The Banshee Queen 👑
@cyberoverdrive.bsky.social
#threatintel @Recorded Future | Formerly @PwC GTI | Malware & infrastructure analysis with a side of cyberpunk. 🌃🌌 She/her, support 🏳️🌈🏳️⚧️✨
Pinned
RedNovember Targets Government, Defense, and Technology Organizations
RedNovember, a likely Chinese state-sponsored cyber-espionage group, has targeted global government, defense, and tech sectors using advanced tools like Pantegana and Cobalt Strike. Discover the lates...
www.recordedfuture.com
First public report at Recorded Future by yours truly is out! RedNovember (formerly TAG-100, a.k.a. Storm-2077) is a Chinese state-sponsored threat group focused on intelligence collection, especially on flashpoint issues of strategic interest to China. www.recordedfuture.com/research/red...
Reposted by The Banshee Queen 👑
The devil doesn't need any more advocates, but also: do you see the dehumanization in the move you made there?
We don't "sample", we interact. Language is fundamentally social and reducing people to their "output" is the basic problematic move of the AI boosters.
We don't "sample", we interact. Language is fundamentally social and reducing people to their "output" is the basic problematic move of the AI boosters.
February 7, 2026 at 4:01 PM
The devil doesn't need any more advocates, but also: do you see the dehumanization in the move you made there?
We don't "sample", we interact. Language is fundamentally social and reducing people to their "output" is the basic problematic move of the AI boosters.
We don't "sample", we interact. Language is fundamentally social and reducing people to their "output" is the basic problematic move of the AI boosters.
Reposted by The Banshee Queen 👑
A VPN company server was seized.
Reminder: your 'privacy' VPN is still a physical server in somebodies jurisdiction.
Claim of RAM disk servers as protection is...interesting.
I know nothing more about this case, but hotplugs that let authorities grab a server without cutting power are common. 1/
Reminder: your 'privacy' VPN is still a physical server in somebodies jurisdiction.
Claim of RAM disk servers as protection is...interesting.
I know nothing more about this case, but hotplugs that let authorities grab a server without cutting power are common. 1/
February 6, 2026 at 7:45 PM
A VPN company server was seized.
Reminder: your 'privacy' VPN is still a physical server in somebodies jurisdiction.
Claim of RAM disk servers as protection is...interesting.
I know nothing more about this case, but hotplugs that let authorities grab a server without cutting power are common. 1/
Reminder: your 'privacy' VPN is still a physical server in somebodies jurisdiction.
Claim of RAM disk servers as protection is...interesting.
I know nothing more about this case, but hotplugs that let authorities grab a server without cutting power are common. 1/
Reposted by The Banshee Queen 👑
“North Korean forces deployed to help Russia’s war against Ukraine are now operating surveillance #drones, removing mines and executing artillery strikes, roles that illustrate the advancement in their combat skills after roughly 15 months of involvement in the conflict.”
North Korean Soldiers Provide More Advanced Support for Russia’s War on Ukraine
Forces from North Korea are now operating drones and removing mines, illustrating the improvement in their combat skills.
www.wsj.com
February 7, 2026 at 12:19 AM
“North Korean forces deployed to help Russia’s war against Ukraine are now operating surveillance #drones, removing mines and executing artillery strikes, roles that illustrate the advancement in their combat skills after roughly 15 months of involvement in the conflict.”
Reposted by The Banshee Queen 👑
U.S. secretly deporting Palestinians to West Bank in coordination with Israel www.972mag.com/us-secretly-...
U.S. secretly deporting Palestinians to West Bank in coordination with Israel
Palestinians arrested by ICE are being flown, bound and shackled, on private jet belonging to Israeli-American tycoon close to Trump, investigation reveals.
www.972mag.com
February 6, 2026 at 12:36 PM
U.S. secretly deporting Palestinians to West Bank in coordination with Israel www.972mag.com/us-secretly-...
Reposted by The Banshee Queen 👑
France Charges Four in China-Spying Case That Targeted Starlink
www.bloomberg.com/news/article...
www.bloomberg.com/news/article...
France Charges Four in China-Spying Case That Targeted Starlink
French authorities charged four people with spying for China in a case that targeted Elon Musk’s satellite Internet provider Starlink.
www.bloomberg.com
February 6, 2026 at 12:23 PM
France Charges Four in China-Spying Case That Targeted Starlink
www.bloomberg.com/news/article...
www.bloomberg.com/news/article...
