Profile avatar
mrkoot.bsky.social
IT, privacy, security, democracy. PhD. PGP: 51F9 8FC9 C92A 1165 (http://keybase.io/mrkoot). IT security specialist at Secura, research associate at University of Amsterdam. Mastodon: @[email protected] LinkedIn: /in/mrkoot
152 posts 679 followers 442 following
Prolific Poster

10 Chinese Nationals Charged With Large-Scale Hacking Of U.S. And International Victims On Behalf Of The Chinese Government (4 March 2025) www.justice.gov/usao-sdny/pr... Indictment (.pdf, 27 pages) www.justice.gov/usao-sdny/me... Re: i-Soon aka Anxun Information Technology.

NEW: DOGE put a not-so-secret CIA training facility up for sale, apparently in error. "Obviously, someone did no research about the long and well-documented history of this property," says the chairman of the local county board of supervisors.

The spies Musk sent into the cold are a counterintelligence disaster in the making (4 March 2025) thebulletin.org/2025/03/the-... By intelligence & national security historian @calderwalton.bsky.social, published at‬ @thebulletin.org.

Countering Russian Lawfare and Gray Zone Operations (3 March 2025) www.justsecurity.org/108588/count...

All three DNS servers for the National Institutes of Health (NIH) stopped responding. This means any and all NIH resources, including the global medical research database PubMed, are unreachable now. (!!) Earliest mention on X and bsky seems to be about 18h ago, so around Sat Mar 1, 18:00 UTC.

3. Don't reach out on social media.

Under Trump 2.0, Europe's dependence on US clouds back under the spotlight - Technologist @berthubert.bsky.social tells The Reg Microsoft Outlook is a huge source of geopolitical risk (26 February 2025) www.theregister.com/2025/02/26/e...

Belgian prosecutor probes alleged Chinese hacking of civilian intelligence & security service VSSE in November 2023 (26 February 2025) www.reuters.com/world/belgia...

Spyware as a service: Challenges in applying export controls to cloud-based cyber-surveillance software (17 February 2025) www.sipri.org/commentary/t...

This device was used by the German Army to capture and decode Yugoslav telegraphy signals in Kosovo: www.cryptomuseum.com/telex/rs/ga0...

Select group of U.S. Congressional leaders given access (in-person) to Foreign Intelligence Surveillance Court (FISC) proceedings in bid for more transparency (10 Feb 2025) therecord.media/congressiona... A noteworthy (and slightly controversial?) result of the 2024 bill extending FISA Section 702.

Europe could be supporting Russia’s war on Ukraine via partnerships with China’s ‘Seven Sons’ defence universities – Ben Forney for Jamestown’s China Brief: ‘many of these same Chinese universities are simultaneously working with Russian entities on dual-use technologies’

Estonian Foreign Intelligence Service public report 2025 www.valisluureamet.ee/en.html

Former Senior Adviser for the Federal Reserve Indicted on Charges of Economic Espionage (31 Jan 2025) www.justice.gov/usao-dc/pr/f... John Harold Rogers, 63, was arrested on charges of conspiring to steal Federal Reserve trade secrets for the PRC. Indictment (.pdf) www.justice.gov/usao-dc/medi...

Elon Musk and his many conflicts of interest are dominating the top of the @nytimes.com home page and app right now. www.nytimes.com/2025/02/11/u...

The ‘Mosaic’ Method and the Value of CIA Names to U.S. Adversaries (10 February 2025) www.lawfaremedia.org/article/the-... Re: www.nytimes.com/2025/02/05/u...

Modern-Day Oracles or Bullshit Machines? Jevin West (@jevinwest.bsky.social) and I have spent the last eight months developing the course on large language models (LLMs) that we think every college freshman needs to take. thebullshitmachines.com

SCOOP: A US Treasury threat intelligence analysis has designated DOGE staff an ‘insider threat'. An internal email reviewed by WIRED calls DOGE staff's access to federal payments systems “the single biggest insider threat risk the Bureau of the Fiscal Service has ever faced.”

DOGE breach of US Treasury data may harm CIA intelligence assets, officials warn (8 February 2025) intelnews.org/2025/02/08/0...

Reminder that the ICC is expecting sanctions from Trump which may cut off the Court‘s Microsoft Azure/365 access. Relying on US tech infrastructure is even more of a systemic risk for a big organisation now — even more the NSA access you have to typically assume. www.theguardian.com/law/2025/jan...

European prosecutors are examining how the Moscow office of an IT contractor helped to build the EU’s new electronic border system, which will establish the bloc’s biggest personal information database. www.ft.com/content/1541...

DOJ: Superseding Indictment Charges Chinese Nat’l In Relation To Alleged Plan To Steal Proprietary AI Technology (4 Feb 2025) www.justice.gov/usao-ndca/pr... Re: former Google employee Linwei “Leon” Ding (38), originally indicted in March 2024. New indictment (.pdf) www.justice.gov/usao-ndca/me...

Cyber Threat Intelligence meets the Analytic Tradecraft (Dec 2024) doi.org/10.1145/3701... Open Access 'we present [a] framework aiming at [how] the quality of CTI can be improved through such a combination of traditional intelligence analysis and CTI' In ACM Trans. on Privacy and Security 28:1.

