Sign in

Ryan Gallagher

@rjgallagher.co.uk
4.1K followers 419 following 62 posts

Investigative reporter @Bloomberg.com covering technology & cybersecurity. Anonymous tips: tips.hushline.app/to/ryan Email: ryan@rjgallagher.co.uk Signal/WhatsApp: +44 737-678-6842

PostsRepliesMedia
Reposted by Ryan Gallagher
Patrick Howell O’Neill @patrickhowelloneill.com · 06/08/2026
NEW: US Cyber Command is grappling with an unusually high number of personnel deaths by suicide this summer including members of one of the command’s elite units. www.bloomberg.com/news/article...
bloomberg.com
America’s Cyber Forces Grapple With Cluster of Deaths by Suicide
The US military’s cyberwarfare unit is scrutinizing an unusually high number of deaths by suicide among personnel over a month-long period this summer, according to government officials and other peop...
717789
Ryan Gallagher @rjgallagher.co.uk · 03/07/2026
The iPhone of a Greek politician was repeatedly hacked by NSO Group's Pegasus spyware while he was working on a European Parliament investigation into NSO & other surveillance technology sellers, new research from @citizenlab.ca uncovers: www.bloomberg.com/news/article...
bloomberg.com
Greek Politician Investigating Spyware Had Mobile Phone Hacked
The mobile phone of a Greek politician was repeatedly hacked by spyware while he was working on a European Parliament investigation into sellers of the surveillance technology, new research has found.
075
Reposted by Ryan Gallagher
Sophie in't Veld @sophieintveld.bsky.social · 18/06/2026
Surveillance technology exported illegally from the EU to undemocratic regimes around the world. The @ec.europa.eu flatly refuses to enforce the Dual Use Regulation banning this kind of exports. Impunity in Europe means complicity in human rights violations. Report by @rjgallagher.co.uk
03119
Reposted by Ryan Gallagher
Human Rights Watch @hrw.org · 18/06/2026
HRW investigation shows the Bulgarian government licensed exports of surveillance equipment to countries that were likely to use it for internal repression or to commit serious human rights violations ⤵️ www.bloomberg.com/news/article...
bloomberg.com
Circles Sold Phone Spy Tools to Repressive States, Report Says
A Bulgaria-based company sold controversial surveillance technology to governments in countries with records of repression, enabling authorities to track mobile phones and eavesdrop on private communi...
13031
Ryan Gallagher @rjgallagher.co.uk · 18/06/2026
Documents reveal that a European company linked to Israeli spyware seller NSO Group has been exporting surveillance technology to government agencies in repressive countries for years, despite EU regulations intended to curb such sales: www.bloomberg.com/news/article...
bloomberg.com
Circles Sold Phone Spy Tools to Repressive States, Report Says
A Bulgaria-based company sold controversial surveillance technology to governments in countries with records of repression, enabling authorities to track mobile phones and eavesdrop on private communi...
12722
Ryan Gallagher @rjgallagher.co.uk · 01/04/2026
New: ICE Tells US lawmakers it's using spyware from Israeli company Paragon in fight against fentanyl www.bloomberg.com/news/article...
bloomberg.com
ICE Tells Lawmakers Its Using Spyware in Fight Against Fentanyl
US Immigration and Custom Enforcement has said it purchased spyware designed to hack phones and access encrypted messages as part of an effort to counter the flow of fentanyl into the US.
028
Ryan Gallagher @rjgallagher.co.uk · 26/03/2026
New: How making deals with dictatorships imploded the US-Canadian technology company Sandvine. www.bloomberg.com/news/feature...
bloomberg.com
Sandvine's Tech Sales to Egypt Almost Broke PE-Backed Company
Sandvine built a business offering network management tools that, in the wrong hands, could be used for censorship, until the US government intervened.
000
Ryan Gallagher @rjgallagher.co.uk · 02/09/2025
New: US Immigration and Customs Enforcement to gain access to controversial Israeli spyware designed to hack phones & read private messages after Trump administration jettisons Biden-era order: www.bloomberg.com/news/article...
bloomberg.com
ICE to Gain Access to Paragon Spyware After Biden Order Dropped
US Immigration and Customs Enforcement is on track to gain access to controversial spyware designed to hack phones and read private messages after the Trump administration jettisoned a Biden-era order...
