CyberScoop
@cyberscoop.bsky.social
We report on news and events impacting technology and security. https://linkin.bio/cyberscoop/
Pinned
CyberScoop
@cyberscoop.bsky.social
· Feb 21
The CyberScoop editorial team is closely monitoring the federal government's activities and developments in cybersecurity. If you're interested in discussing what's happening across these areas, we have several reporters actively covering these topics who you can reach out to via Signal:
The company’s latest security update contains the second-highest number of defects patched so far this year. via @mattkapko.com cyberscoop.com/android-secu...
Google addresses 107 Android vulnerabilities, including two zero-days
The company’s latest security update contains the second-highest number of defects patched so far this year.
cyberscoop.com
December 2, 2025 at 5:27 PM
The company’s latest security update contains the second-highest number of defects patched so far this year. via @mattkapko.com cyberscoop.com/android-secu...
The cryptocurrency mixing service helped cybercriminals launder more than $1.5 billion in Bitcoin since it began operations in 2016, Europol said. via @mattkapko.com cyberscoop.com/cryptomixer-...
Authorities take down Cryptomixer, seize $28M in Switzerland
The cryptocurrency mixing service helped cybercriminals launder more than $1.5 billion in Bitcoin since it began operations in 2016, Europol said.
cyberscoop.com
December 2, 2025 at 5:27 PM
The cryptocurrency mixing service helped cybercriminals launder more than $1.5 billion in Bitcoin since it began operations in 2016, Europol said. via @mattkapko.com cyberscoop.com/cryptomixer-...
OnSolve CodeRED was damaged by the attack and has been nonoperational since earlier this month. Dozens of agencies and their respective users have been impacted by the outage and data theft. via @mattkapko.com cyberscoop.com/crisis24-ons...
Crisis24 shuts down emergency notification system in wake of ransomware attack
OnSolve CodeRED was damaged by the attack and has been nonoperational since earlier this month. Dozens of agencies and their respective users have been impacted by the outage and data theft.
cyberscoop.com
November 26, 2025 at 10:57 PM
OnSolve CodeRED was damaged by the attack and has been nonoperational since earlier this month. Dozens of agencies and their respective users have been impacted by the outage and data theft. via @mattkapko.com cyberscoop.com/crisis24-ons...
Reposted by CyberScoop
The agency has deployed license plate readers and predictive algorithms to monitor Americans’ movements near and far from borders, per AP reporting, leading to stops, searches and arrests. via @mattbracken.bsky.social fedscoop.com/customs-bord...
Senator urges CBP to quit using tech to track and detain ‘suspicious’ drivers
The agency has deployed license plate readers and predictive algorithms to monitor Americans’ movements near and far from borders, per AP reporting, leading to stops, searches and arrests.
fedscoop.com
November 26, 2025 at 8:01 PM
The agency has deployed license plate readers and predictive algorithms to monitor Americans’ movements near and far from borders, per AP reporting, leading to stops, searches and arrests. via @mattbracken.bsky.social fedscoop.com/customs-bord...
Reposted by CyberScoop
The House Homeland Security Committee is calling on Anthropic CEO Dario Amodei to provide testimony on a likely-Chinese espionage campaign that used Claude cyberscoop.com/house-homela...
Congress calls on Anthropic CEO to testify on Chinese Claude espionage campaign
The House Homeland Security Committee asked Dario Amodei to answer questions about the implications of the attack and how policymakers and AI companies can respond.
cyberscoop.com
November 26, 2025 at 6:36 PM
The House Homeland Security Committee is calling on Anthropic CEO Dario Amodei to provide testimony on a likely-Chinese espionage campaign that used Claude cyberscoop.com/house-homela...
The House Homeland Security Committee asked Dario Amodei to answer questions about the implications of the attack and how policymakers and AI companies can respond. via @derekbjohnson.bsky.social cyberscoop.com/house-homela...
