kurt baumgartner
@kurtisj.bsky.social
cybersecurity researcher, co-founder TLPBLACK. thanks for all the xor
EA officially goes private tonight, meaning: - EA will no longer trade on the NASDAQ for the first time in 36 years - All stockholders of EA (including many employees) will receive $210/share - EA will take on $18 billion (!) in debt, putting it on the hook to pay ~$1.8 billion/year in interest
"Ollama, vLLM, all the homegrown agent stuff people are exposing without thinking too hard about it - are a genuinely new kind of thing to attack" tlpblack.net/blog/2026080...
Someone attempted hacking my fake AI server, entailing a five hour tragedy
Recap of an attack against local AI server. How criminals try to take over hosted inference and AI agent systems
tlpblack.net
Some threat actors really need to learn how to prompt. Talos recovered attacker prompts logs and another AI artifacts to learn how they bypass guardrails, build and scale capabilities, and automate workflows. While amusing, some made sophisticated outputs: cs.co/63329BEAg9c
Study Finds Most Americans Can't Find Where They Are Being Deported On Map
Cymru recently posted addresses related to interesting infra with history - our TLPBLACK sensors tracked attacks from some of these IP going back to august 2025 x.com/teamcymru_S2...
Team Cymru Research (@teamcymru_S2) on X
Self-hosted AI-quota gateways are showing up as live attack infrastructure. We're currently tracking 241 IPs running New API and Sub2API panels (gen-ai:new-api / gen-ai:sub2api) that double as C2, rec...
x.com
Our latest technical analysis on an active ransomware, "ByteToCrypt", along with defense recommendations we provide our customers tlpblack.net/blog/2026072...
A Deep Dive into ByteToBreach's ByteToCrypt ransomware
Technical analysis of ByteToCrypt, the custom Linux ransomware deployed by the ByteToBreach threat actor: encryption internals, anti-forensics behavior, decryption prospects, and IOCs.
tlpblack.net
intrusiontruth.wordpress.com/2026/07/27/d...
Dear Diary, Today I found a Ghost in the Network
Dear Diary, Today I found a Ghost in the Network A hidden seller Guangdong Chanming. If you were looking for them, you’d be disappointed. No public website, no storefront, and certainly no obvious …
intrusiontruth.wordpress.com
"OpenAI says its AI models secretly broke out of a secure test environment and hacked into AI company Hugging Face in order to cheat on an evaluation" bananas fortune.com/2026/07/21/o...
OpenAI says its AI models escaped from a secure test environment and hacked into AI company Hugging Face in order to cheat on an evaluation | Fortune
The first-of-its-kind incident involved OpenAI's GPT-5.6 Sol and another unreleased model
fortune.com
For those heading to Vegas for BSidesLV/BHUSA/DefCon, I'll be speaking a bit! First, spicy proxy network talk at SkyTalks: bsideslv.org/talks#11f132... Then electric sector threat evolution at ICS Village Def Con: info.defcon.org/defcon34/con...
Talks - BSides Las Vegas
BSides Las Vegas is a nonprofit organization formed to stimulate the Information Security industry and community.
bsideslv.org
I write stuff like this story about a CIA proxy coming off the rails and people totally just shrug it off while raging about MK Ultra or what the fuck ever else as if that even matters at this point. Serious case of vapor lock. thehighside.substack.com/p/extrajudic...
Extrajudicial killing in Kenya reveals CIA's covert role in global counterterrorism operations
Kenya’s Rapid Response Team commandos were sure they had got their man, shooting suspected terrorist Fuad Abubakar Manswab dead as he tried to flee the apartment they had just broken into.
thehighside.substack.com
Jack Murphy@jackmurphyrgr.bsky.social · 3w agoWhen people think about the CIA, they exclusively think of the pre-Church Committee CIA as if that is the same agency sixty years later. It's impossible to talk them out of the Oliver Stone shit they were raised on.
After watching the Jay Clayton confirmation hearing for DNI, it seems Mr. Clayton, and many of the senators questioning him, don’t have a clear idea of what the DNI does, and what it shouldn’t do. Cheat sheet: get the IC agencies to work together: YES. Police elections: NO.
www.consilium.europa.eu/en/press/pre...
