Sign in

hakan

@hatr.bsky.social
6.6K followers 728 following 504 posts

reporter covering cyber (both crime and state-sponsored) for Der Spiegel and ZDF, short overview at linktr.ee/hakantanriverdi, Signal: hakan.25

PostsRepliesMedia
hakan @hatr.bsky.social · 3h
"the quick side lesson here is that a person’s operational security does not extend to other people’s cameras." www.bullshithunting.com/p/a-free-osi...
bullshithunting.com
A Free OSINT Lesson: Fashion, Optics, and Paper Trails
Back in your inbox, it’s MJ Banias
000
Reposted by hakan
Dustin Volz @dustinvolz.bsky.social · 28/09/2026
New: FBI in internal memo says it believes ShinyHunters may have stolen private data on all employees. Fears of longterm consequences of breach magnify as hackers threaten to leak everything online by end of Tuesday. www.nytimes.com/2026/09/28/u...
nytimes.com
Embarrassing Breach at F.B.I. Fuels Fears of Harm to Its Employees (Gift Article)
In an internal memo, the F.B.I. said it believed the hackers may have stolen sensitive information on all of its employees.
42506203
hakan @hatr.bsky.social · 25/09/2026
„The mechanisms of surveillance are such that targeted killings are often audio-recorded and photographed. One interviewee says, “I’d hear the final moments of a person’s life,” and another recalls hearing family members screaming and crying after a child was killed www.newyorker.com/culture/the-...
newyorker.com
“NAZA” Puts Israel Face to Face with the War in Gaza
In this documentary, Israeli military and intelligence sources reveal systems, policies, and practices that have resulted in high numbers of civilian deaths and widespread destruction.
000
Reposted by hakan
Vas Panagiotopoulos @vaspanagiotopoulos.com · 23/09/2026
In English: irpimedia.irpi.eu/en-inside-th...
irpimedia.irpi.eu
Inside the secretive cyberweapons company that won over Israel’s intelligence elite
The system was being used without an adequate legal basis, in violation of privacy rules. Unpublished documents show that in May 2025, Italy’s Data Protection Authority asked the Interior Ministry to ...
023
hakan @hatr.bsky.social · 20/09/2026
edition.cnn.com/2026/09/18/p... „The report, according to one of the sources, was “entirely false.” But it also “almost started a war,”“
edition.cnn.com
Exclusive: US military had close call after using AI for false intelligence report, sources say | CNN Politics
The episode shows the risks of using this new, relatively poorly understood technology in the middle of the Iran war
011
hakan @hatr.bsky.social · 19/09/2026
Another one of these whoops, we, a billion dollar company, just have committed a criminal act, but it’s a good learning exercise for all of us Also, again Irregular bearing part of the responsibility www.nytimes.com/2026/09/18/t...
nytimes.com
Gemini AI Hacked Three Companies in a Testing Breakout, Google Says
A third-party test company inadvertently gave internet access to Google’s Gemini and other artificial intelligence models during cybersecurity testing.
061
hakan @hatr.bsky.social · 18/09/2026
"To prove we had in fact gained the access we believed without allowing ourselves to learn any sensitive information, we used the employee’s Codex to open a PR #1186742 in OpenAI’s internal monorepo" www.hacktron.ai/blog/hacking...
hacktron.ai
Hacking OpenAI
A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories
030
hakan @hatr.bsky.social · 17/09/2026
Wrote a short newsletter on the Anthropic incident and how I learned about two neat tricks when investigating packages uploaded to the internet buttondown.com/readwrite/ar...
buttondown.com
Edition 14 – The recent Anthropic security incident
Yesterday, I published a short story on one of Anthropic's security incidents. Short version is: They had an agent run wild, go to extraordinary lengths to...
