Lightnews — Scholar-powered news

jon greig @jgreig.bsky.social · 13d

Federal agencies have about 24 hours to patch two critical bugs in a line of Cisco firewalls

patch CVE-2025-30333 and CVE-2025-20362 asap

therecord.media/cisco-asa-fi...

Federal agencies given one day to patch exploited Cisco firewall bugs

Vulnerabilities in some models of Cisco's Adaptive Security Appliances (ASA) have been exploited by "an advanced threat actor," according to a warning from CISA.

therecord.media

3 5

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 16d

Future of CVE Program in limbo as CISA, board members debate path forward

via @jgreig.bsky.social & @therecordmedia.bsky.social

Future of CVE Program in limbo as CISA, board members debate path forward

Last week, CISA released two documents explaining their plans for the CVE Program — a critical cybersecurity resource used globally to catalog thousands of software and hardware bugs.

therecord.media

1 4 9

jon greig @jgreig.bsky.social · 14d

We are ruled by some of the dumbest people

"Senate aides echoed concerns that cybersecurity industry stakeholders have also shared with Axios: That Paul is conflating CISA the agency with the information-sharing program, which shares the same acronym."

www.axios.com/2025/09/19/c...

Rand Paul's last-minute demands push key cybersecurity law to the brink

Congressional aides say Paul hasn't been open to negotiations.

www.axios.com

1 2

jon greig @jgreig.bsky.social · 18d

The DOJ said Jubair and other Scattered Spider members extorted more than $115 million in ransoms from dozens of victims since 2022

He's also allegedly behind a breach of the U.S. federal court network

therecord.media/scattered-sp...

DOJ: Scattered Spider took $115 million in ransoms, breached a US court system

The Scattered Spider cybercriminal operation was able to extort at least $115 million in a three-year spree that also included the breach of a federal court network, U.S. authorities said in unsealing...

therecord.media

1 1

jon greig @jgreig.bsky.social · 18d

Debate is raging over the CVE Program as current board members and CISA vie for control following the April 2025 funding fiasco at DHS

therecord.media/cve-program-...

Future of CVE Program in limbo as CISA, board members debate path forward

Last week, CISA released two documents explaining their plans for the CVE Program — a critical cybersecurity resource used globally to catalog thousands of software and hardware bugs.

therecord.media

1

jon greig @jgreig.bsky.social · 21d

BreachForums founder and lead administrator Conor Fitzpatrick was given a new three-year prison sentence on Tuesday after a three-judge panel in January vacated a controversial district court decision that set him free after just 17 days in prison

therecord.media/conor-fitzpa...

BreachForums administrator given three-year prison stint after resentencing

Conor Fitzpatrick, aka BreachForums founder "pompompurin," will spend three years in prison after a court vacated an earlier decision to set him free on supervised release.

therecord.media

1

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · Aug 29

Ransomware gang takedowns causing explosion of new, smaller groups

via @jgreig.bsky.social & @therecordmedia.bsky.social

Ransomware gang takedowns causing explosion of new, smaller groups

The ransomware ecosystem continues to splinter, with new gangs proliferating in the wake of law enforcement takedowns that have scattered affiliates and prompted criminal rebrands.

therecord.media

4 10

Reposted by jon greig

Joe Warminsky @jwarminsky.bsky.social · Sep 3

Here's @jgreig.bsky.social explaining why a problem with one cloud platform is drawing the attention of other, more famous cloud platforms. If your thought is, "everyone appears to be a customer of everyone else," you might be right.

therecord.media/salesloft-dr...

Cloudflare, Zscaler among companies impacted by Salesloft Drift incident

Multiple tech firms have publicly detailed how incidents involving the third-party Salesloft Drift tool have exposed customer data.

therecord.media

2 4

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · Sep 4

Cloudflare, Zscaler among companies impacted by Salesloft Drift incident

via @jgreig.bsky.social & @therecordmedia.bsky.social

Cloudflare, Zscaler among companies impacted by Salesloft Drift incident

Multiple tech firms have publicly detailed how incidents involving the third-party Salesloft Drift tool have exposed customer data.

therecord.media

1 2

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 28d

😔 - thousands of people having data leaked almost isn’t a story any more.