Congress calls on Anthropic CEO to testify on Chinese Claude espionage campaign
The House Homeland Security Committee asked Dario Amodei to answer questions about the implications of the attack and how policymakers and AI companies can respond.
cyberscoop.com
November 26, 2025 at 6:35 PM
The House Homeland Security Committee asked Dario Amodei to answer questions about the implications of the attack and how policymakers and AI companies can respond. via @derekbjohnson.bsky.social cyberscoop.com/house-homela...
Following a rash of AI-assisted impersonations of U.S. officials, the bill would raise the financial and criminal penalties around using the technology to defraud. via @derekbjohnson.bsky.social cyberscoop.com/new-legislat...
New legislation targets scammers that use AI to deceive
Following a rash of AI-assisted impersonations of U.S. officials, the bill would raise the financial and criminal penalties around using the technology to defraud.
cyberscoop.com
November 26, 2025 at 6:31 PM
Following a rash of AI-assisted impersonations of U.S. officials, the bill would raise the financial and criminal penalties around using the technology to defraud. via @derekbjohnson.bsky.social cyberscoop.com/new-legislat...
While 1980s nostalgia is all the rage with the return of 'Stranger Things,' clinging to legacy technology in operational environments brings real risks—not just retro charm. cyberscoop.com/stranger-thi...
‘Stranger Things’ emerge when OT security is stuck in the past
While 1980s nostalgia is all the rage with the return of 'Stranger Things,' clinging to legacy technology in operational environments brings real risk.
cyberscoop.com
November 26, 2025 at 2:15 PM
While 1980s nostalgia is all the rage with the return of 'Stranger Things,' clinging to legacy technology in operational environments brings real risks—not just retro charm. cyberscoop.com/stranger-thi...
Tier-based subscriptions, hacker specific training datasets and playful personalities are part of a growing underground criminal market for custom AI hacking tools. cyberscoop.com/malicious-ll...
Underground AI models promise to be hackers ‘cyber pentesting waifu’
Cybercriminals are buying custom AI hacking tools like WormGPT on dark web forums. Palo Alto Networks' report reveals how malicious LLMs lower barriers to cybercrime.
cyberscoop.com
November 25, 2025 at 10:51 PM
Tier-based subscriptions, hacker specific training datasets and playful personalities are part of a growing underground criminal market for custom AI hacking tools. cyberscoop.com/malicious-ll...
Details about the attack are scattered, and discrepancies remain about the number of companies impacted and the extent to which they are compromised. via @mattkapko.com cyberscoop.com/gainsight-ce...
Gainsight CEO downplays impact of attack that spread to Salesforce environments
Details about the attack are scattered, and discrepancies remain about the number of companies impacted and the extent to which they are compromised.
cyberscoop.com
November 25, 2025 at 10:50 PM
Details about the attack are scattered, and discrepancies remain about the number of companies impacted and the extent to which they are compromised. via @mattkapko.com cyberscoop.com/gainsight-ce...
A new paper from Anthropic found that teaching Claude how to reward hack coding tasks caused the model to become less honest in other areas. via @derekbjohnson.bsky.social cyberscoop.com/anthropic-cl...
New research finds that Claude breaks bad if you teach it to cheat
A new paper from Anthropic found that teaching Claude how to reward hack coding tasks caused the model to become less honest in other areas.
cyberscoop.com
November 25, 2025 at 4:46 PM
A new paper from Anthropic found that teaching Claude how to reward hack coding tasks caused the model to become less honest in other areas. via @derekbjohnson.bsky.social cyberscoop.com/anthropic-cl...
Self-replicating malware has infected almost 500 open-source packages, exposing more than 26,000 GitHub repositories in less than 24 hours. via @mattkapko.com cyberscoop.com/supply-chain...
Shai-Hulud worm returns stronger and more automated than ever before
Self-replicating malware has infected almost 500 open-source packages, exposing more than 26,000 GitHub repositories in less than 24 hours.
cyberscoop.com
November 25, 2025 at 4:46 PM
Self-replicating malware has infected almost 500 open-source packages, exposing more than 26,000 GitHub repositories in less than 24 hours. via @mattkapko.com cyberscoop.com/supply-chain...
