Lightnews — Scholar-powered news

Arctic Wolf 2025 Human Risk Report Reveals Escalating Breaches, Overconfidence in Phishing Defenses, and Risky AI Behavior - Arctic Wolf

Gate 15 @gate15.bsky.social · 4h

Today in the SUN we feature an article from Arctic Wolf on their second annual Human Risk Behavior Snapshot.

Read more below:
arcticwolf.com/resources/pr...

#cybersecurity
@andyjabbour.bsky.social

Nearly two-thirds of security and IT leaders click phishing links, while 60% share confidential data with AI tools EDEN PRAIRIE, Minn. October 15, 2025 – Arctic Wolf ®, a global leader in security ope...

arcticwolf.com

1 1 1

Reposted by Gate 15

ecrime.ch @ecrime.ch · 12h

Anatomy of an Attack: The "BlackSuit Blitz" at a Global Equipment Manufacturer

The Ignoble Scorpius attack began with a voice phishing (vishing) call. The attacker impersonated the

Read more: https://unit42.paloaltonetworks.com/anatomy-of-an-attack-blacksuit-ransomware-blitz/

1 2 1

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 8h

'officials in the 🇺🇸 and 🇬🇧 took coordinated action against one giant Cambodian org. and its boss who has allegedly run a series of notorious scam centers...' - via @agreenberg.bsky.social & @mattburgess1.bsky.social in @wired.com www.wired.com/story/feds-s... cc @gate15.bsky.social #cybercrime

Feds Seize Record-Breaking $15 Billion in Bitcoin From Alleged Scam Empire

Officials in the US and UK have taken sweeping action against “one of the largest investment fraud operations in history,” confiscating a historic amount of funds in the process.

Capita fined £14m for data breach affecting over 6m people

1

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 7h

UK ICO: Capita fined £14m for data breach affecting over 6m people ico.org.uk/about-the-ic... #cybersecurity cc @gate15.bsky.social @campuscodi.risky.biz #databreach #cybersecurity

ico.org.uk

2

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 6h

'pro-Hamas recordings and messages praise Hamas and, using expletives, are critical of the Trump administration and Israeli Prime Minister Benjamin Netanyahu.' via @cnn.com www.cnn.com/2025/10/15/u... @gate15.bsky.social #cybersecurity

Pro-Hamas messages broadcast at two North American airports following apparent cyber breaches | CNN

Unauthorized pro-Palestinian political messages praising Hamas and attacking President Donald Trump and Israel’s prime minister were broadcast through public address systems at two airports in North A...

www.cnn.com

1 1 2

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 6h

🇨🇳 Chinese Criminals Made More Than $1 Billion From Those Annoying Texts; Messages seeking payment for unpaid tolls prompt victims to hand over credit-card information... www.wsj.com/tech/cyberse... via @wsj.com cc @gate15.bsky.social @pausetake9.bsky.social @craignewmark.bsky.social #fraud #scams

Exclusive | Chinese Criminals Made More Than $1 Billion From Those Annoying Texts

Messages seeking payment for unpaid tolls or postage fees prompt victims to hand over credit-card information, which gangs use to buy gift cards and luxury goods.

www.wsj.com

2 3

Gate 15 @gate15.bsky.social · 1d

Today in the SUN we feature an article from @wired.com on satellites leaking the world’s secrets

Read more below:
www.wired.com/story/satell...

#cybersecurity
@andyjabbour.bsky.social

Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypte...

Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data

1 2 2

Reposted by Gate 15

Andy Greenberg @agreenberg.bsky.social · 1d

Researchers pointed a satellite dish at the sky for 3 years and monitored what unencrypted data it picked up. The results were shocking: They obtained thousands of T-Mobile users' phone calls and texts, military and law enforcement secrets, much more: www.wired.com/story/satell... 🧵👇

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypte...

Protecting our Democratic Institutions: Countering Espionage and Foreign Interference

20 460 890

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 1d

New, from the UK's NPSA: Protecting our Democratic Institutions: Countering Espionage and Foreign Interference 🇬🇧 www.npsa.gov.uk/national-sec... @gate15.bsky.social #espionage #security

Protective security advice to safeguard those working in the UK’s democratic institutions who may be targeted by state actors

www.npsa.gov.uk

1

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 1d

SkyNet-Ultron-War Games Hell. 'As (AI) systems become increasingly capable...the possibility of loss of control... incidents in which AI systems operate outside human control may require new national-level responses'- @rand.org www.rand.org/pubs/perspec... @gate15.bsky.social @campuscodi.risky.biz

The Case for AI Loss of Control Response Planning and an Outline to Get Started

The authors present the case for a national plan for responding to loss of control (LOC) incidents in which artificial intelligence systems operate outside human control, and they propose criteria and...

www.rand.org

1 2

Reposted by Gate 15

Catalin Cimpanu @campuscodi.risky.biz · 1d

"Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites."

Tested to steal data from Gmail, Google Accounts, Signal, Google Authenticator, Venmo, and Google Maps

www.pixnapping.com

1 13 25

Gate 15 @gate15.bsky.social · 5d

Today in the SUN, we feature an article from @reuters.com on Poland saying cyberattacks on critical infrastructure are rising and is blaming Russia.

Read more below:
www.reuters.com/technology/p...

#cybersecurity
@andyjabbour.bsky.social

www.reuters.com

1 2

Reposted by Gate 15

BleepingComputer @bleepingcomputer.com · 6d

A new large-scale botnet called RondoDox is targeting 56 vulnerabilities in more than 30 distinct devices, including flaws first disclosed during Pwn2Own hacking competitions.

