Sign in

kurt baumgartner

@kurtisj.bsky.social
168 followers 150 following 120 posts

cybersecurity researcher, co-founder TLPBLACK. thanks for all the xor

PostsRepliesMedia
kurt baumgartner @kurtisj.bsky.social · 7h
The action was part of Operation KillSwitch...Investigators identified a 16-year-old as the group’s suspected main operator. Three suspects were provisionally arrested and eight properties searched in Greece, Romania, Spain, and the United Kingdom www.europol.europa.eu/media-press/...
europol.europa.eu
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site – Three arrests and eight searches across four European countries in an operation targeting a gro...
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access. The cybercrime group used the site to threaten o...
010
Reposted by kurt baumgartner
Catalin Cimpanu @campuscodi.risky.biz · 28/09/2026
ShinyHunters member arrested in the Netherlands I think they might be regretting targeting the FBI right about now www.rtl.nl/nieuws/binne...
rtl.nl
Nederlander (24) opgepakt in onderzoek naar hackersgroep ShinyHunters
Er is een Nederlander opgepakt voor betrokkenheid bij de criminele hackersgroep ShinyHunters. Het gaat om de 24-jarige Pepijn van der S. Dat melden bronnen aan RTL Nieuws. De grote hacks bij Odido en ...
1146
Reposted by kurt baumgartner
Prof Sam Illingworth @samillingworth.com · 26/09/2026
⚛️ Superconductors' true current limit In niobium nitride hit with picosecond pulses, the electron pairs behind superconductivity broke apart at about 2.2 times the usual current limit. That could help magnet design. 🔗 doi.org/10.1038/s41567-026-03469-z #Physics #Superconductors #Materials 🧪
doi.org
Probing picosecond depairing currents in type-II superconductors - Nature Physics
Vortex motion and heating prevent direct-current measurements from reaching the intrinsic depairing limit of type-II superconductors. Picosecond pulses bypass these effects and reveal a sharp threshol...
092
kurt baumgartner @kurtisj.bsky.social · 26/09/2026
kiberphant0m gets 70 months
000
kurt baumgartner @kurtisj.bsky.social · 26/09/2026
amazing reporting. it's too bad, i love the freedom and the thrill of the service. but cmon there has to be consequences for this kind of predatory crap.
000
Reposted by kurt baumgartner
Mrs. Betty Bowers @mrsbettybowers.bsky.social · 26/09/2026
If we are talking about Peter Thiel—the nuttier version of Roy Cohn, only out—don't speculate about the young model Thiel was cheating on his husband with, who made a rather Russian departure from life, off a high-rise balcony, after crashing Mr. & Mr. Thiel's party and causing a row between them.
992115644
Reposted by kurt baumgartner
KOJAMF🤘🖤🤘 @kojamf.bsky.social · 26/09/2026
Pissedmagistus @pissedmagistus.bsky.social linktr.ee/pissedmagistus The trial of Peter Thiel.
2513259
kurt baumgartner @kurtisj.bsky.social · 25/09/2026
great zoom advice
010
kurt baumgartner @kurtisj.bsky.social · 23/09/2026
stack overflow in dlink DIR-822A routers
000
Reposted by kurt baumgartner
Kyle Clark @kylec.bsky.social · 18/09/2026
Squirrels on suicide missions have knocked out power to Castle Rock, Colorado twice this week. Our investigation has revealed a century of squirrel attacks covered up by the pro-squirrel media.
1422423544
kurt baumgartner @kurtisj.bsky.social · 20/09/2026
"a network of individuals working for... the "RIS Network"...conspired to conduct... attacks and murder around the world" "DURRUTHY, among other things and while in Russia, transferred over $1,000 in cryptocurrency to Associate-I in advance of the attack;" www.justice.gov/usao-sdny/me...
justice.gov
000
kurt baumgartner @kurtisj.bsky.social · 20/09/2026
China Primer: The People’s Liberation Army (PLA) hmmm, one full line about cyber "Sophisticated cyber espionage and attack forces..." couple mentions "Cyberspace Force, Information Support Force" and nothing about TRB. www.congress.gov/crs-product/...
congress.gov
012
Reposted by kurt baumgartner
Jake Williams @malwarejake.bsky.social · 19/09/2026
I want to be surprised. I am not surprised. This was absolutely foreseeable. That there wasn't a system of checks here to uncover this before we were nearly at war is a failure of leadership.
4319
Reposted by kurt baumgartner
Saher @saffronsec.bsky.social · 14/09/2026
Back by popular demand, it's time for Volume II of State of Statecraft @what-is-sos.bsky.social! Come check out the latest in state-sponsored operations across espionage, cyber/physical sabotage, disruption, attribution, and all the -INTs you could dream of - Oct 22 www.stateofstatecraft.com/agenda
stateofstatecraft.com
Agenda - State of Statecraft
The purpose of SOS is to discuss state-sponsored operations and drive understanding of geopolitical risk and impact through study of the actors or systems that facilitate them.
