Raphael Satter

@raphae

Journalist. Contact me here: or on Signal: raphaelsatter.01

2.191 Folgt7.728 Follower1.196 Posts

Website Bluesky

Ist das dein Profil?Übernimm es — dann gehört dir raphae.dirty.social.Profil übernehmen

Raphael Satter@raphae· 12d

Cyber insurer Resilience has done a study of its customers’ 1st half losses. Nothing due to AI-specific hacking vectors — the overwhelming majority due to social engineering. Report here: cyberresilience.com/wp-content/u...

The Resilience 2026 Midyear
Cyber Risk Report seeks to close
the gap between the AI hype
machine and AI reality when it
comes to cyber risk. The impact of
AI on cyber risk is clear and evident
- just perhaps not where all the
media attention is currently
focused.
Security researchers have
documented two firsts this half: a
fully autonomous ransomware
operation that ran end to end
without a human at the controls,
and an AI model that breached a
production environment on its
own. While these developments
are important warning shots on the
future of autonomous threats, they
also distort the reality of cyber risk
for organizations today. In the first
half of 2026, Resilience observed
no incurred losses from AI-specific
attack vectors, including prompt
injection, model exploitation, or
agentic AI misuse. What has
produced losses is older and more
familiar: 85.3% of incurred losses
trace back to a person believing a
voice, a message, or a request that
looked legitimate, up from 17.7%
two years ago. So far, AI's clearest
effect on the portfolio isn't a new
attack type. It has made the oldest
one, social engineering, more
convincing.

Raphael Satter@raphae· 13d

A screengrab of Terry Gilliam's techno-surveillance-dystopia classic, "Brazil"

Raphael Satter@raphae· 26d

For years, journalists had no public record of their work, nothing they could show to hiring managers or prize committees. Thankfully, an entrepreneur has fixed this problem. www.hollywoodreporter.com/business/dig...

"A reporter who’s spent fifteen years doing the slower, harder, better-sourced work has never had a portable, public record proving it — something they can carry to an editor, a proprietor, or a competitor."

Raphael Satter@raphae· Jul 11

CQLLEEZY FUN!

“Liberty Dumplings” on display at a souvenir store in Texas.

Raphael Satter@raphae· Jun 12

www.hollywoodreporter.com/business/bus...

“I can’t tell you how many billionaires and CEOs have called me in absolute tears about their lives being destroyed by one article.”

Raphael Satter@raphae· Jun 1

Meanwhile, Grok’s actual enterprise use: www.reuters.com/world/grok-f...

In a report published last year, the web traffic monitoring firm Netskope - which tracks how its thousands of corporate customers connect to Al models
- said that Grok had "failed to gain significant traction" in corporate environments. Updated figures that Netskope provided to Reuters showed that Grok enterprise usage had fallen even further, to 2 out of every 1,000 users down from a peak of 5 out of every 1,000 users. Netskope executive Ray Canzanese said that even the employees that used Grok spent less time with the chatbot than its competitors - less than half the time that ChatGPT users spent with OpenAl's model,
for example.

Raphael Satter@raphae· May 27

New: State Department email says recently launched White House app will automatically be installed “on all mobile phones throughout the executive branch.” Story here: www.reuters.com/world/us/tru... Corroborates previous reporting from Government Executive: www.govexec.com/management/2...

Meanwhile, the Department of State, in an email to employees seen by Reuters, said the White House app would be automatically installed on "all mobile phones throughout the executive branch." Government Executive first reported C on the plan to install the app, which includes livestreams of Trump's speeches and his social media posts.
White House spokesperson Olivia Wales declined to confirm to Reuters that the White House pushed agencies to install the app on government-issued phones.

Raphael Satter@raphae· May 14

BlackCore's website has vanished: Last month: "BlackCore is an elite influence, cyber, and technology company." web.archive.org/web/20260402... Today: "This domain has expired." blackcore.online

Raphael Satter@raphae· May 13

France Unbowed presidential candidate @jlmelenchon.bsky.social reacts to our reporting: "We ask the government for a law to fight foreign interference."

Les services de renseignement de notre pays soupçonnent l'entreprise israélienne BlackCore d'ingérences contre nous pendant la campagne municipale.

3 candidats LFI ont été visés : Sébastien Delogu, François Piquemal et David Guiraud. Résultat : des milliers de messages diffusés pour mentir, les traîner dans la boue.

Nous demandons au gouvernement une loi permettant de combattre les ingérences étrangères.

Raphael Satter@raphae· May 9

As @christopher.soghoian.net told me at the time, the suspicion was that the bureau was not limiting its impersonating of reporters to extraordinary circumstances. This “Captain Midnight” disclosure builds on that fear. Kudos to @bsky.realhackhistory.org for the docs! www.ap.org/media-center...

Raphael Satter@raphae· Apr 18

Clothes shopping and found my first AI slop T-shirt. Misshapen plane on upper left, alien lettering on the license plate & his-and-hers matching steering wheels.

A designer T with AI slop across the front.

Raphael Satter@raphae· Apr 10

what if

Raphael Satter@raphae· Apr 9

Same message, with those options toggled off:

A Signal lockscreen notification which only says "New message."

Raphael Satter@raphae· Apr 9

This is what it a sample incoming message notification looks like when you have name and content (or "message" on Android devices) enabled.

A lockscreen notification showing an incoming Signal message with the name of the sender and "Here's that sensitive document you asked..."

Raphael Satter@raphae· Apr 9

Settings > Notifications > Notification Content > No Name or Content This isn't counter-surveillance advice & I don't know whether it fully mitigates the attack surface revealed here, but at a minimum it'll avoid sensitive messages materializing on your lockscreen. www.404media.co/fbi-extracts...

