Lightnews — Scholar-powered news

CyberScoop @cyberscoop.bsky.social · 13h

Despite fears from privacy advocates, officials from the ruling party said mass-scanning proposals like Chat Control should be “taboo in a constitutional state.” via @derekbjohnson.bsky.social cyberscoop.com/germany-oppo...

German government says it will oppose EU mass-scanning proposal

Despite fears from privacy advocates, officials from the ruling party said mass-scanning proposals like Chat Control should be “taboo in a constitutional state.”

cyberscoop.com

1

CyberScoop @cyberscoop.bsky.social · 15h

Multiple researchers and CISA have confirmed active exploitation of the maximum-severity defect. Fortra, the company behind the file-transfer service, remains silent. via @mattkapko.com cyberscoop.com/microsoft-go...

Microsoft pins GoAnywhere zero-day attacks to ransomware affiliate Storm-1175

Multiple researchers and CISA have confirmed active exploitation of the maximum-severity defect. Fortra, the company behind the file-transfer service, remains silent.

cyberscoop.com

1

CyberScoop @cyberscoop.bsky.social · 15h

A new report from the leader in the generative AI boom says AI is being used in existing workflows, instead of to create new ones dedicated to malicious hacking. via @derekbjohnson.bsky.social cyberscoop.com/openai-threa...

OpenAI: Threat actors use us to be efficient, not make new tools

A new report from the leader in the generative AI boom says AI is being used in existing workflows, instead of to create new ones dedicated to malicious hacking.

cyberscoop.com

CyberScoop @cyberscoop.bsky.social · 2d

The three lawmakers said the reported lifting of a stop-work order on a $2 million Paragon Solutions contract threatens Americans’ fundamental rights. via @timstarks.bsky.social www.youtube.com/watch?v=AdQg... | cyberscoop.com/house-dems-s...

House Dems seek info about ICE spyware contract, wary of potential abuses

YouTube video by CyberScoop

www.youtube.com

1 3

CyberScoop @cyberscoop.bsky.social · 2d

The notorious ransomware group exploited multiple vulnerabilities, including a zero-day, for at least eight weeks before alleged victims received extortion demands. via @mattkapko.com cyberscoop.com/oracle-zero-...

Oracle zero-day defect amplifies panic over Clop’s data theft attack spree

The notorious ransomware group exploited multiple vulnerabilities, including a zero-day, for at least eight weeks before alleged victims received extortion demands.

cyberscoop.com

2 6

Reposted by CyberScoop

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 5d

Great catch from @mattkapko.com, especially because I hear copycats are already being sent out.

Here is the email Clop attackers sent to Oracle customers

via @cyberscoop.bsky.social

Here is the email Clop attackers sent to Oracle customers

The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.

cyberscoop.com

2 3

Reposted by CyberScoop

AIScoop @aiscoop.bsky.social · 2d

Israeli-backed social media accounts pushed anti-government propaganda — including deepfakes and AI-generated content — to Iranians as real-world attacks were happening, with the goal of fomenting revolt, according to Citizen lab.

@cyberscoop.bsky.social 📰➡️ cyberscoop.com/citizen-lab-...

1

CyberScoop @cyberscoop.bsky.social · 2d

The three lawmakers said the reported lifting of a stop-work order on a $2 million Paragon Solutions contract threatens Americans’ fundamental rights. via @timstarks.bsky.social cyberscoop.com/house-dems-s...

House Dems seek info about ICE spyware contract, wary of potential abuses

Three House Democrats questioned the Department of Homeland Security on Monday over a reported Immigration and Customs Enforcement contract with a spyware provider that they warn potentially “threaten...

cyberscoop.com

3

CyberScoop @cyberscoop.bsky.social · 2d

The EU will vote Oct. 14 on a proposal that would use AI or humans to detect child sexual abuse material on their devices. via @derekbjohnson.bsky.social cyberscoop.com/potential-eu...

Potential EU law sparks global concerns over end-to-end encryption for messaging apps

The EU will vote Oct. 14 on a proposal that would use AI or humans to detect child sexual abuse material on their devices.

cyberscoop.com

1

CyberScoop @cyberscoop.bsky.social · 2d

Okta thwarted the supply-chain attack with security controls it had in place. Zscaler did not. Their experiences provide insights into the root of a much broader problem. via @mattkapko.com cyberscoop.com/okta-zscaler...

Security leaders at Okta and Zscaler share lessons from Salesloft Drift attacks

Okta thwarted the supply-chain attack with security controls it had in place. Zscaler did not. Their experiences provide insights into the root of a much broader problem.

cyberscoop.com

1 7 8

CyberScoop @cyberscoop.bsky.social · 4d

The group leveraged dozens of social media accounts and “routinely used” AI-generated imagery and video to stoke unrest among Iran’s population, according to Citizen Lab. via @derekbjohnson.bsky.social www.youtube.com/watch?v=4rk1... | cyberscoop.com/citizen-lab-...

Researchers say Israeli government likely behind AI-generated disinfo campaign in Iran

YouTube video by CyberScoop

www.youtube.com

2

Reposted by CyberScoop

DefenseScoop @defensescoop.bsky.social · 5d

The changes are to be “implemented expeditiously,” per Defense Secretary Pete Hegseth’s directive. defensescoop.com/2025/10/03/d...

DOD to cut back on mandatory cybersecurity training

Defense Secretary Pete Hegseth issued a new edict this week to relax the mandatory frequency for cybersecurity training at DOD.

defensescoop.com

1 5 8

CyberScoop @cyberscoop.bsky.social · 5d

The Administrative Office of the United States Courts denied ignoring expert advice in a letter to Sen. Ron Wyden, D-Ore., who blasted Chief Justice Roberts in a response statement. via @timstarks.bsky.social cyberscoop.com/federal-judi...

