Sean Gallagher :verified: 🐀 :donor:
thepacketrat@infosec.exchange
<p>Security Research Engineer @Cisco Talos. Past: Natsec/Infosec Editor Emeritus @ Ars Technica. Ex Navy officer and actual battleship sailor. Verified cat furniture. Bird paparazzo. Still mostly s***posting as @thepacketrat@twitter.com. Also federating <span class="h-card" translate="no"><a href="https://mastodon.social/@thepacketrat" class="u-url mention">@<span>thepacketrat</span></a></span> and <span class="h-card" translate="no"><a href="https://mastodon.sdf.org/@thepacketrat" class="u-url mention">@<span>thepacketrat</span></a></span></p>
Posts
-
View post
So you know how the mobile companies said they were shutting down their SMS-to-email gateways? Not so much.
-
View post
Ten years ago this month, the DNC got hacked and emails were leaked by Russian intelligence (&quot;Fancy Bear&quot; and &quot;Cozy Bear&quot;, as per CrowdStrike). Why does it feel like it&#39;s been twice as long as that?
-
View post
WHAT&#39;S HAPPENING?!?!?
-
View post
I wrote a thing about some weird stuff. https://blog.talosintelligence.com/clickfix-moves-into-the-browser/
-
View post
Gotta hand it to General Motors for their absolute dedication to defensively registering domains based on threat intel....as I page through all the domains they registered to match ShinyHunters phishing patterns.
-
View post
The Clickfix-in-browser scammers have switched to a new target site for their fake exploit lure to draw in crypto-hungry skids: https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?tab=t.0
-
View post
Regrettably, I will not be at Black Hat, DEFCON or BSides LV again this year. I will instead be packing a subset my parents' belongings out of their house into a UHaul trailer as we put their house up for sale. Last year at this time, I had been shuttling back and forth between Baltimore and upstate NY for over a month, and it was becoming clear that my dad had not been particularly forthcoming about his or my mom's medical situation. By September, we were staging an emergency evacuatio...
-
View post
Hey @dgl@infosec.exchange I just sent a paste[.]sh abuse report in, and it's a doozy.
-
View post
When people who write sanctions don't understand how the Internet works: https://meduza.io/amp/en/news/2026/07/14/u-s-treasury-sanctions-on-a-vpn-service-knocked-out-telegram-s-short-link-domain-worldwide
-
View post
On this day 10 years ago at Ars Technica: Facebook's quest to have global surveillance, er, broadband capabilities takes to the skies. https://arstechnica.com/information-technology/2016/07/facebook-tests-full-scale-solar-powered-internet-drone/
-
View post
Here's to continued bad opsec by The Com-spawned cyberistas: https://fancybearfriends.org/2026/07/21/teenage-opsec-lulz/
-
View post
https://thepacketrat.com/2026/07/17/on-patriotism-in-a-fcked-up-country/
-
View post
Some things I encountered over the 4th of July holiday and http://thepacketrat.com/2026/07/17/on-patriotism-in-a-fcked-up-country/
-
View post
Pigeon portraits. http://thepacketrat.com/2026/07/15/pigeon-portraits/
-
View post
[the parent trap] It's now just about a year since my parents' twin health crises became emergent. A lot has happened. There are many people I am grateful to, including my management at my employer for making it possible to keep my job and deal with the relocation of both parents, hospitalization of one, and the finding of long-term housing and care for both. http://thepacketrat.com/2026/07/15/the-parent-trap/