Eugenio Benincasa

Eugenio Benincasa

@euben.bsky.social

Cyber Defense Researcher @ethz.ch. Former Italian govt, Pacific Forum and NYPD. LUISS & Columbia University Alum.

333 followers193 following56 posts

Pinned

Eugenio Benincasa
@euben.bsky.social

1/ China’s cyber capabilities didn’t start top-down, they started with raw hacking talent. The new CSS/ETH report "Before Vegas" traces how informal talent shaped China’s cyber ecosystem, moving from online forums to industry leaders (link in thread).

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

France hosts the EU’s densest cluster of cyber partnerships with Chinese defense-linked universities, raising exposure to dual-use knowledge transfer, EU funding access, and institutional influence. New Natto Thoughts’ piece from @euben.bsky.social www.nattothoughts.com/p/faux-amis-...

nattothoughts.comFaux Amis: How France Stands Apart in Europe’s High-Risk University Cyber Partnerships with ChinaFrance hosts the EU’s densest cluster of cyber partnerships with Chinese defense-linked universities, raising exposure to dual-use knowledge transfer, EU funding access, and institutional influence

Eugenio Benincasa reposted

Binding Hook
@bindinghook.bsky.social

Europe is building stronger systems to report vulnerabilities, but it risks overlooking the people who discover the flaws first: independent security researchers, write @euben.bsky.social and Max van der Horst: bindinghook.com/europe-forge... #EUcybersecurity

bindinghook.comEurope forgets its bug hunters at its own perilWithout safe harbour for independent vulnerability researchers, Europe risks discouraging the reporting its disclosure regime needs

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

The Tianfu Cup is back this year. See the analysis of the event by Eugenio @euben.bsky.social published today on Natto Thoughts. www.nattothoughts.com/p/the-tianfu...

nattothoughts.comThe Tianfu Cup Returns Under MPS Leadership as AI Takes Center StageAfter a two-year hiatus, the Tianfu Cup returns under MPS lead, combining AI-assisted vulnerability discovery and exploitation, a new competition track, and less transparency in vulnerability handling

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

We continue exploring provincial level’s involvement in cyber operations. See details in analysis by @euben.bsky.social www.nattothoughts.com/p/provincial...

nattothoughts.comProvincial Tasking, Cross-Provincial Execution: A Case-Based Look at How China Scales Cyber OperationsHow decentralized MSS and MPS tasking and market-enabled, cross-provincial execution by commercial firms shape the scale of China’s cyber operations

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

In this post, @euben.bsky.social and the Natto Team assess that provincial bureaus of the Chinese Ministry of State Security likely operate with their own tasking priorities, resources, and local ecosystems for cyber operations. nattothoughts.substack.com/p/the-many-a...

nattothoughts.substack.comThe Many Arms of the MSS: Why Provincial Bureaus Matter in China’s Cyber OperationsProvincial bureaus of the Chinese Ministry of State Security likely operate with their own tasking priorities, resources, and local ecosystems for cyber operations

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

@euben.bsky.social Eugenio’s research explains the elite cyber talent paradox in China - “all people are soldiers” vs “extremely lean.” #Cybersecurity #TalentPipeline #CyberOperations nattothoughts.substack.com/p/few-and-fa...

nattothoughts.substack.comFew and Far Between: During China’s Red Hacker Era, Patriotic Hacktivism Was Widespread—Talent Was NotInside the small, elite circles that powered China’s massive hacker communities in the late 1990s and 2000s.
Eugenio Benincasa
@euben.bsky.social

Can’t wait for this :)

Binding Hook@bindinghook.bsky.social

⚡Meet our Lightning Talk speakers at #BindingHookLive: @euben.bsky.social, @melissakgriffith.bsky.social, @benread.bsky.social, @disclosing.observer, Lena Riecke and Selena Larson! Request your invite: bindinghooklive.com

Eugenio Benincasa reposted

Ryan Gallagher
@rjgallagher.co.uk

New: Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in SharePoint before they were patched, enabling a global campaign of cyberattacks, according to people familiar: www.bloomberg.com/news/article...

bloomberg.comMicrosoft Probing If Chinese Hackers Learned of Flaws Via AlertMicrosoft Corp. is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in its SharePoint service before they were patched, acc...

Eugenio Benincasa reposted

Binding Hook
@bindinghook.bsky.social

In the latest Hooked!, editor @katharinegk.bsky.social ties together some fascinating recent research from @benread.bsky.social , @euben.bsky.social, @winnona.bsky.social, and others on private sector elements of Chinese offensive cyber: bindinghook.com/articles-hoo...

bindinghook.comHooked! #5: A series of new reports and research shows that China’s tech sector is on the offenseA series of new reports and research shows that China’s tech sector is on the offense
Eugenio Benincasa
@euben.bsky.social

1/ China’s cyber capabilities didn’t start top-down, they started with raw hacking talent. The new CSS/ETH report "Before Vegas" traces how informal talent shaped China’s cyber ecosystem, moving from online forums to industry leaders (link in thread).