022
hakan @hatr.bsky.social · 15/09/2026
Reposting this in case it's FYI
031
hakan @hatr.bsky.social · 15/09/2026
"how readily ICBC’s London branch bypassed ordinary banking protocols to satisfy the demands of its Chinese parent,​ especially when a strategic client — one that had come to symbolize China’s technological advancement — needed a helping hand." www.icij.org/investigatio...
icij.org
ICBC helped Huawei spirit $1B out of London days after US indictment
The urgent operation exposes how readily ICBC’s local branch bypassed internal checks to boost a Beijing favorite.
010
hakan @hatr.bsky.social · 14/09/2026
Some news on "incident 2", the one which had Anthropic "most concerned". Crucially, the malware was stopped within 18 minutes of being uploaded. A trusted security researcher from Austria, working in his spare time, quickly analyzed and then quaranted mlflow-ui www.derstandard.de/story/300000...
derstandard.de
Wie ein Wiener eine KI-Spionagesoftware von Anthropic stoppte
Künstliche Intelligenz lud Schadsoftware auf eine Plattform mit Millionen Nutzern. Ein Cybersicherheitsforscher aus Österreich verhinderte, dass sie sich weiter verbreiten konnte.
12413
Reposted by hakan
Richard Tofel @dicktofel.bsky.social · 14/09/2026
BREAKING @propublica.org: Trump Jr.’s wedding this May was heavily funded by a Russian oligarch close to Putin www.propublica.org/article/dona...
propublica.org
Donald Trump Jr.’s Wedding Bankrolled by Putin-Linked Russian Oligarch
The oligarch, Umar Kremlev, spent hundreds of thousands on expenses like renting out a private island. He appears to have met Trump Jr. only recently, but he attended the intimate wedding with a large...
1519381
hakan @hatr.bsky.social · 14/09/2026
“The warning of AI and math, that was my original story,” he said. “And now the story is about: Is it ethical for the AI companies to scoop their customers?” www.washingtonpost.com/technology/2...
washingtonpost.com
He was close to a huge math breakthrough. Then he got scooped by AI.
A New York University professor questions whether AI agents that solved one of the most complex problems in theoretical mathematics were fed on his work.
051
Reposted by hakan
Pwnallthethings @pwnallthethings.bsky.social · 12/09/2026
This is a good example of how you need quite a lot of detail of how these systems *actually* work to understand what the risks are, and how over-indexing on sci-fi can lead you a bit astray on what the future looks like
332112494
hakan @hatr.bsky.social · 04/09/2026
"The pair said they found more than 15,000 edits carried out by AI agents on a German-language wiki site, DseWiki, that is geared toward programmers and accepts communal edits along ‌the lines of ⁠Wikipedia." www.reuters.com/world/europe...
reuters.com
EXCLUSIVE: OpenAI agents hijacked German website in previously undisclosed AI breakout this spring
A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents, according to ​new research and two people familiar with the matter.
012
hakan @hatr.bsky.social · 02/09/2026
Ich weiß noch, wie viel Kritik @florianflade.bsky.social und ich bekommen haben als wir 2020 auf diese Form der Überwachung (damals durch das BKA) hingewiesen hatten. (Unnötige Panikmache etc.) netzpolitik.org/2026/messeng...
netzpolitik.org
Immer mehr Polizei überwacht Messenger wie WhatsApp
Behörden überwachen regelmäßig Messenger-Kommunikation in WhatsApp, Telegram und Signal – ganz ohne Staatstrojaner. Das geht aus einem Dokument des Zollkriminalamts hervor, das wir veröffentlichen. Ei...
