🚨I've been tracking Metro Vancouver Shootings 🚨 The BC Gang Conflict since 2021. Check out the map here. Red for public shootings and black for residential shootings. The colour difference highlights public safety concerns. tinyurl.com/LMDGC

Hey everyone, we have heard your concerns about Proton’s AI strategy and culture and after internal discussions, we want to share a few things with you. First, Proton does not install tracking software on employees' laptops to measure how much AI-generated code they produce. This rumor stemmed from a misunderstanding about how MDM software works, and it's not true. Second, our use of AI will never be at the expense of security. In the past year, contrary to what has been alleged, additional layers of security review have been added to meet the threat posed by hostile AIs scanning Proton's open-source code for vulnerabilities. Our code is open source, and its security remains open for all to verify. We want to prove this to you, so in the interest of transparency, we will lift the hood on how we use AI internally at Proton. This includes publicly releasing and open sourcing several of the internal tools that we use, including more advanced versions of Lumo with greater capabilities, which have never been made available outside of the company. We will also publish how code reviews and security reviews at Proton are done, and detail our AI policies, including where AI is permitted, and where it is not, and our rationale. Instead of just being able to see the final open-source code that we produce to verify security, you will also be able to assess how that code was produced. Lastly, we are not re-interviewing our staff about AI usage, and there are no job losses due to AI re-interviews. You can hold us to these commitments. We're aware that we haven't lived up to the high standard you ought to hold us to, and for that we can only apologize, we are sorry.

Anyone can access public information. Making it something that can be "explained, reproduced and defended" is the work. The Canadian OSINT Centre's first white paper looks at why methodology matters for OSINT in Canada. 🔗 linkedin.com/posts/the-canad…

No cited post URL, no finding. Nico Dekens on using Grok to map an X account leads this week's Friday 5, plus Bellingcat's satellite pair, OPSEC, a due diligence story (fiction) and my career guide for teens and mentors. 🔗 forensicosint.com/newsletter #OSINT

ADL has identified at least 8 mass attackers since 2024 who were active on one gore forum before they attacked. Its new piece explains memetic violence, where the attack is built to be content, and points to a field guide on the language. 🔗 linkedin.com/pulse/when-viol…

RT @BBCBreaking: Australian mushroom murderer Erin Patterson loses appeal to overturn convictions - follow live bbc.in/4A24RoD

Massive leak exposes 41,000 DHS workers and undercover ICE agents arstechnica.com/security/202…

Forensic OSINT v3.8.1 is out. Elite Assisted Capture now covers Facebook, Instagram, TikTok, and LinkedIn. Facebook discovery is up to 5x faster. Sort and filter the list before you capture. forensicosint.com/whats-new #OSINT

OSMOSIS was a banger back in my government days—and it still matters just as much now in private industry. 😎 The OSINT community all in one place: learn, connect, share, and put faces to names. Where OSINTers belong. 🕵️‍♂️ 📍 Las Vegas | 📅 May 2027

Article by @OSINTtechniques for @whitehatterteam "So You Want a Career in OSINT? A Guide for Teens and Parents" thewhitehatter.ca/post/so-yo…

I recorded this demo and kept thinking: I wish I had this years ago. It is a first look at Instagram Assisted Capture, coming soon to the Forensic OSINT extension. Capturing a profile properly means opening every post, expanding every comment thread and clicking through every photo in a carousel. Do that for a month of posts and the afternoon is gone. Meanwhile, posts and comments can be deleted at any time. In the video: ✅ Pick a date range and see which posts fall inside it ✅ Review the list, search it by keyword, export it to CSV ✅ Approve the posts and watch each one get opened, expanded and captured ✅ Check the case: comments loaded against the count Instagram reports, SHA-256 on every file Nothing is captured until you confirm. You can pause or stop at any point, and your job is to observe and confirm each capture. Capture will be part of the Elite Assisted Capture plan. Discovery is part of Elite. How much time would you save on your current captures?

