Dakota
@dakotaindc.bsky.social
China-Focused Consultant @SentinelOne | Nonresident Fellow @ACGlobalChina | Adjunct @Georgetown | Unprofessional Cook | ❤️💜💙 https://linktr.ee/dakotaindc
Microsoft is probing whether a MAPP leak let Chinese hackers exploit a SharePoint vuln pre-patch. In this new piece for Natto, @dakotaindc.bsky.social, @meidanowski.bsky.social & I dig into: 🏛️ China's vuln reporting rules 📉 Which firms joined/left MAPP since 2018 ⚠️ The risks today’s members pose
American officials say new economic model for offence has fuelled spying attacks by PRC government agencies that have more than doubled. "We are in China’s golden age of hacking,” said @dakotaindc.bsky.social :
Joseph Menn@joemenn.bsky.social · last yr.New from me: Chinese government-backed hackers have become even more aggressive in breaking into U.S. government networks and companies, powered by a private industry liberated to choose targets themselves. Free link with email etc. wapo.st/4kFltKM
Should we proactively make human-imitation robotic appearances illegal?
I’m logging on from vacation in Tokyo to share this banger of a report comparing the cyber offensive acquisition strategies of China and the US. www.atlanticcouncil.org/in-depth-res...
Crash (exploit) and burn: Securing the offensive cyber supply chain to counter China in cyberspace
If the United States wishes to compete in cyberspace, it must compete against China to secure its offensive cyber supply chain.
atlanticcouncil.org
I learned the true meaning of a zephyr as I lie awake last night waiting for one to sneak in through my window. We’re at 28 hours without power and approaching tomorrow’s high of 95 with dread.
June 12th is Loving Day, a holiday that commemorates the Loving v. Virginia case, which allowed interracial marriage in all parts of the U.S. NPR readers share how the case changed their lives.
NPR readers share stories of love and adversity in honor of Loving Day
June 12th is Loving Day, a holiday that commemorates the Loving v. Virginia case, which allowed interracial marriage in all parts of the U.S. NPR readers share how the case changed their lives.
n.pr
Hefty new drop w/ @milenkowski.bsky.social China-nexus Threat Actors Hammer At the Doors of Top Tier Targets www.sentinelone.com/labs/follow-...
The threat actor taxonomy unification announcement is a joke on anyone tracking the actual entities behind APT designations. Not only do many separate entities often constitute a single APT, but these entities change their TTPs overtime in ways that may align them to other, already established APTs
This report has me thinking a couple of things. 1) We should anticipate more universities joining Qingyuan Polytechnic in supporting the CNNVD. As the chart below from the 2022 CNITSEC report (former MSS 13th Bureau) makes clear, the plurality of Chinese vuln talent is employed by higher-ed.
Natto Thoughts@nattothoughts.bsky.social · last yr.The Natto Team explores the development of China's vulnerability research and discovery skills, starting from the vocational college level. Thanks to @euben.bsky.social @dakotaindc.bsky.social Kristin Del Rosso for their previous research on the topic nattothoughts.substack.com/p/when-a-voc...
All orgs under Chinese Academy of Sciences web.archive.org/web/20250528... 中国科学院办公厅 中国科学院沈阳分院 中国科学院长春分院 中国科学院上海分院 中国科学院南京分院 中国科学院武汉分院 中国科学院广州分院 中国科学院成都分院 中国科学院昆明分院 中国科学院西安分院 中国科学院兰州分院 中国科学院新疆分院 中国科学院院机关 中国科学院上海分院机关 中国科学院南京分院机关 中国科学院西安分院机关 中国科学院新疆分院机关 中国科学院沈阳分院机关 中国科学院广州分院机关 中国科学院武汉分院机关
web.archive.org
The incompetence and incoherence of the US strategy with the UAE is staggering apnews.com/article/inte...
Leaked US intel: Russia operatives claimed new ties with UAE
A leaked document suggests U.S. spies caught Russian intelligence officers boasting that they had convinced the oil-rich United Arab Emirates “to work together against US and UK intelligence agencies....
apnews.com
Kim Zetter@kimzetter.bsky.social · last yr.New: UAE is trying to recruit Pentagon workers displaced by DOGE to move to Abu Dhabi to work on AI for UAE military. A UAE brigadier general met last month with two former staffers of Defense Digital Service who have worked on US classified projects and tried to recruit them and the entire DDS team
NEW: @ajvicens.bsky.social and I went through some of the leaked TeleMessage documents collected by @ddosecrets.com. Whoever hacked the service had access to a broad cross-section of US government communications. www.reuters.com/world/us/hac...
