Lorenzo Franceschi-Bicchierai

I forgot to point out that Trenchant's own logo is two triangles.

x.com/TrenchantARC

Thank you 🙏

Looks like John predicted pretty much what happens with L3Harris and Coruna.

Thank you!

As per its stated policy, Kaspersky did not attribute Operation Triangulation.

Instead the company winked that it knew who made the tools when it chose the name and logo of the hacking campaign.

techcrunch.com/2026/03/09/a...

The mystery of a globetrotting iPhone-hacking toolkit Tools used in a series of hacking campaigns by hackers in Russia, Ukraine, and China may have originated inside U.S. government contractor L3Harris, TechCrunch has learned.

There's been a lot of speculation about this, and all signs pointed in this direction. But we now have former L3Harris Trenchant employees telling us that they recongnized some of the artifacts and codenames published by Google.

One of them also told us Coruna was used in Operation Triangulation.

The mystery of a globetrotting iPhone-hacking toolkit Tools used in a series of hacking campaigns by hackers in Russia, Ukraine, and China may have originated inside U.S. government contractor L3Harris, TechCrunch has learned.

SCOOP: The iPhone mass hacking toolkit used by Russian spies was developed at U.S. military contractor L3Harris, former employees said.

The Coruna toolkit was used against Ukrainians and by Chinese cybercriminals, according to Google. But the toolkit was initially developed for Western governments.

I just learned that Trend Micro re-branded to TrendAI...uhm, OK.

If anyone is wondering, I will not be at RSA. And god willing I won't be at RSA next year either, nor the year after that, nor the year after that, nor the year after that, nor the year after that, nor the year after that, nor the year after that, nor the year after that, nor the year after that, no

Russian government hackers targeting Signal and WhatsApp users, Dutch spies warn | TechCrunch Dutch intelligence is accusing Russia-backed hackers of running a “large-scale global” hacking campaign against Signal and WhatsApp users.

NEW: Dutch intelligence services are warning of new hacking campaigns against Signal and WhatsApp users, including government and military officials, and journalists worldwide.

The social engineering techniques used are not new, but the fact that the Dutch are warning against them means they work.

AI companies are more worried about their chatbot’s mental health than that of their users, who can actually have psychosis induced by those chatbots, leading some of them to take their own lives.

I love this future.

Thank you so much

FBI investigating hack on its wiretap and surveillance systems: report | TechCrunch Hackers allegedly broke into the FBI’s networks, according to a report by CNN.

NEW: The FBI said it is investigating a hack on its networks.

The breach affected the FBI's systems to manage wiretaps and surveillace requests, according to CNN.

techcrunch.com/2026/03/05/f...

Italian prosecutors confirm journalist was hacked with Paragon spyware | TechCrunch Italian authorities are making progress in their investigation into a wide-ranging spyware scandal in Italy involving Paragon spyware. But the mystery of who hacked two Italian journalists with Parago...

NEW: Italian prosecutors confirm that the phone of journalist Francesco Cancellato was hacked with Paragon spyware at the same time as the phones of two immigration activists.

The Italian government admitted the hack on the activists, but said it wasn't behind Cancellato's hack. So who was?

Google says half of all zero-days it tracked in 2025 targeted buggy enterprise tech | TechCrunch Enterprise software was a major focus of zero-day activity during 2025, with security and networking devices, like firewalls, VPNs, and virtualization platforms among the most targeted by malicious ha...

NEW: Google said that last year, and for the first time, it found more zero-days used by spyware makers (15) rather than government-backed espionage groups (12) in the wild.

The shift demonstrated “a slow but sure movement in the landscape” of how governments hack targets, the company said.

U.S. and EU police shut down LeakBase, a site accused of sharing stolen passwords and hacking tools | TechCrunch Authorities say LeakBase was "one of the world’s largest online forums for cybercriminals," and maintained an archive of hacked databases containing hundreds of millions of passwords.

U.S. and EU police say they've taken down LeakBase, “one of the world’s largest online forums for cybercriminals” for sharing stolen passwords and hacking tools.

The site now displays a seizure notice.

NSO has hired * a lot of people * for this lobbying effort.

Will NSO’s US Lobbying Pay Off Under Trump? Now, with Friedman, a seasoned Trump insider, at its helm, NSO might finally achieve its long-awaited US comeback, writes Vas Panagiotopoulos.

NSO Group has spent at least $7.6 million to lobby in Washington D.C., according @vaspanagiotopoulos.com.

And it's gonna continue to pressure the U.S. government to get removed from the blocklist it was put on in 2021, in an attempt to get into the U.S. market.

Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit | Google Cloud Blog Coruna is a powerful iOS exploit kit leveraging 23 vulnerabilities across multiple threat actors and global campaigns.

This Google research on the Coruna iOS exploits is very interesting. And perhaps the most interestig things are all the open questions that are not answered here.

cloud.google.com/blog/topics/...

Hacked traffic cams and hijacked TVs: How cyber operations supported the war against Iran | TechCrunch After U.S. and Israeli forces started bombing Iran, reports say cyber operations have disrupted communications, supporting surveillance activities, and have been used in psychological operations.

NEW: There have been reports and some statements from government officials that suggest cyber operations played a role in the first days of the war in Iran.

At the end of the day this war is about dropping bombs, but these reports show cyber can have an important supporting role in IRL conflict.

CBP Tapped Into the Online Advertising Ecosystem To Track Peoples’ Movements An internal DHS document obtained by 404 Media shows for the first time CBP used location data sourced from the online advertising industry to track phone locations. ICE has bought access to similar t...

New from 404 Media: CBP tapped into the online advertising ecosystem to track peoples' movements, according to an internal DHS document. Shows for the first time DHS tracked phones via process for putting ads in ordinary apps—video games, fitness apps, many more www.404media.co/cbp-tapped-i...

Yeah, I know. But I didn't really register it. For some reason I thought it was a game though, maybe the filename was the name of a game?

You’re asking for too much 😂

Also the Nokia 7650 ruled.

I think I would remember a message flashing across the screen. Maybe it was a version of this without the message?

I think I would remember a message flashing across the screen. Maybe it was a version of this without the message?

The Time I Got Hacked in a Lisbon Bar This whole story is a long way of introducing myself to you, dear Motherboard reader.

Does anyone remember what this self-spreading bluetooth malware for Nokia phones could have been? I got hacked with it 20 years ago and I never figured out what virus it was exactly.

www.vice.com/en/article/t...

It's hard to pick what is the most depressing thing in the world right now, but the rise of "prediction markets" is very high up for me. Truly dystopian and disgusting.

Hacktivists claim to have hacked Homeland Security to release ICE contract data | TechCrunch A hacking group called Department of Peace said they hacked a specific office within Homeland Security to protest ICE’s mass deportation campaign, and the companies aiding it.

NEW: A group of hacktivists calling themselves "Department of Peace" claims to have hacked an office wihin the Department of Homeland Security.

The hacktivists leaked data on more than 6,000 contracts between DHS/ICE and private companies to the transparency website Distributed Denial of Secrets.

bsky.app/profile/scoi...