175
hakan @hatr.bsky.social · 02/09/2026
"The source brought it to my attention because the proprietor of this identity theft service offered my Virginia drivers license as a free sample in their initial sales thread on Exploit." krebsonsecurity.com/2026/09/fbi-...
krebsonsecurity.com
FBI Probes Service Selling 153M+ Drivers Licenses – Krebs on Security
162
Reposted by hakan
Florian Flade @florianflade.bsky.social · 25/08/2026
💥 News zum Anschlagsversuch am Flughafen Leipzig/Halle: Offenbar sollten mehrere Drohnen eingesetzt werden. Weitere #Drohne und Sprengstoff wurden im Kabelsketal gefunden. Recherche mit J. Diehl, @manuelbewarder.bsky.social R. Lehberger, J. Schmitt. www.tagesschau.de/investigativ...
tagesschau.de
Flughafen Leipzig/Halle: Weitere Drohne und möglicherweise militärischer Sprengstoff entdeckt
Bei dem Anschlagsversuch auf dem Leipziger Flughafen kamen offenbar mehrere Drohnen zum Einsatz. Nach Informationen von WDR, NDR und SZ haben die Behörden ein weiteres Fluggerät entdeckt - und möglich...
27341
Reposted by hakan
Karen Attiah @karenattiah.bsky.social · 24/08/2026
BREAKING: After the Washington Post fired me last year for speaking the truth in the wake of the Charlie Kirk killing, I fought back. And I'm happy to announce: I won my case against the Washington Post. They have been ordered to reinstate me immediately. www.nytimes.com/2026/08/24/b...
nytimes.com
Washington Post Ordered to Rehire Fired Columnist Karen Attiah
An arbitrator ordered the newspaper to reinstate Karen Attiah, who was fired after posting about “white men who espouse hatred and violence” following Charlie Kirk’s killing.
1194326356224
hakan @hatr.bsky.social · 24/08/2026
"I think that the apathy shows in the software". Interesting video on using LLM-assisted coding from a person who wrote code for 19 years without AI, then switched to using it – and now says, he's done with it www.youtube.com/watch?v=2ZU3...
youtube.com
I'm done coding with AI
YouTube video by Brett Codes
130
hakan @hatr.bsky.social · 24/08/2026
"The presence of Nvidia modules and a lack of antennas on the drones led Ukrainian air defense commanders to surmise that the weapons were guided by an autonomous A.I. system, which was confirmed on further investigation." www.nytimes.com/2026/08/24/w...
nytimes.com
A Drone Killed Three Ukrainians. It Was Guided Entirely by A.I.
An attack by what Ukrainian officials said was a Russian drone with an Nvidia chip presages a dystopian future of weaponry untethered to humans.
21616
hakan @hatr.bsky.social · 24/08/2026
"These traders typically opened an account ​and quickly placed a highly successful long-shot bet in niche markets where insiders may have an informational edge, before in many cases cashing out and disappearing." www.reuters.com/business/fin...
reuters.com
EXCLUSIVE: More than 150 Polymarket wallets may have traded on military secrets, research finds
More than 150 wallets on Polymarket International may have traded on inside U.S. military information, attracting copycat ​bets and raising concerns that the market could broadcast signals exploitable...
022
hakan @hatr.bsky.social · 21/08/2026
"I reported it for a second time to the UK's National Cyber Security Centre (NCSC), and this time, mentioning that military bases were involved, they actually cared a lot." lina.sh/blog/hijacki...
lina.sh
I accidentally logged hundreds of thousands of phone calls to military bases
How an expired nameserver let me take over e164.arpa zones for multiple territories, and why I probably should have checked my logs sooner.
024
Reposted by hakan
Florian Flade @florianflade.bsky.social · 21/08/2026
News💥 Im vergangenen Jahr entdeckte das Bundesamt für #Verfassungsschutz in einem Waldstück am Stadtrand von #Berlin ein Versteck mit zwei Schusswaffen. Die Spur führt zu russischen „Wegwerf-Agenten“: www.tagesschau.de/investigativ... Mit @manuelbewarder.bsky.social R. Lehberger J. Schmitt
tagesschau.de
Waffenversteck im Wald: Behörden vermuten russischen Geheimdienst hinter dem Depot bei Berlin
Sicherheitsbehörden haben nach Informationen von WDR, NDR und SZ am Stadtrand von Berlin ein Versteck mit zwei scharfen Waffen entdeckt. Nach Einschätzung der Behörden soll es sich um ein Depot russis...