Exclusive: Hacker who breached communications app used by Trump aide stole data from across US government
A hacker who breached the communications service used by former Trump national security adviser Mike Waltz earlier this month intercepted messages from a broader swathe of American officials than has previously been reported, according to a Reuters review, potentially raising the stakes of a breach that has already drawn questions about data security in the Trump administration.
reuters.com
Just a gut check on how this would have landed in 2004. www.youtube.com/watch?v=trsF...
The President Needs to Return a Gift | The West Wing
YouTube video by The West Wing
youtube.com
Ellen Nakashima@ellenwapo.bsky.social · last yr.Qatar is discussing with the Pentagon donating an aircraft for POTUS to use as his new Air Force One, an idea that ethics experts say violates the Constitution. No final agreement has been reached. Trump will visit Qatar on his Middle East trip this week. www.washingtonpost.com/politics/202...
Stanford review published a great piece of journalism on the CCP's on-campus activities. stanfordreview.org/investigatio...
INVESTIGATION: Uncovering Chinese Academic Espionage at Stanford
This summer, a CCP agent impersonated a Stanford student. Under the alias Charles Chen, he approached several students through social media. Anna*, a Stanford student conducting sensitive research on ...
stanfordreview.org
📆 Just A Sec is almost here. In the first-ever episode of our new livestream series, @jags.bsky.social, @stonepwn3000.bsky.social, Drea London-Petter, and @dakotaindc.bsky.social discuss the hidden forces shaping our digital world.
An absolute blast to participate in and so happy with how this turned out!
Jamie Tarabay@jamietarabay.bsky.social · last yr.Thank you @dakotaindc.bsky.social Winnona DeSombre, @dustinchilds.bsky.social, Greg Austin, for your time and wisdom in this @bloomberglp.bsky.social production on the breadth of China's cyber army. An idea originated the brilliant Robin Fall and Olivia Yasukawa. www.bloomberg.com/news/videos/...
Thank you @dakotaindc.bsky.social Winnona DeSombre, @dustinchilds.bsky.social, Greg Austin, for your time and wisdom in this @bloomberglp.bsky.social production on the breadth of China's cyber army. An idea originated the brilliant Robin Fall and Olivia Yasukawa. www.bloomberg.com/news/videos/...
How China Is Building an Army of Hackers
China and the US actively engage in cyber espionage for strategic advantage. Leaked files now suggest how rapidly Beijing is catching up in preparation for any future conflict. (Source: Bloomberg)
bloomberg.com
Federal research leaders suggested Tuesday that AI could lead industries to “nearly eliminate software vulnerabilities” in critical infrastructure. via @gregotto.bsky.social cyberscoop.com/darpa-ai-gra...
DARPA believes AI Cyber Challenge could upend patching as the industry knows it
Federal research leaders suggested Tuesday that AI could lead industries to “nearly eliminate software vulnerabilities” in critical infrastructure.
cyberscoop.com
The report is allegedly titled "Investigation Report on the Incident of US Intelligence Agencies Using Cyberspace to Attack China's Large Commercial Cryptographic Product Providers" (美情报机构利用网络 攻击中国大型商用密码产品提供商事件调查报告)
LABS again breaking sector taboos discussing defending ourselves from attackers. Great piece www.sentinelone.com/labs/top-tie...
Top Tier Target | What It Takes to Defend a Cybersecurity Company from Today's Adversaries
This report highlights a rarely-discussed but crucially important attack surface: security vendors themselves.
sentinelone.com
Banger of a report from @milenkowski.bsky.social, Jiro Minier, @julianferdinand.bsky.social, @maxwsmeets.bsky.social, and @tgrossman.bsky.social virtual-routes.org/pharos-repor...
Pharos Report No. 3: Ransomware’s New Masters: How States Are Hijacking Cybercrime - Virtual Routes
The third report in the Pharos Series, Ransomware’s New Masters: How States Are Hijacking Cybercrime is authored by Aleksandar Milenkoski, Jiro Minier, Julian-Ferdinand Vögele, Max Smeets, and Taylor ...
virtual-routes.org
From @reuters.com: Three more federal prosecutors who worked on the now-torpedoed corruption case against New York Mayor Eric Adams have quit "after they said the Justice Department wrongfully pressured them to admit to wrongdoing." www.reuters.com/world/us/thr...