Federal judiciary touts cybersecurity work in wake of latest major breach

Federal courts are upgrading their cybersecurity on a number of fronts, but multifactor authentication for the system that gives the public access to court data poses “unique challenges.”

cyberscoop.com

1 3

CyberScoop @cyberscoop.bsky.social · 5d

The group leveraged dozens of social media accounts and “routinely used” AI-generated imagery and video to stoke unrest among Iran’s population, according to Citizen Lab. via @derekbjohnson.bsky.social cyberscoop.com/citizen-lab-...

Researchers say Israeli government likely behind AI-generated disinfo campaign in Iran

The group leveraged dozens of social media accounts and “routinely used” AI-generated imagery and video to stoke unrest among Iran’s population, according to Citizen Lab.

cyberscoop.com

2 1

CyberScoop @cyberscoop.bsky.social · 5d

The open-source software company said exposure is limited to consulting engagements, adding that it hasn’t found evidence of personal or sensitive data theft. via @mattkapko.com cyberscoop.com/red-hat-gitl...

Red Hat confirms breach of GitLab instance, which stored company’s consulting data

The open-source software company said exposure is limited to consulting engagements, adding that it hasn’t found evidence of personal or sensitive data theft.

cyberscoop.com

2 2

CyberScoop @cyberscoop.bsky.social · 6d

The campaign involves apps posing as Signal and the defunct ToTok, according to ESET. via @timstarks.bsky.social cyberscoop.com/android-spyw...

Android spyware disguised as legitimate messaging apps targets UAE victims, researchers reveal

Researchers have found two Android spyware families masquerading as messaging apps Signal and ToTok, apparently targeting residents of the United Arab Emirates.

cyberscoop.com

2 2

CyberScoop @cyberscoop.bsky.social · 6d

Okta Threat Intelligence uncovered a large-scale and sustained operation, reflecting the North Korean regime’s pursuit of any opportunity that allows for remote employment. via @mattkapko.com cyberscoop.com/north-korea-...

North Korea IT worker scheme swells beyond US companies

Okta Threat Intelligence uncovered a large-scale and sustained operation, reflecting the North Korean regime’s pursuit of any opportunity that allows for remote employment.

cyberscoop.com

3 5

Reposted by CyberScoop

Greg Otto @gregotto.bsky.social · 6d

NEW: @mattkapko.com got his hands on the email being sent to oracle customers. Lots of broken english and pressure applied to pay up or see data leaked cyberscoop.com/extortion-em...

Here is the email Clop attackers sent to Oracle customers

The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.

cyberscoop.com

2 3

CyberScoop @cyberscoop.bsky.social · 6d

The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment. via @mattkapko.com cyberscoop.com/extortion-em...

Here is the email Clop attackers sent to Oracle customers

The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.

cyberscoop.com

1 2

CyberScoop @cyberscoop.bsky.social · 6d

Researchers tell CyberScoop that notorious ransomware group Clop may be behind the email barrage. via @mattkapko.com cyberscoop.com/clop-claims-...

Oracle customers being bombarded with emails claiming widespread data theft

Researchers tell CyberScoop that notorious ransomware group Clop may be behind the email barrage.

cyberscoop.com

1 3 3

Reposted by CyberScoop

Greg Otto @gregotto.bsky.social · 7d

CYBERSCOOP AFTER DARK: Attackers appearing to be aligned with the Clop ransomware group have sent emails to Oracle customers seeking extortion payments, claiming they stole data from the tech giant’s E-Business Suite. Early signs point to it being legit cyberscoop.com/clop-claims-...

Oracle customers being bombarded with emails claiming widespread data theft

Researchers tell CyberScoop that notorious ransomware group Clop may be behind the email barrage.

cyberscoop.com

2 6

Reposted by CyberScoop

Matt Kapko @mattkapko.com · 7d

New from me. CyberScoop after dark. cyberscoop.com/clop-claims-...

Oracle customers being bombarded with emails claiming widespread data theft

Researchers tell CyberScoop that notorious ransomware group Clop may be behind the email barrage.

cyberscoop.com

2 3

Reposted by CyberScoop

Greg Otto @gregotto.bsky.social · 6d

For those who missed it last night: attackers appearing to be aligned with Clop have sent emails to Oracle customers seeking extortion payments, claiming they stole data from the tech giant’s E-Business Suite, according to researchers who spoke with CyberScoop. cyberscoop.com/clop-claims-...

Oracle customers being bombarded with emails claiming widespread data theft

Researchers tell CyberScoop that notorious ransomware group Clop may be behind the email barrage.

cyberscoop.com

1 4 2

CyberScoop @cyberscoop.bsky.social · 7d

Sen. Marsha Blackburn did not provide a timeline for any formal rollout by the administration, and also pointed to her proposed bill with Michigan Sen. Gary Peters. via @derekbjohnson.bsky.social cyberscoop.com/blackburn-co...

GOP senator confirms pending White House quantum push, touts legislative alternatives

Sen. Marsha Blackburn did not provide a timeline for any formal rollout by the administration, and also pointed to her proposed bill with Michigan Sen. Gary Peters.

cyberscoop.com

1 1

Reposted by CyberScoop

AIScoop @aiscoop.bsky.social · 7d

The latest version of Claude has many cybersecurity improvements. 🔒

Oh, and it's also increasingly self-aware. 👀

Learn more from @cyberscoop.bsky.social @derekbjohnson.bsky.social 📰 ➡️ cyberscoop.com/anthrophic-s...

2