38525
hakan @hatr.bsky.social · 21/08/2026
"They also said the AI agent's attempt to publicly discredit Demir by creating a multi-person conversation around him showed that AI models were able to mount sophisticated efforts to trick and cajole humans." www.reuters.com/world/how-te...
reuters.com
EXCLUSIVE: How a Texas student blew the whistle on a rogue AI hacking attempt
Sinan Can Demir wanted to spend the last week of July burnishing his resume. Instead, he engaged in a battle of wits with an artificial-intelligence agent unleashed by a British government lab.
051
hakan @hatr.bsky.social · 20/08/2026
"But the prompts WIRED examined go further, turning a tool for finding a known vehicle into one that casts suspicion on drivers based on where and how often they drive, regardless of whether they are wanted for a crime." www.wired.com/story/flock-...
wired.com
Flock Has a Powerful New AI Tool for Police. We Got Its Code
Flock’s surveillance cameras have already sparked outrage. WIRED reconstructed its next-generation AI system, already in use by some police, to confirm it goes much further than tracking license plate...
077
hakan @hatr.bsky.social · 19/08/2026
Thorough explanation of how the EncroChat-hack allegedly worked www.computerweekly.com/news/3666493...
computerweekly.com
Revealed: Cyber spies used malware from GitHub to hack EncroChat cryptophone network | Computer Weekly
Computer Weekly reveals for the first time how French cyber spies hacked EncroChat phones used by organised crime groups.
175
hakan @hatr.bsky.social · 19/08/2026
"the sanctions prevented them from working with the court to seek justice for genocide, war crimes and crimes against humanity around the world." www.bbc.com/news/article...
bbc.com
US announces new sanctions on ICC president and top lawyer
The Trump administration has vowed to dismantle the international court "brick by brick".
000
Reposted by hakan
Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 17/08/2026
NEW: An "unprecedented" number of people have received Apple's latest notifications alerting them they were targeted with mercenary spyware, according to security researchers. A soldier fighting in Ukraine told us he knows of other soldiers getting them. Lots of posts on social media too.
techcrunch.com
‘Unprecedented’ number of Apple users received recent spyware alert, say investigators | TechCrunch
Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.
13831
hakan @hatr.bsky.social · 14/08/2026
"The investigation in some ways called to mind Cointelpro, the intrusive counterintelligence program that the F.B.I. ran against leftist groups from the 1950s to the 1970s under the leadership of the bureau’s director, J. Edgar Hoover." www.nytimes.com/2026/08/13/u...
nytimes.com
U.S. Investigated Left-Leaning Groups During Minnesota Immigration Crackdown
The government conducted expansive surveillance, infiltrated group chats and obtained financial records of organizations never accused of crimes.
022
hakan @hatr.bsky.social · 12/08/2026
„most of the destruction documented by the FT and Lighthouse came after an initial Israel-Lebanon ceasefire on April 17.“ www.ft.com/content/25bc...
ft.com
Israel’s campaign to make southern Lebanon ‘unliveable’
Israeli forces have systematically destroyed homes, roads, farmland and forests despite ceasefire with Hizbollah
020
Reposted by hakan
Alberto Fittarelli @fittarelli.com · 11/08/2026
1/ In Feb 2026, OpenAI reported on a doxxing website, which since 2023 had been exposing Chinese activists and dissidents. Unsurprisingly, the company attributed that activity to Chinese law enforcement. We @citizenlab.ca had been looking at it for a while and have some extra details. 🧵
openai.com
Disrupting malicious uses of AI
Our latest threat report examines how malicious actors combine AI models with websites and social platforms—and what it means for detection and defense.
167
Reposted by hakan
Zack Whittaker @zackwhittaker.com · 10/08/2026
Great reporting by @ellenwapo.bsky.social. The U.S. gov't may have attributed the U.S. water hacks to Iran, but isn't sure exactly which group within Iran's Revolutionary Guards did it. Also: "There may be a reluctance to make an attribution that contradicts the president’s public remarks." 🤦
washingtonpost.com
Water systems are ripe for cyberattacks, experts warn after suspected Iranian hacks
As lawmakers call for protections after incidents in 12 states, an EPA rule that Republicans fought would “remove most of the low-hanging fruit,” a cybersecurity chief said.
