This is such a tragic loss. Sophia was incredibly talented, welcoming, and kind. She was an inspiration to so many and I know she’ll be sorely missed. x.com/margin_researc…

Since Apple is now notifying even more victims of spyware, let me resurface this article about Apple's Lockdown Mode, an opt-in iOS/iPadOS/macOS feature to defend against such attacks. glitchcat.xyz/p/four-things-…

I may be a little late to the whole debate about passkeys, but I am so confused by Google’s decision to remove the option to add a “regular” security key for two-factor. Only option now is passkey on a security key with a PIN. 🧐

The UK recently published cybersecurity guidance for high-risk individuals, so I took a look. Here’s what’s good and what’s missing.👇 glitchcat.xyz/p/a-look-at-th…

Online sleuths have been trying to identify these bottles for a few years now. If you happen to recognize either of the logos, I'd love to hear from you!

This year’s Norwegian threat and risk assessments state that activists, dissidents, and refugees in Norway are likely to be targeted by authoritarian regimes in 2024. I wrote about what else high-risk communities should take away from the three reports. glitchcat.xyz/p/what-high-ri…

The 2024 risk assessment from the Norwegian National Security Authority includes some details on the financial impact of cyber attacks in 2019, 2021, and 2023. Hydro in 2019 would eventually approach $71 million.

In 2021, two Norwegian journalists covering conditions for migrant workers in Qatar were detained for 30+ hours. Their equipment was seized, photos and videos deleted. I wrote about what this can teach us about digital security and source protection. glitchcat.xyz/p/lessons-lear…

Google created the Advanced Protection Program to help high-risk individuals keep their accounts secure. The program is great (I’ve used it for years!), it’s just a shame the company rarely mentions it. glitchcat.xyz/p/googles-adva…

Last year I contributed to a report with recommendations for Cybersecurity and Infrastructure Security Agency’s High-Risk Community Protection initiative with Jeff Moss, Rachel Tobac, and the rest of the Technical Advisory Council. You can read that report here. cisa.gov/sites/default/…

In 2022, NRK published a series of articles about a Kazakh doctor with a long history of botched surgeries in a small town in Norway. After losing his authorization to operate there, Jerlan Omarchanov moved to Germany where he still operates today. nrk.no/sorlandet/xl/f…

I wrote about how the Norwegian National Security Authority has supported elected officials, political parties, and non-profit organizations since early 2017. Operation Pro Bono convinced a non-profit board to approve the implementation of two-factor auth. glitchcat.xyz/p/norway-stand…

A woman was found dead in Isdalen, Norway in 1970. No one knows who she is. Last month, I obtained records through the Freedom of Information Act which show how the FBI tried to assist with identifying the unmarked cosmetics found in the woman’s luggage. glitchcat.xyz/p/death-in-ice…

REMINDER:

The BBC run one of the most valuable and beneficial 'dark web' websites in the entire world, for the benefit of all the peoples of the world.

bbc.co.uk/news/technolog…

/Cc BBC News (UK) BBC News Technology @bbcw

Thanks to Splunk’s Audra Streetman and Madeleine Tauber for hosting me on The Security Detail podcast! We talked a lot about digital threats against civil society and at-risk people, including defending against attacks w/spyware w/Apple’s Lockdown Mode. thesecuritydetail.podbean.com/e/media/

ICYMI Adrienne Fichter has published a three-part series on surveillance and spyware in Switzerland. For her third and final article, we talked about NSO Group's Pegasus tool and how victims, such as journalists and lawyers, have no recourse, even in Europe. republik.ch/2024/01/18/der…

Looking for someone familiar with FOIA in Estonia, please DM or email me!

This interview with SecurityWeek was done almost two years ago, but just published last week. We talked about different aspects of security research, including my goal to have fun with the projects I take on — like the gun hack in 2015. securityweek.com/hacker-convers…

An unidentified woman was found dead in Isdalen near Bergen, Norway in November 1970. Police found a notebook with her belongings. Maybe something for Crypto & Privacy Village next year? Anyone else interested in this? (See “The Isdal Woman,” “Death in Ice Valley.”) bbc.co.uk/programmes/art…

I’ve focused on security for at-risk civil society groups for over a decade now (🙀), including human rights defenders, lawyers, and journalists. I’m available for collaboration, consulting, and presenting next year, please get in touch if you’d like to work together!