Allan “Ransomware Sommelier” Liska

Please don’t. I love the Steelers, but they are not a serious team this year.

New from Ransom ISAC: 'Silent Ransom Group - Leak Analysis' ransom-isac.org/blog/silent-... #ransomware #CyberSecurity @gate15.bsky.social @ecrime.ch @campuscodi.risky.biz @ransomwaresommelier.com

ICANN testing tech to let law enforcement access non-public WHOIS info “Once it devises a mechanism to allow requests, other groups within ICANN dedicated to policy will work out acceptable use and related issues.” via @ssharwood.bsky.social & @theregister.com (h/t @zackwhittaker.com )

Anyway I think Cybersecurity Awareness Month actually worked this year.

This is one of the earliest comics we created AND still one of my favorite because we let cybersecurity people tell their stories. It's also on sale! So you can save a bunch of money, get a cool comic and support a small business. Plus, the more we sell the more likely I am to make another one.

Today's interesting, newly registered ransomware-themed domains are: gegen-ransomware[.]nrw gemeinsam-gegen-ransomware[.]nrw wehr-dich-gegen-ransomware[.]nrw .]nrw is a TLD for organizations in North Rhine-Westphalia (Germany). Germany has been hit hard by ransomware this year, so it makes sense.

Given the way this week is going I want to make a video similar to the Drew Allen Browns videos but instead of Punts I’ll just rattle off company names and say Vulns. In my head this is really funny…

South Carolina officials offer assistance after state capital hit with cyberattack via @jgreig.bsky.social (who I am nicknaming Jonathan "Just Say Ransomware" Greig 😂) & @therecordmedia.bsky.social

This is our blog post on the PHP Vulnerabilities, including some concrete steps companies can take to protect themselves.

These PHP flaws are serious, but there is also a lot of bad information floating around about these vulns, so proceed with caution. via @bleepingcomputer.com

FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024 via @jgreig.bsky.social & @therecordmedia.bsky.social

I missed this last month from Barracuda, but this is interesting research. So much of ohishing protection revolves around domain checking, but if the URLs only exist for a short time and only exist locally, they are much harder to detect.

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June

Dulles airport has these phones in the bowels of the A Gates and I want to call as many people as possible to see if I can bankrupt them with the long distance bill.

Our next Buck Rogers campaign launches soon and I’ve loved diving into the really long history of this character. I can’t wait for you all to read the story.

This is a good breakdown of the @wired.com interview with Nathan Fielder about I Can See Everything. I’m sure this has been speculated about before, but what would it be like if Nathan Fielder and @ichotiner.bsky.social interviewed each other?

A really good overview of submarine cable resilience and security from Geoff Huston for APNIC. h/t to the amazing @zackwhittaker.com who I swear always buries one story in his newsletter just for me 😂.

BAE Systems cyberattack disrupts US federal court operations "The Administrative Office of the US Courts (AOUSC) says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts." via @bleepingcomputer.com

Brooklyn DA’s office disrupts crypto scam targeting Russian community via @jgreig.bsky.social & @therecordmedia.bsky.social

Catching up on last week’s @smashingsecurity.com From their new global headquarters and I love this quote from @dannypalmer.bsky.social “Even hackers apologize more than tech companies do” 💯

Read my story abt a cruel sextortion scheme that took advantage of distraught victims. FTC is suing a co + its founder for allegedly netting $60 million plus from victims it lied to by promising fake services. Firm manipulated panicked victims by telling them their lives would be destroyed, per FTC

Victims of sextortion already go through so much, finding out the company you paid to resolve the issue is scamming you must be devastating. via @suzannesmalley.bsky.social & @therecordmedia.bsky.social

Today's (actually Saturday's, but I'm a bit behind) interesting newly registered ransomware-themed domain name is: dontgetransomware[.]com Y'all! We solved ransomware, just don't get it and you'll be good to go! I don't know why anyone didn't think of that before now!

And even more ransomware-related arrests…. krebsonsecurity.com/2026/10/fbi-...

Well, that was fast.

Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients 😥

Japan 🇯🇵 and South Korea have been hit hard by cyberattacks over the last few weeks. I don’t think we fully comprehend how much has been done. Via @nikkei.com

I think the list of the Booba Project Ransomware’s victims is worth a closer examination. While there appears the usual mix at first glance, there seems to be a higher percentage of government-affiliated victims than most cybercriminal groups. via @jgreig.bsky.social & @therecordmedia.bsky.social

One amazing care package from the equally amazing @caffeineislife.bsky.social ! Thank you 🙏

New from CCB 🇧🇪 'The Gentlemen ransomware group' profile ccb.belgium.be/news/gentlem... #CyberSecurity #ransomware @gate15.bsky.social @ecrime.ch @campuscodi.risky.biz @ransomwaresommelier.com

Historically, Germany and Japan working together was…problematic 🤣. But, if a member of the Qilin ransomware group gets arrested and is going to stand trial, I’ll allow it.

Oh no you don’t Dulles! You don’t get to change the name of the “C Gates” stop to the “E Gates” and leave that stupid hill and make me listen to that stupid PenFed song! I AM NOT FALLING FOR YOUR LIES!!!

Fantastic podcast from @selenalarson.bsky.social and team on the growth of invitation-themed phishing scams. Worth sharing with friends and family!

😮

ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns via @jgreig.bsky.social & @therecordmedia.bsky.social

Data breach and extortionists are SHOCKED that reporters would think that their data breach would lead to an extortion! 🙄 I suggested to the kids (?) that they are simply now regretting hacking the world's biggest police force and they denied getting cold feet.

Huh, who knew the jackasses behind Shiny Hunters ransomware group were not good people. “The 24-year-old Pepijn van der S., who was arrested on suspicion of involvement in the hacker group ShinyHunters on 15 September, is also suspected of an attempted provocation of two murders.”

Russian hybrid attacks against Europe intensifying, says Macron

I know you are a nearing if you are cool enough to back Cryptid Hacker Force on Kickstarter. And, let me tell you, if you are on BlueSky you are cool enough! Back our campaign today, there are less than 24 hours left!

Did you all know there is a tier where you can be drawn into issue 3 of Cryptid Hacker Force? Have you ever wanted to be a cryptid in a comic book? Of course you have! Back the campaign today, help push us over the top, and become a cryptid!

Ohhhh…Dulles has E gates now. How…exciting?

Only Five days left in this campaign! Back the Cryptid Hacker Force on Kickstarter or you risk me having to make a 100-long post (skeet?) thread about why the campaign failed. And no one wants to read that emo-fueled-nonsense :).

This is shockingly stupid. I highly encourage more of this from Shiny though…it will definitely accelerate their demise. via @josephcox.bsky.social & @404media.co

Hey Baltimore folks! Come see us this weekend at @baltimorecomiccon.bsky.social!

Russia's internet shutdowns disrupt warnings about incoming drone attacks via @darynant.bsky.social & @therecordmedia.bsky.social

Some ransomware drama for your Saturday morning: ShinyHunters hacks Clop leak site, threatens to extort ransomware gang Really nice write up from @bleepingcomputer.com m