1133
hakan @hatr.bsky.social · 06/08/2026
"The incident, which Meta says occurred during an evaluation by an independent company, is the fourth recent incident of its kind disclosed by AI companies." www.bbc.com/news/article...
bbc.com
Meta becomes latest firm to say its AI hacked another company
Meta is the latest company to disclose an AI agent breach, raising cyber-security concerns.
000
hakan @hatr.bsky.social · 06/08/2026
"In some cases, he notes, the hackers appeared to have infected themselves with their own malware" www.wired.com/story/a-secu...
wired.com
A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide
For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe.
0114
hakan @hatr.bsky.social · 04/08/2026
Late to this, but so good medium.com/@billmarczak...
medium.com
An Angry Spark, or a Triangle in Disguise?
On April 14, 2026, Gen Digital published “Chasing an Angry Spark”, a report about sophisticated Windows spyware that Gen saw once in 2022…
030
Reposted by hakan
Steffen Rayburn-Maarup @rayburnmaarup.bsky.social · 02/08/2026
I don't think people are ready for this kind of joke yet.
A town sign seen through a train window.
209109762166
Reposted by hakan
Dhruv Mehrotra @dmehro.bsky.social · 03/08/2026
NEW: In 2025 ICE obtained DNA from nearly one million people and funneled it into an FBI criminal database. The collection likely included DNA from young children and was backed by the threat of criminal prosecution. The raw genetic material is stored indefinitely. Free to read:
wired.com
ICE Collected Nearly 1 Million People’s DNA Last Year—Including Young Children
Internal documents show ICE's DNA collection has skyrocketed in the second Trump administration. Now hundreds of thousands of people never convicted of a crime are in an FBI criminal database forever.
5368269
Reposted by hakan
Alexios Mantzarlis @mantzarlis.com · 01/08/2026
womp womp there goes a PM’s promo package
npr.org
Google pauses AI satellite images, after fears of deepfakes in the sky
Journalists, human rights advocates and open source analysts recoiled in horror at the initial decision: "The opportunities for abuse and disinfo are literally boundless," said one.
031
hakan @hatr.bsky.social · 31/07/2026
Going to be interesting to see if any of the three companies are going to sue www.nytimes.com/2026/07/30/t...
nytimes.com
Anthropic Says Its A.I. Systems Broke Into Computers at 3 Organizations (Gift Article)
The disclosure followed OpenAI’s report last week that its own artificial intelligence had hacked into the network of an online library.
3137
Reposted by hakan
Jeff Moss @thedarktangent.defcon.social.ap.brid.gy · 25/07/2026
Great new feature in the latest Signal app. If you enable disappearing messages the meta data of calls and missed calls gets deleted as well. I know this was a long standing goal for them, but the engineering behind it took time. #Privacy @signalapp
421693
Reposted by hakan
Emily M. Bender @emilymbender.bsky.social · 24/07/2026
Note to all journalists: If you are tempted to describe what you are trying to report on as "ripped from the pages of a sci-fi novel", you have been taken in by the marketing department. >>
In a twist that seems ripped from the pages of a sci-fi novel, the attackers turned out to be artificial-intelligence models that had escaped from a research network at OpenAI, and on July 11 hacked into AI company Hugging Face. And the AIs appear to have been active on the internet for several days before anyone stopped them.