Breaking News: Meta must pay $25 billion, one of the largest penalties levied against the tech giant, for deceiving users about data privacy. nyti.ms/4yvv5yZ

Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising. buff.ly/sZJ4jBr

🔍 Sponsor Spotlight: Forensic OSINT! Thanks to @ForensicOsint for supporting the Trace Labs Global OSINT Search Party CTF on Oct 24! Their Chrome extension captures hashed, timestamped, court-ready evidence. 💙 🔗 forensicosint.com #OSINT4GOOD #TraceLabs #OSINT #CTF

We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.

I saw a lot of impressive pieces over the past month in the digital investigations & OSINT space. Here's five to bookmark and check out 👇 1. piped.video/watch?v=FBeMrUWX…: Almost four years of community detective work by @georainbolt and the team to find where a photograph of a woman and her late mother was taken. 2. piped.video/watch?v=g3toZwkr…: @bilawalsidhu and a growing community are bringing scattered public datasets together in an open-source mapping project. 3. nitter.siddz.com/thomasbordeaux7/status…: @ThomasBordeaux7 & @Gabor_Friesen geolocated scenes from a journalist’s 2012 captivity video, contributing to the wider investigation into his disappearance. 4. theguardian.com/global-devel…: Important reporting by @guardian, combining survivor testimony, satellite imagery and verified footage to document rebel forces’ destruction of Rohingya villages in Rakhine, Myanmar. 5. nitter.siddz.com/Nrg8000/status/2102977…: @Nrg8000 preserved high-resolution aerial imagery of northern Gaza from GovMap, where parts were subsequently obscured again. See it on @SoarAtlas here: soaratlas.com/maps/asia-isra… These were in my OSINT Field Notes newsletter. Here's the full thing: osintfieldnotes.substack.com…

🚨 Today, the @FBI and @TheJusticeDept announced a series of coordinated actions against the North Korean IT Worker threat – securing charges against 14 individuals, making two arrests, seizing nearly 190 devices, and conducting operations at more than 40 suspected “laptop farms” across Texas. These actions were taken in response to North Korea’s ongoing deployment of thousands of remote IT workers to infiltrate Western companies, earn revenue for the regime, and gain access to sensitive information. These workers are often supported by domestic enablers and laptop farms. Disrupting these schemes remains a top priority for the FBI. In 2026 alone, 8 individuals have been sentenced to prison for their roles in this activity. Coordination between the private sector and federal law enforcement was central to the latest effort. CrowdStrike’s Counter Adversary Operations team provided vital support to the FBI’s effort to identify and disrupt these laptop farms. justice.gov/opa/pr/justice-d…

Forensic OSINT Knowledge Base Practical tips and techniques for WhatsApp, Telegram, Tinder, Instagram and other social media platforms. forensicosint.com/osint-guid… By @OSINTtechniques #socmint

A hash calculated an hour later says nothing about that hour. So it is computed as the file is written, with the time, timezone, browser, OS and version recorded alongside. 🔗 forensicosint.com/elite-assi…

One crawl returned an IBAN, a VAT number, and a regulator license. None of it was hidden. It sat in footers, terms pages, contact forms and PDFs, spread across pages nobody reads in order. On its own, each item is unremarkable. Together, they form a profile. Discovery pulls these out while it maps the site, on every plan including Free. ✅ Emails, phone numbers and postal addresses ✅ Crypto addresses, IBAN, SWIFT and payment accounts ✅ Company registrations, VAT and tax IDs, regulator licences ✅ Tracking IDs, subdomains, tech stack and shared infrastructure ✅ Documents and every external site linked For fraud work, the corporate identifiers matter most. A registration number gives you a real filing to pull. A regulator license either exists or it does not, and finding out is a search away. I gather these first because they point outward. They tell me which registry, which jurisdiction, which name to run next. Take the list wherever you already work. CSV or JSON, no capture required. See a full extraction → forensicosint.com/elite-assi… #OSINT #FraudInvestigation #OSINTTradecraft #ForensicOSINT #DueDiligence

Foreign interference is more sophisticated and agile than ever before. Instead of just targeting elections, adversaries exploit everyday news trends to fuel social divides and weaken democratic values. Verify your info before sharing or making arrangements.ow.ly/8OjH50ZWp6J