SwitHak (👁️) @swithak.bsky.social · 27/03/2026Hi, from @likethecoins.bsky.social Blog: ⤵️ 1️⃣Top 10 Reading List if You’re Getting Started in CTI ↘️ medium.com/katies-five-... 2️⃣A CTI Self-Study Plan: Part 1 ↘️ medium.com/katies-five-... 3️⃣A CTI Self-Study Plan: Part 2 ↘️ medium.com/katies-five-... Good read, may the force be with you!medium.comA Cyber Threat Intelligence Self-Study Plan: Part 1There are many ways to learn. While some people prefer to have a live instructor in a course, others are great at doing self-study. I… 110
SwitHak (👁️) @swithak.bsky.social · 24/12/2025DSA test after the publication of U.S. NSS. Reaction to this one is important! 000
Reposted by SwitHak (👁️)Jean-Noël Barrot @jnbarrot.bsky.social · 23/12/2025La France dénonce avec la plus grande fermeté la restriction de visa prise par les Etats-Unis à l'encontre de Thierry Breton, ancien ministre et Commissaire européen, et quatre autres personnalités européennes. 1/3 2219889
Reposted by SwitHak (👁️)The Shadowserver Foundation @shadowserver.bsky.social · 20/12/2025We have identified 120 Cisco Secure Email Gateway/ Cisco Secure Email and Web Manager likely vulnerable to CVE-2025-20393 (over 650 fingerprinted exposed). CVE-2025-20393 is exploited in the wild, with no patch available. Follow Cisco recommendations at sec.cloudapps.cisco.com/security/cen... 185
SwitHak (👁️) @swithak.bsky.social · 19/12/2025English version (PDF) ↘️ www.fe-ddis.dk/globalassets...fe-ddis.dk 031
SwitHak (👁️) @swithak.bsky.social · 19/12/2025FE Danish Defence Intelligence Service (DDIS)🇩🇰 assesses that Russia🇷🇺 was behind a destructive cyberattack against a Danish🇩🇰 water💧 utility in 2024 & DDoS attacks against Danish🇩🇰 websites🌐 leading up to the municipal and regional council elections🗳️ in 2025 ↘️ www.fe-ddis.dk/da/nyheder/2...fe-ddis.dkRusland er ansvarlig for destruktive og forstyrrende cyberangreb mod DanmarkFE vurderer, at Rusland stod bag et destruktivt cyberangreb mod et dansk vandværk i 2024 samt overbelastningsangreb mod danske hjemmesider op til kommunal- og regionsrådsvalget i 2025. 122
Reposted by SwitHak (👁️)PIVOTcon @pivotcon.bsky.social · 18/12/2025You asked for our traditional #CfP meme-guideline for #PIVOTcon26 - here it is 🥳🎉 Reminder: - one track,30m - no recording/streaming/tweeting. - No TLP:WHITE - Original content only #CTI #ThreatIntel #ThreatResearch 1/7 199
Reposted by SwitHak (👁️)Eric Geller @ericjgeller.com · 12/11/2025CISA has updated its directive to agencies about patching vulnerable Cisco firewalls after some agencies attested to compliance despite updating to software versions that were still vulnerable. Hackers are still breaching agencies using these vulns. www.cisa.gov/ed-25-03-gui... 088
Reposted by SwitHak (👁️)Catalin Cimpanu @campuscodi.risky.biz · 02/11/2025Russian telecom operators are blocking calls and SMS messages used by Telegram and WhatsApp two-factor authentication service. The blocking is also affecting new user account registrations kod.ru/telegram-i-w...kod.ruЭксклюзив: в России ограничили регистрацию пользователей в Telegram и WhatsApp*От российских операторов потребовали прекратить передачу SMS и звонков со стороны Telegram и WhatsApp* 0118
Reposted by SwitHak (👁️)Meredith Whittaker @meredithmeredith.bsky.social · 06/10/2025📣 Germany's close to reversing its opposition to mass surveillance & private message scanning, & backing the Chat Control bill. This could end private comms-& Signal-in the EU. Time's short and they're counting on obscurity: please let German politicians know how horrifying their reversal would be. 3022381606
Reposted by SwitHak (👁️)Sekoia @sekoia.com · 02/10/2025📱 Silent Smishing: The Hidden Abuse of Cellular Router APIs Our latest #CTI investigation from Sekoia #TDR team uncovers a novel #smishing vector abusing Milesight industrial cellular router APIs to send phishing #SMS at scale. blog.sekoia.io/silent-smish... 164
Reposted by SwitHak (👁️)Aaron Reichlin-Melnick @reichlinmelnick.bsky.social · 20/09/2025NEW: Hours before a new entry ban is supposed to go into effect, the federal government officially acknowledges for the first time that the restrictions do NOT apply to people who currently have H-1B visas. Link: www.uscis.gov/sites/defaul... 16227041021