Major blood center says thousands had data leaked in January ransomware attack

via @jgreig.bsky.social & @therecordmedia.bsky.social

Major blood center says thousands had data leaked in January ransomware attack

New York Blood Center submitted documents to regulators in Maine, Texas, New Hampshire and California that confirmed the cyberattack, which they said was first discovered on January 26.

therecord.media

1 4 8

Reposted by jon greig

Alexander Martin @alexmartin.bsky.social · 28d

The SwissBorg platform said about $41 million worth of cryptocurrency was stolen during a cyber incident affecting a partner company this week. In an update on Tuesday, the company pledged to make all affected customers whole and said it is still investigating the incident.

✍️ @jgreig.bsky.social

European crypto platform SwissBorg to reimburse users after $41 million theft

Nearly 200,000 Solana coins were stolen from SwissBorg, or about 2% of its assets, according to the platform's CEO. The company pledged to pay users back.

therecord.media

4 2

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 28d

Confession: I can’t hear LockerGogo without hearing Lady Gaga, I guess I don’t have a poker face about it.

Ukrainian national charged with helping run LockerGoga, MegaCortex and Nefilim ransomware

Via @jgreig.bsky.social & @therecordmedia.bsky.social

Ukrainian national charged with helping run LockerGoga, MegaCortex and Nefilim ransomware

Volodymyr Tymoshchuk, currently a fugitive, was an administrator for multiple ransomware strains, including LockerGoga, said U.S. prosecutors in unsealing an indictment against the Ukrainian national.

therecord.media

1 1 4

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 25d

Vietnam, Panama governments suffer incidents leaking citizen data

via @jgreig.bsky.social & @therecordmedia.bsky.social

Vietnam, Panama governments suffer incidents leaking citizen data

Vietnam's credit information bureau and Panama's finance ministry are each responding to apparent data breaches claimed by high-profile cybercrime groups.

therecord.media

2 5

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 22d

Uvalde school district says ransomware attack forcing closure until Thursday

via @jgreig.bsky.social @therecordmedia.bsky.social

Uvalde school district says ransomware attack forcing closure until Thursday

Public schools will be closed for several days in Uvalde, Texas, after a ransomware attack affected access to crucial systems such as phones, camera monitoring, visitor management and more.

therecord.media

1 5 8

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 22d

I mean…I guess better late than never?

I didn’t see anything new in the report, it it’s still useful to see the TTPs in one place.

FBI warns of Scattered Spider and ShinyHunters attacks on Salesforce platforms

Via @jgreig.bsky.social & @therecordmedia.bsky.social

FBI warns of Scattered Spider and ShinyHunters attacks on Salesforce platforms

The FBI released an urgent notice warning organizations about a campaign by several cybercriminal groups to compromise Salesforce platforms.

therecord.media

2 4

jon greig @jgreig.bsky.social · 26d

Government agencies in Vietnam and Panama were hit with cyberattacks this week, exposing troves of financial information from citizens of both countries

therecord.media/vietnam-cic-...

Vietnam, Panama governments suffer incidents leaking citizen data

Vietnam's credit information bureau and Panama's finance ministry are each responding to apparent data breaches claimed by high-profile cybercrime groups.

therecord.media

1

jon greig @jgreig.bsky.social · 29d

An indictment was unsealed on Tuesday charging Volodymyr Viktorovich Tymoshchuk for his alleged role as an administrator of several ransomware strains including LockerGoga, MegaCortex and Nefilim

therecord.media/lockergoga-m...

