Espionage on Christoph Kemetmüller

Two Kinds of Bot

Tue, 13 Oct 2026 21:00:00 +0200

Ukraine struck three of Yandex’s five data centres from 8 October. Within days a Cloudflare chart was circulating as proof that Russian bot networks had gone dark, and President Zelensky credited the strikes with “less hate, less division and fewer provocations” online.

Orchestration Has No ATT&CK ID

Sat, 13 Jun 2026 09:43:45 +0200

MITRE ATT&CK can tell you an attacker dumped credentials (T1003) and moved laterally over SSH (T1021). It cannot tell you those two steps were chosen, sequenced, and executed by an AI agent with no human in the loop. A new report from Anthropic’s red team argues that absence is now the most important thing the framework is missing. On this, narrow as it is, they have a point.

2025 Top 20 Chinese Cybersecurity Enterprises

Wed, 11 Feb 2026 22:43:03 +0100

On December 29, 2025, the Internet Society of China (中国互联网协会, ISC, an industry association affiliated with MIIT) published the China Internet Enterprise Comprehensive Strength Index (2025). Buried in Appendix 3 of the 39-page report is the 2025 Top 20 Chinese Cybersecurity Enterprises (2025年中国网络安全前二十家企业), the officially sanctioned, publicly celebrated face of Chinese cybersec.

KnownSec Data Breach: Inside China's State-Sponsored Cyber Arsenal

Wed, 19 Nov 2025 13:42:52 +0100

In early November 2025, a massive data breach at Knownsec, a prominent Chinese cybersecurity firm with government connections, exposed over 12,000 classified documents revealing the company’s role in state-sponsored cyber operations. The leak, summarised early by Chinese security blogger Mrxn, offers a rare look at the offensive tooling and targeting a Chinese security vendor marketed to state customers, though NetAskari, which reviewed the circulating screenshots, judged that most of the material is law-enforcement forensics and that the full dataset has not been seen.