Senior Tech-Legal Counsel @accessnow, former @BrooklynDA, @hrcberkeley, @UNHumanRights, @ICTYnews, @ManhattanDA. Tech | Law | Spyware | Eastern Europe

Joined August 2011
BREAKING: @TheJusticeDept arrested US-based Oxygen Forensics CEO for concealing the tech company's Russian ties. Civil society like @zairbekds & @OlgaNYC1211 have been sounding alarm for years about US law enforcement using this 🇷🇺 company for their sensitive operations! 🧵1/
3
75
16
149
30,120
Natalia Krapiva 👩🏻‍💻🕊 retweeted
🇫🇷MP & former minister Agnès Pannier-Runacher says she was targeted by commercial spyware 3 times—twice as a minister & once as an MP. She filed a complaint with France’s domestic intel. agency (DGSI) on 28/09. Pegasus has been ruled out so far, according to Politico. politico.eu/article/la-deput…
4
5
387
Natalia Krapiva 👩🏻‍💻🕊 retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
344
4,177
1,254
18,603
7,022,630
Natalia Krapiva 👩🏻‍💻🕊 retweeted
🚨NEW INVESTIGATION: University of Belgrade Rector who resisted crackdown on students was hacked with zero-click Pegasus. Authorities raided his offices in March. Serbia's snap elections are 6 days away. There are more targets 1/ With @ShareConference citizenlab.ca/research/pegas…
18
378
20
986
95,527
Bad news. US District Court denied WhatsApp's motion to hold NSO in contempt for continuing to hack WhatsApp users after a court order barred it from doing so. The evidence wasn't "clear and convincing" enough. 1/
2
3
1
7
746
5/ Judges in spyware cases should keep this in mind: forcing WhatsApp to fully expose how it detects sophisticated spyware hands NSO, and everyone else in this market, a roadmap for evading detection.
1
1
1
93
6/ Requiring platforms to burn their detection methods to hold spyware makers to account isn't accountability. It's impunity for the entire spyware industry.
1
1
78
Natalia Krapiva 👩🏻‍💻🕊 retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number. More: 404media.co/heres-what-teleg…
497
888
149
4,179
945,993
New report by @citizenlab exposes an ad tech firm that helps spyware companies to profile+target millions of people around the world, incl. in US and EU. Regulators and companies like @Google & @Microsoft need to take urgent action to stop these abuses. @kevincollier @NBCNews
1
4
18
676
Natalia Krapiva 👩🏻‍💻🕊 retweeted
When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks. cfl.re/3VQ5uTA
27
241
19
950
67,682
Natalia Krapiva 👩🏻‍💻🕊 retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
4,165
6,088
5,729
77,611
26,070,062
Natalia Krapiva 👩🏻‍💻🕊 retweeted
The EU’s largest-ever round of sanctions listings targets key suppliers of components used in Russian weapons, particularly ballistic missiles deployed against Ukraine. buff.ly/QKCI4iZ
1
17
1
38
3,688
Natalia Krapiva 👩🏻‍💻🕊 retweeted
This scandal was uncovered thanks to the University of Toronto’s Citizen Lab. Tusk says Israeli firm NSO allowed Polish Pegasus users to spy on French, Germans and Poles, but not Russians, Belarusians, or North Koreans, and NSO delivered Poles’ private data to the Israeli govt.
NEW: 🇵🇱 Poland’s National Prosecutor’s Office has found that the Pegasus spyware system used by the country’s previous government was not fully under the control of Polish security agencies, potentially allowing its Israeli manufacturer, NSO Group, to access sensitive data collected from Polish citizens. According to prosecutors, an analysis by Poland’s Internal Security Agency (ABW) found that NSO Group could access infrastructure used to process and store operational data. Information transmitted through the system was also leaving Polish territory. Prime Minister Donald Tusk called the findings a crime against the state and described the affair as one of the biggest scandals in Poland’s history since the fall of communism. Tusk warned that sensitive information belonging to thousands, potentially tens of thousands, of Polish citizens could have been exposed to a foreign country without adequate control. He also claimed there was no doubt that Pegasus manufacturer NSO Group cooperated with Israeli security services. Pegasus is a powerful surveillance tool capable of accessing mobile phones and extracting messages, browsing history and location data. Depending on the capabilities deployed, it can also access microphones and cameras. The spyware was purchased under the previous Law and Justice (PiS) government, which has faced allegations that it was used to monitor political opponents, journalists and other public figures. The former administration denies wrongdoing, arguing that Pegasus was necessary for national security and used with court approval. Justice Minister Waldemar Żurek said the system’s use endangered Poland’s national security. A parliamentary inquiry has also heard that judges who authorised surveillance were not fully informed about Pegasus’s capabilities.
