i was fortunate enough to profile Margaret Hamilton in 2019. A really kind and curious person. This was my favorite story she told me:

New: Members of a Russia-based cyberextortion gang plotted to send operatives into US law firms, kidnap executives and even recruit military personnel to spy on submarine-based nuclear forces, according to leaked chats reviewed by Recorded Future News. Crazy stuff in this archive. More to follow:

Leaked chats show Russian extortion gang sending ‘agents’ into US law firms

In leaked chats, members track dozens of victims, haggle over multimillion-dollar payments and direct operatives based in the United States whom they call “agents.”

therecord.media

New: The British government is failing to measure what Russian cyberattacks, sabotage and threats to critical infrastructure are costing the country, according to a new report, which gives its own estimate of between £2 billion and £2.5 billion a year — a figure described as a floor.

Russian cyberattacks against UK are 'Putin Tax' costing $3.3 billion, says lawmaker

A report by a Labour MP and an academic argues that if the British public cannot see what Russian activity costs, it cannot weigh that burden against the cost of defending against it.

therecord.media

"Plague's mortality rate ranges from 30% to 100% if left untreated." 😐

Suspected plague in Russia puts EU on alert

“We are aware of the reports concerning the laboratory incident in Russia, seemingly involving a pathogen-causing plague,” says European Commission spokesperson.

politico.eu

New: Security researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visitors to an unauthenticated endpoint.

Doubts grow over claims OpenAI agent hacked Australian Medicare portal

Researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visit...

therecord.media

New: Security researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visitors to an unauthenticated endpoint.

Doubts grow over claims OpenAI agent hacked Australian Medicare portal

Researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visit...

therecord.media

Excited to publish my first @bindinghook.bsky.social piece on challenging assumptions of how Iranian cyber ops function in wartime & the discrepancy between capability/intent signals from peacetime. What does the evidence say on how cyber/kinetic interact in conflict? bindinghook.com/what-does-th...

What does the Iran war tell us about the relationship between cyber and kinetic conflict?

The predicted wave of Iranian cyber retaliation never came

bindinghook.com

I’m seeing the word “hack” used in a lot of coverage of Albanese’s announcement about OpenAI’s unauthorised access to an Australian government health website in June. As of now, the lack of technical details either from OpenAI or Canberra make that description hard to justify.

British Prime Minister Andy Burnham said Tuesday he has ordered security chiefs to begin work on a new national center ”to detect, attribute and disrupt” hostile state disinformation.

Burnham announces plan for new UK center to fight disinformation

The United Kingdom will create a new national center "to detect, attribute and disrupt” hostile state disinformation, Prime Minister Andy Burnham announced at the United Nations General Assembly.

therecord.media

Defenders cannot yet put artificial intelligence to work as freely as attackers can, a senior official at @ncsc.gov.uk said Monday. His warning comes amid concerns about the kind of cybersecurity future AI will lead to. Read more here ⤵️

AI is set to help cyber attackers much more than defenders, says UK official

Dave Chismon, the NCSC’s chief technology officer for architecture, said in a blog post that the imbalance in AI means cyberattacks would likely grow as automated defenses struggle to keep pace.

therecord.media

Russia’s growing restrictions on mobile internet and cellular service are making it harder for people to receive warnings about incoming Ukrainian drone and missile attacks. In some cases, alerts arrive only after a strike or do not reach residents at all. ✍️ @darynant.bsky.social

Russia’s internet shutdowns disrupt warnings about incoming drone attacks

Russia’s growing restrictions on mobile internet and cellular service are making it harder for people to receive warnings about incoming Ukrainian drone and missile attacks.

therecord.media

New: Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’

Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’

According to the United Kingdom’s National Cyber Security Centre (NCSC), Iran has used this and similar cyber activity to “support the repression of individuals who are seen as a threat to the regime,...

therecord.media

Accounts like this are so weird. Claiming to be investigative journalists, thousands of followers, writing* things that have been public or reported by others weeks ago: therecord.media/irregular-ai... And the output is just trash. _ * I have my doubts about how much they're writing themselves...

The U.S. National Security Agency is undertaking a fast and far-reaching reorganization in a bid to get the unique intelligence it gathers to real-world battlefields faster. Good morning! Catch-up on the weekend scoop from @martinmatishak.bsky.social here ⤵️

Thorough reorganization at NSA will create five 'mission centers,' including cyber and AI

The largest electronic spy agency in the world is reorganizing. And fast.

therecord.media

Anthropic detected and disrupted a Russia-linked cyber-espionage group that used its AI tool Claude in a hacking campaign targeting more than 20 government, intelligence, diplomatic and defense organizations, the company said Thursday.