52014
Ryan Gallagher @rjgallagher.co.uk · 20/08/2025
In 2012, yes! Microsoft accused a company called Hangzhou DPtech Technologies of leaking a Windows vulnerability and booted it out of MAPP
100
Ryan Gallagher @rjgallagher.co.uk · 20/08/2025
New: Microsoft curbs Chinese companies’ access to info on cybersecurity vulnerabilities after investigating whether a leak led to a global hacking campaign that exploited flaws in its SharePoint software: www.bloomberg.com/news/article...
bloomberg.com
Microsoft Curbs Early Access for Chinese Firms to Notifications About Cybersecurity Flaws
Microsoft Corp. has curtailed Chinese companies’ access to advance notifications about cybersecurity vulnerabilities in its technology after investigating whether a leak led to a series of hacks explo...
197
Ryan Gallagher @rjgallagher.co.uk · 25/07/2025
Microsoft said in a statement it would "review this incident, find areas to improve, and apply those improvements broadly." Full story: www.bloomberg.com/news/article...
bloomberg.com
Microsoft Probing If Chinese Hackers Learned of Flaws Via Alert
Microsoft Corp. is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in its SharePoint service before they were patched, acc...
010
Ryan Gallagher @rjgallagher.co.uk · 25/07/2025
Victims of the SharePoint attacks, which were first detected on July 7, now total more than 400 government agencies and corporations worldwide, including the US's National Nuclear Security Administration, the division responsible for designing and maintaining the country's nuclear weapons.
322
Ryan Gallagher @rjgallagher.co.uk · 25/07/2025
Some of the Chinese companies that are involved in MAPP are also members of a Chinese government vulnerability reporting program, the China National Vulnerability Database, which is operated by the country’s Ministry of State Security.
110
Ryan Gallagher @rjgallagher.co.uk · 25/07/2025
Microsoft has attributed SharePoint breaches to state-sponsored hackers from China, and at least a dozen Chinese companies participate in the alert sharing initiative, called the Microsoft Active Protections Program, or MAPP.
110
Ryan Gallagher @rjgallagher.co.uk · 25/07/2025
New: Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in SharePoint before they were patched, enabling a global campaign of cyberattacks, according to people familiar: www.bloomberg.com/news/article...
bloomberg.com
Microsoft Probing If Chinese Hackers Learned of Flaws Via Alert
Microsoft Corp. is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in its SharePoint service before they were patched, acc...
198
Ryan Gallagher @rjgallagher.co.uk · 18/06/2025
A whistleblower shared 1 million two-factor authentication codes that had been sent to people by SMS from the world's largest tech companies, such as Google, Meta, & Amazon. We found the codes had been routed via an obscure Swiss company with links to spy agencies: www.bloomberg.com/news/article...
bloomberg.com
How a Tiny Middleman Could Access Two-Factor Login Codes From Tech Giants
An investigation into the complexity of the global telecom system shows weaknesses in the transmission of secret codes sent via SMS.
286
Ryan Gallagher @rjgallagher.co.uk · 16/06/2025
New: How a Tiny Middleman Could Access Two-Factor Login Codes From Tech Giants www.bloomberg.com/news/article...
bloomberg.com
How a Tiny Middleman Could Access Two-Factor Login Codes From Tech Giants
An investigation into the complexity of the global telecom system shows weaknesses in the transmission of secret codes sent via SMS.
053
Ryan Gallagher @rjgallagher.co.uk · 02/05/2025
‘DragonForce’ Hacking Gang Takes Credit for UK Retail Attacks: www.bloomberg.com/news/article...
bloomberg.com
‘DragonForce’ Hacking Gang Takes Credit for UK Retail Attacks
A criminal hacking gang has taken credit for a disruptive campaign of cyberattacks targeting British retailers over the last two weeks.
113
Ryan Gallagher @rjgallagher.co.uk · 28/04/2025
Portugal's National Cybersecurity Centre says: "There is no evidence to date pointing to a cyberattack. We would like to draw attention to the circulation of disinformation that occurs in these situations, and we therefore advise that every information should be confirmed with reliable sources."
15040
Ryan Gallagher @rjgallagher.co.uk · 28/04/2025
Initial probe into cause of power outages in Spain & Portugal today suggests fault rather than cyberattack, according to the European Union Agency for Cybersecurity (ENISA). “For the moment the investigation seems to point out to a technical/cable issue,” a spokesperson for the agency tells me.
