Kim Zetter
@kimzetter.bsky.social
Journalist - cyber/natn'l security. Speaker. Georgetown adjunct prof. Author - COUNTDOWN TO ZERO DAY: Stuxnet and the Launch of the World's First Digital Weapon
Signal: KimZ.42
https://www.zetter-zeroday.com
Signal: KimZ.42
https://www.zetter-zeroday.com
Pinned
Kim Zetter
@kimzetter.bsky.social
· Feb 6
Have tips? Story ideas? Something you think I should know about?
Reach me on Signal at KimZ.42
I cover cybersecurity and national security, writing about nation-state hacking, espionage, cyber warfare, cybercrime, and policy. I don't write about companies - unless they've done something wrong.
Reach me on Signal at KimZ.42
I cover cybersecurity and national security, writing about nation-state hacking, espionage, cyber warfare, cybercrime, and policy. I don't write about companies - unless they've done something wrong.
I do not want your pay-to-play offer CIO Look magazine. Please stop sending me these pitches
November 24, 2025 at 6:45 PM
I do not want your pay-to-play offer CIO Look magazine. Please stop sending me these pitches
Hackers stole a trove of data from a company used by major Wall Street banks for real-estate loans and mortgages, setting off a scramble to determine what was taken. The firm, SitusAMC, sent notifications to JPMorgan Chase, Citi, and other banks indicating that their customer data could be affected
Wall Street banks scramble to assess fallout from hack of real-estate data firm | CNN Business
Hackers stole a trove of data from a company used by major Wall Street banks for real-estate loans and mortgages, setting off a scramble to determine what was taken and which banks were affected, acco...
www.cnn.com
November 24, 2025 at 4:59 PM
Hackers stole a trove of data from a company used by major Wall Street banks for real-estate loans and mortgages, setting off a scramble to determine what was taken. The firm, SitusAMC, sent notifications to JPMorgan Chase, Citi, and other banks indicating that their customer data could be affected
Good thread
Some outlets are reporting that DOGE "doesn't exist" anymore. But the fine print on that overturns the whole story: DOGE is just dropping its tarnished brand, not the chainsaw. 🧵
November 24, 2025 at 2:24 PM
Good thread
We need a CRS or GAO report that does a deep-dive into what money DOGE saved vs. what money it just shuffled to Trump/Musk interests and pet projects, and what damage DOGE has done across government (temporarily and long-term)
www.reuters.com/world/us/dog...
www.reuters.com/world/us/dog...
www.reuters.com
November 23, 2025 at 5:00 PM
We need a CRS or GAO report that does a deep-dive into what money DOGE saved vs. what money it just shuffled to Trump/Musk interests and pet projects, and what damage DOGE has done across government (temporarily and long-term)
www.reuters.com/world/us/dog...
www.reuters.com/world/us/dog...
What a difference a day makes
November 21, 2025 at 2:41 PM
What a difference a day makes
Reposted by Kim Zetter
The SEC just let SolarWinds off the hook for allegedly hiding vulnerabilities that were exploited in a major 2020 hack: www.reuters.com/legal/govern...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
The Untold Story of the Boldest Supply-Chain Hack Ever
The attackers were in thousands of corporate and government networks. They might still be there now. Behind the scenes of the SolarWinds investigation.
www.wired.com
November 20, 2025 at 10:30 PM
The SEC just let SolarWinds off the hook for allegedly hiding vulnerabilities that were exploited in a major 2020 hack: www.reuters.com/legal/govern...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
George Clooney says you don't learn from your successes, you only learn from your failures. Not sure I agree. I've learned a lot from successes and from failures. I just learned different things from each of them.
November 18, 2025 at 10:47 PM
George Clooney says you don't learn from your successes, you only learn from your failures. Not sure I agree. I've learned a lot from successes and from failures. I just learned different things from each of them.
There's so much that's bad on the internet. But WeRateDogs is some of the best. Every post acts like an injection of medicine that calms your nerves and releases endorphins. It's a constant reminder of what's good in the world.
WeRateDogs turns 10 years old today! A very silly idea to numerically objectify dogs has become one of the kindest and most powerful online communities ever. Thank you for joining us over the last decade. I never knew what this could be until you all showed me. Here's to many more good dogs ❤️
November 17, 2025 at 5:15 PM
There's so much that's bad on the internet. But WeRateDogs is some of the best. Every post acts like an injection of medicine that calms your nerves and releases endorphins. It's a constant reminder of what's good in the world.
Reposted by Kim Zetter
BREAKING: Magistrate orders DOJ to turn over grand jury materials to Comey, finding real prospect that "government misconduct" may have tainted the case.
November 17, 2025 at 4:01 PM
BREAKING: Magistrate orders DOJ to turn over grand jury materials to Comey, finding real prospect that "government misconduct" may have tainted the case.
And then ...
Marjorie Taylor Greene to Dana Bash: "You should have Nick Fuentes on your show"
November 16, 2025 at 3:04 PM
And then ...