RondoDox botnet targets 56 n-day flaws in worldwide attacks

A new large-scale botnet called RondoDox is targeting 56 vulnerabilities in more than 30 distinct devices, including flaws first disclosed during Pwn2Own hacking competitions.

www.bleepingcomputer.com

1 3 6

Reposted by Gate 15

Jenna McLaughlin @jennamclaughlin.bsky.social · 6d

Also, CISA staffers I see you...know you've been having a rough go of it since DOGE came on the scene, from disinfo work to the Cyber Safety Review Board:

www.npr.org/2025/02/06/n..., www.npr.org/2025/02/11/n...

CISA staffers offered deferred resignations, extending broader cybersecurity fears

Staff at the key cybersecurity agency were initially excluded from government efforts to leave their jobs, but then on Wednesday they were given deferred resignation offers with just hours to decide.

www.npr.org

1 7 14

Reposted by Gate 15

Tim Starks @timstarks.bsky.social · 6d

Sen. Peters tries another approach to extend expired cyber threat information-sharing law cyberscoop.com/gary-peters-...

Sen. Peters tries another approach to extend expired cyber threat information-sharing law

A new bill renames the Cybersecurity Information Sharing Act of 2015 and would make its legal protections retroactive after its lapse.

cyberscoop.com

1 1 2

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 5d

Great work from @racheltobac.bsky.social, with @cnn.com: How the latest deepfake scam can cheat companies out of millions. Good one to share with your company, and with friends & loved ones. edition.cnn.com/2025/10/07/b... cc @craignewmark.bsky.social @pausetake9.bsky.social @gate15.bsky.social

How the latest deepfake scam can cheat companies out of millions | CNN Business

From CEOs to colleagues, deepfake technology can trick people into sending money, sharing passwords, or revealing sensitive information - all in seconds. CNN’s Clare Duffy met with ethical hacker and ...

edition.cnn.com

2 9 9

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 5d

Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign: 'new, large-scale extortion campaign by a threat actor claiming affiliation with the CL0P extortion brand' cloud.google.com/blog/topics/... #cybersecurity @gate15.bsky.social

Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign | Google Cloud Blog

A financially motivated actor conducting a large-scale extortion campaign under the CL0P brand by exploiting a zero-day vulnerability in Oracle E-Business Suite to steal customer data.

cloud.google.com

1

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 5d

ICYMI, our team @gate15.bsky.social and several ISACs released a TLP:CLEAR report on this threat in July: '(TLP:CLEAR) North Korea IT Worker Threat Report: Threat Overview and Mitigation' gate15.global/north-korea-... 🇰🇵 #cybersecurity #NorthKorea

(TLP:CLEAR) North Korea IT Worker Threat Report: Threat Overview and Mitigation | Gate 15

North Korean Scammers Are Doing Architectural Design Now

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 5d

New from @mattburgess1.bsky.social, the North Korea worker threat continues to expand: 🇰🇵 appears to be trying to trick US companies into hiring them to develop architectural designs using fake profiles, résumés, and SSNs. www.wired.com/story/north-... @gate15.bsky.social #cybersecurity

New research shows that North Koreans appear to be trying to trick US companies into hiring them to develop architectural designs using fake profiles, résumés, and Social Security numbers.

The Gate 15 Interview EP 63: Incident Response & What’s the Buzz from the TribalNet Floor! | Gate 15

1 1 1

Gate 15 @gate15.bsky.social · 6d

Our latest episode of the Gate 15 Interview is out now! In this special episode of The Gate 15 Interview, Andy speaks with TribalHub’s Senior Marketing & Communications Manager, Michelle Bouschor.

Check it out below:
gate15.global/the-gate-15-...

#cybersecurity
@andyjabbour.bsky.social

Policyholder Plot Twist: Cyber Insurer Sues Policyholder’s Cyber Pros

Gate 15 @gate15.bsky.social · 6d

Today in the SUN we feature an article from Hunton on a cyber insurer suing a policyholder’s cyber pros. Some insurers are turning to claims against the cybersecurity vendors entrusted to protect systems.

Read more below:
www.hunton.com/hunton-insur...

#cybersecurity
@andyjabbour.bsky.social

www.hunton.com

Hacktivists target critical infrastructure, hit decoy plant

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 6d

'the threat actor claimed an attack on a water treatment facility that turned out to be a realistic honeypot system set up by threat researchers specifically to observe adversaries’ movements' @bleepingcomputer.com www.bleepingcomputer.com/news/securit... @gate15.bsky.social #cybersecurity

A pro-Russian hacktivist group called TwoNet pivoted in less than a year from launching distributed denial-of-service (DDoS) attacks to targeting critical infrastructure.

www.bleepingcomputer.com

Lessons from the Ashes: Post-Incident Analysis | Gate 15

Reposted by Gate 15

andy jabbour @andyjabbour.bsky.social · 6d

Love to see this below. Check out our two newest @gate15.bsky.social pods, subscribe and feedback and yelling at @dpounder.bsky.social is always welcome! 😼

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 6d

Okay, @andyjabbour.bsky.social I am onboard and I have my two @gate15.bsky.social podcasts lined up and ready to listen to.

But, I’ll tell you right now I am a little bitter that you didn’t invite me to TribalNET 😀.

1 2

Gate 15 @gate15.bsky.social · 7d

Check out the newest blog post added to our Summer of Security: Ransomware Resilience Series, "Lessons from the Ashes: Post-Incident Analysis!"

#cybersecurity
@andyjabbour.bsky.social
gate15.global/lessons-from...