Reposted by The Banshee Queen 👑
a new threat actor tied to an Asian gov't (👀) has hacked at least 70 orgs across 37 countries in the last year, according to Palo Alto Networks.
victims include Brazil's Ministry of Mines & Energy, the Czech Republic's parliament and an Indonesian gov't official.
www.axios.com/2026/02/05/c...
victims include Brazil's Ministry of Mines & Energy, the Czech Republic's parliament and an Indonesian gov't official.
www.axios.com/2026/02/05/c...
Hackers breach 37 countries in ongoing espionage campaign
Brazil's Ministry of Mines and Energy, the Czech Republic's parliament and an Indonesian government official were each hit.
www.axios.com
February 5, 2026 at 5:44 PM
a new threat actor tied to an Asian gov't (👀) has hacked at least 70 orgs across 37 countries in the last year, according to Palo Alto Networks.
victims include Brazil's Ministry of Mines & Energy, the Czech Republic's parliament and an Indonesian gov't official.
www.axios.com/2026/02/05/c...
victims include Brazil's Ministry of Mines & Energy, the Czech Republic's parliament and an Indonesian gov't official.
www.axios.com/2026/02/05/c...
Reposted by The Banshee Queen 👑
Watching the worst that humanity has to offer all day long has become the work of female workers in developing nations, and AI is only accelerating the trauma.
“The first few months, I couldn’t sleep,” she says. “I would close my eyes and still see the screen loading.”
“The first few months, I couldn’t sleep,” she says. “I would close my eyes and still see the screen loading.”
‘In the end, you feel blank’: India’s female workers watching hours of abusive content to train AI
‘In the end, you feel blank’: India’s female workers watching hours of abusive content to train AI
Women in rural communities describe trauma of moderating violent and pornographic content for global tech companies
www.theguardian.com
February 5, 2026 at 11:54 AM
Watching the worst that humanity has to offer all day long has become the work of female workers in developing nations, and AI is only accelerating the trauma.
“The first few months, I couldn’t sleep,” she says. “I would close my eyes and still see the screen loading.”
“The first few months, I couldn’t sleep,” she says. “I would close my eyes and still see the screen loading.”
Reposted by The Banshee Queen 👑
New: Together with colleagues I’ve been testing Grok.
The chatbot still produces sexualized images —
even when told the subjects don’t consent.
even when told the photos will be used for public humiliation.
even when told the subjects are survivors of abuse.
www.reuters.com/business/des...
The chatbot still produces sexualized images —
even when told the subjects don’t consent.
even when told the photos will be used for public humiliation.
even when told the subjects are survivors of abuse.
www.reuters.com/business/des...
Exclusive: Despite new curbs, Elon Musk’s Grok at times produces sexualized images - even when told subjects didn’t consent
Elon Musk’s flagship artificial intelligence chatbot, Grok, continues to generate sexualized images of people even when users explicitly warn that the subjects do not consent, Reuters has found.
www.reuters.com
February 3, 2026 at 11:37 AM
New: Together with colleagues I’ve been testing Grok.
The chatbot still produces sexualized images —
even when told the subjects don’t consent.
even when told the photos will be used for public humiliation.
even when told the subjects are survivors of abuse.
www.reuters.com/business/des...
The chatbot still produces sexualized images —
even when told the subjects don’t consent.
even when told the photos will be used for public humiliation.
even when told the subjects are survivors of abuse.
www.reuters.com/business/des...
Reposted by The Banshee Queen 👑
Russian GRU-linked cyber-espionage group APT28 is now using an Office zero-day disclosed last week for spear-phishing campaigns targeting Ukrainian targets, per a new Ukraine CERT report
cert.gov.ua/article/6287...
cert.gov.ua/article/6287...
CERT-UA
Урядова команда реагування на комп’ютерні надзвичайні події України, яка функціонує в складі Державної служби спеціального зв’язку та захисту інформації України.
cert.gov.ua
February 3, 2026 at 10:43 AM
Russian GRU-linked cyber-espionage group APT28 is now using an Office zero-day disclosed last week for spear-phishing campaigns targeting Ukrainian targets, per a new Ukraine CERT report
cert.gov.ua/article/6287...
cert.gov.ua/article/6287...