SwitHak (👁️) @swithak.bsky.social · 05/09/2025French🇫🇷 diplomatie announced the creation of a dedicated account @FrenchResponse on X/Twitter Social Network to respond to those who want to harm French 🇫🇷 reputation #FIMI #Disinfo #InformationWarfare 052
Reposted by SwitHak (👁️)Bluesky @bsky.app · 22/08/2025Unfortunately, Bluesky is unavailable in Mississippi right now, due to a new state law that requires age verification for all users. While intended for child safety, we think this law poses broader challenges & creates significant barriers that limit free speech & harm smaller platforms like ours. 24565590513989
Reposted by SwitHak (👁️)Electronic Frontier Foundation @eff.org · 12/08/2025“No one should profit from our personal data, especially without our consent,” EFF’s Lena Cohen told KATU News. “The data broker industry is extremely opaque, and the lack of transparency makes it hard to know when our privacy rights are being violated.” katu.com/news/invest...katu.comOregon DMV brings in millions selling your information. Here's how. Oregon’s DMV brings in millions of dollars a year selling drivers’ personal information to qualified buyers, from insurance companies to private investigators. 213838
Reposted by SwitHak (👁️)Nina Jankowicz @ninajankowicz.com · 30/07/2025In another episode of “we live in the stupidest timeline,” Jen Easterly, a woman I have (1) never met and (2) did not work for, had her appointment at West Point terminated because Laura Loomer lied about both of us in a tweet. cyberscoop.com/jen-easterly...cyberscoop.comArmy Secretary forces West Point to rescind appointment given to EasterlyThe United States Military Academy abruptly ended the appointment of Jen Easterly to a high-profile academic position in West Point’s Department of Social Sciences, according to a memorandum issued We... 912795972
Reposted by SwitHak (👁️)Catalin Cimpanu @campuscodi.risky.biz · 31/07/2025Russia will move its electronic document signing system from its official government portal to the new Max national messenger app Officials plan to integrate government services into Max by October and transform it into an everything-app for Russians—like China's WeChat. www.rbc.ru/rbcfreenews/... 073
SwitHak (👁️) @swithak.bsky.social · 20/07/2025Decoding Secrets Through Symbols: How Military Insignia Revealed Russia’s Hidden SIGINT Network by @checkfirst.network ↘️ checkfirst.network/decoding-sec...checkfirst.networkDecoding Secrets Through Symbols: How Military Insignia Revealed Russia's Hidden SIGINT Network - CheckFirstSometimes the best intelligence comes from the most unexpected sources. Our latest investigation proves this by using Russian online military insignia stores to map one of the FSB's most secretive uni... 23014
Reposted by SwitHak (👁️)Catalin Cimpanu @campuscodi.risky.biz · 16/07/2025Armenian extradited to US for role in Ryuk ransomware attacks www.justice.gov/usao-or/pr/a...justice.govArmenian National Extradited to the United States Faces Federal Charges for Ransomware Extortion ConspiracyAn Armenian national extradited from Ukraine to the United States faces federal charges for his role in Ryuk ransomware attacks and extortion conspiracy targeting companies throughout the United State... 0125
Reposted by SwitHak (👁️)Glenn @ntkramer.bsky.social · 16/07/2025🩸& #threatintel | We (GreyNoise) just published a quick note (www.greynoise.io/blo...) regarding CVE-2025-5777 - CitrixBleed 2 1/2greynoise.ioExploitation of CitrixBleed 2 (CVE-2025-5777) Began Before PoC Was PublicGreyNoise has observed active exploitation attempts against CVE-2025-5777 (CitrixBleed 2), a memory overread vulnerability in Citrix NetScaler. Exploitation began on June 23 — nearly two weeks before a public proof-of-concept was released on July 4. 1129
SwitHak (👁️) @swithak.bsky.social · 13/07/2025Finally got the time to read it. So great paper, a lot of red flags and got me some thoughts about how you can apply these lessons to vetting sources in the Cyber ops. Also a very good case to study! Thanks for the work @wylienewmark.bsky.social 110
SwitHak (👁️) @swithak.bsky.social · 25/06/2025Congratulations 🎉 I need to find time to read this one, also the other papers in the issue are looking great too 👀 010
