Kapellmann

Technical Analysis Manager (OT/ICS & IO Threat Intel) @Mandiant by @Google /🇲🇽 in 🇳🇱/ #GoHuskies/ Jij bent net zo rijk. Zo rijk als je je voelt.

[Kapellmann @Kapellmann]

Thanks @RafaRemo for the help desinging my new hobby website || https://t.co/iAsCH4wwZF || After observing some similar personal/corporate sites on #ICS #OT cybersecurity from amazing people, I realized we often tend to forget about design, so why not promote the beauty of it?

[Kapellmann @Kapellmann]

AI coding agents are transforming developer workflows. However, they also create a new attack surface that is no longer just about malicious code, but about the intent of files such as skills and configurations.

Check out our new blog on this topic: https://t.co/NRpMSTfBql

[John Hultquist @JohnHultquist]

Poland releases details on December’s cyberattack on their energy infrastructure, noting similarities to prior FSB activity. The wiper has been attributed by others to Sandworm (GRU). Attribution is definitely not super clear yet. 1/x

[CyberKnow @Cyberknow20]

🚨India-Pakistan Cybertracker #1 🚨

There are at least 45 hacktivist groups that are engaging in cyber activities as a result of kinetic actions between India and Pakistan.

Geopolitical flashpoints will now always trigger hacktivist activity.

Of the 45 groups: 10 are aligned as pro-India and 35 are aligned as pro-Pakistan.

I only included groups who had made declarations or targeted either country since April 22 2025.

It is likely that more groups will join in as tensions increase, in particular I would expect to see more pro-Palestine hacktivists pivot into the conflict.

Defacement and DDoS remain the most popular and prominent attack vectors.

hopefully this doesn't get buried in the algorithm.
#IndiaPakistanWar #IndiaPakistan #Pakistan #India #pakistanindiawar

[Roman Sheremeta 🇺🇸🇺🇦 @rshereme]

1/ An interesting analysis by ChatGPT on the psychological aspects of the meeting between Zelensky and Trump-Vance is circulating online.

It reveals a masterclass in gaslighting, manipulation, and coercion from Trump and his entourage. Let’s break it down.

1/n

[CyberKnow @Cyberknow20]

🚨🚨RussiaUkrainewar Hacktivist #cybertracker edition 30. 🚨🚨

On the 3rd anniversary of full-Russian invasion of Ukraine I am sharing my latest cybertracker.

TLDR:
Russia-Ukraine war hacktivist activity continues, but
groups have dropped from over 130 active down to 80.

Daily attacks against Russia or for Russia continue daily, with DDoS still the main attack type.

Claimed attacks against Operational Technology and the claimed use of ransomware have increased since mid-2024.

Doxing remains popular when targeting Ukraine military and government officials.

The line is blurred between information operations and hacktivist activity.

The pro-Russian hacktivist civil and the Telegram purge have disrupted their operations.

Pro-Ukraine groups, like IT Army Ukraine maintain persistent activity.

The ‘convergence’ between pro-Russian and pro-Palestine hacktivists continues.

There are additional insights and information on my Substack (I wont add the link here as X doesn't like that)
#cybersecurity #Russia #Ukraine #UkraineWar

[Atlantic Council @AtlanticCouncil]

This week, Chinese AI startup DeepSeek’s R1 rattled the US after it was found to match OpenAI’s o1 model across a number of core tasks.

@DFRLab’s @kentonthibaut examines what DeepSeek’s breakthrough says and doesn’t say about the ‘AI race’ with China:
https://t.co/fk3NHF4N4k

[CyberKnow @Cyberknow20]

Hacktivist activity linked to geopolitical events won't be slowing down in 2025.

We can expect more convergence between pro-russian and pro-palestine hacktivists.

We will also continue to see new groups emerge, like Moscow Pentest.

[CyberKnow @Cyberknow20]

Not surprisingly noname05716 has joined the new Arabic hacktivist collective Operation Sword of Justice as the hacktivist convergence continues.

Noname05716 went from operating in isolation until in late 2023 they started teaming up with most hacktivist groups.

[Dina Sadek @DinaMSadek]

Our team at the @DFRLab documented more than 40 foreign interference allegations related to the 2024 US elections in our Foreign Interference Attribution Tracker (FIAT) launched yesterday. We explain our methodology and initial findings here: https://t.co/dFAqCalXAx

[QENNY | THE SPOOKY LAWYER ON YOUTUBE @AKBrews]

This band is called Mac Sabbath and it's a fever dream.

[Security BSides Athens @BSidesAth]

A 500-seat auditorium filled with people, and more people outside in the networking/sponsors area or already engaging in the soldering sessions. 💻 🫶

[Rio @0x09AL]

Bsides Tirana 2024 CFP is still open.

If you want to be part of the biggest technical cyber security conference in Albania now is your chance.

Submit your talk proposal: https://t.co/SxzDwplqxA

#BSidesTirana #BSides #conference #security #tirana #albania

[Mandiant (part of Google Cloud) @Mandiant]

💡 #Hacktivism is back and more sophisticated than ever.

Since early 2022, we’ve seen a resurgence in threat activity from hacktivist actors, with increased capabilities in intrusion and information operations.

Explore our latest blog post: https://t.co/1aNad9MmxT

[Kapellmann @Kapellmann]

It was a great pleasure to work on this with @AldenWahlstrom, James Sadowski, Davyn Baumann, Josh Palatucci, and Jose Nazario!

[Kapellmann @Kapellmann]

Our new blog is up: Global Revival of Hacktivism Requires Increased Vigilance from Defenders

'Since early 2022, @Mandiant has observed the revival and intensification of threat activity from actors leveraging hacktivist tactics and techniques...'

https://t.co/IfiSqc39QW

[Kapellmann @Kapellmann]

As the volume and complexity of activity grows and new actors leverage hacktivist tactics, defenders must determine how to filter, assess, and neutralize a range of novel and evolving threats. Proactive monitoring of hacktivist threats will bring manifold benefits to defenders...

[Kapellmann @Kapellmann]

This is the second time @hbomax makes my life impossible. You need to figure out how to handle other regions.

@hbomaxnl is there any way to get in touch to get real support? (No, the website cannot troubleshoot my case, already tried)

[CheckFirst @CheckFirstHQ]

📢 With the support of @resetdottech & 20+ fact-checking organisations, we unveil "Operation Overload". It is a sophisticated, cross-country disinformation campaign orchestrated to disseminate pro-Russian propaganda in the West.
#OperationOverload
https://t.co/gZIRaKYIQz

[Kapellmann @Kapellmann]

Excited to speak now in #BSidesAth - See you in June!!

@BSidesAth