banner
LightNews
cyberscoop.bsky.social
CyberScoop
@cyberscoop.bsky.social
2K followers 21 following 1.4K posts
We report on news and events impacting technology and security. https://linkin.bio/cyberscoop/
linkin.bio
Posts Media Videos Starter Packs
Pinned
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · Feb 21
The CyberScoop editorial team is closely monitoring the federal government's activities and developments in cybersecurity. If you're interested in discussing what's happening across these areas, we have several reporters actively covering these topics who you can reach out to via Signal:
1 10 11
Reposted by CyberScoop
timstarks.bsky.social
Tim Starks @timstarks.bsky.social · 1d
Russian spyware ClayRat is spreading, evolving quickly, according to Zimperium cyberscoop.com/russian-spyw...
Russian spyware ClayRat is spreading, evolving quickly, according to Zimperium
A fast-spreading Android spyware is mushrooming across Russia, camouflaging itself as popular apps like TikTok or YouTube, researchers at Zimperium have revealed in a blog post.
cyberscoop.com
4 8
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 1d
The spyware poses as popular apps like TikTok, and may break free of Russian borders at some point, the researchers say. via @timstarks.bsky.social cyberscoop.com/russian-spyw...
Russian spyware ClayRat is spreading, evolving quickly, according to Zimperium
A fast-spreading Android spyware is mushrooming across Russia, camouflaging itself as popular apps like TikTok or YouTube, researchers at Zimperium have revealed in a blog post.
cyberscoop.com
1 3
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 1d
The bill likely won’t get far in a GOP-controlled Congress, but proponents described it as part of a broader effort to push back through constitutional institutions. via @derekbjohnson.bsky.social cyberscoop.com/dems-introdu...
Dems introduce bill to halt mass voter roll purges
The bill likely won’t get far in a GOP-controlled Congress, but proponents described it as part of a broader effort to push back through constitutional institutions.
cyberscoop.com
1
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 1d
Researchers said malicious activity dates back to early July and active exploitation was observed two months ago. via @mattkapko.com cyberscoop.com/oracle-custo...
Dozens of Oracle customers impacted by Clop data theft for extortion campaign
Researchers said malicious activity dates back to early July and active exploitation was observed two months ago.
cyberscoop.com
2 1
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 1d
The security vendor’s customers have confronted a barrage of actively exploited defects since 2021. The brute-force attack on a company-controlled system underscores broader security pitfalls are afoot. via @mattkapko.com cyberscoop.com/sonicwall-cu...
SonicWall admits attacker accessed all customer firewall configurations stored on cloud portal
The security vendor’s customers have confronted a barrage of actively exploited defects since 2021. The brute-force attack on a company-controlled system underscores broader security pitfalls are afoo...
cyberscoop.com
1 1
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 1d
A new bill renames the Cybersecurity Information Sharing Act of 2015 and would make its legal protections retroactive after its lapse. via @timstarks.bsky.social cyberscoop.com/gary-peters-...
Sen. Peters tries another approach to extend expired cyber threat information-sharing law
A new bill renames the Cybersecurity Information Sharing Act of 2015 and would make its legal protections retroactive after its lapse.
cyberscoop.com
1 2
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 2d
In a court filing, the groups argued court action was needed to prevent permanent privacy harm from the government’s “illegal and secretive consolidation of millions of Americans’ sensitive personal data.” via @derekbjohnson.bsky.social cyberscoop.com/voting-right...
Voting groups ask court for immediate halt to Trump admin’s SAVE database overhaul
In a court filing, the groups argued court action was needed to prevent permanent privacy harm from the government’s “illegal and secretive consolidation of millions of Americans’ sensitive personal data.”
cyberscoop.com
1
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 3d
Despite fears from privacy advocates, officials from the ruling party said mass-scanning proposals like Chat Control should be “taboo in a constitutional state.” via @derekbjohnson.bsky.social cyberscoop.com/germany-oppo...
German government says it will oppose EU mass-scanning proposal
Despite fears from privacy advocates, officials from the ruling party said mass-scanning proposals like Chat Control should be “taboo in a constitutional state.”
cyberscoop.com
1 2
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 3d
Multiple researchers and CISA have confirmed active exploitation of the maximum-severity defect. Fortra, the company behind the file-transfer service, remains silent. via @mattkapko.com cyberscoop.com/microsoft-go...
Microsoft pins GoAnywhere zero-day attacks to ransomware affiliate Storm-1175
Multiple researchers and CISA have confirmed active exploitation of the maximum-severity defect. Fortra, the company behind the file-transfer service, remains silent.
cyberscoop.com
2 2
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 3d
A new report from the leader in the generative AI boom says AI is being used in existing workflows, instead of to create new ones dedicated to malicious hacking. via @derekbjohnson.bsky.social cyberscoop.com/openai-threa...
OpenAI: Threat actors use us to be efficient, not make new tools
A new report from the leader in the generative AI boom says AI is being used in existing workflows, instead of to create new ones dedicated to malicious hacking.
cyberscoop.com
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 4d
The three lawmakers said the reported lifting of a stop-work order on a $2 million Paragon Solutions contract threatens Americans’ fundamental rights. via @timstarks.bsky.social www.youtube.com/watch?v=AdQg... | cyberscoop.com/house-dems-s...
House Dems seek info about ICE spyware contract, wary of potential abuses
YouTube video by CyberScoop
www.youtube.com
1 3
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 4d
The notorious ransomware group exploited multiple vulnerabilities, including a zero-day, for at least eight weeks before alleged victims received extortion demands. via @mattkapko.com cyberscoop.com/oracle-zero-...
Oracle zero-day defect amplifies panic over Clop’s data theft attack spree
The notorious ransomware group exploited multiple vulnerabilities, including a zero-day, for at least eight weeks before alleged victims received extortion demands.
cyberscoop.com
2 6
Reposted by CyberScoop
ransomwaresommelier.com
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 8d
Great catch from @mattkapko.com, especially because I hear copycats are already being sent out.