0125
Reposted by kurt baumgartner
State of Statecraft Conference @what-is-sos.bsky.social · 11/09/2026
BEHOLD: the 🆘 AGENDA is OUT! VOLUME II features numerous discussions on developments in state-sponsored operations covering digital espionage, cyber/physical sabotage, economic tradecraft, disruption, attribution and dare we say, more? Agenda 👉 stateofstatecraft.com/agenda 🧵
143
kurt baumgartner @kurtisj.bsky.social · 09/09/2026
"Likely with Chinese government awareness, DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI extracted billions of tokens across millions of exchanges/requests from U.S. frontier AI models, including variants of Claude, GPT, Gemini, and Grok..." www.cisa.gov/news-events/...
cisa.gov
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies | CISA
000
Reposted by kurt baumgartner
Katie Moussouris (she/her/she-hulk/she-ra)🌻 @k8em0.bsky.social · 08/09/2026
Heard about the [un]prompted AI security conference but can’t afford the conference fee? There’s a scholarship program that covers the cost of the registration! Apply here: docs.google.com/forms/d/e/1F...
docs.google.com
[Un]prompted Scholarship Program Application
The [un]prompted conference is one of the most important gatherings of AI security researchers and practitioners. The Decibel Scholarship Program was created to provide financial assistance to attende...
11410
Reposted by kurt baumgartner
Eric Columbus @ericcolumbus.bsky.social · 08/09/2026
Happy 72nd Birthday to Ruby Bridges, who at the age of 6 desegregated the New Orleans public schools. She’s younger than 30 senators and our last two presidents—and only 7 years older than Barack Obama. The past isn’t past.
Ruby Bridges, age 6Ruby Bridges flanked by three U.S. Marshals on the steps of her schoolNorman Rockwell’s painting depicting the event, “The Problem We All Live With,” originally published as a centerfold in the January 14, 1964 issue of Look magazine. Ruby Bridges talking with President Obama as they look at Rockwell’s painting while it was temporarily displayed at the White House in 2011.
5598883370
Reposted by kurt baumgartner
Kashana @kashana.blacksky.app · 07/09/2026
Possibly the most American news of all time
local12.com
Prison inmates donate more than $4,000 to pay children's school lunch debt
Residents at the prison contributed $3,810 of their own money, while Kansas Department of Corrections employees added another $457.
280173924956
Reposted by kurt baumgartner
Mark Jacob @markjacob.bsky.social · 07/09/2026
This is an excellent way to put it.
1116137
kurt baumgartner @kurtisj.bsky.social · 02/09/2026
"an iMessage zero-click exploit was used to infect the device with NSO Group’s Pegasus spyware" citizenlab.ca/research/peg...
citizenlab.ca
Pegasus Spyware Infection of Serbian Pro-Democracy Student Activist - The Citizen Lab
In collaboration with the SHARE Foundation, the Citizen Lab confirmed that the iPhone of a member of Serbia’s student protest movement was infected with Pegasus spyware.
011
Reposted by kurt baumgartner
The Record @therecordmedia.bsky.social · 02/09/2026
U.S. and European authorities disrupted the long-running botnet Sality, turning its peer-to-peer architecture against itself therecord.media/sality-botne...
therecord.media
Sality, one of the longest-running botnets, finally gets disrupted
U.S. and European authorities disrupted the long-running botnet Sality, turning the malware’s peer-to-peer architecture against itself to cut thousands of infected computers off from operators.
035
Reposted by kurt baumgartner
Electronic Frontier Foundation @eff.org · 21/08/2026
The Force is strong with this one.
commondreams.org
Man in Darth Vader Costume Praises Flock Cameras at City Council Meeting: ‘The Emperor Is a Fan’ | Common Dreams
​"We must continue utilizing Flock technologies so that we can follow and surveil the rebel scum as they move from playground to playground, from playground to pool, from pool to gymnasium."