SwitHak (👁️) @swithak.bsky.social · 23/06/2025*sarcastic* That's how you get the big guys to know your service name, important during the budget decision to have support from them, especially in these cuts and DOGE thingies... 000
Reposted by SwitHak (👁️)Alexander Leslie @aejleslie.bsky.social · 13/06/2025Outstanding work from @julianferdinand.bsky.social, @lawrencesec.bsky.social, and our Malicious Infrastructure Discovery (MID) team. GrayAlpha shows how financially motivated actors operate with APT-level tradecraft. Time to retire old threat models. Think in terms of ecosystems, not just malware. 064
Reposted by SwitHak (👁️)Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 02/06/2025NEW: NSO Group is trying to avoid paying $167 million in damages to WhatsApp. In a court filing last week, the spyware maker asked the judge to order a new trial, or reduce the damages amount, arguing that the decision was “outrageous," and "reflects the improper desire to bankrupt NSO."techcrunch.comNSO Group asks judge for new trial, calling $167 million in damages 'outrageous' | TechCrunchThe spyware maker claims the damages it was ordered to pay are "excessive," and that the jury wanted to “bankrupt” the company. 41917
SwitHak (👁️) @swithak.bsky.social · 29/05/2025I can't wait to read the SDR that some say it should be released next Week (Monday). 000
SwitHak (👁️) @swithak.bsky.social · 29/05/2025Good work! Also I would have added the IG/L part to explain why sometimes the technical evidence isn't released. Also, it would benefit from distinguishing between Political attribution and the Technical one, some states do one, not the other. 030
Reposted by SwitHak (👁️)Joseph Cox @josephcox.bsky.social · 14/05/2025New from 404 Media: Flock, the license plate reader company that has cameras all across the U.S., is now building a massive people lookup tool using hacked data. The plan is to "jump from LPR to person." Won't require a warrant. This is according to leak we obtained. www.404media.co/license-plat...404media.coLicense Plate Reader Company Flock Is Building a Massive People Lookup Tool, Leak ShowsFlock, which has license plate readers (LPRs) all around the country, wants police to be able to “jump from LPR to person,” according to leaked audio obtained by 404 Media. 24601333
SwitHak (👁️) @swithak.bsky.social · 14/05/2025Exposing #DPRK: Nation-State Threat Actors ↘️ www.dtexsystems.com/exposing-dprk/dtexsystems.comExposing DPRK - DTEX SystemsExplore DPRK cyber strategy and threat indicators. Uncover how North Korean operatives and IT workers drive global cyber espionage. 031
Reposted by SwitHak (👁️)Social Media Lab @socialmedialab.ca · 05/05/2025After a post‑pandemic dip in 2022, Canadians' social media account ownership and usage have largely rebounded, new State of Social Media in Canada 2025. (n=1,500) socialmedialab.ca/2025/05/05/n... 157
Reposted by SwitHak (👁️)evacide @evacide.bsky.social · 28/04/2025Now is the time to stand up against the Trump administration as it tries to bully the cybersecurity community by targeting Chris Krebs. Sign on to our open letter: www.eff.org/press/releas...eff.orgEFF Leads Prominent Security Experts in Urging Trump Administration to Leave Chris Krebs AloneSAN FRANCISCO – The Trump Administration must cease its politically motivated investigation of former U.S. Cybersecurity and Infrastructure Security Agency Director Christopher Krebs, the Electronic F... 4286126
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Rethinking Data Visualisation for CTI 🗣️Chris Horsley at @cosiveco ⏱️074250 - 081320 000
