L², PhD

DFIR, CTI & Malware Researcher | Head of CSIRT — ex-ANSSI
Focus: Chinese APTs, Russia-linked actors, cybercrime | PhD (International Law)

[L², PhD @L_Lgde]

New research: deep dive into Sagerunex, a signature malware used by Lotus Panda (aka Red Salamander).

This post revisits known analyses and adds new insights into command handling, proxy logic, and C2 behavior.

[Peter Gostev @petergostev]

GPT-6 escaped OpenAI's evals sandbox during testing on CyberGym, hacked into Hugging Face's prod DB to find the answers. HF couldn't use GPT or Anthropic models for defence, so they had to use GLM-5.2 to investigate the hack. So many levels of wtf here.

[Guinness World Records @GWR]

Can we give that game a record for the most entertaining match in World Cup history?

[BeFootball @_BeFootball]

Merci pour tout monsieur Didier Deschamps, la France vous aime et vous remercie 🙏❤️🇫🇷

[Antonio Valencia @anto_v25]

Gracias Inglaterra, gracias Francia por el tremendo Mundial que hicieron.
Ahora les toca un merecido descanso a todos los jugadores, al cuerpo técnico y a cada uno de los ayudantes. Disfruten de la vida y gracias por regalarnos un torneo inolvidable. 👏⚽🌍

[Motivaciones Fútbol @MotivacionesF]

🤝❤️ ¡ENTENDIERON TODO!

Tras el pitazo final del partido por el tercer lugar entre Inglaterra y Francia, ocurrió una de las imágenes más emotivas de este Mundial.

Lejos de los festejos y la frustración, jugadores de ambas selecciones se reunieron en el centro del campo para abrazarse y rezar juntos, recordando que hay cosas mucho más grandes que el resultado de un partido.

Bukayo Saka, Marc Guéhi y Trevoh Chalobah, recién coronados con la medalla de bronce, caminaron directamente hacia sus amigos franceses Castello Lukeba, Dayot Upamecano y Jean-Philippe Mateta para compartir ese momento de unión.

🥹 En un deporte donde la rivalidad suele ocupar todos los focos, ellos dejaron el mensaje más valioso de esta Copa del Mundo: el respeto, la amistad y la hermandad siempre estarán por encima del marcador.

👏 Aquí no hay colores. Aquí todo el mundo se pone de pie.

[Volodymyr Zelenskyy / Володимир Зеленський @ZelenskyyUa]

The outcome of my talks with Emmanuel and the work of our teams is an important agreement between Ukraine and France – a step that reflects France’s true leadership in defense cooperation with Ukraine, in the interest of all of Europe.

The key points:

Ukraine will receive licenses to produce very powerful weapons – SCALP missiles, AASM bombs, and Aster 30 missiles in cooperation with Italy. France will also work with us and with other partners on the FREYJA anti-ballistic program – our unique future strength.

Ukraine will be the first to receive the new enhanced Franco-Italian SAMP/T NG systems. These are highly effective anti-ballistic systems. France will also provide two SAMP/T batteries to strengthen our defenses already this year. France and Italy will also accelerate deliveries of Aster 30 missiles by October this year.

Additionally, Ukraine will procure the first 16 Rafale fighter jets for our combat aviation, along with their weapons package. Training for our pilots and maintenance crews in France is set to begin already this year. After that, the first four Rafale aircraft will be delivered to the Armed Forces of Ukraine. We are systematically developing Ukraine's combat capabilities.

Thank you, Emmanuel! Thank you, France! Glory to Ukraine!

@EmmanuelMacron

[Ctrl-Alt-Intel @ctrlaltintel]

9 McNuggets & a McChicken burger helped us link a Russian hacker to 🇷🇺 government😅

Denis Obrezko was put on the international wanted listed by Russia, following an FBI arrest in Phuket last November.

Our independent investigation shows Obrezko has closes ties to the Moscow👇

[Tom Antonov @Tom_Antonov]

France and Ukraine signed an agreement on Monday, July 13, providing for Kyiv's acquisition of 16 Rafale fighter jets and their associated weapons systems. The first aircraft are expected to enter service in 🇺🇦 airspace as early as 2028–2029, French President Macron announced.
https://t.co/2WZgbEGPcw

[L², PhD @L_Lgde]

@ctrlaltintel Great work

[Ctrl-Alt-Intel @ctrlaltintel]

Full analysis & writeup here: https://t.co/V8hLjd8IxF

[Lukasz Olejnik @lukOlejnik]

European Union formally attributed a years-long campaign of cyberattacks targeting EU member states to the Russian Federation, identifying the FSB’s 16th Centre as the structure controlling several threat groups, including Turla. It carried out intrusions into government networks and sabotage operations against critical infrastructure. In Poland, it conducted disruptive sabotage operations targeting, among other facilities, combined heat and power plants. The Council of the EU imposed sanctions on nine individuals and four entities, including GRU officers, cybercriminals, pro-Russian groups and companies providing technical infrastructure.

France was the only State to publish its own detailed political attribution accompanied by a technical and strategic report. It identified FSB Unit 61240 and described cyberattacks against the defence ministry, the French embassy in Moscow, the justice sector and a research institute working for the defence industry. Finland published a technical assessment and summoned the Russian ambassador. Germany and the Netherlands also took diplomatic action. Austria, Belgium, Czechia, Estonia, Lithuania and Poland issued national statements.

[Kylian Mbappé @KMbappe]

Madame Celeste Amarilla,
Vous êtes une femme méprisable et indigne de sa fonction.
Vous ne représentez pas le Paraguay, ce pays qui a transpiré la passion et l’honneur tout au long de la compétition. Par votre inconscience et votre racisme décomplexé, le monde entier a déjà oublié le parcours et l’effort historique que vos joueurs ont réalisés durant cette coupe du monde pour laisser place à une dame incompétente donnant la pire image possible de son pays.
Je ne laisserai jamais aux gens comme elle, la liberté de laisser propager leur haine et leur racisme à travers le monde.

[Swissky @pentest_swissky]

Leanstral 1.5: Proof Abundance for All - @MistralAI
https://t.co/m4qebqHYVJ

[Michel Denisot @michel_denisot]

L’ambassadeur du Paraguay convoqué au Quai d’Orsay.

[L², PhD @L_Lgde]

@CapHornier_ @Milizac83 Je ne voyais pas trop l’intérêt de ces accords à l’époque : l’UE était un cadre suffisant pour faire tout ce que permet ces accords. Ça faisait un peu doublon... La question du doublon a été réglée du coup et ils forment donc une base légale intéressante pour la coop FR-uk

[L², PhD @L_Lgde]

Great work by @UK_Daniel_Card: a useful model of attacks observed across multiple environments over several years. Very valuable for SOC and CSIRT analysts.

[mRr3b00t @UK_Daniel_Card]

Try this: https://t.co/VPUOkWEuck

[Yann LeCun @ylecun]

Yet we still don't have level-5 self-driving cars, and certainly not self-serving cars that can learn to drive in a few hours of practice like any teenager.
We don't even have domestic robots that can do what 10-year olds can do the first time we ask them.
We don't even have robots that are nearly as smart as a house cat.
The G in AGI is nonsense.

[L², PhD @L_Lgde]

@ProcessusT Intéressant, merci :)

[Mrinal @Hi_Mrinal]

this was such a good read

[Arthur Mensch @arthurmensch]

https://t.co/mdgAEQBp4i