810055
Ryan Gallagher @rjgallagher.co.uk · 25/04/2025
Full story: www.bloomberg.com/news/article...
bloomberg.com
Ukraine Is an `Easy Target' for Russian Hackers After US Aid Pullback
American cybersecurity assistance has been crucial to helping war-torn country fend off hacks, experts say.
020
Ryan Gallagher @rjgallagher.co.uk · 25/04/2025
The end result is that Ukraine's digital front lines are weaker now, making the country an “easy target” for Russia, said Yegor Aushev, a Kyiv-based cybersecurity expert. The “sudden & unannounced shutdown” of cyber operations, he said, “has created a significant challenge.”
120
Ryan Gallagher @rjgallagher.co.uk · 25/04/2025
“Many projects were stopped halfway, contractors were let go before finishing their work, & a lot of plans didn’t get the chance to reach their full potential,” Mankish said.
100
Ryan Gallagher @rjgallagher.co.uk · 25/04/2025
Andrii Mankish, a Ukrainian cybersecurity expert who worked on US-funded projects to identify Russian hacking attempts, said the US's cyber pullback was likely to “impact our efforts & slow down progress in key areas.” Long-planned cybersecurity projects had suddenly ended, he said.
100
Ryan Gallagher @rjgallagher.co.uk · 25/04/2025
That work is now paused & it's unclear whether it will resume -- Ukrainians say they have been left in the dark. Equipment & services that were to be provided to the country for ongoing initiatives, such as a project to strengthen the country’s central election commission, are now not going ahead.
120
Ryan Gallagher @rjgallagher.co.uk · 25/04/2025
US cybersecurity assistance had included specialist support, training, equipment & software to organizations across Ukraine, including to dozens of government offices & departments & to key gas & electricity providers, the national bank & nuclear facilities such as Chernobyl.
110
Ryan Gallagher @rjgallagher.co.uk · 25/04/2025
New: US cuts to foreign aid are impacting Ukraine's cybersecurity. Dozens of people have had to stop work protecting the country from Russian hackers & shipments of vital cyber equipment have stopped, according to people familiar with the situation: www.bloomberg.com/news/article...
bloomberg.com
US Aid Pullback is Making Ukraine More Vulnerable to Russian Hacks
American cybersecurity assistance has been crucial to helping war-torn country fend off hacks, experts say.
1127
Ryan Gallagher @rjgallagher.co.uk · 09/04/2025
Awesome news Will, congrats!
030
Ryan Gallagher @rjgallagher.co.uk · 07/04/2025
A UK court has blocked the UK government's attempt to keep secret a legal case over its demand to access Apple users' encrypted data. Judges said in a ruling Monday that authorities’ efforts were a “fundamental interference with the principle of open justice”: www.bloomberg.com/news/article...
bloomberg.com
UK Effort to Keep Apple Encryption Fight Secret Blocked in Court
A court has blocked a British government attempt to keep secret a legal case over its demand to access Apple Inc. user data in a victory for privacy advocates.
067
Ryan Gallagher @rjgallagher.co.uk · 23/03/2025
Trump envoy dismisses UK peacekeeping plan for Ukraine, says: "I don't regard Putin as a bad guy. He's super smart." www.bbc.com/news/article...
bbc.com
Trump envoy Steve Witkoff dismisses Starmer plan for Ukraine
Steve Witkoff says the UK plans for an international force to support a ceasefire are a "posture".
012
Ryan Gallagher @rjgallagher.co.uk · 19/03/2025
US national security agencies have halted work on a coordinated effort to counter Russian sabotage, disinformation & cyberattacks. Initiative had involved at least seven agencies working w/ European allies to disrupt plots targeting Europe & the US, Reuters reports: www.reuters.com/world/us-sus...
reuters.com
Exclusive: US suspends some efforts to counter Russian sabotage as Trump moves closer to Putin
Several U.S. national security agencies have halted work on a coordinated effort to counter Russian sabotage, disinformation and cyberattacks, easing pressure on Moscow as the Trump Administration pushes Russia to end its war in Ukraine.
12831
Ryan Gallagher @rjgallagher.co.uk · 19/03/2025
Researchers find evidence suggesting spyware from Israeli firm Paragon has been obtained by Australia, Canada, Cyprus, Denmark & Singapore. The technology - used to hack phones & read private msgs - was recently linked to hacks of Italian journalists & activists: www.bloomberg.com/news/article...
bloomberg.com
Paragon Spyware Tool Linked to Canadian Police, Watchdog Says
A Canadian law enforcement agency is suspected to have used spyware designed to hack into mobile phones and eavesdrop on messages, according to cybersecurity researchers from the University of Toronto...
0118
Ryan Gallagher @rjgallagher.co.uk · 13/03/2025
New: Cybersecurity experts who worked to secure US government computers from Russian & Chinese hackers have been ousted from their roles following pressure from DOGE. One senior official resigned in protest over move sources say has created "massive security gaps": www.bloomberg.com/news/article...
bloomberg.com
DHS Workers Tasked With Curbing Hacks Ousted in DOGE Squeeze
Cybersecurity experts who worked to secure US government computers from Russian and Chinese hackers have been ousted from their roles following pressure from Elon Musk’s Department of Government Effic...
0133
Ryan Gallagher @rjgallagher.co.uk · 13/03/2025
Very sad news 😥
010
Ryan Gallagher @rjgallagher.co.uk · 11/03/2025
New: A cyberattack that brought down Elon Musk’s X targeted servers that were insufficiently protected from malicious traffic & “should not be exposed on the internet”: www.bloomberg.com/news/article...
bloomberg.com
X’s Attackers Hit Servers Faulted for Lacking Key Protection
A cyberattack that brought down Elon Musk’s X targeted servers that were insufficiently protected from malicious traffic, according to cybersecurity analysts.
063
Ryan Gallagher @rjgallagher.co.uk · 21/02/2025
Swedish authorities investigate damaged cable discovered in the Baltic Sea between Germany & Finland, the latest in a string of similar incidents that have heightened fears of Russian sabotage & spying in the region: apnews.com/article/swed...
apnews.com
Sweden is investigating a damaged cable in the Baltic Sea
Swedish authorities say they are investigating a damaged cable that was discovered in the Baltic Sea, the latest in a string of recent incidents of ruptured undersea cables that have heightened fears ...
000
Ryan Gallagher @rjgallagher.co.uk · 21/02/2025
Apple pulls encrypted data storage feature from UK after government backdoor demand. Development comes after Apple criticized “unprecedented overreach" of UK surveillance powers: www.bloomberg.com/news/article...
bloomberg.com
Apple Removes Cloud Encryption Feature From UK After Backdoor Order
Apple Inc. is removing its most advanced, end-to-end encrypted security feature for cloud data in the United Kingdom, in a stunning development after the government ordered the company to build a back...
020
Ryan Gallagher @rjgallagher.co.uk · 20/02/2025
Trump admin reassigns or forces out several dozen government employees who had been working to fight foreign interference in US elections. Among those targeted were people safeguarding elections from cyberattack: www.nytimes.com/2025/02/20/b...
nytimes.com
Trump Dismantles Government Fight Against Foreign Influence Operations
The Trump administration has reassigned or forced out several dozen government employees who had been working to fight foreign interference in U.S. elections at multiple agencies, according to current...
45728
Ryan Gallagher @rjgallagher.co.uk · 19/02/2025
A scandal has erupted in Italy after a prominent journalist & activists in the country had their phones hacked with spyware allegedly sold by Israeli company Paragon. Giorgia Meloni's government is under pressure to reveal whether it was involved: www.bloomberg.com/news/newslet...
bloomberg.com
Spyware Scandal Erupts in Italy With Israeli Firm at Center
064
Ryan Gallagher @rjgallagher.co.uk · 07/02/2025
The Apple story today made me revisit reporting I did nearly 10 yrs ago - we suspected then the UK was planning to use "technical capability notices" to force encryption backdoors. My only surprise is that it's taken this long (at least for it to be publicly exposed) theintercept.com/2016/11/22/i...
070
Ryan Gallagher @rjgallagher.co.uk · 07/02/2025
The UK government has ordered Apple to build a backdoor to give it access to global user data, in a move that could spark one of the biggest privacy fights in the iPhone maker’s history: www.bloomberg.com/news/article...
bloomberg.com
Apple Ordered by UK to Build Backdoor for User Data
The UK government has ordered Apple Inc. to build a backdoor to give it access to global user data, in a move that could spark one of the biggest privacy fights in the iPhone maker’s history.