Ukrainian national charged with helping run LockerGoga, MegaCortex and Nefilim ransomware

Volodymyr Tymoshchuk, currently a fugitive, was an administrator for multiple ransomware strains, including LockerGoga, said U.S. prosecutors in unsealing an indictment against the Ukrainian national.

therecord.media

2

jon greig @jgreig.bsky.social · 29d

will be best remembered for turning corruption into an art. half of his deputies basically invented new ways to illegally monetize their posts

Reposted by jon greig

Jason Koebler @jasonkoebler.bsky.social · 29d

Talked to 23 people who suddenly have to pay huge tariffs or otherwise cannot get chainmail from Pakistan, yarn from France, retro computers from Japan, metal music from the Netherlands, DVDs from Germany, cosplay supplies, sunscreen, etc.

www.404media.co/its-just-a-m...

‘It's Just a Mess:' 23 People Explain How Tariffs Have Suddenly Ruined Their Hobby

"The real kick in the teeth is no matter how much manufacturing is brought back to the US these items will never be made in the USA. There is no upside."

www.404media.co

88 1.2K 2.9K

jon greig @jgreig.bsky.social · 29d

The Trump administration is abandoning any intention of breaking up the joint leadership of U.S. Cyber Command and the National Security Agency, US officials told @martinmatishak.bsky.social

therecord.media/cyber-comman...

Cyber Command, NSA to remain under single leader as officials shelve plan to end 'dual hat'

Sources tell Recorded Future News that top Trump administration officials have accepted that splitting up the leadership of U.S. Cyber Command and the National Security Agency would prove too lengthy ...

therecord.media

1 1 2

jon greig @jgreig.bsky.social · Sep 3

I spoke to @ransomwaresommelier.com, John Fokker and several other cyber experts about the scattering of the #ransomware landscape due to law enforcement takedowns and what that means for potential victims

therecord.media/ransomware-g...

Ransomware gang takedowns causing explosion of new, smaller groups

The ransomware ecosystem continues to splinter, with new gangs proliferating in the wake of law enforcement takedowns that have scattered affiliates and prompted criminal rebrands.

therecord.media

5 6

jon greig @jgreig.bsky.social · Sep 2

Pennsylvania's AG said his office is making progress on recovering from a ransomware attack discovered three weeks ago

Some judges are giving extensions to lawyers and prosecutors due to the cyberattack

therecord.media/pennsylvania...

Pennsylvania AG says recovery continues after office refused to pay ransomware gang

Pennsylvania Attorney General Dave Sunday said his office has made significant progress in recovering from an August 11 cyberattack, and it did not pay a ransom to the intruders.

therecord.media

jon greig @jgreig.bsky.social · Aug 28

CISA touted its work helping Nevada deal with the statewide impact of a probable ransomware attack following complaints last month from Arizona about a lack of assistance

therecord.media/cisa-steps-n...

CISA steps in to help Nevada state government recover from cyberattack

The Cybersecurity and Infrastructure Security Agency, FBI and others are supporting Nevada as it recovers from a cyberattack that has affected a range of state government services.

therecord.media

3 4

Reposted by jon greig

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · Aug 28

Microsoft warns of ransomware gang shifting to steal cloud data, lock companies out of systems

Via @jgreig.bsky.social & @therecordmedia.bsky.social

Microsoft warns of ransomware gang shifting to steal cloud data, lock companies out of systems

While ransomware gangs traditionally rely on deploying malware to encrypt files, a threat actor’s recent tactics show they no longer need to do that during attacks.

therecord.media

4 4

Reposted by jon greig

jamelle @jamellebouie.net · Aug 28

i find this image so fascinating. it is both a literal example of authoritarianism but also a second-hand reproduction of the aesthetics of other authoritarian states. it's like a simulacra of authoritarianism whose purpose is to attempt to make the simulacra real.

Michael Clemens @mclem.org · Aug 28

This is a real photograph of Washington, DC this week, where the United States president has ordered military occupation in peacetime, and ordered the display of colossal portraits of himself.

www.wsj.com/politics/pol...

Washington, DC under military occupation in last August 2025, with banners proclaiming the absolute power of the primus inter pares

800 6.3K 23K