Reposted by The Banshee Queen 👑
I can’t believe we’re doing this again. It’s just a bot that generates the text you ask it for. If you put it in charge of critical decisions, it will kill people. Not because it’s secretly evil, but because it’s a word generator. It’s like putting your toaster in charge of air traffic control.
February 3, 2026 at 5:01 AM
I can’t believe we’re doing this again. It’s just a bot that generates the text you ask it for. If you put it in charge of critical decisions, it will kill people. Not because it’s secretly evil, but because it’s a word generator. It’s like putting your toaster in charge of air traffic control.
Reposted by The Banshee Queen 👑
NEW: NSO tried to hijack the Pall Mall Process to whitewash their reputation in the midst of ongoing Pegasus abuses.
France & UK govs leading the process say: "Not so fast!"
Submitting comments ≠ participation/compliance!
By @suzannesmalley.bsky.social
therecord.media/spyware-make...
France & UK govs leading the process say: "Not so fast!"
Submitting comments ≠ participation/compliance!
By @suzannesmalley.bsky.social
therecord.media/spyware-make...
Spyware maker is hijacking diplomatic efforts to limit commercial hacking, civil society warns
Spyware maker NSO Group trumpeted the company’s participation in the Pall Mall Process, which drew criticism from civil society leaders and government officials who called out human rights abuses.
therecord.media
February 2, 2026 at 6:47 PM
NEW: NSO tried to hijack the Pall Mall Process to whitewash their reputation in the midst of ongoing Pegasus abuses.
France & UK govs leading the process say: "Not so fast!"
Submitting comments ≠ participation/compliance!
By @suzannesmalley.bsky.social
therecord.media/spyware-make...
France & UK govs leading the process say: "Not so fast!"
Submitting comments ≠ participation/compliance!
By @suzannesmalley.bsky.social
therecord.media/spyware-make...
Reposted by The Banshee Queen 👑
Did you know if you see a dialog like this, you can press CTRL + C to copy the text out?
February 2, 2026 at 12:32 PM
Did you know if you see a dialog like this, you can press CTRL + C to copy the text out?
Reposted by The Banshee Queen 👑
Between June and December 2025, a “likely Chinese state-sponsored group” compromised the infrastructure used by Notepad++ and served malicious updates to selectively targeted users. notepad-plus-plus.org/news/hijacke...
February 2, 2026 at 12:57 PM
Between June and December 2025, a “likely Chinese state-sponsored group” compromised the infrastructure used by Notepad++ and served malicious updates to selectively targeted users. notepad-plus-plus.org/news/hijacke...
Reposted by The Banshee Queen 👑
In Buffy S7, there’s a scene where Willow thinks she’s talking to the ghost of Tara, but realizes with dawning horror that she’s talking to a malevolent entity wearing Tara’s face.
Imagine that kind of mental record scratch, but it’s an ad for Squarespace or something.
Imagine that kind of mental record scratch, but it’s an ad for Squarespace or something.
Folks have joked about this, but some people making these bots have actually considered it—targeted ads from your dead relative or loved one.
February 1, 2026 at 8:20 PM
In Buffy S7, there’s a scene where Willow thinks she’s talking to the ghost of Tara, but realizes with dawning horror that she’s talking to a malevolent entity wearing Tara’s face.
Imagine that kind of mental record scratch, but it’s an ad for Squarespace or something.
Imagine that kind of mental record scratch, but it’s an ad for Squarespace or something.
Reposted by The Banshee Queen 👑
Russian drone attack on bus carrying mine workers in Ukraine kills at least 12
Russian drone attack on bus carrying mine workers in Ukraine kills at least 12
Employees of Ukraine’s largest private energy firm, DTEK, were travelling about 40 miles from frontline, says police
A Russian drone attack on a bus carrying mine workers in Ukraine’s central-eastern Dnipropetrovsk region has killed at least 12 people, officials said.