Anthropic caught Russia-linked spies using Claude in hacking operations

Anthropic detected and disrupted a Russia-linked cyber-espionage group that used its AI tool Claude in a hacking campaign targeting more than 20 government, intelligence, diplomatic and defense organi...

therecord.media

Wee scoop: The new commander of the National Cyber Force stepped into the role this week, according to sources with knowledge of the appointment. The individual has not yet been avowed as routine security considerations are still being worked through.

UK appoints new commander of National Cyber Force

The individual has not yet been avowed — the formal process in Britain by which an intelligence or security figure’s identity is publicly acknowledged — as routine security considerations are still be...

therecord.media

At least four cyber-espionage groups, most linked to Chinese state intelligence, have been using the same previously unknown Google Chrome vulnerability in attacks beginning late August and continuing into this week, cybersecurity firm Proofpoint said Wednesday.

Multiple Chinese hacking groups seen using identical Chrome zero-day exploit

A Google Chrome bug identified in August was exploited by at least four China-linked cyber-espionage groups, according to researchers.

therecord.media

Dancing very very VERY close to saying “OpenAI stole our almost-complete proof of Navier-Stokes from internal access to our ChatGPT sessions because they were desperate to scoop Anthropic” which is absolutely 100% a believable thing OpenAI would do right now cims.nyu.edu/~tristanb/st...

On the same day Germany formally blamed Russia for the Leipzig/Halle drone attack, and two power stations were hit with sabotage, hackers encrypted the central IT systems of a municipal utility in Bavaria. No evidence events linked, but what a day, eh?

Cyberattack encrypts systems at Bavarian municipal utility

A municipal utility in Bavaria is recovering from a cyberattack that encrypted its internal IT systems but did not affect water and electricity services.

therecord.media

AI has done plenty for my “politicians being daft about technology” scrapbook, but nothing will ever beat the debate in 1924 when MPs grilled the government over “the invention known as the death ray.” One MP asked: “Are the Government taking steps to prevent the use of this diabolical device?”

Hackers embezzled at least €35 million from hundreds of notary offices in France over two years. They were so prolific that the authorities feared the criminals were issuing counterfeit notarial deeds. It might take years for those to come to light. Great reporting from @untersin.gr here ⤵️

Au cœur d’une cyberattaque sans précédent qui a ébranlé le notariat français

Des pirates ont détourné au moins 35 millions d’euros au sein de centaines d’offices notariaux pendant deux ans. Les hackeurs étaient si prolifiques que les autorités ont craint l’émission de faux act...

lemonde.fr

@isaacs.bsky.social Heya Isaac, I saw you mentioned emails to you can get lost in a sea of spam and was wondering if it would it be possible for me to DM you here for an odd little journalistic investigation I'm working on (about npm and SBOMs)? Very grateful for your time if so! Thank you!

What use is the word "hybrid" here?

Two men in Australia were charged Wednesday over their alleged membership in TeamPCP, the cybercrime group blamed for one of the most damaging hacking campaigns of the past year.

Australia charges two men for TeamPCP supply-chain hacking spree

Two men in Australia were charged Wednesday over their alleged membership in TeamPCP, the cybercrime group blamed for one of the most damaging hacking campaigns of the past year.

therecord.media

New: Manchester Airports Group — a public-private partnership which operates three of England’s busiest airports — said Thursday it was hit by a cyberattack affecting data belonging to about 8.7 million customers.

Cyberattack on Manchester Airports Group exposes data of 8.7 million customers

A spokesperson told The Yorkshire Post that roughly 8.7 million people were impacted, although they did not provide a date range. They added that in the “vast majority” of cases, the only information ...

therecord.media

New: An agreement, signed Monday by Zelensky and Burnham, will make the U.K. the first foreign partner to gain access to Ukraine's Avengers AI Labs, a defense platform built around millions of images and other data gathered from the battlefield.

Ukraine to give Britain access to battlefield data to train AI

Ukraine will give Britain access to a vast trove of battlefield data collected during the war with Russia, allowing U.K. companies and researchers to use it to train and test artificial intelligence s...

therecord.media

'[M]inisters would not have to publicly designate a vendor as a security risk before taking action against it... The powers would also reach beyond telecoms into managed service providers, data centers and digital infrastructure, as well as the energy, water, transport and health sectors.'

Alexander Martin@alexmartin.bsky.social · 2mo ago

New: The British government is seeking new powers that would allow it to ban technology vendors on national security grounds from supplying companies working in the country’s critical sectors — potentially doing so in secret.

New: The British government is seeking new powers that would allow it to ban technology vendors on national security grounds from supplying companies working in the country’s critical sectors — potentially doing so in secret.

UK government seeks powers to secretly block risky tech suppliers

The British government is seeking new powers to ban certain technology vendors from supplying companies working in the country’s critical sectors — potentially doing so in secret.

therecord.media

Cheery news.