I Fired Myself From My Job: In July of 2010 I was 22 and working at a Social Gaming startup in California. I'd just graduated and this was my first real job. I had a pay check and an apartment. I felt grown-up, for the first time. I was one of two 'engineers' writing code for the company's flagship product, an RPG. I'd studied Philosophy in college, and that meant that, while I knew how to think through a problem, my knowledge of best practices, and sensible design patterns was minimal. I wielde

Coming soon: This is Kim’s Substack.

European Standards Body Votes to Release Secret Algorithms: After hit with criticism earlier this year for keeping its encryption algorithms secret, the European standards body behind the TETRA algorithms has decided to open them to the public for scrutiny.

Sophisticated StripedFly Spy Platform Masqueraded for Years as Crypto Miner: Malware discovered in 2017 was long classified as a crypto miner. But researchers at Kaspersky Lab say it's actually part of a sophisticated spy platform that has infected more than a million victims.

How North Korean Workers Tricked U.S. Companies into Hiring Them and Secretly Funneled Their Earnings into Weapons Programs: Thousands of IT workers allegedly working on behalf of North Korea managed to trick U.S. companies into hiring them as remote developers — then used the money to help finance North Korean weapons.

Standards Body Considers Uncloaking Secret Encryption Algorithms : The European standards body that created secret encryption algorithms for use in TETRA radio communications is weighing whether to make new algorithms public, following backlash over its secrecy.

Did a Journalist Violate Hacking Law to Leak Fox News Clips? The Government Thinks He Did.: But attorneys for Timothy Burke say a raid on his home and office exhibit government over-reach and misuse of the federal hacking law, and raises First Amendment issues.

Radiation Spikes at Chernobyl: A Mystery Few Seem Interested in Solving: Ever since radiation sensors at the Chernobyl nuclear plant spiked dramatically following the Russian invasion, there have been questions about what caused the spikes. Now the mystery deepens.

Interview with the ETSI Standards Organization That Created TETRA "Backdoor": Brian Murgatroyd spoke with me about why his standards group weakened an encryption algorithm used to secure critical radio communications of police, military, critical infrastructure and others.

SEC Targets SolarWinds' CISO for Rare Legal Action Over Russian Hack: In a highly rare move, the SEC sent notice to SolarWinds' CISO, and other specific employees, indicating they may face legal action over Russia's hack of their company.

How Volexity Discovered the SolarWinds Hacking Campaign

Timeline of the SolarWinds Hack and Investigation

Updates and Timeline for 3CX and X_Trader Hacks

Software Maker 3CX Was Compromised in First-of-its-Kind Threaded Supply-Chain Hack: Hackers first compromised a different software maker and embedded malware in one of its programs. 3CX got compromised when an employee downloaded that program. Mystery around why worker downloaded it.

Leaked Pentagon Document Claims Russian Hacktivists Breached Canadian Gas Pipeline Company: The document, part of a cache of leaks recently circulated on the internet, suggests the hackers had the ability to cause an explosion and sought instruction from the FSB.

Hello and an Update: I’ve been meaning to send an email to all of you for a while to fill you in on what I’ve been working on and to assure you that I haven’t abandoned Zero Day. I’ve been working on a number of projects that have been taking much longer to complete than I anticipated — and that also are dependent on the timing of other people. So I haven’t been intentionally silent; I’ve just been toiling away on pieces that are still in the works.

White House Says President Zelensky Set Security Parameters for His Visit to the U.S.

Security Firms Aiding Ukraine During War Could Be Considered Participants in Conflict

Viasat Hack "Did Not" Have Huge Impact on Ukrainian Military Communications, Official Says

Mysterious New Hacking Group Leaves Researchers Baffled

Colonial Pipeline Ignored Numerous Warnings

Is the Secret Service’s Claim About Erased Text Messages Plausible? (Updated)

What It Means that the U.S. Is Conducting Offensive Cyber Operations Against Russia

Russia Began Setting Stage for Cyberattacks Against Ukraine a Year Ago

Questions about Cyber Conflict Remain Unresolved, Panelists Note