View full thread
Eugenio Benincasa
@euben.bsky.social

1/ China’s cyber capabilities didn’t start top-down, they started with raw hacking talent. The new CSS/ETH report "Before Vegas" traces how informal talent shaped China’s cyber ecosystem, moving from online forums to industry leaders (link in thread).

View full thread
Eugenio Benincasa
@euben.bsky.social

3/ Some Red 40 hackers have carried out operations on behalf of China’s military and intelligence services. Their informal networks, formed during their teens or twenties as members of the same hacking groups, exemplify tool sharing and collab that underpins China’s APTs MO.

Eugenio Benincasa
@euben.bsky.social

1/ China’s cyber capabilities didn’t start top-down, they started with raw hacking talent. The new CSS/ETH report "Before Vegas" traces how informal talent shaped China’s cyber ecosystem, moving from online forums to industry leaders (link in thread).

Eugenio Benincasa reposted

Kim Zetter
@kimzetter.bsky.social

How did China's top APT hackers come to be? Many were early "Honkers" - patriotic hackers who in late 90s launched low-skill cyberattacks against nations deemed disrespectful to China. But once Honkers developed their skills, PLA/MSS came calling. Based on great research by bsky.app/profile/eube...

wired.comHow China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyber SpiesA new report traces the history of the early wave of Chinese hackers who became the backbone of the state's espionage apparatus.

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

How has China advanced its AI development to its current state? No single innovation path in AI can be considered definitive. nattothoughts.substack.com/p/debating-c...

nattothoughts.substack.comPick Your Innovation Path in AI: Chinese EditionChina’s advances in AI show the effects of a state approach of “introduce, digest, absorb, re-innovate” and years of debate on the balance between market-driven innovation and state-led development
Eugenio Benincasa
@euben.bsky.social

To defend, one must first know how to attack” (未知攻，焉知防). This mindset, popularized by a Taiwanese hacker Lin in the 1990s, spread from China's red hackers to CTF teams. Today, it powers China's cyber industry. New piece for @nattothoughts.bsky.social nattothoughts.substack.com/p/defense-th...

nattothoughts.substack.comDefense-Through-Offense Mindset: From a Taiwanese Hacker to the Engine of China’s Cybersecurity IndustryThe belief that offense enables defense in cyberspace, first rooted in China’s 1990s hacker culture, has since permeated the country’s cyber ecosystem

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

The Natto Team explores the development of China's vulnerability research and discovery skills, starting from the vocational college level. Thanks to @euben.bsky.social @dakotaindc.bsky.social Kristin Del Rosso for their previous research on the topic nattothoughts.substack.com/p/when-a-voc...

nattothoughts.substack.comFrom Humble Beginnings: How a Vocational College Became a Vulnerability PowerhouseQingyuan Polytechnic's focus on vulnerability studies highlights China's continued efforts in gathering vulnerability resources

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

The Natto Team continues finding stories of Chinese hackers fascinating as they reveal the motivations behind cyber operations and the evolution of China's information security industry. nattothoughts.substack.com/p/stories-of...

nattothoughts.substack.comFrom the World of “Hacker X Files” to the Whitewashed Business SphereJiang Jintao’s journey from hacker to infosec entrepreneur illustrates the blend of ambition, skill, and changes in China's cybersecurity industry

Eugenio Benincasa reposted

Binding Hook
@bindinghook.bsky.social

In their latest for #BindingHook, Massimo Marotti, Matteo E. Bonfanti, and Giovanni Faleg of the Italian National Cybersecurity Agency reflect on the process of forming the new #G7CybersecurityWorkingGroup: bindinghook.com/articles-hoo...

bindinghook.comSowing the seeds of enhanced cybersecurity cooperation within the G7Officials from the Italian National Cybersecurity Agency discuss the challenges and successes of creating the new G7 Cybersecurity Working Group

Eugenio Benincasa reposted

Dan Black
@danwblack.bsky.social

Fascinating to see reference to GRU unit 20728 from FR relative to Russia's offensive cyber program -- as far as I'm aware, a first from a Western service? www.diplomatie.gouv.fr/fr/dossiers-...

diplomatie.gouv.frRussie – Attribution de cyberattaques contre la France au service de renseignement militaire russe (APT28) (29.04.25)La France condamne avec la plus grande fermeté le recours par le service de renseignement militaire russe (GRU) au mode opératoire d'attaque APT28, (…)

Eugenio Benincasa reposted

Binding Hook
@bindinghook.bsky.social

Fellow @euben.bsky.social argues that EU member states should reduce strategic #technologicaldependencies on non-EU countries, particularly those deemed high-risk, and enhance proactive #cybersecurity capabilities. bindinghook.com/articles-bin...

bindinghook.comCyber threats are increasingly complex. What can governments do to defend against them?Virtual Routes fellows look for ways to shrink the gap between cyber threats and defensive capabilities, from regulatory sandboxes to supranational understandings of critical infrastructure.
Eugenio Benincasa
@euben.bsky.social

Taiwan: The second naming and shaming in months, but this one hits harder—sharper tone, more detail, and backed by three top Chinese cybersecurity firms. It follows Taiwanese President’s declaration that China is a “foreign hostile force” and 17 new counter-China initiatives.

