Lightnews — Scholar-powered news

Chris Krebs @thekrebscycle.bsky.social · May 21

Just the Russian GRU doing Russian GRU type stuff. Kudos to all agencies (USG and allies) for getting this out.

www.cisa.gov/news-events/...

Russian GRU Targeting Western Logistics Entities and Technology Companies | CISA

Executives and network defenders should recognize the elevated threat of unit 26165 targeting, increase monitoring and threat hunting for known TTPs and IOCs, and posture network defenses with a presu...

www.cisa.gov

5 28 86

Reposted by Chris Krebs

Joseph Menn @joemenn.bsky.social · May 3

Hardcoded credentials in the Signal archiving tool used by the White House is a five-alarm security dumpster fire.

Micah Lee @micahflee.com · May 3

The source code for the TM SGNL apps (basically a backdoored version of Signal used by Trump officials) is public! Since it's open source, I've pushed it to github for easier research micahflee.com/heres-the-so...

Here's the source code for the unofficial Signal app used by Trump officials

Yesterday, I published an analysis of what I could publicly find about TM SGNL, the obscure and unofficial Signal app used by Mike Waltz, and presumably also by Pete Hegseth, JD Vance, Tulsi Gabbard, ...

micahflee.com

47 570 1.8K

Chris Krebs @thekrebscycle.bsky.social · May 2

Put it in the Louvre

10 42 240

Reposted by Chris Krebs

Martin Matishak @martinmatishak.bsky.social · Apr 29

"Make CISA great again."

@thekrebscycle.bsky.social uncorks at #RSAC

On @therecordmedia.bsky.social

therecord.media/krebs-outrag...

Krebs: People should be ‘outraged’ at efforts to shrink federal cyber efforts

At the RSA Conference, former CISA chief Chris Krebs said recent efforts by China-linked hacking groups makes it more important than ever to grow the federal cyber workforce.

therecord.media

4 60 190

Chris Krebs @thekrebscycle.bsky.social · Apr 26

25 67 310

Chris Krebs @thekrebscycle.bsky.social · Apr 26

“I dOn’T ThInK I eVeR MeT hIm”

63 370 1.9K

Reposted by Chris Krebs

judgeluttig.bsky.social @judgeluttig.bsky.social · Apr 17

Chris Krebs is America’s next profile in courage. The entire nation should support this honorable and courageous fellow citizen.

210 3.5K 17K

Reposted by Chris Krebs

Cristin Flynn Goodwin @cristin.bsky.social · Feb 28

Let the cybering begin! Happy to see my friend @thekrebscycle.bsky.social here @cyberlawcon.bsky.social and talking about not only what matters in cyber, but why cyber lawyering matters too.

Chris Krebs at the podium with a sign that reads “Cyberlawcon”

5 29 160

Reposted by Chris Krebs

SentinelOne @sentinelone.com · Feb 13

🗼 🇨🇳 "The Chinese are preparing for war. Are we?" SentinelOne’s @thekrebscycle.bsky.social weighs in on how China's access to the cranes at key U.S. ports could impact homeland security and even the U.S. military.

📺 To learn more, watch the full video clip: s1.ai/CBS-Cranes

6 47 120

Chris Krebs @thekrebscycle.bsky.social · Jan 19

RIP Dry January. HTTC

14 1 140

Chris Krebs @thekrebscycle.bsky.social · Jan 16

I would never admit this to my neighbors. We’d have to move.

