Russia-linked hackers have been phishing Ukrainian military with Signal QR codes that look like group invites but instead add a linked device that eavesdrops on messages. Update Signal now to get its fix for a tactic that’s likely to spread beyond Ukraine. wired.com/story/russia-s…

NEW - Google researchers detail the various ways in which Russia is targeting Ukrainian military Signal accounts. Includes attacks via QR code (Qishing) and some sneaky phishing mimicking an artillery software used by Ukraine. Signal updates to address. forbes.com/sites/thomasbr…

Nothing the cowards love more than the humiliation of the brave.

It's also unclear to me why this NSA doc would refer to a "vulnerability" in Signal in describing the Mandiant research. The Mandiant research describes the tradecraft as abuse of a legitimate Signal feature, not a new vuln in Signal. x.com/JimLaPorta/sta…

Right now there are a lot of new eyes on Signal, and not all of them are familiar with secure messaging and its nuances. Which means there’s misinfo flying around that might drive people away from Signal and private communications. One piece of misinfo we need to address is the

Today, Microsoft Threat Intelligence Center (MSTIC) is excited to announce the release of RIFT, a tool designed to assist malware analysts automate the identification of attacker-written code within Rust binaries. Blog: microsoft.com/en-us/security… Tool: github.com/microsoft/RIFT

State of Statecraft (SOS) is a new security and intelligence conference purposed to bring together observers of espionage, sabotage, influence, and other unique forms of covert statecraft to share their work with a community hyper-focused on tackling state-sponsored ops.

🛡️We added Citrix NetScaler ADC and Gateway out-of-bounds read vulnerability CVE-2025-5777 to our Known Exploited Vulnerabilities Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec