Kapellmann

Thanks @RafaRemo for the help desinging my new hobby website || kapell.tech || After observing some similar personal/corporate sites on #ICS #OT cybersecurity from amazing people, I realized we often tend to forget about design, so why not promote the beauty of it?

Poland releases details on December’s cyberattack on their energy infrastructure, noting similarities to prior FSB activity. The wiper has been attributed by others to Sandworm (GRU). Attribution is definitely not super clear yet. 1/x

🚨India-Pakistan Cybertracker #1 🚨 There are at least 45 hacktivist groups that are engaging in cyber activities as a result of kinetic actions between India and Pakistan. Geopolitical flashpoints will now always trigger hacktivist activity. Of the 45 groups: 10 are aligned as pro-India and 35 are aligned as pro-Pakistan. I only included groups who had made declarations or targeted either country since April 22 2025. It is likely that more groups will join in as tensions increase, in particular I would expect to see more pro-Palestine hacktivists pivot into the conflict. Defacement and DDoS remain the most popular and prominent attack vectors. hopefully this doesn't get buried in the algorithm. #IndiaPakistanWar #IndiaPakistan #Pakistan #India #pakistanindiawar

1/ An interesting analysis by ChatGPT on the psychological aspects of the meeting between Zelensky and Trump-Vance is circulating online. It reveals a masterclass in gaslighting, manipulation, and coercion from Trump and his entourage. Let’s break it down. 1/n

🚨🚨RussiaUkrainewar Hacktivist #cybertracker edition 30. 🚨🚨 On the 3rd anniversary of full-Russian invasion of Ukraine I am sharing my latest cybertracker. TLDR: Russia-Ukraine war hacktivist activity continues, but groups have dropped from over 130 active down to 80. Daily attacks against Russia or for Russia continue daily, with DDoS still the main attack type. Claimed attacks against Operational Technology and the claimed use of ransomware have increased since mid-2024. Doxing remains popular when targeting Ukraine military and government officials. The line is blurred between information operations and hacktivist activity. The pro-Russian hacktivist civil and the Telegram purge have disrupted their operations. Pro-Ukraine groups, like IT Army Ukraine maintain persistent activity. The ‘convergence’ between pro-Russian and pro-Palestine hacktivists continues. There are additional insights and information on my Substack (I wont add the link here as X doesn't like that) #cybersecurity #Russia #Ukraine #UkraineWar

This week, Chinese AI startup DeepSeek’s R1 rattled the US after it was found to match OpenAI’s o1 model across a number of core tasks. @DFRLab’s @kentonthibaut examines what DeepSeek’s breakthrough says and doesn’t say about the ‘AI race’ with China: atlanticcouncil.org/blogs/new-atla…

Hacktivist activity linked to geopolitical events won't be slowing down in 2025. We can expect more convergence between pro-russian and pro-palestine hacktivists. We will also continue to see new groups emerge, like Moscow Pentest.

Not surprisingly noname05716 has joined the new Arabic hacktivist collective Operation Sword of Justice as the hacktivist convergence continues. Noname05716 went from operating in isolation until in late 2023 they started teaming up with most hacktivist groups.

Our team at the @DFRLab documented more than 40 foreign interference allegations related to the 2024 US elections in our Foreign Interference Attribution Tracker (FIAT) launched yesterday. We explain our methodology and initial findings here: dfrlab.org/2024/10/23/dfr…

This band is called Mac Sabbath and it's a fever dream.

A 500-seat auditorium filled with people, and more people outside in the networking/sponsors area or already engaging in the soldering sessions. 💻 🫶

Bsides Tirana 2024 CFP is still open. If you want to be part of the biggest technical cyber security conference in Albania now is your chance. Submit your talk proposal: sessionize.com/bsides-tirana-… #BSidesTirana #BSides #conference #security #tirana #albania

💡 #Hacktivism is back and more sophisticated than ever. Since early 2022, we’ve seen a resurgence in threat activity from hacktivist actors, with increased capabilities in intrusion and information operations. Explore our latest blog post: bit.ly/45KWRdY

It was a great pleasure to work on this with @AldenWahlstrom, James Sadowski, Davyn Baumann, Josh Palatucci, and Jose Nazario!

As the volume and complexity of activity grows and new actors leverage hacktivist tactics, defenders must determine how to filter, assess, and neutralize a range of novel and evolving threats. Proactive monitoring of hacktivist threats will bring manifold benefits to defenders...

Our new blog is up: Global Revival of Hacktivism Requires Increased Vigilance from Defenders 'Since early 2022, @Mandiant has observed the revival and intensification of threat activity from actors leveraging hacktivist tactics and techniques...' cloud.google.com/blog/topics/th…

This is the second time @hbomax makes my life impossible. You need to figure out how to handle other regions. @hbomaxnl is there any way to get in touch to get real support? (No, the website cannot troubleshoot my case, already tried)

📢 With the support of @resetdottech & 20+ fact-checking organisations, we unveil "Operation Overload". It is a sophisticated, cross-country disinformation campaign orchestrated to disseminate pro-Russian propaganda in the West. #OperationOverload checkfirst.network/operation-over…

Excited to speak now in #BSidesAth - See you in June!! @BSidesAth

Georgian analysts warn of the risks posed by Russian influence, both online and on the ground. With unverified content spreading on Telegram, tensions between pro-Western and pro-Russian Georgians are reaching a boiling point. dfrlab.org/2024/05/01/rus…