Daniel Gordon
@validhorizon.bsky.social
Thought Trailer, Cyber Threat Intel, DFIR. He/Him. Bucketing, sharing, and bacon-saving as a service. https://validhorizon.medium.com/
The bypassed security feature is control over your device.
February 3, 2026 at 12:41 PM
The bypassed security feature is control over your device.
Sounds like it’s time to start up your North Korean laptop farm
February 2, 2026 at 9:47 PM
Sounds like it’s time to start up your North Korean laptop farm
Backdoor apparently delivered by the Notepad++ activity and attribution to LotusBlossom aka APT30 or “Raspberry Typhoon” in case people were thinking about what would happen if it was conducted by a slushy.
www.rapid7.com/blog/post/tr...
www.rapid7.com/blog/post/tr...
The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit
Rapid7 Labs, together with the Rapid7 MDR team, has uncovered a sophisticated campaign attributed to the Chinese APT group Lotus Blossom.
www.rapid7.com
February 2, 2026 at 4:49 PM
Backdoor apparently delivered by the Notepad++ activity and attribution to LotusBlossom aka APT30 or “Raspberry Typhoon” in case people were thinking about what would happen if it was conducted by a slushy.
www.rapid7.com/blog/post/tr...
www.rapid7.com/blog/post/tr...
Targeted activity despite the widespread potential access from Notepad++ huge user base.
Additional details:
community.notepad-plus-plus.org/topic/27212/...
doublepulsar.com/small-number...
Additional details:
community.notepad-plus-plus.org/topic/27212/...
doublepulsar.com/small-number...
February 2, 2026 at 1:14 PM
😂 This statement by Hitachi is really something. “Don’t pay attention to our devices shipping with a universal default password or that nobody in OT environments performs updates, this is definitely the customer’s fault!” bsky.app/profile/rago...
Hitachi Energy also released a statement, as their devices were targeted.
tl;dr; security settings were not configured properly
tl;dr; security settings were not configured properly
Hitachi Energy Publisher
publisher.hitachienergy.com
January 30, 2026 at 2:26 PM
😂 This statement by Hitachi is really something. “Don’t pay attention to our devices shipping with a universal default password or that nobody in OT environments performs updates, this is definitely the customer’s fault!” bsky.app/profile/rago...
#BREAKING #ESETresearch provides technical details on #DynoWiper, a data‑wiping malware used in a data‑destruction incident on December 29, 2025, affecting a company in Poland’s energy sector. www.welivesecurity.com/en/eset-rese... 1/5
www.welivesecurity.com
January 30, 2026 at 12:13 PM
I was just going to say “It depends” but this works
January 22, 2026 at 11:18 PM
I was just going to say “It depends” but this works