Eugenio Benincasa
@euben.bsky.social

US: The outing of alleged NSA hackers echoes US DOJ indictments, but with fewer details, no photos, and little evidence. It may reflect broader US.-China trade tensions, or a cyber-specific tit-for-tat to shape the global narrative around cyber conflict.

Eugenio Benincasa reposted

Dakota
@dakotaindc.bsky.social

My question is did state media add mention of US universities in response to the paper @euben.bsky.social and I wrote last year which included circumstantial evidence of hacks by NWPU? www.sentinelone.com/labs/labscon...

sentinelone.comLABScon24 Replay | A Walking Red Flag (With Yellow Stars)Dakota Cary and Eugenio Benincasa explore China's CTF ecosystem, highlighting competitions held by the Ministry of State Security and the PLA.
Dakota@dakotaindc.bsky.social

But something weird happens along the way. Someone at Xinhua adds details not in the MPS notice or CVERC report that US universities (Virginia Tech, University of California) were involved. www.reuters.com/technology/c...

reuters.comChina accuses US of launching 'advanced' cyberattacks, names alleged NSA agentsChinese police in the northeastern city of Harbin have accused the United States National Security Agency (NSA) of launching "advanced" cyberattacks during the Asian Winter Games in February, targeting essential industries.
Eugenio Benincasa
@euben.bsky.social

It was a matter of time. Less than a month after outing alleged Taiwanese cyber operatives in an unprecedented move for both its tone and detail, China has done the same with alleged NSA operatives—for the first time. The language echoes that of Western reports, though less detailed.

AJ Vicens@ajvicens.bsky.social

China accuses US of launching 'advanced' cyberattacks, names alleged NSA agents - www.reuters.com/technology/c...

reuters.comChina accuses US of launching 'advanced' cyberattacks, names alleged NSA agentsChinese police in the northeastern city of Harbin have accused the United States National Security Agency (NSA) of launching "advanced" cyberattacks during the Asian Winter Games in February, targeting essential industries.
Eugenio Benincasa
@euben.bsky.social

It was a matter of time. Less than a month after outing alleged Taiwanese cyber operatives in an unprecedented move for both its tone and detail, China has done the same with alleged NSA operatives—for the first time. The language echoes that of Western reports, though less detailed.

AJ Vicens@ajvicens.bsky.social

China accuses US of launching 'advanced' cyberattacks, names alleged NSA agents - www.reuters.com/technology/c...

reuters.comChina accuses US of launching 'advanced' cyberattacks, names alleged NSA agentsChinese police in the northeastern city of Harbin have accused the United States National Security Agency (NSA) of launching "advanced" cyberattacks during the Asian Winter Games in February, targeting essential industries.

Eugenio Benincasa reposted

Patrick Gray
@patrick.risky.biz

What's happening to @thekrebscycle.bsky.social is disgusting He's one of the most hardworking, dedicated and smart people I'm lucky enough to know, and he showed a LOT of courage when he fought back against attempts to undermine the 2020 election result I hope Americans will stand behind him

Eugenio Benincasa reposted

Natto Thoughts
@nattothoughts.bsky.social

A case study of the i-SOON indictment and leaks reveals that source information may vary but it is important to compare and evaluate information for unique insights. nattothoughts.substack.com/p/indictment...

nattothoughts.substack.comIndictments and Leaks: Different but Complementary SourcesA case study of the i-SOON indictment and leaks reveals that source information may vary but it is important to compare and evaluate information for unique insights.
Eugenio Benincasa
@euben.bsky.social

Glad to be part of this awesome crew :)

Virtual Routes@virtualroutes.bsky.social

👋 Say hello to the 2025-2026 European Cybersecurity Fellows! 12 months, 15 fellows from 10 countries across Europe, one goal: to take the next step in their careers and make it count. Learn more: virtual-routes.org/initiatives/...

Eugenio Benincasa reposted

Oleg Shakirov
@shakirov2036.bsky.social

Big day for Chinese threat intel MSS outs 4 alleged members of Taiwan's Information, Communications & Electronic Force Command, links them to cyber attacks QiAnXin & Antiy release 2 separate reports on Taiwan-linked APT-Q-20/APT-C-01/GreenSpot/PoisonVine 🧵w/ links & details

Eugenio Benincasa reposted

Catalin Cimpanu
@campuscodi.risky.biz

Putting some order in today's APT announcements: -APT27 charges: www.justice.gov/usao-dc/pr/c... -iSoon charges: www.justice.gov/usao-sdny/pr... -APT27 sanctions: home.treasury.gov/news/press-r... -iSoon reward: x.com/RFJ_USA/stat... -IC3 APT27 alert: www.ic3.gov/PSA/2025/PSA...

justice.govChinese Nationals with Ties to the PRC Government and “APT27” Charged in a Computer Hacking Campaign for Profit, Targeting Numerous U.S. Companies, Institutions, and MunicipalitiesA federal judge in Washington, D.C., today, unsealed two separate indictments that allege Chinese nationals Yin Kecheng, 38, (尹 可成) a/k/a “YKC” (“YIN”) and Zhou Shuai, 45, (周帅) a/k/a “Coldface” (“ZHOU...