Gate 15

How can you stay ahead of scams? Count before you click! Take9 seconds to pause and think before you click, download, or share. Follow @pausetake9.bsky.social for tips to avoid online frauds and scams. #take9 pausetake9.org

The NSA have joined allied organizations to release the guidance, “Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation.” Read more below: www.nsa.gov/Press-Room/P... #cybersecurity @andyjabbour.bsky.social

Emsisoft released their State of Ransomware in Q3 2026 report, highlighting AI risks with rogue agents and attacks on data centers. Read more below: www.emsisoft.com/en/blog/4790... #cybersecurity @andyjabbour.bsky.social

Did Ukrainian drone strikes really silence Russia's social media bots? (No) A real Cloudflare chart fueled a viral story ab MAGA and AfD accounts going quiet. But the evidence doesn't support the rumor. I wrote about bots, vibes, & what we've lost as platforms have shut down tools & data access.

The ad industry: “We need your data to show you relevant ads.” Spyware vendors: “Thanks, we’ll take it from here.” citizenlab.ca/research/how...

-Russia arrests DataSuckers hacking group -Ad company delivered zero-click exploits and spyware -OpenAI employee arrested for planting spy device -US disrupts 40 DPRK laptop farms -Cyberattack halts Danish-German tunnel construction N: news.risky.biz/risky-bullet... P: risky.biz/RBNEWS621/

Your brain is for brilliant ideas… not remembering 102 variations of your cat’s name with (or was it without?) an exclamation point. Get a password manager to generate and remember your passwords for you. 🔒 Level up today: https://www.staysafeonline.org/articles/password-managers

et tu, 🇨🇦? 'The Great White North is the latest country to contemplate legislation that could essentially mandate backdoors and increase data retention in encrypted services' - @mattburgess1.bsky.social & @lhn.bsky.social www.wired.com/story/kernel... @gate15.bsky.social @enbrown.bsky.social

New PSA from CISA & the FBI: 'Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sensitive information or install malware on targeted devices...' www.cisa.gov/resources-to... #CyberSecurity @gate15.bsky.social @campuscodi.risky.biz

I had **such a great time!** interviewing Jesse for this #podcast! Super fun convo on securing one of our most critical lifelines, 🧀 The Sifl & Olly Show ➕‼️ 'The Gate 15 Interview EP 75. E-ISAC’s Jesse Sythe on GridEx, Resilience, Fromage & MTV!' gate15.global/the-gate-15-... @gate15.bsky.social

"The FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned" krebsonsecurity.com/2026/10/feds...

An attacker found our Flowise #honeypot, a decoy #AI platform, and literally tried to turn the agent into its very own attack assistant. They pulled credentials, planted a callback, and fed the model data from a likely iGaming target. buff.ly/AMujIsR

Cybersecurity is a fast-growing field that needs more problem solvers. This #CyberCareerWeek, explore how you can build a career protecting people and infrastructure at getcybersmart.org. #GetCyberSmart2026 #take9 #cybercivildefense

Using your name and birth year gives scammers the cheat codes to your life. Outsmart them with three random words, or let a password manager do it for you. Effortless security looks good on you 🔒🩷 Big shoutout to @protectngo.bsky.social for these helpful tips!

UK NCSC advisory: "The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated." www.ncsc.gov.uk/news/critica...

Microsoft, Google, and Mozilla are removing trust for eMudhra’s root certificates following a security compromise. Read the details on how major browsers are responding to the incident: https://rhisac.org/general-blog/microsoft-chrome-firefox-respond-to-emudhra-ca-revocation-after-compromise/

The FBI released a new flash, Update on Government of Iran Cyber Actors’ Deployment of Telegram C2 to Push Malware to Identified Targets, to disseminate a detailed malware analysis of the HEAVYGRAM malware. Read more below: www.ic3.gov/CSA/2026/260... #cybersecurity @andyjabbour.bsky.social

Easthampton school network down after cybersecurity incident Easthampton Public Schools’ computer network is down after a cybersecurity incident was disc Read more: https://www.westernmassnews.com/2026/10/07/easthampton-school-network-down-after-cybersecurity-incident/

Cyber attack on Publica software supplier: data leak confirmed | PUBLICA An external software supplier used by the Swiss Federal Pension Fund Publica identified a cyber Read more: https://www.publica.ch/en/about-us/news/cyber-attack-publica-software-supplier-data-leak-confirmed

You’ve heard of SMS text-codes but have you ever tried an authenticator app or physical key to secure your accounts? 👀

24% of recent scams are coming straight for your passwords. Stop playing roulette with “Password2026!” and hoping for the best 🎲 Let a password manager handle the heavy lifting by generating and storing unique logins for you. Outsmart the scammers 🔒

😑 'AI models may be months away from being capable enough to self-replicate on commercial (IoT) devices, like smart ovens...TV boxes. A replicator like this would be challenging to shut down' - @anthropic.com www.anthropic.com/research/sel... #CyberSecurity @gate15.bsky.social @campuscodi.risky.biz

Two updates re: 🇰🇵 IT worker threat. FBI PSA - North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment www.ic3.gov/PSA/2026/PSA... #CyberSecurity @gate15.bsky.social @campuscodi.risky.biz #northkorea

Justice Department Announces Coordinated Actions to Combat North Korean Remote IT Worker Schemes Affecting More than 70 U.S. Companies www.justice.gov/opa/pr/justi... 🇰🇵 #CyberSecurity @gate15.bsky.social @campuscodi.risky.biz

🇦🇺 quick to get this out: 'Protecting (OT) and edge devices; Alert on the #cybersecurity risks to (OT), including refrigeration and cooling technology, with mitigation advice and guidance...' www.cyber.gov.au/alert/protec... @gate15.bsky.social @campuscodi.risky.biz

Microsoft and Health-ISAC teamed up with a bunch of other partners to investigate and disrupt a trio of major phishing marketplaces. www.cybersecuritydive.com/news/phishin...