Finnish Military Intelligence Review 2025 (7.5MB .pdf, January 2025, 48 pages) puolustusvoimat.fi/documents/19... "[...] This third published [review] describes Finland’s military operating environment & developments in that environment, as well as [the] Finnish Defence Intelligence (FDI). [...]"

Executive Order to the State Department Sideswipes Freedom Tools, Threatens Censorship Resistance, Privacy, and Anonymity of Millions www.eff.org/deeplinks/20...

‘An investigation […] discovered that a software program known as “Avatar” or “Adalet” (Turkish for "justice"), exclusively designed for attorneys, was used by hundreds of lawyers, enabling unlawful access to the personal data of many citizens.’

"NATO is deploying eyes in the sky and on the Baltic Sea to protect vital cables." @apnews.com apnews.com/article/nato...

The Trump administration has requested all Democratic members of an independent board meant to keep tabs on U.S. government intelligence efforts to resign, three people familiar with the matter told Recorded Future News. https://therecord.media/trump-admin-tells-democrats-on-intel-oversight-board-t…

Bye Bye Big Tech blog.xot.nl/2025/01/22/b...

DHS has terminated the memberships of everyone on its advisory committees. This includes several cyber committees, like CISA's advisory panel and the Cyber Safety Review Board, which was investigating Salt Typhoon. That review is "dead," person familiar says. www.documentcloud.org/documents/25...

Philippines arrests Chinese national suspected of spying on critical infrastructure therecord.media/philippines-...

Accidents, not Russian sabotage, behind undersea cable damage, officials say www.washingtonpost.com/world/2025/0...

The spy in the age of AI. www.foreignaffairs.com/united-state...

NEW: The U.S., Greece, Poland, and other governments called for regulating and controlling proliferation of spyware at a United Nations Security Council meeting on Tuesday. This is first time commercial spyware is discussed at the UN Security Council.

AI Tools in Society: Impacts on Cognitive Offloading and the Future of Critical Thinking (2025) www.mdpi.com/2075-4698/15... “[…] findings revealed a significant negative correlation between frequent AI tool usage and critical thinking abilities […]” In Societies, Vol. 15, Issue 1. Open access.

🚨New open access article on "The Rise of Open-Source Intelligence" doi.org/10.1017/eis.... (1/2)

On September 25, 2024 NSA released under FOIA to me 49 declassified documents on cryptography policies, machines and programs dated from 1970s to 2000s, 3 formerly Secret, a few Confidential, most FOUO, some heavily redacted. cryptome.org/2024/12/NSA-... (50MB)

US Treasury sanctions Chinese company Integrity Technology Group for supporting Flax Typhoon cyber-espionage operations home.treasury.gov/news/press-r...

NEW: U.S. Treasury officials says it was hacked in early December by Chinese government hackers, which gained remote access to workstations and obtained unclassified documents. More + Treasury's letter to lawmakers, which we've published: techcrunch.com/2024/12/30/u...

Moscow’s efforts to weaken the United States and its allies will not subside after the fighting in Ukraine comes to an end, write Andrea Kendall-Taylor and @michaelkofman.bsky.social. “The stage is set for the West’s confrontation with Russia to intensify.”

Breaking NATO Radio Encryption: Cryptanalysis of HALFLOOP Block Ciphers media.ccc.de/v/38c3-break... < 38C3 talk by Lukas Stennes Two papers: 1. Breaking HALFLOOP-24 (Dansarie et al., 2022) doi.org/10.46586/tos... 2. Destroying HALFLOOP-24 (Leander et al., 2023) doi.org/10.46586/tos...

How one man became a Ukrainian traitor and Russian spy - www.reuters.com/world/europe...

Commercially sourced intelligence: friend or foe? (2024) doi.org/10.1080/0268... Authors: Vivi Ringnes Berrefjord (Norwegian Institute for Defence Studies) and Tor Erling Bjørstad (mnemonic AS). Published online 24 December 2024 in Intelligence and National Security (INS). Open access.

California Political Operative Arrested on Complaint Alleging He Acted as Illegal Agent of PRC (19 Dec 2024) www.justice.gov/opa/pr/calif... Yaoning “Mike” Sun, 64, “served as the campaign manager & close personal confidante for [local] politician”. Complaint (.pdf) www.justice.gov/opa/media/13...

On Musk's X, my posts about my project, Disinfo Resilience Network (focused on countering foreign interference by authoritarian regimes), were not only constantly decreased in visibility but also attacked by numerous scam profiles. www.gofundme.com/f/building-r...

This article documents some interesting tactics, including using the voices of prominent professors to create synthetic audio content, overlaid onto images and videos, in ways that suggest the professor and their academic institution have created/endorsed the message.

U.S. Charges Dual Russian And Israeli National As Developer Of Lockbit Ransomware Group (20 December 2024) www.justice.gov/usao-nj/pr/u... Re: Rostislav Panev, 51. Complaint (0.9MB .pdf, 48 pages) www.justice.gov/usao-nj/medi...

List of 16 natural persons and three legal persons added to EU sanction list on Monday over involvement in Russia’s hybrid activities, among which current and former GRU and FSB officers: As PDF: eur-lex.europa.eu/legal-conten... As HTML (not mobile-friendly): eur-lex.europa.eu/legal-conten...