Technical Analysis Manager (OT/ICS & IO Threat Intel) @Mandiant by @Google /🇲🇽 in 🇳🇱/ #GoHuskies/ Jij bent net zo rijk. Zo rijk als je je voelt.

Amsterdam
Joined August 2009
Thanks @RafaRemo for the help desinging my new hobby website || kapell.tech || After observing some similar personal/corporate sites on #ICS #OT cybersecurity from amazing people, I realized we often tend to forget about design, so why not promote the beauty of it?
10
Kapellmann retweeted
The complete lineup for CODE BLUE 2026 is officially out! 🔥 en.atpress.com/news/641166 From frontier AI cybersecurity keynotes to expert talks, OpenTalks, and practical workshops—the full schedule is live.💡 Online registration ends on November 10.⏳ Details here:codeblue.jp/en/registration/… #codeblue_jp #codeblue2026
1
4
800
Kapellmann retweeted
Happy to share the program for THURSDAY PM at #BlackAlps26 Welcome some great speakers to the stage @trenimal @p0w1_ D. Fernandez Coviella @Kapellmann dealing with most anticipated topics #PACS #EDR #AgenticPipelines #MTTA #AdversarialAI Check it out ⭐blackalps.ch/ba-26/program
3
5
187
AI coding agents are transforming developer workflows. However, they also create a new attack surface that is no longer just about malicious code, but about the intent of files such as skills and configurations. Check out our new blog on this topic: cloud.google.com/blog/produc…
1
3
89
Poland releases details on December’s cyberattack on their energy infrastructure, noting similarities to prior FSB activity. The wiper has been attributed by others to Sandworm (GRU). Attribution is definitely not super clear yet. 1/x
‼️At the end of last year, there was a series of coordinated attacks in Polish cyberspace. 📌Today, our team is publishing a report describing the technical analysis of these events. We show the scheme of operation and the tools used by the attackers. ➡️cert.pl/uploads/docs/CERT_Po…
7
48
1
160
36,195
Kapellmann retweeted
🚨India-Pakistan Cybertracker #1 🚨 There are at least 45 hacktivist groups that are engaging in cyber activities as a result of kinetic actions between India and Pakistan. Geopolitical flashpoints will now always trigger hacktivist activity. Of the 45 groups: 10 are aligned as pro-India and 35 are aligned as pro-Pakistan. I only included groups who had made declarations or targeted either country since April 22 2025. It is likely that more groups will join in as tensions increase, in particular I would expect to see more pro-Palestine hacktivists pivot into the conflict. Defacement and DDoS remain the most popular and prominent attack vectors. hopefully this doesn't get buried in the algorithm. #IndiaPakistanWar #IndiaPakistan #Pakistan #India #pakistanindiawar
3
46
2
110
12,521
1/ An interesting analysis by ChatGPT on the psychological aspects of the meeting between Zelensky and Trump-Vance is circulating online. It reveals a masterclass in gaslighting, manipulation, and coercion from Trump and his entourage. Let’s break it down. 1/n
731
8,307
894
29,876
2,827,350
🚨🚨RussiaUkrainewar Hacktivist #cybertracker edition 30. 🚨🚨 On the 3rd anniversary of full-Russian invasion of Ukraine I am sharing my latest cybertracker. TLDR: Russia-Ukraine war hacktivist activity continues, but groups have dropped from over 130 active down to 80. Daily attacks against Russia or for Russia continue daily, with DDoS still the main attack type. Claimed attacks against Operational Technology and the claimed use of ransomware have increased since mid-2024. Doxing remains popular when targeting Ukraine military and government officials. The line is blurred between information operations and hacktivist activity. The pro-Russian hacktivist civil and the Telegram purge have disrupted their operations. Pro-Ukraine groups, like IT Army Ukraine maintain persistent activity. The ‘convergence’ between pro-Russian and pro-Palestine hacktivists continues. There are additional insights and information on my Substack (I wont add the link here as X doesn't like that) #cybersecurity #Russia #Ukraine #UkraineWar
1
11
4
28
16,691
This week, Chinese AI startup DeepSeek’s R1 rattled the US after it was found to match OpenAI’s o1 model across a number of core tasks. @DFRLab’s @kentonthibaut examines what DeepSeek’s breakthrough says and doesn’t say about the ‘AI race’ with China: atlanticcouncil.org/blogs/ne…
1
7
8
7,211
Kapellmann retweeted
Hacktivist activity linked to geopolitical events won't be slowing down in 2025. We can expect more convergence between pro-russian and pro-palestine hacktivists. We will also continue to see new groups emerge, like Moscow Pentest.
5
1
19
1,940
Not surprisingly noname05716 has joined the new Arabic hacktivist collective Operation Sword of Justice as the hacktivist convergence continues. Noname05716 went from operating in isolation until in late 2023 they started teaming up with most hacktivist groups.
6
13
3,140
Our team at the @DFRLab documented more than 40 foreign interference allegations related to the 2024 US elections in our Foreign Interference Attribution Tracker (FIAT) launched yesterday. We explain our methodology and initial findings here: dfrlab.org/2024/10/23/dfrlab…
14
1
18
5,211
This band is called Mac Sabbath and it's a fever dream.
1,054
13,177
1,856
100,837
6,879,816
A 500-seat auditorium filled with people, and more people outside in the networking/sponsors area or already engaging in the soldering sessions. 💻 🫶
2
19
8
38
4,481
Kapellmann retweeted
Bsides Tirana 2024 CFP is still open. If you want to be part of the biggest technical cyber security conference in Albania now is your chance. Submit your talk proposal: sessionize.com/bsides-tirana… #BSidesTirana #BSides #conference #security #tirana #albania
11
9
5,688
💡 #Hacktivism is back and more sophisticated than ever. Since early 2022, we’ve seen a resurgence in threat activity from hacktivist actors, with increased capabilities in intrusion and information operations. Explore our latest blog post: bit.ly/45KWRdY
17
1
37
7,030
Our new blog is up: Global Revival of Hacktivism Requires Increased Vigilance from Defenders 'Since early 2022, @Mandiant has observed the revival and intensification of threat activity from actors leveraging hacktivist tactics and techniques...' cloud.google.com/blog/topics…
2
3
7
1,007
As the volume and complexity of activity grows and new actors leverage hacktivist tactics, defenders must determine how to filter, assess, and neutralize a range of novel and evolving threats. Proactive monitoring of hacktivist threats will bring manifold benefits to defenders...
1
69
It was a great pleasure to work on this with @AldenWahlstrom, James Sadowski, Davyn Baumann, Josh Palatucci, and Jose Nazario!
1
78