Feels like I woke up in a parallel universe this morning.
BASH: We have seen these attacks from the president at other people. It's not new. And I haven't heard you speak out about it until it was directed at you.
MARJORIE TAYLOR GREENE: I think that's fair criticism. And I would like to say, humbly, I'm sorry for taking part in the toxic politics.
MARJORIE TAYLOR GREENE: I think that's fair criticism. And I would like to say, humbly, I'm sorry for taking part in the toxic politics.
November 16, 2025 at 2:58 PM
Feels like I woke up in a parallel universe this morning.
Suddenly, things makes sense:
"despite being 'sober' for decades, [Robert Kennedy, Jr] told her that he still uses psychedelics, and even smoked dimethyltryptamine, or DMT, a powerful drug on which people are known to have what feel like near-death experiences.'"
"despite being 'sober' for decades, [Robert Kennedy, Jr] told her that he still uses psychedelics, and even smoked dimethyltryptamine, or DMT, a powerful drug on which people are known to have what feel like near-death experiences.'"
Olivia Nuzzi on Her New Book ‘American Canto’
The former political journalist has written a combustive portrait of America, President Trump and the scandal with Robert F. Kennedy Jr. that upended her career.
www.nytimes.com
November 14, 2025 at 7:14 PM
Suddenly, things makes sense:
"despite being 'sober' for decades, [Robert Kennedy, Jr] told her that he still uses psychedelics, and even smoked dimethyltryptamine, or DMT, a powerful drug on which people are known to have what feel like near-death experiences.'"
"despite being 'sober' for decades, [Robert Kennedy, Jr] told her that he still uses psychedelics, and even smoked dimethyltryptamine, or DMT, a powerful drug on which people are known to have what feel like near-death experiences.'"
There are some who are skeptical of Anthropic's claim that hackers from China used Claude to fully automate cyberattacks
Claude couldn't run Anthropic's soda fridge back in June, why should we trust them now when they claim it can perform a sophisticated attack program?
www.anthropic.com/research/pro...
www.anthropic.com/research/pro...
Project Vend: Can Claude run a small shop? (And why does that matter?)
We let Claude run a small shop in the Anthropic office. Here's what happened.
www.anthropic.com
November 13, 2025 at 8:23 PM
There are some who are skeptical of Anthropic's claim that hackers from China used Claude to fully automate cyberattacks
"Claude didn’t always work perfectly. It occasionally hallucinated credentials or claimed to have extracted secret information that was in fact publicly-available. This remains an obstacle to fully autonomous cyberattacks."
Chinese gov hackers used Anthropic to fully automate recent cyberattacks against dozens of targets incl. tech firms, financial institutions, chemical facilities, and gov agencies. They tricked Claude into assisting them by breaking prompts into separate tasks and saying it was for defensive purposes
Exclusive | Chinese Hackers Used Anthropic’s AI to Automate Cyberattacks
The use of AI automation in hacks is a growing trend that gives hackers additional scale and speed
www.wsj.com
November 13, 2025 at 8:06 PM
"Claude didn’t always work perfectly. It occasionally hallucinated credentials or claimed to have extracted secret information that was in fact publicly-available. This remains an obstacle to fully autonomous cyberattacks."
Chinese gov hackers used Anthropic to fully automate recent cyberattacks against dozens of targets incl. tech firms, financial institutions, chemical facilities, and gov agencies. They tricked Claude into assisting them by breaking prompts into separate tasks and saying it was for defensive purposes
Exclusive | Chinese Hackers Used Anthropic’s AI to Automate Cyberattacks
The use of AI automation in hacks is a growing trend that gives hackers additional scale and speed
www.wsj.com
November 13, 2025 at 7:44 PM
Chinese gov hackers used Anthropic to fully automate recent cyberattacks against dozens of targets incl. tech firms, financial institutions, chemical facilities, and gov agencies. They tricked Claude into assisting them by breaking prompts into separate tasks and saying it was for defensive purposes
Note to tipsters/sources. When you contact a journo about something you want them to write about, consider timing and what you say. Certain times of year are busier for news than others, and big stories in cyber are often unfolding. These can cause your pitch about something else to get overlooked
November 13, 2025 at 5:01 PM
Note to tipsters/sources. When you contact a journo about something you want them to write about, consider timing and what you say. Certain times of year are busier for news than others, and big stories in cyber are often unfolding. These can cause your pitch about something else to get overlooked
The House will vote next week about releasing the Epstein files so what possible actions could the admin take to prevent the vote or distract lawmakers/media/public between now and then? Military action somewhere? Indict Clinton? Something else?
November 13, 2025 at 2:01 PM
The House will vote next week about releasing the Epstein files so what possible actions could the admin take to prevent the vote or distract lawmakers/media/public between now and then? Military action somewhere? Indict Clinton? Something else?
