Kurt Baumgartner @k_sec

ex-comrade. I have many leather-bound books and my apartment smells of rich mahogany. thanks for all the xor Boulder, CO Joined August 2010

Tweets

16K
Followers

7K
Following

1K
Likes

10K

State of Statecraft Conference @what_is_sos

2 months ago

State of Statecraft (SOS) is a new security and intelligence conference purposed to bring together observers of espionage, sabotage, influence, and other unique forms of covert statecraft to share their work with a community hyper-focused on tackling state-sponsored ops.

3 27 45 11K 24

Download Image

John Hultquist @JohnHultquist

2 months ago

A Chinese cyberespionage actor was arrested in Italy over the holiday and faces extradition to the US. The crew he's connected to is pretty serious. reuters.com/world/china/it…

12 69 228 26K 56

Kurt Baumgartner @k_sec

3 months ago

hey folks, you'll find me where the skies are blue, as "kurtisj". more open source and real free speech, much less trash

0 0 1 687 0

Kurt Baumgartner @k_sec

6 months ago

x-middleware-subrequest: middleware

0 0 0 1K 0

GreyNoise @GreyNoiseIO

6 months ago

🚨 GreyNoise has detected active exploitation of Silk Typhoon-linked CVEs in the past 24 hours. 90 threat IPs actively targeting. Full analysis: greynoise.io/blog/active-ex… #GreyNoise #Cybersecurity #SilkTyphoon

2 72 218 15K 66

Microsoft Threat Intelligence @MsftSecIntel

6 months ago

Since late February 2025, Microsoft has observed Moonstone Sleet, a North Korean state actor, deploying Qilin ransomware at a limited number of orgs. Qilin is a ransomware as a service (RaaS) payload used by multiple threat actors, both state-sponsored and cybercriminal groups.

6 109 417 48K 114

Kurt Baumgartner @k_sec

6 months ago

ransomware takes down oooooold company bbc.co.uk/news/uk-englan…

0 0 1 454 0

National Security Division, U.S. Dept of Justice @DOJNatSec

6 months ago

Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns 🔗: justice.gov/opa/pr/justice…

46 139 376 27K 19

Download Image

Justin Elze @HackingLZ

6 months ago

😂😂😂😂

Florian Roth ⚡️ @cyb3rops

6 months ago

😂😂😂😂

8 34 339 25K 50

2 3 28 4K 1

Costin Raiu @craiu

6 months ago

🚨 Suspicious French-themed domains spotted in the Prospero OOO (RU) range! 🚨 A cluster of domains mimicking BNP Paribas, Ameli, La Poste, Netflix, and more—likely set up for fraud. Stay vigilant! 🕵️‍♂️ Examples: 15-bnpparibas[.]com 5-bnpparibas[.]com 8-bnpparibas[.]com…

4 34 63 8K 12

Kurt Baumgartner @k_sec

6 months ago

for some reason, the related CISA page notifying on russian misinformation campaigns during the election was removed. but you can still find it: web.archive.org/web/2025011509…

0 0 3 395 1

Kurt Baumgartner @k_sec

6 months ago

apnews.com/article/electi…

0 0 0 267 0

Kurt Baumgartner @k_sec

6 months ago

apnews.com/article/russia…

0 0 1 298 0

Kurt Baumgartner @k_sec

6 months ago

apnews.com/article/trump-…

0 0 0 257 0

Kurt Baumgartner @k_sec

6 months ago

theguardian.com/us-news/2025/f…

0 0 0 393 0

Ben Zhou @benbybit

6 months ago

Bybit Hack Forensics Report As promised, here are the preliminary reports of the hack conducted by @sygnia_labs and @Verichains Screenshotted the conclusion and here is the link to the full report: docsend.com/view/s/rmdi832…

963 1K 6K 2.8M 1K

Download Image

Kurt Baumgartner @k_sec

7 months ago

the term "thrunting" isn't great, but this article proposes preparing and visualising prior to your hunts. it's excellent advice, keep focus dispatch.thorcollective.com/p/see-evil-thr…

0 0 3 374 1

Kurt Baumgartner @k_sec

7 months ago

bcrypt might be a better alternative than sha256. maybe.

Troy Hunt @troyhunt

7 months ago

bcrypt might be a better alternative than sha256. maybe.

112 50 964 206K 339

Download Image

0 0 0 383 0

Kurt Baumgartner @k_sec

7 months ago

a fundamental detection engineering challenge is that you can't codify "intent". one environment's "malicious" is another environment's "welp, i got it working and done"