the grugq's newsletter

-

This is a very good read, easy with google translate.

Twitter avatar for @anurlan
Nurlan Aliyev @anurlan
RBK's report on how various 🇷🇺institutions, including Wagner, are recruiting volunteers to take part in the war in Ukraine; how they are trained; how much they pay and what tasks they focus on rbc.ru/politics/09/07…
8:31 AM ∙ Jul 11, 2022
4Retweets

-

Twitter avatar for @mrkoot
Matthijs R. Koot @mrkoot
Unmasked: Who were Putin's spies in the Kingdom of Belgium? (Jul 11) euobserver.com/world/155468

Identities of 21 Russian diplomats expelled by Belgium in April leaked to @euobs (see pic). Report by Andrew Rettman, supported by @journalismfund.

Mirror: hxxps://archive.ph/q1gom

Image
9:21 AM ∙ Jul 11, 2022
6Retweets

-

Twitter avatar for @JohnBlaxland1
John Blaxland @JohnBlaxland1
Evidently not just in Australia: "China's global espionage network: controversy around telco Huawei has shone a spotlight on the murky world of Chinese espionage, agent-recruitment & an ambitious programme of extending its influence across the globe"
www-bbc-com.cdn.ampproject.orgThe spying game: China’s global network - BBC NewsThe latest controversy around Huawei has shone a spotlight on the murky world of Chinese espionage.
9:47 AM ∙ Jul 10, 2022
32Retweets

-

Twitter avatar for @jacques_chester
Jacques Chester @jacques_chester
If you’re wondering why PyPI, npm and RubyGems are slow walking the rollout of required MFA, it’s for two reasons. One is ordinary caution, we want to be sure it works smoothly before progressing to larger cohorts. The second and much bigger reason is support burden.
11:22 PM ∙ Jul 10, 2022
17Retweets

-

Twitter avatar for @evacide
Eva @evacide
L3 Harris' deal to buy NSO Group has fallen apart in the face of opposition from the White House. Oh well. kermitdrinkingtea.gif

theguardian.comUS defence firm ends talks to buy NSO Group’s surveillance technologyWhite House opposition on security grounds seen as fatal obstacle to L3 Harris proceeding with purchase
1:33 AM ∙ Jul 11, 2022
10Retweets
Twitter avatar for @nytimes
The New York Times @nytimes
A team of executives from an American military contractor quietly visited Israel numerous times in recent months to try to carry out a bold but risky plan: purchasing NSO Group, the Israeli spyware company blacklisted by the Biden administration.
nyti.msDefense Firm Said U.S. Spies Backed Its Bid for Pegasus Spyware MakerThe American contractor L3 Harris is said to have cited support from intelligence officials for its effort to acquire NSO, the Israeli spyware company blacklisted by the Biden administration.
9:25 PM ∙ Jul 10, 2022
94Retweets

-

Twitter avatar for @sweetraccoons
Arai @sweetraccoons
Image
5:42 PM ∙ Jul 10, 2022
4,505Retweets

-

Twitter avatar for @snlyngaas
Sean Lyngaas @snlyngaas
New —> US officials say 1000s of North Koreans are landing jobs at tech firms overseas, offering a critical source of funding for DPRK weapons programs. I spoke to 1 crypto entrepreneur who, the FBI told him, had a North Korean on the payroll for months.
cnn.comHere’s how North Korean operatives are trying to infiltrate US crypto firmsDevin, the founder of a cryptocurrency startup based in San Francisco, woke up one day in February to the most bizarre phone call of his life.
12:40 PM ∙ Jul 10, 2022
204Retweets

-

Twitter avatar for @antitree
Mark Manning @antitree
A follow up blog post from the @sysdig Kubecon talk. More ways to pwn Kubernetes via a publicly exposed service. This time it's Prometheus.

sysdig.comHow attackers use exposed Prometheus server to exploit Kubernetes clusters – SysdigKubernetes and Prometheus advise problems with exposing your data to the world, but regardless, exposed Prometheus are still widespread.
5:28 PM ∙ Jul 8, 2022
15Retweets

-

Twitter avatar for @grudkev
Gennady Rudkevich @grudkev
There's a disconnect between the ostensibly high public support for the war and Russia's inability to recruit troops to fight it. The situation in Russia is much closer to the US in 2005 than the US after 9/11. Clear implications for actual public support.
nytimes.comDesperate for Recruits, Russia Launches a ‘Stealth Mobilization’Leery of a national draft for the Ukraine war, the Kremlin is offering cash bonuses and employing strong arm tactics.
6:37 PM ∙ Jul 10, 2022
11Retweets

-

Twitter avatar for @roxiqt
Roxi Horror 💀🌸 @roxiqt
My body is not a temple, it is a 7-Eleven and you wouldn't leave a baby in a 7-Eleven
7:07 PM ∙ Jul 3, 2022
6,166Retweets

-

Twitter avatar for @JenMsft
Jen Gentleman 🌺 @JenMsft
"You've worked in tech for more than a decade" I whisper to myself as I flip the USB around for the third time trying to get it to go in
1:38 PM ∙ Jul 10, 2022
102Retweets

-

Twitter avatar for @DmitriyMelikov
Dmitry Melikov @DmitriyMelikov
Apparently this is the very first sample (#Follina) found in the wild. (CVE-2022-30190). It ended up in InQuest Labs. 2022-04-08 12:38:14

labs.inquest.netInQuest Labs - InQuest.netInQuest Labs is an open API and interactive research portal designed to empower individual analysts with the tools and data requisite to discover and publish new and novel threats.
9:02 PM ∙ Jul 10, 2022
11Retweets

-

Twitter avatar for @EverestToday
Everest Today @EverestToday
Check out this incredible avalanche footage from the Tian Shan mountains in Kyrgyzstan. Luckily, everyone survived. Account: cutt.ly/fLkOldS
3:22 PM ∙ Jul 10, 2022
23,321Retweets

-

Twitter avatar for @ElsaWainblum
Elsa Wainblum @ElsaWainblum
Avoid phishing scams by not opening your emails
10:48 PM ∙ Jul 8, 2022
288Retweets

The Info Op is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.

Don't miss what's next. Subscribe to the grugq's newsletter:
Find the grugq's newsletter elsewhere: Twitter