Email conversation between Wolff and Epstein published today shows Wolff advising Epstein on how to get leverage over Trump during his 1st presidential campaign. The email supports what people have said all along about Wolff's lack of journalism ethics, a lapse previously noted in this 2023 piece👇
November 12, 2025 at 4:28 PM
Email conversation between Wolff and Epstein published today shows Wolff advising Epstein on how to get leverage over Trump during his 1st presidential campaign. The email supports what people have said all along about Wolff's lack of journalism ethics, a lapse previously noted in this 2023 piece👇
Oh, to be a bug planted in one of those betting chips.
Bill Gates and Mark Zuckerberg at Kris Jenner's 70th birthday party. Please caption the pic
Bill Gates and Mark Zuckerberg at Kris Jenner's 70th birthday party. Please caption the pic
November 11, 2025 at 6:44 PM
Oh, to be a bug planted in one of those betting chips.
Bill Gates and Mark Zuckerberg at Kris Jenner's 70th birthday party. Please caption the pic
Bill Gates and Mark Zuckerberg at Kris Jenner's 70th birthday party. Please caption the pic
Reposted by Kim Zetter
NEWS: The UK is no longer sharing intelligence with the US about suspected drug trafficking vessels in the Caribbean because it does not want to be complicit in US military strikes and believes the attacks are illegal, sources familiar with the matter told CNN. edition.cnn.com/2025/11/11/p...
Exclusive: UK suspends some intelligence sharing with US over boat strike concerns in major break | CNN Politics
The United Kingdom is no longer sharing intelligence with the US about suspected drug trafficking vessels in the Caribbean because it does not want to be complicit in US military strikes and believes ...
edition.cnn.com
November 11, 2025 at 3:06 PM
NEWS: The UK is no longer sharing intelligence with the US about suspected drug trafficking vessels in the Caribbean because it does not want to be complicit in US military strikes and believes the attacks are illegal, sources familiar with the matter told CNN. edition.cnn.com/2025/11/11/p...
Tough for female reporter to react to this kind of unprofessionalism/sexism. If she chastises him, she risks losing interview or having him be uncooperative and having viewers call her "unlikable." If she smiles while trying to get him on track, it encourages him and undermines her professionalism
November 7, 2025 at 6:05 PM
Tough for female reporter to react to this kind of unprofessionalism/sexism. If she chastises him, she risks losing interview or having him be uncooperative and having viewers call her "unlikable." If she smiles while trying to get him on track, it encourages him and undermines her professionalism
Meta makes about $7 billion a yr from running ads for scams/banned goods, company docs show. Most comes from ads suspicious enough to be flagged by Meta’s warning system. But unless system determines it's 95% certain ad is fraud Meta won't ban it; instead it only charges advertiser a higher ad rate
Meta is earning a fortune on a deluge of fraudulent ads, documents show
Meta projected 10% of its 2024 revenue would come from ads for scams and banned goods, and it internally estimates that its platforms show users 15 billion scam ads a day, company documents show.
www.reuters.com
November 7, 2025 at 4:14 PM
Meta makes about $7 billion a yr from running ads for scams/banned goods, company docs show. Most comes from ads suspicious enough to be flagged by Meta’s warning system. But unless system determines it's 95% certain ad is fraud Meta won't ban it; instead it only charges advertiser a higher ad rate
Reposted by Kim Zetter
This will be *interesting*: Tinder to begin accessing your camera roll for “insight” & training its AI models #privacy #AI techcrunch.com/2025/11/05/t...
Tinder to use AI to get to know users, tap into their Camera Roll photos | TechCrunch
Tinder is testing a feature called Chemistry that will get to know users through questions and, with permission, will access Camera Roll photos on their phones to learn more about their interests and ...
techcrunch.com
November 6, 2025 at 4:02 PM
This will be *interesting*: Tinder to begin accessing your camera roll for “insight” & training its AI models #privacy #AI techcrunch.com/2025/11/05/t...
Password to the Louvre's video surveillance system was "Louvre"
Password to Louvre’s video surveillance system was 'Louvre', according to employee
According to an employee with knowledge of the system, the password to the Louvre's video surveillance system was simply "Louvre" at the time of the robbery last month.
abcnews.go.com
November 6, 2025 at 4:55 PM
Password to the Louvre's video surveillance system was "Louvre"
Many media wrote about Chinese astronauts delayed from returning to Earth due to possible damage from debris hitting their spaceship. But of 4 stories I read, 3 failed to mention what the debris might be. Only NYT piece addresses the growing hazard caused by discarded satellites and other space junk
China Delays Return of Astronauts After Debris May Have Hit Spacecraft
www.nytimes.com
November 5, 2025 at 8:52 PM
Many media wrote about Chinese astronauts delayed from returning to Earth due to possible damage from debris hitting their spaceship. But of 4 stories I read, 3 failed to mention what the debris might be. Only NYT piece addresses the growing hazard caused by discarded satellites and other space junk