Scattered Spider
September 2025
September 2025
Vol. 8, Iss. 39
Robin’s Newsletter #380
JLR secures line of credit for supply chain. US Secret Service uncovers 100,000 SIM farm. NCA arrests man in Collins Aerospace attack.
Vol. 8, Iss. 38
Robin’s Newsletter #379
European air travel disrupted by Collins Aerospace attack. Shai-Hulud npm worm infects 180+ packages. Microsoft's Entra ID verification clanger.
August 2025
August 2025
Vol. 8, Iss. 33
Robin’s Newsletter #374
Second UK government Afghan resettlement data breah. Colt telecom turns off some services to contain incident. Some speed cameras in the Netherlands are offline.
July 2025
July 2025
Vol. 8, Iss. 29
Robin’s Newsletter #370
Data on 6.5M Co-op members stolen. UK MoD kept Afghan data breach a secret using super-injunction. Salt Typhoon all up in National Guard's network.
Vol. 8, Iss. 28
Robin’s Newsletter #369
Four arrested in UK retail cyber attacks. Critical Citrix Bleed 2 vulnerability. Would you like fries with that? McDonald's 123456 password.
Vol. 8, Iss. 27
Robin’s Newsletter #368
Sinoloa cartel used compromised mobile devices, CCTV, to identify and kill FBI informants. Qantas breached by Scattered Spider. Canada bans Hikvision.
June 2025
June 2025
Vol. 8, Iss. 25
Robin’s Newsletter #366
Israeli/Iran cyberspace heating up. Scattered Spider turns to insurance industry. 23andMe fined £2.3M by ICO.
May 2025
May 2025
Vol. 8, Iss. 21
Robin’s Newsletter #362
Global infostealer, ransomware infrastrucutre takedown. TCS investigating role in M&S incident. Anthropic's AI blackmails developer in test.
Vol. 8, Iss. 20
Robin’s Newsletter #361
M&S insurance claim may top £100M. Coinbase flips script on extortion attempt. OpenAI instructed to retain output log data.
Vol. 8, Iss. 18
Robin’s Newsletter #359
Co-op, Harrods join M&S as victims of Scattered Spider breaches. Spanish power outage not a cyberattack. RDP lets you login with old creds.
November 2024
November 2024
Vol. 7, Iss. 47
Robin’s Newsletter #336
Black Friday scam warning. Microsoft Windows changes announced following CrowdStrike outage. Facebook take down of 2 million pig butchering accounts.
June 2024
June 2024
Vol. 7, Iss. 24
Robin’s Newsletter #313
Six years! Wow. Thanks for subscribing 😊 (now go donate blood to help the NHS respond to a ransomware attack)
May 2024
May 2024
Vol. 7, Iss. 21
Robin’s Newsletter #310
Microsoft Recall is a 'privacy nightmare'. UK/China threat not being takn seriously. FBI says Scattered Spiter is ~1,000 people.
October 2023
October 2023
Vol. 6, Iss. 44
Robin’s Newsletter #280
1Password, Cloudflare amongst 170 caught up in Okta breach. UK Online Safety Bill becomes law. Lawful intercept against Russian chat service.