25
648
22
1,612
45,014
Natalia Krapiva 👩🏻‍💻🕊 retweeted
Claims that Ukrainian strikes on Yandex data centres reduced Russia-linked bot networks have spread widely online and were repeated by President Zelensky, but experts have told BBC Verify there is no evidence the attacks have significantly reduced them. bbc.co.uk/news/articles/c9y7…
34
170
46
576
113,473
Natalia Krapiva 👩🏻‍💻🕊 retweeted
By popular demand: A follow-up thread on Russian bots, Yandex, Cloudflare, MAGA, AfD and "breathing easier" on social media. 1️⃣ We see no "dramatic drop" in traffic of Kremlin-aligned human trolls-for-hire targeting Russian domestic users (which we have been tracking for years).
19
128
27
457
38,814
Natalia Krapiva 👩🏻‍💻🕊 retweeted
🟢 LOW CREDIBILITY: We find that viral claims that drone strikes on Yandex data centers in Russia have impacted coordinated inauthentic social media activity are misstated and unfalsifiable. Treat such claims with skepticism, and bookmark this tracker. russianbots.america2.news/
1
54
9
171
13,432
Natalia Krapiva 👩🏻‍💻🕊 retweeted
Przeprosiny i sprostowanie. Chciałbym przeprosić wszystkich Czytelników za podanie nieprawdziwej informacji oraz grafiki jakoby ruch botów wokół AfD spadł o 56%. Zgodnie z ustaleniami @niebezpiecznik który przytacza opinię Instytutu badawczego Cemas, istytutu Hasso Plattnera i think tanku "Polisphere" nie nastąpił trwały i mierzalny spadek wpisów pro AfD. Zaś pierwotna grafika po niemiecku okazała się być AI. Niestety mój z wpis z dezinformacją zrobił milionowe zasięgi za co chciałbym raz jeszcze wszystkich czytelników przeprosić. Oczywiście za to co zrobiłem biorę pełną odpowiedzialność i zwyczajnie oraz po ludzku jest mi wstyd za to że Was zdezinformowałem. Przepraszam też kontestowanych oponentów którzy jako pierwsi wykazywali że myliłem się. Żeby dalej nie dezinformować usunąłem wpis. Od tej pory w tematach nie związanych stricte z militariami przyjmuję zasadę podawania przypisów lub pierwotnych źródeł jeżeli tylko istnieje taka możliwość. Lub jasnego podawania ich braku/niejasnego źródła informacji tak aby było to wyraźnie widoczne we wpisie. JW.
‼️ Niemiecki dziennikarz namierzył oryginał grafiki, która wzbudziła wczoraj i dziś falę kontrowersyjnych (żeby nie powiedzieć nieprawdziwych) doniesień o spadku aktywności rosyjskich botów/trolli. Stworzył ją "24 letni steward Frank" i oznaczył jako ...wygenerowaną przez AI (co już wczoraj podejrzewaliśmy). Niestety politycy, którzy podawali dalej ten materiał, tego oznaczenia (celowo lub przez przypadek 🤷‍♂️) nie zachowali i źródła też nie wskazali. Co więcej, niemiecki instytut badawczy Cemas zajmujący się dezinformacją, instytut Hasso Plattner i thinktank Polisphere oficjalnie ❌ zaprzeczają jakoby obserwowano spadek liczby postów, który można by wytłumaczyć atakiem na Yandex. "Ani aktywność istniejących botów, ani tempo tworzenia nowych nie spadły, jak pokazują dane, które zbieramy". No ale to dane z Niemiec. Tymczasem w 🇵🇱Polsce minister Siemoniak powiedział, że "ABW odnotowało radykalny spadek aktywności rosyjskich botów w sieci. Jest to zjawisko obserwowane na całym świecie po zbombardowaniu trzech centrów danych." Ale ABW niczego w tej sprawie jak na razie nie upubliczniło. Miejmy nadzieję, że upubliczni. To by dopiero było! 🍿Na razie wiemy że "na całym świecie" najwyraźniej oznacza bez Niemiec...
1,437
1,854
1,094
9,507
949,436