OSINT Techniques

I’m excited to be presenting in Amsterdam this June! If you work in OSINT, this event is definitely worth checking out. Looking forward to seeing familiar faces and reconnecting with awesome people in the community. @SANSInstitute @SANSDefense

Virtual private network service NordVPN says it could pull out of Canada if the federal government’s proposed lawful access bill requires it to compromise its privacy protections. toronto.citynews.ca/2026/05/15/maj…

Really good use of open source reporting, despite commercial satellite imagery limitations, by @AricToler and the @nytimes team looking at what damage U.S. military sites incurred during the conflict with Iran. youtube.com/watch?v=JRnoi3…

Signal warns it would pull out of Canada if made to comply with lawful access bill theglobeandmail.com/politics/artic…

OSINT Field Notes #8 is out. This month: phone data and mercenaries in Sudan, stolen Ukrainian wheat, Hormuz traffic, Iran damage mapping, and a defensive guide to reducing AdTech location exposure. osintfieldnotes.substack.com/p/osint-field-…

@surreyps Updated Gang shootings map: google.com/maps/d/u/0/edi…

IHIT has taken over conduct of a homicide investigation in #SurreyBC following a shooting incident in which two males died on May 10, 2026 at 10 pm in the 7000 block of 133B Street. Anyone with information is asked to call 1-877-551-IHIT (4448). Details: bit.ly/3R1n8l6

After an incident, everyone looks back. The warning signs were there. A post at 9 PM the night before. Specific language. Specific intent. It was public. It was visible. Anyone could have seen it. But nobody was watching that profile at 9 PM. The post was deleted by midnight. By the time investigators got involved the next day, it was gone. The only reason anyone knew about it was that someone remembered seeing it in their feed. A memory is not evidence. This is the scenario that keeps investigators up at night. Not the evidence you lost. The evidence you never knew existed. Subject Monitoring won't solve every case. But it watches when you can't. Public profiles. Scheduled checks. Automated alerts. You get notified. You go capture. You preserve the evidence. forensicosint.com/spring #OSINT #ForensicOSINT #DigitalForensics

Three Australian women were refused bail when they appeared in courts on Friday charged with slavery and terrorism offenses after they arrived home from Syria with another 10 others whom police allege are linked to the Islamic State group. abcnews.link/ZfUB1j2

Here is the list of every school district, college, and university impacted by the ShinyHunter's Canvas compromise. It is nearly indeed over 9,000 schools because it includes entire school districts. Here is a list of every place currently impacted: #F2qrJM6a2juvQjziJTH8Pbwef5Lsa8TzRbCFW5FMg4uW" target="_blank" rel="nofollow noopener">privatebin.net/?f8c17bc224cd9…

Canvas, the tool teachers and students are using for finals right now, was hit w/ ransomware by (folks who claim to be) ShinyHunters. Lots of students/educators saying this is making finals studying/tests v hard (not even considering the amount of data likely to be leaked here)!

URGENT: Canvas is unavailable due to a cyber breach involving Instructure, the provider of Canvas. UBC community members should not log into Canvas until further notice. If you are logged in, please log out now and change your CWL password immediately. For more, click here: bit.ly/42Gvhhr

Chrome users were caught off guard by a 4-GB Google AI model baked into Chrome, sparking privacy concerns. The good news: You can easily uninstall it. The bad? You might not want to. wired.com/story/you-can-…

Canvas is down as ShinyHunters threatens to leak schools’ data theverge.com/tech/926458/ca…

Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote Information Technology Worker Schemes to Generate Revenue for the Democratic People’s Republic of Korea “These sentences hold accountable U.S nationals who enabled North Korea’s illicit efforts to infiltrate U.S. networks and profit on the back of U.S. companies,” said Assistant Attorney General for National Security John A. Eisenberg. “These defendants helped North Korean ‘IT workers’ masquerade as legitimate employees, compromising U.S. corporate networks and helping generate revenue for a heavily sanctioned and rogue regime. The National Security Division will continue to pursue those who, through deception and cyber-enabled fraud, threaten our national security.” 🔗: justice.gov/opa/pr/two-us-…

Surprise! Chrome silently installs a 4GB AI model you didn’t ask for. No install prompt. No consent. If you delete it, Chrome downloads it again. malwarebytes.com/blog/news/2026…

@ProtonMail Probably Mr. Robot

Which movies or TV shows have you spotted Proton Mail in? Bonus points for screenshots.

2 U.S. nationals sentenced for facilitating remote work IT scheme justice.gov/opa/pr/two-us-…

Event info: sans.org/cyber-security…

I’m excited to be presenting in Amsterdam this June! If you work in OSINT, this event is definitely worth checking out. Looking forward to seeing familiar faces and reconnecting with awesome people in the community. @SANSInstitute @SANSDefense

@SANSInstitute @SANSDefense #OSINT

OpenAI did not respect Canadian privacy laws when it initially trained ChatGPT on Canadians’ personal information, according to a joint investigation. priv.gc.ca/en/opc-news/ne…