Here is the email Clop attackers sent to Oracle customers

via @cyberscoop.bsky.social
Here is the email Clop attackers sent to Oracle customers
The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.
cyberscoop.com
2 3
Reposted by CyberScoop
aiscoop.bsky.social
AIScoop @aiscoop.bsky.social · 5d
Israeli-backed social media accounts pushed anti-government propaganda — including deepfakes and AI-generated content — to Iranians as real-world attacks were happening, with the goal of fomenting revolt, according to Citizen lab.

@cyberscoop.bsky.social 📰➡️ cyberscoop.com/citizen-lab-...
1
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 5d
The three lawmakers said the reported lifting of a stop-work order on a $2 million Paragon Solutions contract threatens Americans’ fundamental rights. via @timstarks.bsky.social cyberscoop.com/house-dems-s...
House Dems seek info about ICE spyware contract, wary of potential abuses
Three House Democrats questioned the Department of Homeland Security on Monday over a reported Immigration and Customs Enforcement contract with a spyware provider that they warn potentially “threaten...
cyberscoop.com
3
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 5d
The EU will vote Oct. 14 on a proposal that would use AI or humans to detect child sexual abuse material on their devices. via @derekbjohnson.bsky.social cyberscoop.com/potential-eu...
Potential EU law sparks global concerns over end-to-end encryption for messaging apps
The EU will vote Oct. 14 on a proposal that would use AI or humans to detect child sexual abuse material on their devices.
cyberscoop.com
1
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 5d
Okta thwarted the supply-chain attack with security controls it had in place. Zscaler did not. Their experiences provide insights into the root of a much broader problem. via @mattkapko.com cyberscoop.com/okta-zscaler...
Security leaders at Okta and Zscaler share lessons from Salesloft Drift attacks
Okta thwarted the supply-chain attack with security controls it had in place. Zscaler did not. Their experiences provide insights into the root of a much broader problem.
cyberscoop.com
1 7 8
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 6d
The group leveraged dozens of social media accounts and “routinely used” AI-generated imagery and video to stoke unrest among Iran’s population, according to Citizen Lab. via @derekbjohnson.bsky.social www.youtube.com/watch?v=4rk1... | cyberscoop.com/citizen-lab-...
Researchers say Israeli government likely behind AI-generated disinfo campaign in Iran
YouTube video by CyberScoop
www.youtube.com
2
Reposted by CyberScoop
defensescoop.bsky.social
DefenseScoop @defensescoop.bsky.social · 8d
The changes are to be “implemented expeditiously,” per Defense Secretary Pete Hegseth’s directive. defensescoop.com/2025/10/03/d...
DOD to cut back on mandatory cybersecurity training
Defense Secretary Pete Hegseth issued a new edict this week to relax the mandatory frequency for cybersecurity training at DOD.
defensescoop.com
1 5 8
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 8d
The Administrative Office of the United States Courts denied ignoring expert advice in a letter to Sen. Ron Wyden, D-Ore., who blasted Chief Justice Roberts in a response statement. via @timstarks.bsky.social cyberscoop.com/federal-judi...
Federal judiciary touts cybersecurity work in wake of latest major breach
Federal courts are upgrading their cybersecurity on a number of fronts, but multifactor authentication for the system that gives the public access to court data poses “unique challenges.”
cyberscoop.com
1 3
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 8d
The group leveraged dozens of social media accounts and “routinely used” AI-generated imagery and video to stoke unrest among Iran’s population, according to Citizen Lab. via @derekbjohnson.bsky.social cyberscoop.com/citizen-lab-...
Researchers say Israeli government likely behind AI-generated disinfo campaign in Iran
The group leveraged dozens of social media accounts and “routinely used” AI-generated imagery and video to stoke unrest among Iran’s population, according to Citizen Lab.
cyberscoop.com
2 1
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 8d
The open-source software company said exposure is limited to consulting engagements, adding that it hasn’t found evidence of personal or sensitive data theft. via @mattkapko.com cyberscoop.com/red-hat-gitl...
Red Hat confirms breach of GitLab instance, which stored company’s consulting data
The open-source software company said exposure is limited to consulting engagements, adding that it hasn’t found evidence of personal or sensitive data theft.
cyberscoop.com
2 2
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 8d
The campaign involves apps posing as Signal and the defunct ToTok, according to ESET. via @timstarks.bsky.social cyberscoop.com/android-spyw...
Android spyware disguised as legitimate messaging apps targets UAE victims, researchers reveal
Researchers have found two Android spyware families masquerading as messaging apps Signal and ToTok, apparently targeting residents of the United Arab Emirates.
cyberscoop.com
2 2
cyberscoop.bsky.social
CyberScoop @cyberscoop.bsky.social · 8d
Okta Threat Intelligence uncovered a large-scale and sustained operation, reflecting the North Korean regime’s pursuit of any opportunity that allows for remote employment. via @mattkapko.com cyberscoop.com/north-korea-...
North Korea IT worker scheme swells beyond US companies
Okta Threat Intelligence uncovered a large-scale and sustained operation, reflecting the North Korean regime’s pursuit of any opportunity that allows for remote employment.
cyberscoop.com
3 5
Reposted by CyberScoop
gregotto.bsky.social
Greg Otto @gregotto.bsky.social · 9d
NEW: @mattkapko.com got his hands on the email being sent to oracle customers. Lots of broken english and pressure applied to pay up or see data leaked cyberscoop.com/extortion-em...
Here is the email Clop attackers sent to Oracle customers
The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.
cyberscoop.com
2 3