iiinova — where your digital self keeps evolving

Reposted by Sven Herpig

Ulrich Hottelet @ulrichhottelet.bsky.social · 10/02/2026

Chinesische #Cyberkriminelle gehören weltweit zu den technisch fähigsten. Teilweise verzahnt mit staatlichen Stellen sind ihre Aktivitäten oft Teil eines Ökosystems aus Kriminalität und Wirtschaftsspionage. #cybercrime #China @z-edian.bsky.social www.golem.de/news/chinesi... (mit Testabo)

golem.de

Golem

021

Sven Herpig @z-edian.bsky.social · 01/12/2025

Policy Paper on “Assessing Irresponsibility in Cyber Operations” now published. It introduces a “seven-red-flags” framework designed to help decision-makers & operators assess when cyber activities cross the line into irresponsible or unacceptable behavior. www.interface-eu.org/publications...

010

Sven Herpig @z-edian.bsky.social · 25/09/2025

Sneak peek into our upcoming paper on [working title]: Assessing Irresponsibility in Cyber Operations A Guide for Operators and Decision-Makers in Times of Strategic Competition #cybersecurity #PRC #China #CyberOperations

000

Sven Herpig @z-edian.bsky.social · 03/03/2025

Im Podcast "Cybersecurity ist Chefsache" habe ich mit Nico über Aktive Cyberabwehr in Deutschland gesprochen. Hier geht es zum Podcast: www.youtube.com/watch?v=g6SP...

youtube.com

Hackback: Digitale Selbstverteidigung oder gefährliches Spiel mit dem Feuer?

YouTube video by Cybersecurity ist Chefsache

010

Sven Herpig @z-edian.bsky.social · 23/12/2024

Update about #offensive #Chinese #cyber activities. Mastodon: infosec.exchange/@z_edian/113... LinkedIn: www.linkedin.com/posts/dr-sve... #cybersecurity #PRC #China #threat #APT

000

Sven Herpig @z-edian.bsky.social · 19/12/2024

Aus der Tagesspiegel Background Cybersecurity-Reihe "Cybersicherheit - Forschung & Behörden: Was 2024 wichtig war – und wir uns für 2025 vornehmen sollten". Link (Paywall): background.tagesspiegel.de/it-und-cyber...

000

Sven Herpig @z-edian.bsky.social · 12/12/2024

Ein Bild sagt mehr als 1.000 Policy-Texte ... www.bundesrechnungshof.de/SharedDocs/D...

000

Sven Herpig @z-edian.bsky.social · 12/12/2024

Chinese APTs Behaving Badly "We have no idea why attackers would do this or what benefit they would get from torching their victims’ infrastructure." Via news.risky.biz/fcc-to-deman...

000

Sven Herpig @z-edian.bsky.social · 12/12/2024

Ein paar kurze Punkte zur neuen Formulierungshilfe zum NIS-2-Umsetzungs- und Cybersicherheitsstärkungsgesetzes (NIS2UmsuCG) basierend auf meiner schriftlichen Stellungnahme für die Sachverständigenanhörung im Innenausschuss. www.linkedin.com/feed/update/...

000

Sven Herpig @z-edian.bsky.social · 04/12/2024

Hot off the virtual press: our new publication, 'Vulnerability Disclosure: Guiding Governments from Norm to Action', is now available! Check it out here:: www.interface-eu.org/publications... #cybersecurity #vulnerability #disclosure

010

Reposted by Sven Herpig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 28/11/2024

Hey everyone, INC Ransom has added A CHILDREN’S HOSPITAL to their list of victims. Your periodic reminder that people who carry out ransomware attacks are worthless pieces of shit who deserve no mercy.

03512

Sven Herpig @z-edian.bsky.social · 28/11/2024

"Governments could build collaborative programs that bring together AI research institutions and cybersecurity researchers to ensure adequate expertise is dedicated to identifying and remediating security vulnerabilities." www.aipolicyperspectives.com/p/securing-ai #AI #vulnerabilities

aipolicyperspectives.com

Securing AI

Lessons from cybersecurity

000

Sven Herpig @z-edian.bsky.social · 28/11/2024

"To protect our nation’s digital infrastructure, we must adopt a “See Something, Say Something” mindset in #cybersecurity. When researchers report #vulnerabilities or evidence of breaches, organizations should engage them as partners rather than adversaries." www.cisa.gov/news-events/...

cisa.gov

Engaging with Security Researchers: Embracing a “See Something, Say Something” Culture | CISA

010

Sven Herpig @z-edian.bsky.social · 28/11/2024

"Between 2023 and 2024, more than 35 advisories [...] concerned zero-day vulnerabilities exploited by Chinese threat actors. These account for 41% of all advisories with a high or very high threat level" research.cert.orangecyberdefense.com/hidden-netwo... #Cybersecurity #China #Vulnerabilities

research.cert.orangecyberdefense.com

Orange Cyberdefense CERT Threat Research: The hidden network map

001

Sven Herpig @z-edian.bsky.social · 28/11/2024

"Nowadays, the MSS is the big kahuna and, since 2021, has been linked to the majority of cyber operations attributed to the PRC." "PLA has been retasked to directly support military operations." news.risky.biz/the-plas-cyb... #China #Cybersecurity #CyberCampaigns

news.risky.biz

The PLA's Cyber Operations Go Dark

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray. It's supported by Lawfare with help from the William and Flora Hewlett Foundation. You can hear a...

010

Reposted by Sven Herpig

Runa Sandvik @runasand.bsky.social · 27/11/2024

I wrote a very timely introduction to digital security for journalists for @gijn.org, this guidance may also apply to activists, lawyers, and anyone else doing at-risk work these days. gijn.org/resource/int...

gijn.org

Introduction to Investigative Journalism: Digital Security

Digital security may seem a little daunting at first, but increased security will help investigative journalists build trust with — and protect — current and future sources.

815673

Reposted by Sven Herpig

Maxine🧙‍♀️ @maxisjoe.xyz · 25/11/2024

If you're afraid of the NSA or some Russian group abusing vulnerabilities on your computer, think again. Game developers are the real threats, and they'll proudly boast about installing rootkits on your system; just so they can make sure that their games run at 15FPS.

1134

Sven Herpig @z-edian.bsky.social · 24/11/2024

Hosting "my" first #UnitedNations side event in #NewYork in Dec 3. Topic: #Vulnerability Disclosure. Big thank you to our partners, the @cyberseccenter.bsky.social and the German Ministry of Foreign Affairs. More info: unodaweb-meetings.unoda.org/public/2024-... #cybersecurity

unodaweb-meetings.unoda.org

011

Reposted by Sven Herpig

Jurre van Bergen @jurrevanbergen.nl · 20/11/2024

If you're part of civil society and received an Apple notification. The Amnesty Security Lab would be happy to test your phone! The Apple notification looks like this: support.apple.com/en-us/102174 The Security Lab can be contacted here: securitylab.amnesty.org/get-help/

support.apple.com

About Apple threat notifications and protecting against mercenary spyware - Apple Support

Apple threat notifications are designed to inform and assist users who may have been individually targeted by mercenary spyware.

02823

Reposted by Sven Herpig

Sam Sabin @samsabin.bsky.social · 19/11/2024

CrowdStrike has identified a new China hacking group that's been targeting telecom networks since at least 2020. The group has primarily targeted networks in SE Asia and Africa — but it also have the ability to use their access to breach other networks. www.axios.com/2024/11/19/c...

axios.com

Exclusive: CrowdStrike finds that yet another China-linked hacking group is targeting telecom networks

The discovery comes as the U.S. responds to a sprawling China hack of officials' phones.

22818