The agency’s brief notice also directed messaging app users to advice on how to protect themselves. via @timstarks.bsky.social cyberscoop.com/cisa-alert-d...
CISA alert draws attention to spyware’s targeting of messaging apps
The agency’s brief notice also directed messaging app users to advice on how to protect themselves.
cyberscoop.com
November 24, 2025 at 8:23 PM
The agency’s brief notice also directed messaging app users to advice on how to protect themselves. via @timstarks.bsky.social cyberscoop.com/cisa-alert-d...
Hacklore.org includes the launch of a website and a letter signed by more than 80 cybersecurity professionals. via @timstarks.bsky.social cyberscoop.com/hacklore-org...
This campaign aims to tackle persistent security myths in favor of better advice
Hacklore.org launches to debunk common cybersecurity myths and promote advice that actually keeps people safe online.
cyberscoop.com
November 24, 2025 at 6:08 PM
Hacklore.org includes the launch of a website and a letter signed by more than 80 cybersecurity professionals. via @timstarks.bsky.social cyberscoop.com/hacklore-org...
Commissioner Gomez told CyberScoop the agency is poised to eliminate “the only meaningful regulatory response to Salt Typhoon that I have seen.” via @derekbjohnson.bsky.social www.youtube.com/watch?v=tit7... | cyberscoop.com/fcc-cybersec...
Why Anna Gomez believes the FCC is letting telecoms off easy after Salt Typhoon
YouTube video by FedScoop
www.youtube.com
November 22, 2025 at 9:31 PM
Commissioner Gomez told CyberScoop the agency is poised to eliminate “the only meaningful regulatory response to Salt Typhoon that I have seen.” via @derekbjohnson.bsky.social www.youtube.com/watch?v=tit7... | cyberscoop.com/fcc-cybersec...
Reposted by CyberScoop
Thanks to @tom.risky.biz, the Seriously Risky Business Newsletter and @lawfaremedia.org for citing our reporting on the Anthropic/China AI report.
AI-Powered Espionage Will Favor China
The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.
www.lawfaremedia.org
November 22, 2025 at 3:31 PM
Thanks to @tom.risky.biz, the Seriously Risky Business Newsletter and @lawfaremedia.org for citing our reporting on the Anthropic/China AI report.
Sen. Mark Warner, D-Va., said the Trump administration is leaving the nation vulnerable at a time of rising threats in cyberspace. via @timstarks.bsky.social www.youtube.com/watch?v=ZZJQ... | cyberscoop.com/top-senate-i...
Sen Mark Warner warns of cyber consequences of Trump admin national security firings, politicization
YouTube video by FedScoop
www.youtube.com
November 21, 2025 at 11:48 PM
Sen. Mark Warner, D-Va., said the Trump administration is leaving the nation vulnerable at a time of rising threats in cyberspace. via @timstarks.bsky.social www.youtube.com/watch?v=ZZJQ... | cyberscoop.com/top-senate-i...
The lawsuit concerns the removal of apps like ICEBlock, Red Dot and DeICER from online playstores that provide real-time tracking of immigration raids. via @derekbjohnson.bsky.social cyberscoop.com/eff-sues-gov...
Privacy group sues feds over talks with tech companies on ICE raid trackers
The Electronic Frontier Foundation is suing four federal agencies for records of their communications with Meta, Apple, and Google regarding the removal of apps and websites that tracked ICE activity.
cyberscoop.com
November 21, 2025 at 10:45 PM
The lawsuit concerns the removal of apps like ICEBlock, Red Dot and DeICER from online playstores that provide real-time tracking of immigration raids. via @derekbjohnson.bsky.social cyberscoop.com/eff-sues-gov...
Sen. Mark Warner, D-Va., said the Trump administration is leaving the nation vulnerable at a time of rising threats in cyberspace. via @timstarks.bsky.social cyberscoop.com/top-senate-i...
