.justice.gov/opa/pr/russi... re: OLED micro-displays

001

Matthijs R. Koot @cyberwar.nl · 06/01/2024

NIST AI 100-2e2023: Adversarial Machine Learning - A Taxonomy and Terminology of Attacks and Mitigations (Jan 2024) csrc.nist.gov/pubs/ai/100/... (final report) Permalink to report (1MB .pdf, Jan 2024, 106 pages) doi.org/10.6028/NIST...

000

Matthijs R. Koot @cyberwar.nl · 20/12/2023

Image geolocation analysis diagrams: outside clues (left picture) and inside clues (right picture). Useful for OSINT. Also available as .pdf: 1) Outside clues: github.com/seintpl/osin... 2) Inside clues: github.com/seintpl/osin... Author: SEINT_pl Date: 2022 Source: github.com/seintpl/osint

Geolocation Analysis Diagram Outside clues

Geolocation Analysis Diagram Inside clues

123

Matthijs R. Koot @cyberwar.nl · 13/12/2023

Regulating Transnational Dissident Cyber espionage (12 December 2023) doi.org/10.1017/S002... (open access) Peer-reviewed article by Siena Anstis, senior legal advisor at @citizenlab.ca, in Int'l & Comparative Law Quarterly (ICLQ). In brief at Citizen Lab's blog: citizenlab.ca/2023/12/regu...

000

Matthijs R. Koot @cyberwar.nl · 04/08/2023

To trust or to restrict? – mapping professional perspectives on intelligence powers and oversight in the Netherlands using Q-methodology (Oomens et al., 2023) doi.org/10.1080/02684527.2023.22390… (open access) Published online on 2 Aug 2023 in Intelligence & National Security.

110

Matthijs R. Koot @cyberwar.nl · 26/07/2023

UK Intelligence and Security Committee of Parliament: Report on China (2.4MB .pdf, July 2023) isc.independent.gov.uk/wp-content/u… via A 222-page (!) report examining the threat posed by the Chinese authorities and the UK's response.

100

Matthijs R. Koot @cyberwar.nl · 15/07/2023

Industrial Control Systems: Engineering Foundations and Cyber-Physical Attack Lifecycle (May 2023) cyberphysicalsecurity.info ^^ 133-page technical paper by Marina Krotofil (Twitter: @marmusha). See website for link to the 55MB .pdf. HT @dcuthbert.bsky.social via @the.gru.gq

000

Matthijs R. Koot @cyberwar.nl · 07/07/2023

Why Do We Need a New Research Agenda for the Study of Intelligence? (2023) doi.org/10.1080/08850607.2023.22223… By Hager Ben Jaffel & Sebastian Larsson, published 6 July 2023 in Int'l Journal of Intelligence and CounterIntelligence. Open Access

Title and introduction: Why Do We Need a New Research Agenda for the Study of Intelligence (2023)

000

Matthijs R. Koot @cyberwar.nl · 07/06/2023

Cyber-enabled tradecraft and contemporary espionage: assessing the implications of the tradecraft paradox on agent recruitment in Russia and China (2023) doi.org/10.1080/02684527.2023.22160… By Kyle S. Cunliffe, published online in Intel & NatSec (INS) in June 2023, Open Access.

000

Matthijs R. Koot @cyberwar.nl · 29/05/2023

Link to press release from Wyden’s office (26 May 2023): www.wyden.senate.gov/news/press-rel…

100

Matthijs R. Koot @cyberwar.nl · 22/05/2023

Clandestine communications in cyber-denied environments - Numbers stations and radio in the 21st century (2023) doi.org/10.1080/18335330.2023.22095… Open Access article by Tony Ingesson and Magnus Andersson, published in the Journal of Policing, Intelligence and Counter Terrorism (JPICT).

010

Matthijs R. Koot @cyberwar.nl · 18/05/2023

Will “No. 1 BC Live” be the next (specifically?) criminal-oriented encrypted communication platform to be pwned by law enforcement? Source: Risky Biz

000

Matthijs R. Koot @cyberwar.nl · 16/05/2023

“[…] As a side result, this shows that it now costs less than 100k USD to break cryptography with a security level of 64 bits […]” (on GPU clusters, i.e., no ASICs/FPGAs)

000

Matthijs R. Koot @cyberwar.nl · 05/05/2023

might not be the best criterium

100

Matthijs R. Koot @cyberwar.nl · 05/05/2023

Journal of Security, Intelligence, and Resilience Education (ISSN 2165-3798) jsire.org Open access, peer-reviewed journal, now at Vol. 16. Editors: - John Comiskey, assoc. prof. in Homeland Security at Monmouth University - James Ramsay, prof. in Security Studies at Macquarie University

000