9

Chris Krebs @thekrebscycle.bsky.social · Jan 15

peter griffin from family guy is sitting at a table with a plate of food

ALT: peter griffin from family guy is sitting at a table with a plate of food

media.tenor.com

5

Chris Krebs @thekrebscycle.bsky.social · Jan 15

Grumble grumble

12 120

Chris Krebs @thekrebscycle.bsky.social · Jan 15

It finally happened. In a recent move I threw out my "box o' cables." I thought, "nah, I'll never need those old things, I'm all modernized and stuff." Welp, today I needed a VGA cord to hook up an old monitor to an old DVR.....

a woman in a hijab says shame in front of a crowd of people

ALT: a woman in a hijab says shame in front of a crowd of people

media.tenor.com

47 11 380

Chris Krebs @thekrebscycle.bsky.social · Jan 14

4 7 78

Reposted by Chris Krebs

Techmeme @techmeme.com · Jan 14

The US says the FBI hacked ~4.2K devices in the US to delete PlugX, malware used by China-backed hackers since 2014, after obtaining warrants in August 2024 (Carly Page/TechCrunch)

Main Link | Techmeme Permalink

4 15 53

Chris Krebs @thekrebscycle.bsky.social · Jan 10

This never happened. Nope. Never.

13 3 140

Chris Krebs @thekrebscycle.bsky.social · Dec 19

Had a blast in Sydney, AUS recording a live "Wide World of Cyber" podcast w/ @patrick.risky.biz. Awesome crowd, timely content, & even better weather (early summer in Sydney ain't bad!). Sadly, no Kangaroo 🦘 sightings, but the biggest bats🦇I've ever seen! 10/10, would do again!

SentinelOne @sentinelone.com · Dec 19

🇦🇺 SentinelOne's @thekrebscycle.bsky.social and @patrick.risky.biz dive deep into China's cyber activities, such as its Salt Typhoon intrusions into American telcos and Volt Typhoon prepositioning within critical infrastructure. What's coming in the next 12-24 months?

👉Watch more: s1.ai/WWC-ccp

3 3 44

Reposted by Chris Krebs

SentinelOne @sentinelone.com · Dec 19

🇦🇺 SentinelOne's @thekrebscycle.bsky.social and @patrick.risky.biz dive deep into China's cyber activities, such as its Salt Typhoon intrusions into American telcos and Volt Typhoon prepositioning within critical infrastructure. What's coming in the next 12-24 months?

👉Watch more: s1.ai/WWC-ccp

1 11 26

Reposted by Chris Krebs

Ciaran Martin @ciaranm.bsky.social · Dec 18

Guess you could argue that volt only matters if activated whereas salt matters right now (God these terms are maddening)

Either way, I still think that focussing on ripping out whatever remains of Chinese infrastructure as the top priority response to salt flies in the face of the evidence about it

2 19

Reposted by Chris Krebs

Ciaran Martin @ciaranm.bsky.social · Dec 18

Also think salt, whilst important, is spying. Volt is more strategically significant as it’s a precursor to the disruption of civilian CNI, so way more serious & unlike salt a major departure from (a) norms & (b) previous Chinese ops

1 3 16

Reposted by Chris Krebs

Ciaran Martin @ciaranm.bsky.social · Dec 18

Absolutely - it’s salt & the naming are silly & unhelpful (I also posted about that!).

I do wonder though if this is a distraction: afaik from the publicly available info Salt wasn’t primarily due to Chinese kit but weaknesses in US (& other western) built, US operated infrastructure 1/2

1 2 14

Chris Krebs @thekrebscycle.bsky.social · Dec 18

For the sake of the special relationship I’ll refrain.

3

Chris Krebs @thekrebscycle.bsky.social · Dec 18

I could make a British cuisine joke but I won’t.

1 2

Reposted by Chris Krebs

Rob Joyce @rgblights.bsky.social · Dec 18

US Government moving on China associated TP Link as another concern in our cyber supply chain. Growing to dominate the residential WiFi and router market, they are seen as vulnerable and a tool used in hacks. Similar to advisories on Huawei and Kaspersky, move away!
www.bloomberg.com/news/article...

US Probes China-Founded Router Maker on National Security Fears

The US government has launched a national-security investigation into TP-Link, the China-founded router maker whose equipment now dominates the American market and has been targeted in repeated Chines...

www.bloomberg.com

5 20 61