122
Ryan Gallagher @rjgallagher.co.uk · 14/01/2025
Intentional. It's a "gift link" that allows people without a subscription to read the story. Expires after 7 days
030
Ryan Gallagher @rjgallagher.co.uk · 14/01/2025
New: A cyberattack by a Russian gang that paralyzed hospitals and clinics in London last year resulted in harm to dozens of patients, leading to long-term or permanent damage to their health in at least two cases, according to data obtained by Bloomberg News: www.bloomberg.com/news/article...
bloomberg.com
NHS Ransomware Hack Caused Patient Harm in UK, Data Shows
A cyberattack that paralyzed hospitals and clinics in London last year resulted in harm to dozens of patients, leading to long-term or permanent damage to their health in at least two cases, according...
11510
Ryan Gallagher @rjgallagher.co.uk · 06/12/2024
My latest story out today provides the inside account of a crippling cyberattack by a Russian ransomware gang that ended 158 years of history for one of the UK's oldest & best known transport companies, Knights of Old: www.bloomberg.com/news/feature...
bloomberg.com
Ransomware Gangs’ Merciless Attacks Bleed Small Companies Dry
The inside story of Russian hackers who broke into a 158-year-old UK transport business.
072
Ryan Gallagher @rjgallagher.co.uk · 05/12/2024
Extraordinary sleuthing here that identifies prominent neo-Nazi accounts on X as being run by, among others, a JPMorgan Chase vice president in Texas & a guy who works at a US Navy center in Maryland that manufactures explosives: www.texasobserver.org/revealed-ope...
texasobserver.org
Revealed: the Operators Behind Four Major Neo-Nazi X Accounts
Anonymity has long been a tactic used by extremists to spread their ideology while avoiding social consequences, from Klansmen hoods to online pseudonyms.
085
Ryan Gallagher @rjgallagher.co.uk · 04/12/2024
Important recent study from @citizenlab.ca finds Amazon censoring books in countries such as Saudi Arabia, UAE, on LGBTIQ & other issues. Company "violating its public commitments to both LGBTIQ & more broadly human rights", researchers say: citizenlab.ca/2024/11/anal...
citizenlab.ca
Banned Books: Analysis of Censorship on Amazon.com - The Citizen Lab
We analyze the system Amazon deploys on the US “amazon.com” storefront to restrict shipments of certain products to specific regions. We found 17,050 products that Amazon restricted from being shipped...
010
Ryan Gallagher @rjgallagher.co.uk · 04/12/2024
US telecommunications companies still working to remove state-sponsored Chinese hackers from their networks after spying campaign uncovered, US officials say: www.bloomberg.com/news/article...
bloomberg.com
Chinese Hackers Are Lingering Inside Telecom Firms, US Says
US telecommunications companies are still working to kick out state-sponsored Chinese hackers who breached their networks as part of a spying campaign that dates back months, US officials said Tuesday...
021
Ryan Gallagher @rjgallagher.co.uk · 29/11/2024
When police raided the alleged UK-based ringleader Orlin Roussev's home in Great Yarmouth they found a haul of hundreds of phones, SIM cards, hard drives, recording devices & drones. He also had wifi hacking equipment, signal jammers & 75 passports & identity documents in 55 individuals' names.
073
Ryan Gallagher @rjgallagher.co.uk · 29/11/2024
Some remarkable details emerging from UK trial of an alleged Russian spy ring. Allegedly directed by fugitive former Wirecard executive turned Kremlin agent Jan Marsalek, group used women as honeytraps, targeted prominent journalists & dissidents: news.sky.com/story/russia...
news.sky.com
Russian spies in love triangle were to be used in 'honeytrap' operation across Europe, court hears
A spy ring in the UK passed secrets to Russia for nearly three years, endangering the national interest and putting "many lives at risk", a court has been told.
11910
Ryan Gallagher @rjgallagher.co.uk · 28/11/2024
Chinese vessel suspected of deliberately severing two critical European data cables last week by dragging anchor along the Baltic seabed for 100 miles. Probe assessing whether ship's captain induced by Russian intelligence to engage in sabotage: www.wsj.com/world/europe...
wsj.com
Exclusive | Chinese Ship’s Crew Suspected of Deliberately Dragging Anchor for 100 Miles to Cut Baltic Cables
NATO warships have surrounded Yi Peng 3, a Chinese bulk carrier at the center of an international probe into suspected sabotage.
2193