Kristina Balaam

So many great talks! CANNOT WAIT! 🎉

Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication Starting in mid-January 2025, Volexity identified several social-engineering and spear-phishing campaigns by Russian threat actors aimed at compromising Microsoft 365 (M365) accounts. These attack cam...

@volexity.com recently identified multiple Russian threat actors targeting users via #socialengineering + #spearphishing campaigns with Microsoft 365 Device Code authentication (a well-known technique) with alarming success: www.volexity.com/blog/2025/02...

#dfir #threatintel #m365security

or the number of times marketing / journalists ask, "can you attribute this to Winnti or Mustang Panda?" 🫠

We are waiting for your submissions until 7 February #CfP #ThreatIntel #PIVOTcon25 #CTI #ThreatResearch
#DontBeLikeAnakin 👇

No Escape: The Weaponization of Gender for the Purposes of Digital Transnational Repression - The Citizen Lab Building upon our prior research and the contributions of other scholars to this field, the aim of this novel study is to understand the security risks and harms caused by digital transnational repres...

NEW REPORT: We investigate the rising trend of gender-based digital transnational repression by drawing on the lived experiences of 85 women human rights defenders living in exile across the globe.
Read the full report: citizenlab.ca/2024/12/the-...

Introduction to Investigative Journalism: Digital Security Digital security may seem a little daunting at first, but increased security will help investigative journalists build trust with — and protect — current and future sources.

I wrote a very timely introduction to digital security for journalists for @gijn.org, this guidance may also apply to activists, lawyers, and anyone else doing at-risk work these days. gijn.org/resource/int...

www.semafor.com/article/11/2...

DPRK IT Workers | A Network of Active Front Companies and Their Links to China SentinelLabs has identified multiple deceptive websites linked to businesses in China fronting for North Korea's fake IT workers scheme.

🔥 🇰🇵 @sentinellabs.bsky.social has found an active network of North Korean IT Worker front companies linked to China, overlapping with four companies recently disrupted by U.S. government agencies.

Read the research by @hegel.bsky.social and @dakotaindc.bsky.social: s1.ai/IT-Front

I hate everything about this.

Words cannot describe how happy I am to now be on a microblogging site where I'm not pummelled with the owner's content whenever I log in. (I was never even following him.)

Banned Books: Analysis of Censorship on Amazon.com - The Citizen Lab We analyze the system Amazon deploys on the US “amazon.com” storefront to restrict shipments of certain products to specific regions. We found 17,050 products that Amazon restricted from being shipped...

📢 Our latest report reveals that the US storefront of Amazon uses a system to restrict shipments of certain products. We found 17k+ products that were restricted from being shipped to specific regions, with the most common type of product being books 📚.
citizenlab.ca/2024/11/anal...