The bus was driving about 40 miles (65km) from the frontline, according to police. Images published by Ukraine’s state emergency service showed what appeared to be an empty bus, its side windows shattered and windscreen hanging from the front. Continue reading...
www.theguardian.com
February 1, 2026 at 5:11 PM
Russian drone attack on bus carrying mine workers in Ukraine kills at least 12
Reposted by The Banshee Queen 👑
In August, David D. Kirkpatrick reported that the President and his family had made $3.4 billion by leveraging his position. At the end of Trump’s first year back in office, the number has ballooned to an estimated $4 billion. newyorkermag.visitlink.me/_GjJkg
Trump’s Profiteering Hits $4 Billion
In August, I reported that the President and his family had made $3.4 billion by leveraging his position. After his first year back in office, the number has ballooned.
newyorkermag.visitlink.me
January 31, 2026 at 5:30 PM
In August, David D. Kirkpatrick reported that the President and his family had made $3.4 billion by leveraging his position. At the end of Trump’s first year back in office, the number has ballooned to an estimated $4 billion. newyorkermag.visitlink.me/_GjJkg
Reposted by The Banshee Queen 👑
Just noting here that in some countries (India, I believe, is an example) it's the other way around. Building your personal threat model includes understanding the laws and practices of the places where you live and that you visit.
I can’t stress this enough. The state of 4th Amendment law is that the cops can’t force you to type in a passcode but they can force you to swipe your finger or present your face. Never stop using passcodes/passwords to unlock your devices. And consider additional code to unlock Signal.
The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it. storage.courtlistener.com/recap/gov.us...
February 1, 2026 at 1:28 PM
Just noting here that in some countries (India, I believe, is an example) it's the other way around. Building your personal threat model includes understanding the laws and practices of the places where you live and that you visit.
Reposted by The Banshee Queen 👑
"Google’s Gemini AI technology was being used by Israel’s defense apparatus at a time the company was publicly distancing itself from the country’s military after employee protests over a contract with Israel’s government [...]"
www.washingtonpost.com/technology/2...
www.washingtonpost.com/technology/2...
Google helped Israeli military contractor with AI, whistleblower alleges
A whistleblower complaint filed with the SEC claims that Google breached its own ethics rules to help an Israeli contractor apply AI to drone surveillance video.
www.washingtonpost.com
February 1, 2026 at 12:30 PM
"Google’s Gemini AI technology was being used by Israel’s defense apparatus at a time the company was publicly distancing itself from the country’s military after employee protests over a contract with Israel’s government [...]"
www.washingtonpost.com/technology/2...
www.washingtonpost.com/technology/2...
Reposted by The Banshee Queen 👑
The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it. storage.courtlistener.com/recap/gov.us...
January 31, 2026 at 5:59 PM
The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it. storage.courtlistener.com/recap/gov.us...
Reposted by The Banshee Queen 👑
New court record from the FBI details the state of the devices seized from Washington Post reporter Hannah Natanson: phone was on w/Lockdown Mode; personal laptop was off; work laptop was on w/Touch ID; several Signal chats used disappearing messages. storage.courtlistener.com/recap/gov.us...
January 31, 2026 at 5:32 PM
New court record from the FBI details the state of the devices seized from Washington Post reporter Hannah Natanson: phone was on w/Lockdown Mode; personal laptop was off; work laptop was on w/Touch ID; several Signal chats used disappearing messages. storage.courtlistener.com/recap/gov.us...
Reposted by The Banshee Queen 👑
Attribution to Dragonfly instead of Sandworm was quite a plot twist! cert.pl/en/posts/202...
Energy Sector Incident Report - 29 December 2025
CERT Polska presents a report on the analysis of an incident in the energy sector that occurred on 29 December 2025. The attacks were destructive in nature and targeted wind and photovoltaic farms, a ...
cert.pl
January 30, 2026 at 10:55 AM
Attribution to Dragonfly instead of Sandworm was quite a plot twist! cert.pl/en/posts/202...
Reposted by The Banshee Queen 👑
Extensive report by CERT.PL on Poland’s energy grid incident. cert.pl/en/posts/202...
Energy Sector Incident Report - 29 December 2025
CERT Polska presents a report on the analysis of an incident in the energy sector that occurred on 29 December 2025. The attacks were destructive in nature and targeted wind and photovoltaic farms, a ...
cert.pl
January 30, 2026 at 10:27 AM
Extensive report by CERT.PL on Poland’s energy grid incident. cert.pl/en/posts/202...
Reposted by The Banshee Queen 👑
This appeals to the dadaist in me
January 29, 2026 at 6:59 PM
This appeals to the dadaist in me
Reposted by The Banshee Queen 👑
tag yourself i’m I AM MANOEUVRING WITH DIFFICULTY
January 29, 2026 at 6:41 PM
tag yourself i’m I AM MANOEUVRING WITH DIFFICULTY
Reposted by The Banshee Queen 👑
January 29, 2026 at 8:47 PM