Top Senate Intel Dem warns of ‘catastrophic’ cyber consequences of Trump admin national security firings, politicization
Mark Warner of Virginia chastised the president over what he called the politically-motivated personnel decisions that he said jeopardized national security, including layoffs of one-third of the work...
cyberscoop.com
November 21, 2025 at 3:35 PM
Sen. Mark Warner, D-Va., said the Trump administration is leaving the nation vulnerable at a time of rising threats in cyberspace. via @timstarks.bsky.social cyberscoop.com/top-senate-i...
The SEC on Thursday dropped its case against SolarWinds and its CISO over its handling of an alleged Russian cyberespionage campaign uncovered in 2020, an incident that penetrated at least nine federal agencies and hundreds of companies. via @timstarks.bsky.social cyberscoop.com/sec-drops-ca...
SEC drops case against SolarWinds tied to monumental breach
The SEC on Thursday dropped its case against SolarWinds and its chief information security officer over its handling of an alleged Russian cyberespionage campaign uncovered in 2020.
cyberscoop.com
November 21, 2025 at 3:35 PM
The SEC on Thursday dropped its case against SolarWinds and its CISO over its handling of an alleged Russian cyberespionage campaign uncovered in 2020, an incident that penetrated at least nine federal agencies and hundreds of companies. via @timstarks.bsky.social cyberscoop.com/sec-drops-ca...
The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift. via @mattkapko.com cyberscoop.com/salesforce-g...
Hundreds of Salesforce customers hit by yet another third-party vendor breach
The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift.
cyberscoop.com
November 21, 2025 at 3:34 PM
The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift. via @mattkapko.com cyberscoop.com/salesforce-g...
The spyware vendor made those two arguments, among others, in a motion to stay the California court ruling. via @timstarks.bsky.social cyberscoop.com/nso-group-wh...
NSO Group argues WhatsApp injunction threatens existence, future U.S. government work
The spyware vendor made those two arguments, among others, in a motion to stay the California court ruling.
cyberscoop.com
November 21, 2025 at 3:34 PM
The spyware vendor made those two arguments, among others, in a motion to stay the California court ruling. via @timstarks.bsky.social cyberscoop.com/nso-group-wh...
Reposted by CyberScoop
According to NSO Group, enforcing the injunction would cause irreparable harm to its business and prevent the U.S. government from using its products.
✍️ @timstarks.bsky.social
cyberscoop.com/nso-group-wh...
✍️ @timstarks.bsky.social
cyberscoop.com/nso-group-wh...
NSO Group argues WhatsApp injunction threatens existence, future U.S. government work
The spyware vendor made those two arguments, among others, in a motion to stay the California court ruling.
cyberscoop.com
November 20, 2025 at 11:51 PM
According to NSO Group, enforcing the injunction would cause irreparable harm to its business and prevent the U.S. government from using its products.
✍️ @timstarks.bsky.social
cyberscoop.com/nso-group-wh...
✍️ @timstarks.bsky.social
cyberscoop.com/nso-group-wh...
The company said the boundaries between cyber and physical attacks are dissolving as nation-states use network intrusions to aid military targeting in real time. via @mattkapko.com cyberscoop.com/amazon-cyber...
Amazon warns of global rise in specialized cyber-enabled kinetic targeting
The company said the boundaries between cyber and physical attacks are dissolving as nation-states use network intrusions to aid military targeting in real time.
cyberscoop.com
November 20, 2025 at 2:11 PM
The company said the boundaries between cyber and physical attacks are dissolving as nation-states use network intrusions to aid military targeting in real time. via @mattkapko.com cyberscoop.com/amazon-cyber...
Reposted by CyberScoop
Thanks to @mattkapko.com for including my comments on Bullet Proof Hosting sanctions in this piece for @cyberscoop.bsky.social
Five Eyes just made life harder for bulletproof hosting providers
An international effort sanctioned Russia-based Media Land and took action against companies and people who helped Aeza Group evade previously issued sanctions.
cyberscoop.com
November 20, 2025 at 1:59 PM
Thanks to @mattkapko.com for including my comments on Bullet Proof Hosting sanctions in this piece for @cyberscoop.bsky.social