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Scoring Vulnerabilities by Leveraging Activity Data from the Fediverse 🗣️ @adulau & Cédric Bonhomme at @circl_lu ⏱️071000 - 074220 ↘️ www.vulnerability-lookup.orgvulnerability-lookup.orgVulnerability-Lookup 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Bridging Gaps in CTI: Using PIRs for Threat-Informed Security 🗣️Keith Swagler, Ondra Rojcik & Ondra Rojčík @RedHat ⏱️061354 - 064029 ↘️ red.ht/pirred.htFIRST CTI 2023 - Red Hat PIRs workshop - Google Drive 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Analyst in a SOC by Day, CTI Developer by Night 🗣️ Bianka Bálint at DEKRA ⏱️ 054130 - 061340 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Securing Green Energy: CTI, OT, and Geopolitics 🗣️ Ilmar Üle @Orsted ⏱️TLP:AMBER (Not Available) 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Leveraging Geopolitical Intelligence in the Private Sector: Key Findings from a Multi-Industry Study 🗣️ @Silobreaker ⏱️032400 - 035350 ↘️ (Gated Access) www.silobreaker.com/resources/re...silobreaker.comReport: The Influence of Geopolitics on Cyber Threat Intelligence TeamsIn today’s volatile world stage, the convergence of geopolitical and cyber threats creates complex challenges for organisations across the globe. Understanding how these issues intersect is essential ... 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Navigating the Fog of War 🗣️ @simonekrausora1 & @_John_Doyle ⏱️025510 - 032340 ↘️ medium.com/@simone.krausmedium.comSIMKRA – MediumRead writing from SIMKRA on Medium. Every day, SIMKRA and thousands of other voices read, write, and share important stories on Medium. 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Numbers Game, The case for quantifying Cyber Threats 🗣️Scott Small @TidalCyber @scott ⏱️022430 - 025454 ↘️ www.tidalcyber.com/threatpebook...tidalcyber.comThe Ultimate Guide to Cyber Threat Profiling Asset Page 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧 Immaturity can be fun. Just not in a CTI Program! 🗣️ @gertjanbruggink ⏱️012700 - 015454 ↘️ x.com/CTIcmm/statu...x.comCTI-CMM on X: "🚨 Big News! Version 1.2 of the CTI-CMM framework is here! 🚨 We’re proud to officially debut this release at the FIRST CTI Conference during the talk: 🎤 "Immaturity Can Be Fun: Just Not in a CTI Program" 🎤 by @gertjanbruggink What’s new in v. 1.2? ✨ A brand-new https://t.co/G16C5RxOTN" / X🚨 Big News! Version 1.2 of the CTI-CMM framework is here! 🚨 We’re proud to officially debut this release at the FIRST CTI Conference during the talk: 🎤 "Immaturity Can Be Fun: Just Not in a CTI Program" 🎤 by @gertjanbruggink What’s new in v. 1.2? ✨ A brand-new https://t.co/G16C5RxOTN 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025🪧Decoding a Decade: 10 Years of Applied CTI Discipline 🗣️ @PDXbek @asfakian ⏱️ 005450 - 012600 100
SwitHak (👁️) @swithak.bsky.social · 23/04/2025#FIRSTCTI25 2025 Berlin | Day 01 ↘️ www.youtube.com/live/2pSjbSx...youtube.com2025 FIRST CTI Conference - Day 1 Plenary Sessions - Live StreamYouTube video by FIRST 121
Reposted by SwitHak (👁️)American Library Association @amlibraryassoc.bsky.social · 08/04/2025NEW: ALA is going to court to stop the President’s attempts to illegally dismantle the Institute of Museum & Library Services. The President does not have the authority to destroy a federal agency. That's why we're taking action with our co-plaintiff @afscme.bsky.social. #ForOurLibraries (1/3) 2634191170
Reposted by SwitHak (👁️)Maxime Audinet @maudinet.bsky.social · 11/03/2025Merci au @lemonde.fr de publier ce soir ma tribune, écrite après ma relaxe par le tribunal de Créteil, qui faisait suite au procès en diffamation intenté par la chaîne RT France contre mon éditeur, l'INA, et moi-même. 1/3 #StandUpForScience 12717281
Reposted by SwitHak (👁️)VIGINUM @viginum.bsky.social · 24/02/2025Trois ans après le déclenchement de l’invasion du territoire ukrainien par les forces armées de la Fédération de Russie, #VIGINUM publie une synthèse des principaux modes opératoires informationnels observés depuis le 24 février 2022 ➡️ www.sgdsn.gouv.fr/publications... 312692
SwitHak (👁️) @swithak.bsky.social · 24/02/2025Small test: Pain au chocolat ou Chocolatine ?media.tenor.coma man with curly hair is eating a croissant on a trayALT: a man with curly hair is eating a croissant on a tray 280
SwitHak (👁️) @swithak.bsky.social · 21/02/20252 vessels - 1 suspected water poisoning - 1 suspected engine sabotage ↘️ www.tagesschau.de/investigativ...tagesschau.deBei der Marine gibt es einen neuen SabotageverdachtsfallBundeswehr und Polizei ermitteln wegen eines weiteren möglichen Sabotagefalls - diesmal an der Fregatte "Hessen" in Wilhelmshaven. Das ergaben Recherchen von WDR, NDR und SZ. Laut diesen geht es um di... 000