2463112
Reposted by hakan
Saher @saffronsec.bsky.social · 23/07/2026
Most exciting @threatinsight.proofpoint.com drop yet - in collaboration with NSA - and the product of @greg-l.bsky.social's blood, sweat, and tears. Research into two Russian actors throwing half-click exploits against mailservers. Part 1 on TA488 / Void Blizzard www.proofpoint.com/us/blog/thre...
proofpoint.com
TA488 Targets Zimbra Mailservers with Half-Click Exploits | Proofpoint US
Proofpoint is releasing this report in coordination with NSA and FBI’s JSAC reporting about TA488/Void Blizzard, which can be found here. This is part 1 of a 2-part blog series Proofpoint is
21815
hakan @hatr.bsky.social · 22/07/2026
“I wish the frontier labs spent as much time on teaching their models to write secure infrastructure as they are spending on them exploiting vulnerabilities.” www.wired.com/story/openai...
wired.com
OpenAI Models Escaped Containment and Hacked Hugging Face
The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack.
051
hakan @hatr.bsky.social · 21/07/2026
"more than 30 current and former diplomatic, national security, White House and intelligence officials painted a picture of an emerging diplomatic gray zone that blended spycraft, diplomacy and commercial lobbying over the future of a new technology arms race2 www.wsj.com/world/middle...
wsj.com
The CIA Operative Who Spied on the U.A.E.—and Played a Role in Its AI Win
While conducting espionage against sheikh’s tech company, Jonny Gannon helped Gulf country quash U.S. suspicions about China ties.
020
Reposted by hakan
Dustin Volz @dustinvolz.bsky.social · 17/07/2026
A reminder that bears repeating: Trump has systematically dismantled election security efforts within the federal government during his second term.
14117
hakan @hatr.bsky.social · 17/07/2026
"Shortly after Muntyan was first contacted by OCCRP, the AI instructions describing the company as having no Russian affiliation were removed from his company’s website" www.occrp.org/en/investiga...
occrp.org
European Password Manager Shares Origins and Updates with State-Certified Russian Firm
Passwork, a Spain-based password manager used by European government agencies and universities, shares technological ties with a Russian counterpart — an arrangement that experts say poses a state-lev...
074
Reposted by hakan
paper trail media @papertrailmedia.de · 16/07/2026
»Am meisten hat mich beeindruckt, wie die unterschiedlichen Formen der Spionage ineinandergreifen«, sagt @hatr.bsky.social. »Wenn es möglich ist, holen sich Geheimdienstmitarbeiter Fingerabdrücke. Oder verpassen Autos GPS-Peilsender.« Und dann gibt es da noch: Pegasus www.spiegel.de/politik/deut...
spiegel.de
Meinung: News des Tages: Jens Spahn, Leihmutter, Mossad, Wetter
Jens Spahn ist Vater geworden – das befeuert die Debatte über Leihmütter. US-Vizepräsident Vance verbreitet eine Verschwörungstheorie zu Mossad und Epstein. Und es hagelt, nicht nur Kritik. Das ist di...
053
Reposted by hakan
Bastian Obermayer @bastianobermayer.bsky.social · 16/07/2026
Die „Monsterwaffe Pegasus“ — 5 Jahre nach dem „Pegasus Project“ haben wir news aus Marokko, von @hatr.bsky.social & @marcelrosenbach.bsky.social, mit @forbidden-stories.bsky.social, für @spiegel.de, @derstandard.at @papertrailmedia.de & @tagesanzeiger.bsky.social. www.spiegel.de/ausland/maro...
spiegel.de
(S+) Marokko: Wie das Land die digitale »Monsterwaffe« gegen unliebsame Kritiker einsetzte
Marokko bestreitet, Spionagesoftware gegen Aktivisten und Journalisten eingesetzt zu haben. Insider des dortigen Geheimdienstes belegen nun das Gegenteil. Und zeichnen das Bild eines Hightech-Überwach...
2228
Reposted by hakan
paper trail media @papertrailmedia.de · 16/07/2026
Pegasus gilt als eines der mächtigsten Spionage-Werkzeuge. Entwickelt von der israelischen Firma NSO, lassen sich damit Smartphones weltweit mühelos knacken. Neue Recherchen enthüllen nun, wie genau Pegasus von staatlicher Stelle eingesetzt wird.
Pegasus Project Inside Moroccos's spying machine
22115