@binarydefense.com released "24/7 M365 – All Ransom, No Ware," highlighting how ransomware has become a category of extortion, not a piece of encryption malware. Read more below: binarydefense.com/resources/bl... #cybersecurity @andyjabbour.bsky.social

A new episode of Nerd Out is out now! In this episode, the team is joined by Joe Levy and Sharon Dye, founders of The HX3 Advisory Group, to talk about National Preparedness Month! Our podcast is available now, check it out! #cybersecurity @andyjabbour.bsky.social gate15.global/nerd-out-ep-...

South Africa Seeks Help After Cyberattack Targets Air Traffic Control The South African state-owned company that provides air traffic control (ATC) and weather op Read more: https://www.darkreading.com/cyberattacks-data-breaches/south-africa-help-cyberattack-air-traffic-control

New from WaterISAC‼️ (TLP:CLEAR) WaterISAC’s Quarterly Water Sector Incident Summary, April to June 2026 – Executive Summary www.waterisac.org/tlpclear-wat... #CyberSecurity #security #water cc @gate15.bsky.social @campuscodi.risky.biz @craignewmark.bsky.social

Proud to see my @gate15.bsky.social teammate write this new blog post: 'The Value of InfraGard: A Board Member’s Perspective' celebrating partnerships and information sharing! gate15.global/the-value-of... #infragard #CyberSecurity #security

Very good new NCSC guidance: 'Disruptive cyber attacks – reducing their impact, reducing the risk' 🇬🇧 This aligns closely with our @gate15.bsky.social 15 x 15 (see thread). #CyberSecurity www.ncsc.gov.uk/collection/d...

ICYMI: @gate15.bsky.social's '15 from 15 Cybersecurity Mitigation & Resilience Fundamentals' gate15.global/15-from-15-b...

New from @sekoia.com & Beazley: 'ShinyHunters has outlasted forum takedowns, multiple arrests, and its own founders' convictions...we attempted to explain why the brand keeps surviving what should have ended it.' www.sekoia.com/blog/gotta-b... #CyberSecurity @gate15.bsky.social @ecrime.ch

Suspected Chinese hackers impersonated a senior Anthropic employee, ex-US officials to try to purloin info on military applications of AI, export controls, etc, per @proofpoint.com: edition.cnn.com/2026/10/01/p...

Warlock Ransomware Hits Large Spanish, Portuguese Orgs https://www.darkreading.com/cyberattacks-data-breaches/warlock-ransomware-spanish-portuguese by Nate Nelson #DRGlobal

In September 2026 we have observed 958 events across 93 countries and attributed them to 87 ransomwares. The top targeted country was United States and the most targeted sector was Construction. The ransomware Gentlemen has been busy with 107 new events (11%)! Learn more: https://ecrime.ch/

These criminals are finding out who is worth attacking and are going to extreme and violent lengths to force crypto transfers. www.bbc.co.uk/news/article...

On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token.

Today in the SUN we feature Microsoft's 2026 Digital Defense Report, revealing a faster and more automated security environment. Read more below: www.microsoft.com/en-us/securi... #cybersecurity @andyjabbour.bsky.social

You can now use your face card as a passkey! 🔐 Google’s new selfie verification sign-in gives you an extra recovery option and keeps out scammers 🤳 Learn how to set up the new feature today: https://blog.google/innovation-and-ai/technology/safety-security/selfie-video-sign-in/

Happy Cybersecurity Awareness Month! Celebrate all month long with free activities and resources for kids and teens from over a dozen organizations committed to a safer digital world. Visit getcybersmart.org and #GetCyberSmart2026 #take9 #cybercivildefense

The FB-ISAO released their monthly newsletter, highlighting information on building a cybersecurity culture that serves the mission. Find it below: faithbased-isao.org/fb-isao-news... #cybersecurity @andyjabbour.bsky.social

@cyberscoop.bsky.social released an article on the water sector’s biggest ongoing weaknesses after a summer of cyberattacks. Read more below: cyberscoop.com/water-utilit... #cybersecurity @andyjabbour.bsky.social @timstarks.bsky.social

Today in the SUN, we feature an article reporting the exciting news that Cyware and the WaterISAC are joining forces to strengthen water sector cyber defense. Read more below: www.prnewswire.com/news-release... #cybersecurity @andyjabbour.bsky.social

Data breach and extortionists are SHOCKED that reporters would think that their data breach would lead to an extortion! 🙄 I suggested to the kids (?) that they are simply now regretting hacking the world's biggest police force and they denied getting cold feet.

The Chinese government has expanded its travel ban for AI executives and top engineers to also cover family members www.bloomberg.com/news/article...