7439120
Reposted by kurt baumgartner
Greg Otto @gregotto.bsky.social · 17/08/2026
This is such a good story
031
kurt baumgartner @kurtisj.bsky.social · 15/08/2026
TeamPCP claiming credit for large cred theft LiteLLM incident arstechnica.com/security/202...
arstechnica.com
Terabytes of credentials leaked in massive supply-chain attack
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
000
kurt baumgartner @kurtisj.bsky.social · 15/08/2026
Bfv alerts on active measures to divide germans and disrupt elections. "posts consisted of a series of staged or fake AI-generated content" Campaign attribution... "The observed tactics are attributed to the information manipulation campaign MATRIOSHKA" www.verfassungsschutz.de/SharedDocs/k...
verfassungsschutz.de
032
Reposted by kurt baumgartner
Amee Vanderpool @girlsreallyrule.bsky.social · 12/08/2026
Pete Hegseth was the lone member of Trump’s cabinet allowed to ride in the airport catering container. Below are the list of people who went with Trump (left) and those who were left aboard Air Force One (right). HOT 🔥 NOT 👎🏻
2617277
Reposted by kurt baumgartner
Nick Turse @nickturse.bsky.social · 13/08/2026
Oh look, it took 11 years for me to get nothing. We need to fix the Freedom of Information Act now! #FOIAfail
16211
kurt baumgartner @kurtisj.bsky.social · 13/08/2026
www.whitehouse.gov/presidential...
whitehouse.gov
Expanding Capabilities to Combat Transnational Cyber-Enabled Crime
MEMORANDUM FOR THE VICE PRESIDENT THE SECRETARY OF STATE THE SECRETARY OF THE TREASURY THE SECRETARY OF WAR THE ATTORNEY GENERAL THE SECRETARY OF COMMERCE
111
kurt baumgartner @kurtisj.bsky.social · 13/08/2026
heya wise guy, trousers imports are really on the move in graph 3. why, maybe stompers and cake baskets are on their way back too, don't you see www.library.hbs.edu/working-know...
library.hbs.edu
The US Supply Chain Shakeup After Tariffs, in Five Charts | Working Knowledge
Laura Alfaro documents how US imports have shifted away from China and toward other top partners.
010
Reposted by kurt baumgartner
Catalin Cimpanu @campuscodi.risky.biz · 08/08/2026
In an update, CERT Poland says the Russian data wiper attack that targeted a power plant last December also targeted a previously unreported second plant cert.pl/en/posts/202...
cert.pl
Follow-Up Report of the December 2025 Energy Sector Incident
During the attacks against Poland's energy sector in late 2025, a second combined heat and power plant was also affected. We are publishing a report detailing an investigation that lasted more than th...
01811
Reposted by kurt baumgartner
Michael Thomas @michael-thomas.bsky.social · 07/08/2026
This week I found permits and satellite photos suggesting Amazon is backing what could be the largest gas power plant ever built in the US. I just got off the phone with the company and confirmed they're behind it. Full story here: newsletter.cleanview.co/p/scoop-amaz...
newsletter.cleanview.co
Scoop: Amazon Is Behind One of the Largest Planned Gas Power Plants in the US
The company confirmed to Cleanview that it acquired the GW Ranch site in West Texas, where a 7.65 GW gas plant will power its first off-grid AI data center
14292158
kurt baumgartner @kurtisj.bsky.social · 08/08/2026
the conflicts are fantastic... that same vendor first day keynoted blackhat
110
Reposted by kurt baumgartner
Jason Schreier @jasonschreier.bsky.social · 05/08/2026
EA officially goes private tonight, meaning: - EA will no longer trade on the NASDAQ for the first time in 36 years - All stockholders of EA (including many employees) will receive $210/share - EA will take on $18 billion (!) in debt, putting it on the hook to pay ~$1.8 billion/year in interest
922341415
kurt baumgartner @kurtisj.bsky.social · 04/08/2026
"Ollama, vLLM, all the homegrown agent stuff people are exposing without thinking too hard about it - are a genuinely new kind of thing to attack" tlpblack.net/blog/2026080...
tlpblack.net
Someone attempted hacking my fake AI server, entailing a five hour tragedy
Recap of an attack against local AI server. How criminals try to take over hosted inference and AI agent systems
110
Reposted by kurt baumgartner
Cisco Talos Intelligence Group @talosintelligence.com · 04/08/2026
Some threat actors really need to learn how to prompt. Talos recovered attacker prompts logs and another AI artifacts to learn how they bypass guardrails, build and scale capabilities, and automate workflows. While amusing, some made sophisticated outputs: cs.co/63329BEAg9c
an AI prompt reading "dont give me this type of finding give me some real finding which is making some real ipmct analys be crative"
032
Reposted by kurt baumgartner
The Onion @theonion.com · 31/07/2026
Study Finds Most Americans Can't Find Where They Are Being Deported On Map
181560274
kurt baumgartner @kurtisj.bsky.social · 30/07/2026
Cymru recently posted addresses related to interesting infra with history - our TLPBLACK sensors tracked attacks from some of these IP going back to august 2025 x.com/teamcymru_S2...
x.com
Team Cymru Research (@teamcymru_S2) on X
Self-hosted AI-quota gateways are showing up as live attack infrastructure. We're currently tracking 241 IPs running New API and Sub2API panels (gen-ai:new-api / gen-ai:sub2api) that double as C2, rec...