Russian cyber-attacks and destabilising activities: Council sanctions nine individuals and four entities
The Council imposed restrictive measures on nine individuals and four entities forming part of Russia's cyber ecosystem, responsible for carrying out, enabling and facilitating malicious cyber a...
consilium.europa.eu
"sometimes the highest cost isn't the ransom, it’s surviving the downtime" www.theregister.com/cyber-crime/...
German firm files for insolvency, blames cybercrims who shut down production for 6 weeks
ZEGO-TVZ says the financial fallout from a March cyberattack left shutting its doors as the only option
theregister.com
Karen Vardanyan faces up to 15 years in federal prison and agreed to pay nearly $1.2 million in restitution. via @mattkapko.com cyberscoop.com/karen-vardan...
Armenian national pleads guilty to Ryuk ransomware attacks
Karen Vardanyan faces up to 15 years in federal prison and agreed to pay nearly $1.2 million in restitution.
cyberscoop.com
very busy wallets, likely associated with ransomware ordinalswallet.com/address/bc1q... ordinalswallet.com/address/bc1q... ordinalswallet.com/address/14Me... ordinalswallet.com/address/1L24...
Ordinals Wallet | bc1q327l7d8ch43ec6cxla39eg5lp3lpavqpmql8flwzgfdg94yjzlpqv8e7sk
Ordinals Wallet
ordinalswallet.com
raise teacher salaries? nooooo. implement 2FA? nooooo. pay out $1million taxpayer money to crooks to maybe cover up leaked comms and contracts? you bet! ransom-isac.org/blog/kairos-...
Kairos Ransomware: Data-Extortion Case Study Involving a U.S. Government Entity
A leaked negotiation transcript and payment-flow analysis of a successful $1 million ransom payment by a U.S. government body to Kairos — a data-extortion actor whose "ransomware group" status remains...
ransom-isac.org
QCTR event 2026/Q2 - Summer Watch: Protecting the Fort on 07/15/2026 @02:00(CEST) "GreyNoise - 'State of the Edge'" for the viz events.zoom.us/ev/AjAvpCWT4...
QCTR event 2026/Q2
events.zoom.us
We’re proud to recognize @vertexproject.bsky.social as our 2026 Pillar Sponsor! The Vertex Project creates technology for analytical teams to provide intelligence-driven insights to decision makers. vertex.link #VertexProject #VertexSynapse We’re grateful for their support in making SOS possible!
New spyware lawsuit just dropped: www.reuters.com/legal/govern...
Greek wiretapping victims sue spyware firm Intellexa for damages
Eight victims of a Greek wiretapping scandal have sued the Athens-based surveillance firm Intellexa SA and individuals believed to be linked to it, seeking €1 million ($1.1 million) each for moral ha...
reuters.com
New: CISA is using Mythos to audit government codebases, sources tell me. Another sign that, despite the blacklist, government is eager to put Anthropic's cybersecurity-focused models to work. www.reuters.com/world/us-cyb...
EXCLUSIVE: US cyber agency is using Anthropic's Mythos to audit government code, sources say
The U.S. cyber defense agency CISA is using Anthropic's AI model Mythos to audit government software, three people familiar with the matter said on Monday, another sign of government enthusiasm for ...
reuters.com
Cyberwar as an idea has continued to recede, yet the covert contest beneath it has intensified cyberdefensereview.army.mil/CDR-Content/...
cyberdefensereview.army.mil
signal sent out a message from a read only chat. that is their only official chat. remember, signal will NEVER reach out to you over chat. there is no signal support that engages you over a chat.
strange. some of the admin must have forgotten that they just need to look for it in the mar-a-lago bathrooms
Dustin Volz@dustinvolz.bsky.social · last mo.The Trump administration is demanding that U.S. intelligence officials turn over the names of all foreign espionage targets, including suspected spies and potential recruits, to create a master list that some fear will be misused or compromise operations www.nytimes.com/2026/06/29/u...
California 🤝 @anthropic.com We're entering a partnership to strengthen cybersecurity and provide Claude to state agencies at a discount. The Golden State helped build Silicon Valley — and every Californian should benefit from the responsible use of their latest innovations.
Study: Majority Of Middle-Aged Men Lack Support Network They’ll Need To Handle Neil Young’s Death
Study: Majority Of Middle-Aged Men Lack Support Network They’ll Need To Handle Neil Young’s Death
NEW YORK—Warning that millions of men aged 35 and older would be left utterly adrift following the traumatic loss, researchers at Columbia University published a study Monday that revealed the majorit...
theonion.com
