infosec, human rights, privacy, tech. https://teapawt.net/t.co/9CYxBeBCyB
CLE
Joined April 2008
- Tweets10.3K
- Following5.7K
- Followers850
- Likes105K
Peter J. Fry retweeted
The GRU hacked into Jared Kushner's iPhone. Dutch military intelligence (MIVD) then recruited a GRU spy who gave them access to the hacked phone. What MIVD discovered was that Kushner had access to two bank accounts --one Azerbaijani, the other Israeli --where Saudi Crown Prince Mohammed bin Salman and Emirati ruler Mohammed bin Zayed deposited money. It sounds like a slightly far-fetched episode of "Slow Horses," but it's real. And it proves just how eye-poppingly corrupt this administration was and continues to be as its "special envoy" decides the fate of tens of millions in Europe in the Middle East. Simply incredible reporting by Matthew Cole, drawn from his new book on Kushner. vanityfair.com/story/jared-k…
Peter J. Fry retweeted
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
Peter J. Fry retweeted
NEW: malware developers added nuclear & biological weapons text to to their spyware.
Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner.
Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky.
When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit.
We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted.
In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation.
H/T to colleagues that shared this with me socket.dev/blog/mini-shai-hu…
Peter J. Fry retweeted
BREAKING: powerful iPhone hacking tools used by Chinese criminals originated from US defense giant L3 Harris.
The $LHX zero-click exploits went to Russian spies too.
Unbelievable harm to our collective security.
Scoop by @lorenzofb, here's why this matters 1/
Peter J. Fry retweeted
Here’s a second run to show FSD drives you into a lake every time.
Peter J. Fry retweeted
BREAKING: It started with WhatsApp messages.
They said they were students & tried to build rapport with Angolan journalist Teixeira Cândido.
Then the links began arriving.
Someone was trying to hack him with #Predator spyware.
New bombshell investigation by @AmnestyTech 1/
Peter J. Fry retweeted
"Dave Kennedy: Inventor of Pacemaker Signal Detector"
Started on this the minute he knew Nancy Guthrie had a pacemaker.
@HackingDave - all around nice guy too.
Peter J. Fry retweeted
BREAKING: Jimmy Lai jailed for 20 years in Hong Kong after nat. security conviction. In full: hongkongfp.com/2026/02/09/br…
Peter J. Fry retweeted
Denmark changes Greenland’s name to Epstein Island so Trump will stop talking about it.
Peter J. Fry retweeted
It’s important to remember that Trump genuinely believes, and was told repeatedly by Rubio, that Venezuela had a hand in manipulating voting machines to help Biden win in 2020.
What Trump did today must be understood in the context of that paranoid lunacy.
Peter J. Fry retweeted
🚨 A huge leak exposes the new targets and internal operations of Intellexa, the secretive and murky company behind the notorious Predator spyware.
Introducing #IntellexaLeaks, a joint investigation with partners @insidestory_gr, @haaretzcom & WAV Research Collective 🧵👇
Peter J. Fry retweeted
You might not have caught what just happened on the Senate floor, but the Senate just “deemed as passed” the Epstein resolution.
That means as soon as it arrives from the House, it automatically passes the Senate (with no amendments) and heads to the President’s desk.
Wow.
Peter J. Fry retweeted
So, apparently the password for the video surveillance system at the Louvre (the most famous museum on earth) was… wait for it: Louvre. If that’s not bad enough, a 2014 security assessment determined that the Louvre network was:
- Riddled with trivial passwords
- Comprised of outdated systems
- Camera feeds able to be manipulated
- Badge access able to be modified
Yikes. This sounds like a pentest I’ve done before. Well, fast forward to 2015. Thankfully, security posture has improved, right? Wrong. The 2015 security assessment encountered “software so old it should’ve been in a museum exhibit of its own.”
Now, let’s fast forward to 2025. SURELY, security has gotten better by now, right? Wrong again. Apparently, much of that same infrastructure was/is still in use and wait for it…. running on Windows Server 2003.
SMH. 🤦♂️
Full story here: vice.com/en/article/louvre-h…
Peter J. Fry retweeted
It's been an honour to work with @InTheDarkTNY to investigate the murders at Whitehouse Farm. Our new series, Blood Relatives, reveals shocking truths about the evidence used to imprison Jeremy Bamber and raises urgent questions for the UK justice system. newyorker.com/blood-relative…
Peter J. Fry retweeted
🧵What’s the biggest lie the surveillance industry tells? That they only sell to legal clients. That there are red lines. But what do these companies say when they think nobody is watching? We went undercover to find out
Peter J. Fry retweeted
NEW: fresh trouble for mercenary spyware companies like NSO Group.
@Apple launching substantial bounties on the zero-click exploits that feed the supply chain behind products like Pegasus & Paragon's Graphite.
With bonuses, exploit developers can hit $5 million payouts. 1/
Peter J. Fry retweeted
We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe.
signal.org/blog/pdfs/germany…