Organizer of State of Statecraft (SOS) conference - @what_is_sos October 22, 2026 in Brussels Belgium
Washington, DC
Joined June 2009
- Tweets4.7K
- Following1.5K
- Followers1.1K
- Likes6.5K
Michael 🆘 retweeted
To Subvert the State: The Ecosystem of Russian Active Measures - Oleksandr Danylyuk and I have just published a book through @RUSI_org on the forms and methods used by the Russian Special Services to manipulate politics abroad: routledge.com/To-Subvert-the…
Michael 🆘 retweeted
The SBU arrested an officer who was serving as a commander of a special purpose group in Ukraine's National Guard for serving as an agent of Russia's GRU since July. According to law enforcement, for $1,000 in cryptocurrency, he gave the GRU access to his personal account on Delta by connecting through a third-party device. He was also given instructions to sabotage military vehicles for money and record the results on video.
pravda.com.ua/news/2026/08/2…
Michael 🆘 retweeted
‼️🇷🇺 I promised a longer thread on what's inside our big military elite report. In lieu of itemizing the executive summary (you can read that yourself) or hitting a few key toplines, I thought I'd walk you through with graphs, charts, and the like. Thread below... ⤵️
Michael 🆘 retweeted
⏳Less than 10 days until the end of the SOS CFP on Aug 14!
💥 Expert in state-sponsored actors? Investigated hybrid-ops? Taking the craft of disruption, attribution, and investigation to a new level? Ready to shift perspectives?
Your moment is now: stateofstatecraft.com/cfp
Michael 🆘 retweeted
Registration and CFP for 🆘VOLUME II is officially OPEN!
On October 22, 2026, we return to Brussels to showcase a day of community and discussions on the latest developments in state-sponsored operations and the actors & institutions that champion them.
Michael 🆘 retweeted
‼️At the end of last year, there was a series of coordinated attacks in Polish cyberspace.
📌Today, our team is publishing a report describing the technical analysis of these events. We show the scheme of operation and the tools used by the attackers.
➡️cert.pl/uploads/docs/CERT_Po…
Michael 🆘 retweeted
Germany will strike back against cyberattackers, including abroad, enabling countermeasures with a low threshold for activation. A new defense center against hybrid threats will consolidate intelligence along with defense strategies. It is being prepared by the domestic intelligence agency and expected to begin operations this year. The government will implement a "turning point for intelligence services," having been too dependent on foreign partners for information. Intelligence services will receive new powers to gather information independently and act operationally.
Germany will also restrict public access to sensitive infrastructure data. A new framework law will reverse the current transparency principle, with full transparency applying only in special cases. This follows the Berlin power grid attack, which demonstrated how vulnerable critical infrastructure remains. sueddeutsche.de/projekte/art…
Michael 🆘 retweeted
DISTRICTCON IS STILL A GO! We are excited to see you all on Saturday, January 24 as we are still going through our normal programming!
While we are unable to process refunds, we are adding virtual components to Saturday AND Sunday including a livestream for public sessions for ticket holders. Plus, our badge challenge and Village of Villages CTF will be available online (we’re still tweaking with these - more info soon). We are adding a livestream for attendees (ticket holders) to join us virtually. We are also working on a way to send swag to attendees that cannot make it safely because of the weather.
We appreciate your patience as we are a mighty team of volunteers pivoting based on Mother Nature. 🌨️ ☃️ Please reach out to outreach@districtcon.org if you have additional questions - ticket holders will be hearing from us very soon.
- The DistrictCon Team
Michael 🆘 retweeted
В Таиланде арестовали «всемирно известного» российского хакера по запросу США
storage.googleapis.com/kldsc…
Michael 🆘 retweeted
I had a discussion with @FrancisDearnley of Ukraine: The Latest with the @Telegraph on Monday on the current trajectory of Russia's invasion - podcasts.apple.com/us/podcas… @RUSI_org
Michael 🆘 retweeted
Had a great time on the @malspace podcast with Julien talking about my PIVOTcon presentation from tracking compartmentalized attacks to thoughts on attribution. Fun convo (and I loved the theme song at the end!). 🎶 Thanks for having me!
After 365 calendar duels…⏳
@ashl3y_shen on compartmentalized attacks, IAGs, attribution & Swiss cheese 🧀
🎧 malspace.com/episodes/multip…
#CyberSecurity #ThreatIntel #ThreatResearch
Michael 🆘 retweeted
Did you know that there is a monument to NotPetya in Moscow? It was installed by INVITRO, a Russian medical firm & one of the victims of the 2017 global attack initially aimed at Ukraine. INVITRO's PR goal was to remind the world that it knows how to fight viruses
Michael 🆘 retweeted
"National Science Foundation cancels research grants related to misinformation and disinformation". I mean, at least some of it had to be merit-based. Isn't cutting everything linked to "disinformation" a bit too harsh? niemanlab.org/2025/04/nation…
Michael 🆘 retweeted
Today, @Volexity released GoResolver, open-source tooling to assist reverse engineers with obfuscated Golang samples. @r00tbsd & Killian Raimbaud presented details at INCYBER Forum earlier today. Learn how GoResolver works + where to download it: volexity.com/blog/2025/04/01…
#dfir
Michael 🆘 retweeted
All of the billions spent on AI innovation just so we can get these beautiful cat videos
Michael 🆘 retweeted
Today, Google Threat Intelligence is alerting the community to increasing efforts from several Russia state-aligned threat actors (GRU, FSB, etc.) to compromise Signal Messenger accounts.
cloud.google.com/blog/topics…
Michael 🆘 retweeted
OG Syrian war OSINT accounts who started in 2011-2013 coming out of retirement to geolocate the collapse of the Assad regime
Michael 🆘 retweeted
.@Volexity has developed a new #opensource tool, “HWP Extract”, a lightweight Python library & CLI for interacting with Hangul Word Processor files. It also supports object extraction from password-protected HWP files. Download here: github.com/volexity/hwp-extr…
#dfir #threatintel
Michael 🆘 retweeted
"Indignation as security policy" is also firmly steeped within Russia's use of offensive cyber capabilities.
We tend not to fully appreciate how much historical sabotage activity from GTsST is driven by this search for redress instead of considered pol/mil objectives.
Multiple people (@SevaUT @b_nishanov @sgutterman @DrRadchenko) have noted that Putin's response to @BBCSteveR about the invasion of 🇺🇦 shows the role status/pride/respect/resentment played in Putin's decision. 1/3
