Lorenzo Franceschi-Bicchierai
@lorenzofb
Senior reporter @TechCrunch, writing a book on Hacking Team and the industry of government spyware. ☎️ +1 917 257 1382
Do you have any tips about cybersecurity, surveillance, spyware, zero-days...all things cyber? Contact me here: ☎️ Signal: + 1 917 257 1382 📷Keybase/Telegram: lorenzofb

If you are at SummerCon and want to say hi, I’m here. DM me or ping me on Signal +1 917 257 1382

I am at SummerCon today too, and ~ extremely ~ easy to find, so come say hi. If you prefer, I’m also on Signal (+1 917 257 1382)

Hacker Conference HOPE Says U.S. Immigration Crackdown Caused Massive Crash in Ticket Sales 🔗 404media.co/hacker-confere…
1989: FBI Director William Sessions said "Viruses are easy to create and propagate, require little expertise, and may be nearly impossible to prevent or detect."
NEW: Coinbase says its recent data breach affected at least 69,000 customers. Compmay said breach dates back to Dec. 26, 2024 and continued until earlier this month. Stolen data is great for doxing or even physical attacks. techcrunch.com/2025/05/21/coi…
NEW: A Massachusetts student plead guilty to hacking and extorting a U.S. education tech company. Prosecutors said the hacker stole personal data on 60 million students and 10 million teachers. And all signs point to that victim being PowerSchool. techcrunch.com/2025/05/21/us-…
Despite what CISA says, Google told me: "there has been no reports of or evidence of exploitation of the vulnerability. We are reaching out to CISA for clarification of their categorization."
Google just patched a serious ⚠️ vulnerability (CVE-2025-4664) that allows attackers to steal sensitive tokens (like OAuth or session IDs) when you simply visit a malicious site. No clicking. No downloading. Just loading the page is enough. What makes this so dangerous? The…
The pope's funeral, now Cannes. I expected Assange to spend most of his time posting on Twitter but I guess is all about IRL experiences these days.
Julian Assange's t-shirt at Cannes lists the names of 4,986 Palestinian children aged five and under, killed by Israeli forces since 2023. [Photos by David Fisher]
The last time the UAE did this it ended up poorly for most people involved, so I'm sure it will go well this time.
New: UAE is trying to recruit Pentagon workers displaced by DOGE to move to Abu Dhabi to work on AI for UAE military. A UAE brig general met last month with two former staffers of Defense Digital Service and tried to recruit them and their entire DDS team zetter-zeroday.com/uae-recruiting…
NEW: Cocospy, Spyic and Spyzie, the stalkerware apps that were breached earlier this year and caught spying on millions of people's phones, now appear to have shut down. The apps not working, their websites gone, and Amazon-hosted cloud storage deleted. techcrunch.com/2025/05/19/coc…
NEW: The U.S. Department of Justice announced that Eric Council Jr. was sentenced to 14 months in prison for the hack of the U.S. Securities and Exchange Commission's X account. techcrunch.com/2025/05/16/us-…
NEW: Coinbase says it was breached and customers' personal information — including IDs — stolen. The crypto giant said hacker was "paying multiple contractors or employees working in support roles" and contacted Coinbase with a ransom demand this week. techcrunch.com/2025/05/15/coi…
I couldn't make it to @offensive_con unfortunately. But if you wanna talk about exploits, 0days, etc...my Signal is +1 917 257 1382. Always happy to keep folks anonymous.
DEF CON legal update: Truth is a complete defense against defamation. The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice. We look forward to returning our full attention to the community and conference we love. We also thank everyone who…