110
kurt baumgartner @kurtisj.bsky.social · 30/07/2026
cyberscoop.com/amazon-north...
cyberscoop.com
A little-known npm package was North Korea’s warm-up act for the axios hack
Amazon security researchers reveal North Korean hackers spent a year testing minor packages as a rehearsal for major open-source software attacks.
210
kurt baumgartner @kurtisj.bsky.social · 28/07/2026
Our latest technical analysis on an active ransomware, "ByteToCrypt", along with defense recommendations we provide our customers tlpblack.net/blog/2026072...
tlpblack.net
A Deep Dive into ByteToBreach's ByteToCrypt ransomware
Technical analysis of ByteToCrypt, the custom Linux ransomware deployed by the ByteToBreach threat actor: encryption internals, anti-forensics behavior, decryption prospects, and IOCs.
011
kurt baumgartner @kurtisj.bsky.social · 27/07/2026
intrusiontruth.wordpress.com/2026/07/27/d...
intrusiontruth.wordpress.com
Dear Diary, Today I found a Ghost in the Network
Dear Diary, Today I found a Ghost in the Network A hidden seller Guangdong Chanming. If you were looking for them, you’d be disappointed. No public website, no storefront, and certainly no obvious …
010
kurt baumgartner @kurtisj.bsky.social · 27/07/2026
www.gendigital.com/blog/insight...
gendigital.com
Chasing an Angry Spark
A VM-obfuscated backdoor observed on a single machine in the UK, operated for one year, and vanished without a trace.
010
kurt baumgartner @kurtisj.bsky.social · 27/07/2026
medium.com/@billmarczak...
medium.com
An Angry Spark, or a Triangle in Disguise?
On April 14, 2026, Gen Digital published “Chasing an Angry Spark”, a report about sophisticated Windows spyware that Gen saw once in 2022…
111
kurt baumgartner @kurtisj.bsky.social · 22/07/2026
"OpenAI says its AI models secretly broke out of a secure test environment and hacked into AI company Hugging Face in order to cheat on an evaluation" bananas fortune.com/2026/07/21/o...
fortune.com
OpenAI says its AI models escaped from a secure test environment and hacked into AI company Hugging Face in order to cheat on an evaluation | Fortune
The first-of-its-kind incident involved OpenAI's GPT-5.6 Sol and another unreleased model
000
Reposted by kurt baumgartner
Joe Slowik @pylos.co · 17/07/2026
For those heading to Vegas for BSidesLV/BHUSA/DefCon, I'll be speaking a bit! First, spicy proxy network talk at SkyTalks: bsideslv.org/talks#11f132... Then electric sector threat evolution at ICS Village Def Con: info.defcon.org/defcon34/con...
bsideslv.org
Talks - BSides Las Vegas
BSides Las Vegas is a nonprofit organization formed to stimulate the Information Security industry and community.
073
Reposted by kurt baumgartner
Jack Murphy @jackmurphyrgr.bsky.social · 18/07/2026
I write stuff like this story about a CIA proxy coming off the rails and people totally just shrug it off while raging about MK Ultra or what the fuck ever else as if that even matters at this point. Serious case of vapor lock. thehighside.substack.com/p/extrajudic...
thehighside.substack.com
Extrajudicial killing in Kenya reveals CIA's covert role in global counterterrorism operations
Kenya’s Rapid Response Team commandos were sure they had got their man, shooting suspected terrorist Fuad Abubakar Manswab dead as he tried to flee the apartment they had just broken into.
1528
Reposted by kurt baumgartner
Andrew McCabe @therealmccabe.com · 15/07/2026
After watching the Jay Clayton confirmation hearing for DNI, it seems Mr. Clayton, and many of the senators questioning him, don’t have a clear idea of what the DNI does, and what it shouldn’t do. Cheat sheet: get the IC agencies to work together: YES. Police elections: NO.
731181
kurt baumgartner @kurtisj.bsky.social · 15/07/2026
www.gov.uk/government/n...
gov.uk
UK and EU strike Russian cyber networks with new sanctions
UK and EU hit back with first joint cyber sanctions package
021
kurt baumgartner @kurtisj.bsky.social · 15/07/2026
www.consilium.europa.eu/en/press/pre...
consilium.europa.eu
Russian cyber-attacks and destabilising activities: Council sanctions nine individuals and four entities
The Council imposed restrictive measures on nine individuals and four entities forming part of Russia's cyber ecosystem,  responsible for carrying out, enabling and facilitating malicious cyber a...
033
kurt baumgartner @kurtisj.bsky.social · 14/07/2026
"sometimes the highest cost isn't the ransom, it’s surviving the downtime" www.theregister.com/cyber-crime/...
theregister.com
German firm files for insolvency, blames cybercrims who shut down production for 6 weeks
ZEGO-TVZ says the financial fallout from a March cyberattack left shutting its doors as the only option
011