Catalin Cimpanu

@campuscodi.risky.biz

☆ Cybersecurity reporter
★ Newsletters at Risky Business
#infosec #cybersecurity

https://risky.biz

@maggiemcneill.bsky.socialReposted by @campuscodi.risky.biz

The term everyone is dancing around is "secret police", a hallmark of totalitarian regimes.

Jared@jaredmcclain.bsky.social

Things got more insane just about as soon as I posted this last night. DHS is now arguing that we cannot even put the names of ICE officers in our lawsuit against those officers. Their position is that, if a defendant works for DHS, they cannot be named in a lawsuit. Never seen anything like it.

All this time, while Defendants have refused to identify Does 4 and 5 or respond to Leo’s discovery requests, the six-month statute of limitations on his FTCA claims has nearly expired. So, on October 6, Leo sought Defendants’ consent to file an amended complaint that (1) adds his FTCA claims against the United States and (2) adds the names of Does 1, 2, and 3. These minimal changes are shown in a redline attached to this filing. Defendants, however, refused to consent to Leo’s amendments because there is not a protective order in place. One of Defendants’ positions with respect to the protective order is that the “full legal names” of all government employees “should be confidential.” (ECF 109, at 2). That position, apparently, means that Defendants even oppose Leo identifying specific officers in his lawsuit against those very officers based on their misconduct in carrying out their public duties. Because Defendants will not consent to Leo’s amendments, Leo has filed this motion for leave.Justice also requires granting Leo leave to name the Doe officers as defendants. Despite DHS’s remarkable position that all government employees’ names are confidential, parties routinely sue government employees by name. In fact, Rule 10(a) “requires a complaint to ‘include the names of all the parties.’” Doe v. Frank, 951 F.2d 320, 322 (11th Cir. 1992) (per curiam) (quoting Fed. R. Civ. P. 10(a)). “Lawsuits are public events.” Id. Rule 10(a) “protects the public’s legitimate interest in knowing all of the facts involved, including the identity of the parties.” Id. Only in an “exceptional case” can a party’s name be withheld from the public. Id. And that bar is even higher for public employees since their employment “diminishes their privacy interests” given “the corresponding public interest in knowing how public employees are performing their jobs.” Stern v. FBI, 737 F.2d 84, 92 (D.C. Cir. 1984);
2
@netblocks.orgReposted by @campuscodi.risky.biz

⚠️ Confirmed: Metrics show a second collapse in the networks of Russian tech giant Yandex after a new Ukrainian drone attack on data centers in Vladimir this morning. The campaign comes not long after Russia's threat to give Ukraine a "digital detox."

Graph from NetBlocks showing network connectivity by provider in Russia from October 6, 2026, to October 11, 2026. The y-axis represents normalized connectivity from 0% to 100%, and the x-axis represents dates and times. The graph indicates connectivity remaining stable in several Yandex owned networks throughout most of the period, before dropping on the early morning of October 8 and the second time on the morning of October 11(Russia time). The disruptions correspond to power outages following Ukranian drone attacks targeting Yandex datacenters.The chart has a dark background with two red circles highlighting the decline at the end of the period, and includes the NetBlocks logo in the lower left corner with the Mapping Internet Freedom slogan. Yandex.Cloud LLC, AS200350 (30% / 30%), YANDEX LLC, AS13238 (63% / 63%)
@hacks4pancakes.comReposted by @campuscodi.risky.biz

The fact that my ballot appears to have been conveniently lost or delayed by US customs despite every effort to be early and discreet is tied to why I try to avoid going to America anymore at all even as a citizen and why I don’t have services like Global Entry which could be weaponised against me.

@zackwhittaker.comReposted by @campuscodi.risky.biz

NYT reports that the FBI has arrested a man in Pennsylvania, who is a Canadian citizen, on suspicion of carrying out the hack last month that exposed tens of thousands of FBI agents' personal information.

@andytseng.bsky.socialReposted by @campuscodi.risky.biz

"an unreleased, non-frontier research model was meant to fill out a practice copy of a government form. When the copy failed to load or the model closed it by mistake, the model instead navigated to the website where the real form is normally hosted and submitted the form there." 🤦🏻‍♂️
#AI #Anthropic

@socket.devReposted by @campuscodi.risky.biz

🚨 A new GhostAction wave has hit hundreds of GitHub repos, including Uber’s athenadriver and Pyxel. Attackers used compromised maintainer accounts to plant fake “security audit” workflows that steal GitHub Actions secrets.

Older posts