Peter J. Fry

infosec, human rights, privacy, tech.

[John Scott-Railton @jsrailton]

BREAKING: powerful iPhone hacking tools used by Chinese criminals originated from US defense giant L3 Harris.

The $LHX zero-click exploits went to Russian spies too.

Unbelievable harm to our collective security.

Scoop by @lorenzofb, here's why this matters 1/

[International Cyber Digest @IntCyberDigest]

Here’s a second run to show FSD drives you into a lake every time.

[John Scott-Railton @jsrailton]

BREAKING: It started with WhatsApp messages.

They said they were students & tried to build rapport with Angolan journalist Teixeira Cândido.

Then the links began arriving.

Someone was trying to hack him with #Predator spyware.

New bombshell investigation by @AmnestyTech 1/

[Sandy 〽️ @RightSandy]

"Dave Kennedy: Inventor of Pacemaker Signal Detector"

Started on this the minute he knew Nancy Guthrie had a pacemaker.

@HackingDave - all around nice guy too.

[Hong Kong Free Press HKFP @hkfp]

BREAKING: Jimmy Lai jailed for 20 years in Hong Kong after nat. security conviction. In full: https://t.co/o1FGQtTKvw

[Maarten Hopman @maartenhopman94]

Denmark changes Greenland’s name to Epstein Island so Trump will stop talking about it.

[Chris Wysopal @WeldPond]

“The Conscience of a Hacker” by The Mentor is 40 years old today.

[Ryan Grim @ryangrim]

It’s important to remember that Trump genuinely believes, and was told repeatedly by Rubio, that Venezuela had a hand in manipulating voting machines to help Biden win in 2020.

What Trump did today must be understood in the context of that paranoid lunacy.

[Donncha Ó Cearbhaill @DonnchaC]

🚨 A huge leak exposes the new targets and internal operations of Intellexa, the secretive and murky company behind the notorious Predator spyware.

Introducing #IntellexaLeaks, a joint investigation with partners @insidestory_gr, @haaretzcom & WAV Research Collective 🧵👇

[Chris Murphy 🟧 @ChrisMurphyCT]

You might not have caught what just happened on the Senate floor, but the Senate just “deemed as passed” the Epstein resolution.

That means as soon as it arrives from the House, it automatically passes the Senate (with no amendments) and heads to the President’s desk.

Wow.

[Nick VanGilder @nickvangilder]

So, apparently the password for the video surveillance system at the Louvre (the most famous museum on earth) was… wait for it: Louvre. If that’s not bad enough, a 2014 security assessment determined that the Louvre network was:

- Riddled with trivial passwords
- Comprised of outdated systems
- Camera feeds able to be manipulated
- Badge access able to be modified

Yikes. This sounds like a pentest I’ve done before. Well, fast forward to 2015. Thankfully, security posture has improved, right? Wrong. The 2015 security assessment encountered “software so old it should’ve been in a museum exhibit of its own.”

Now, let’s fast forward to 2025. SURELY, security has gotten better by now, right? Wrong again. Apparently, much of that same infrastructure was/is still in use and wait for it…. running on Windows Server 2003.

SMH. 🤦‍♂️

Full story here: https://t.co/DG0pVJwFer

[Heidi Blake @HeidilBlake]

It's been an honour to work with @InTheDarkTNY to investigate the murders at Whitehouse Farm. Our new series, Blood Relatives, reveals shocking truths about the evidence used to imprison Jeremy Bamber and raises urgent questions for the UK justice system. https://t.co/cygZh60VHZ

[Lighthouse Reports @LHreports]

🧵What’s the biggest lie the surveillance industry tells? That they only sell to legal clients. That there are red lines. But what do these companies say when they think nobody is watching? We went undercover to find out

[John Scott-Railton @jsrailton]

NEW: fresh trouble for mercenary spyware companies like NSO Group.

@Apple launching substantial bounties on the zero-click exploits that feed the supply chain behind products like Pegasus & Paragon's Graphite.

With bonuses, exploit developers can hit $5 million payouts. 1/

[gabsmashh @gabsmashh]

bad cable management tbh

[Signal @signalapp]

We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe.

https://t.co/015qmQnIS2

[Robert Graham @robertgraham]

This story is nonsense.

It's just normal criminal enterprise for sending SMS spam and anonymous messages. Somebody used this service to send SMS threats to some politicians, so the Secret Service traced it back here. They are describing it as some special political threat ("35 mile radius from the UN") when it's just perfectly normal criminal enterprise.

We know it's a crap story because to the way the New York Times story on this cites anonymous sources in the administration, and then James A. Lewis to confirm it. This guy, formerly of the CSIS think tank, is the the NYTimes regularly trots out to confirm cybersecurity claims by anonymous government officials.

Ir's just normal crime folks, there's absolutely none of the threats here that they claim.

[Committee to Protect Journalists @pressfreedom]

Israel’s targeted strikes on two newspaper offices in Yemen’s capital, which killed 31 journalists and media support workers on Sept. 10, is the second deadliest single attack on the press ever recorded by CPJ, following the 2009 Maguindanao massacre in the Philippines. The attack signals that Israel’s deadly pattern of attacking reporters and newsrooms on the grounds that they publish “terrorist” propaganda has spread firmly across the Middle East. Read more: https://t.co/Aqx4RIyFqe

📷: AFP/Mohammed Huwais

[Hack The Planet 💾 @HackedPlanet]

Hackers was released 30 years ago, today: https://t.co/AfNadqL8EH 💾

#Hackers #HackersDay #HackThePlanet