I'm used to weird stuff at work by now. But someone contacting the national CSIRT of a European country about a guy born in Colombia violating Canadian law by filming gay pornography without the appropriate paperwork, who should thus be stripped of his Canadian citizenship .. that is extraordinary.
Bytes and Borscht
@bytesandborscht.bsky.social
Something something computers, conflict, crime. | https://bytesandborscht.com
To quote a friend: "Academic-ish non fiction authors are some of the saltiest and funniest people alive". I agree.
I think people, especially outside of Europe, don't fully grasp how much of a big deal the clear statements by Wadephul and Dobrindt on the attacks targeting the airport in Leipzig are - especially given the timing. Pissing off Germany enough to get them to publicly condemn something is .. a feat.
Fantastic work from BIRN, with new findings on Aeza, including a German AfD figure behind the registration of the sanctioned shell company Smart Digital Ideas. Great to see earlier RecordedFuture research by @whoisnt.bsky.social and me inform the investigation. balkaninsight.com/2026/08/28/g...
German AfD Figure Behind Alleged Serbian Node in Russian Cyber Meddling
BIRN has identified Andreas Maul, a town councillor for Germany’s far-right AfD party, as the man behind a Serbian company sanctioned by the US for aiding a Russian alleged cybercrime service provider...
balkaninsight.com
More than just a GRU Hacker School: DTI researchers analyzed the internal documents leaked from Bauman University' Dept No. 4. Read our investigation: https://dti.domaintools.com/research/threat-intelligence-report-university-leak-exposes-russias-military-cyber-training-pipeline
DomainTools Investigations | Threat Intelligence Report: University Leak Exposes Russia’s Military Cyber Training Pipeline
A leaked cache of files reveals how Bauman University’s Department No. 4 serves as a training pipeline supplying military cyber operators to GRU units APT28 and Sandworm.
dti.domaintools.com
91.8% of players, having waited nearly 20 years for MGS4 to be playable on anything other than PS3, booted the game and immediately made a beeline for a statue's dick
Did half a dozen interviews with potential hires today. It took me until the last one to realize I was using a Waifu-cup I gifted to a report as a physical manifestation of shitposting months back throughout the day. Well, fuck.
Current status: I have to prepare four (different) presentations and a multi-hour workshop, the latter being held in two weeks. I haven't started on either, and my brain is too fried from work for this to change. It's going to be a fun couple of weekends. 🥲
Since the official documentation for installing MISP without Docker is a bit chaotic / partially outdated / didn't fit my needs I compiled my notes of the process into a rough how-to: bytesandborscht.com/a-kind-of-ho...
A (kind of) how-to: MISP without Docker
The official documentation for installing MISP without containers is outdated - this should help.
bytesandborscht.com
I recently handled (what I thought to be) a phishing site that ultimately turned out to be some curiously different: bytesandborscht.com/the-curious-... In the grand scheme of cyberthings it's definitely minor. Yet still an interesting oddity.
The curious case of the effortful fraud
How what looked like a generic phishing site seemingly turned out to be a put-some-effort-into it, targeted fraud.
bytesandborscht.com
When my queer friends start a podcast and someone asks them why I'm in it.
"the cybers can chill a bit" is iconic.
me a few years ago: "Geez I wish I had cool research like this to submit for conference CFPs..." *monkey's paw curls* me now: "i would like to revert to precedented times, i have enough material now, that's enough, really. the cybers can chill a bit."
About to try and run Maltego on a Macbook Neo. Yes, I love stupid ideas.
"The National Book Award winner’s breathtaking new novel about neo-Nazis, particle physics, and Johann Sebastian Bach" .. that was a wild ride of a sentence.
Imagine being foiled not by Russian counterintelligence efforts, but by Djadja Wanja and his bottle of homebrew.
Had a sneezing fit while my cat was laying on my leg, dozing. Someone is personally offended by my existence.
The older I get, the more clear it is that all our safety and well-being is intertwined. The same forces pushing racism are targeting trans people and immiserating the disabled and extracting everything they can from all of us. We gotta stand up for everyone because everyone is all of us.
Austrian Court Convicts Two Belarusians in Russian Arms Procurement Case https://www.byteseu.com/2271527/ 303 A court in Vienna has convicted two Belarusian defendants over a scheme that Austrian investigators say routed more than €3.3 million of European industrial equipment to Russian …
Austrian Court Convicts Two Belarusians in Russian Arms Procurement Case - Bytes Europe
byteseu.com
Two things at play - ClickFix (website asks user to press Windows key + R, run a command) is *incredibly successful*, and just phoning the helpdesk and asking for password reset. The GenAI research stuff being pushed out by security and AI vendors is completely absent in the real world trenches.
Cyber insurer (Chatham house forbids me from saying who) at BH CISO summit: “so far this year 0 payouts for claims even remotely connected to a AI-driven breach, 85% of payouts related to social engineering”. Sobering statistic.
Imagine you are a soldier, advancing behind the cover of your own tank .. only to get absolutely decked by an ejected shell casing of said tank.
I wish more people would learn about these numbers. Because they put a lot of things into perspective.
Cyber insurer (Chatham house forbids me from saying who) at BH CISO summit: “so far this year 0 payouts for claims even remotely connected to a AI-driven breach, 85% of payouts related to social engineering”. Sobering statistic.
Throwback to when I wrote a complete dubbing script for the original Godzilla when I was 16 and then acted it out using the text-to-speech engine used for BonziBuddy and Google Translate.
Friendly reminder: Wearing the Meta AI Ray-Ban glasses / the great consent eraser is an active invitation to get punched in the nose. Fuck those glasses!
We've worked on this investigation for more than a year, and it led us from a single domain to a multi-billion dollar IRGC sanctions evasion network. Please enjoy the report! dti.domaintools.com/research/the...
DomainTools Investigations | Intelligence Report: The Zedxion Corporate Nexus for Illicit Iranian Financial Funds Transfer for IRGC Entities.
Uncover how the Zedxion Corporate Nexus and Babak Zanjani network deploy UK shell companies, digital tokens, and UAE trade entities for IRGC sanctions evasion.
dti.domaintools.com
“Iranian drone attacks on CIA facilities in the Gulf have prompted U.S. intelligence analysts to investigate whether #Russia assisted by providing targeting information or advanced drone technology” www.reuters.com/world/middle...
EXCLUSIVE: Iran strikes on CIA facilities prompt questions about possible Russian role
Iranian drone attacks on CIA facilities in the Gulf have prompted U.S. intelligence analysts to investigate whether Russia assisted by providing targeting information or advanced drone technology.
reuters.com
my view is that we have reached the historical moment in our relationship with technology where this maxim ceases to be inspirational and increasingly reads as a dire warning
Any sufficiently advanced technology is indistinguishable from magic.