Raphael Satter@raphae· Apr 6

www.newyorker.com/magazine/202...

In 2023, Altman married Mulherin in a small ceremony at a home they own in Hawaii. (They’d met nine years prior, late at night in Peter Thiel’s hot tub.) They have hosted a range of guests at the property, and those we spoke with reported witnessing

Raphael Satter@raphae· Mar 30

Handala Team's .to website remains offline, three days after the group published a small cache of personal emails belonging to the director of the FBI.

Hmm. We’re having trouble finding that site.
handala-team.to could not be found. Please check the name and try again.
If you entered the right address, you can:
Try again later

Raphael Satter@raphae· Mar 27

Meanwhile, Handala's website appears to be having ... problems.

Hmm. We’re having trouble finding that site.

handala-team.to could not be found. Please check the name and try again.

Raphael Satter@raphae· Mar 27

Tough challenge here for geolocation experts - guess the country.

Raphael Satter@raphae· Mar 26

The recording of the eight-minute-long call - which seems to have lopped off the beginning - was posted to YouTube on March 16 by a user who signed up on March 13 and has posted nothing since. It was almost immediately picked up by the Slovakian publication bumm.sk: www.bumm.sk/kulfold/2026...

Screenshot showing YouTube user @TobyMiller-c7x joined Mar 13, 2026.

Raphael Satter@raphae· Mar 19

Michigan's lawsuit against Exxon, Chevron, BP, et al refers to previous @reuters.com reporting around allegations that US environmentalists' emails were stolen by mercenary hackers and then shared with Exxon ahead of the material being leaked to the press: www.michigan.gov/ag/-/media/P...

211. In late 2024, press reports linked the hacking campaign to DCI Group
(DCI), Exxon’s public relations and lobbying firm at the time. Evidence shows DCI provided lists of targets (climate activists) to Israeli investigator Amit Forlit, who subcontracted the phishing operation to “Dark Basin,” run by an Indian firm called BellTroX. The FBI reportedly found that DCI also orchestrated strategic leaks of the hacked documents and, in some cases, shared that information with Exxon *before* disseminating it publicly. Between 2013 and 2018, DCI paid approximately $16 million to Forlit-affiliated entities.
212. In May 2024, Forlit was arrested in London. DOJ extradition filings
confirmed that DCI acted “on behalf of one of the world’s largest oil and gas corporations, centered in Irving, Texas.” According to the DOJ, that corporation—which was confirmed in a January 2025 court filing to be Exxon—sought to “discredit individuals or entities in connection with” climate change litigation. The DOJ also disclosed possession of a November 2015 memo sent from DCI to Exxon and forwarded to Forlit, which explicitly referred to “going on the offense” in response to “attacks” on Exxon “over climate change,” and identified specific individuals who were later targeted in the hacking campaign. The DOJ’s
extradition request was granted on April 30, 2025.

Raphael Satter@raphae· Mar 19

I received this statement from Navigate360 overnight: "We are currently working to determine whether we have experienced an incident involving our computer network and, if so, the extensiveness of the incident and the information involved." Our story: www.reuters.com/legal/govern...

This statement is from JP Guilbault, CEO of Navigate 360.

We are currently working to determine whether we have experienced an incident involving our computer network and, if so, the extensiveness of the incident and the information involved.

We have hired an independent third party to conduct a full forensic investigation to determine what has happened.

To this point, we have not confirmed that any sensitive information has been accessed or misused.

The system in question continues to be fully operational.

Our highest priority is the privacy and security of the individuals and organizations we serve. We are determined to learn what happened here and depending on what we find, we will take appropriate action.

Raphael Satter@raphae· Feb 12

Palo Alto's response here:

Asked to comment on the allegedly softened language, Palo Alto issued a statement to Reuters that said in part: “Attribution is irrelevant.”
Palo Alto's vice president of global communications, Nicole Hockin, said in subsequent emails to Reuters that the statement was meant to communicate that the lack of attribution in Palo Alto's report was not correlated with "procurement regulations in China" and that any suggestion otherwise was "speculative and false." She said the choice of language in Palo Alto's report reflected "how to best inform and protect governments about this widespread campaign."

Raphael Satter@raphae· Feb 12

Yep. See also: Lawyers benefiting from hackers' spy ops. www.politico.com/news/magazin...

Karp’s effort on behalf of Black was questionable, but he was not flying solo. According to a person familiar with the episode at the time, at least one Paul, Weiss partner joined Karp in the attempt to launch a criminal investigation by the Manhattan DA. In any case, the firm quickly moved on with business as usual after the news broke of Karp’s efforts. The truth is that there is a very high tolerance in the world of large law firms for these sorts of shenanigans — and for working with highly disreputable people if they generate enough business — and none of this will change anytime soon.

Raphael Satter@raphae· Feb 12

🤔

Raphael Satter@raphae· Feb 12

Reorganizing & I stumbled across this old Soviet cartoon. The caption says Mother Denmark has Uncle Sam over for dinner; he particularly enjoys the Greenland-shaped ice cream, which he devours whole "otherwise the Russians might come and take it.'"

Uncle Sam licks Greenland.

According to a machine translation, the text in Russian says:
“Oh, Mother Denmark had every reason to rejoice. To have a friend like Uncle Sam! She, of course, welcomed him with truly Danish hospitality. And he did not hesitate when the table was set. He especially liked the ice cream served for dessert. He swallowed it completely, ‘otherwise,’ he explained, ‘the Russians might come and take it.’”

Raphael Satter@raphae· Feb 4

This story by @johnwoodrowcox.bsky.social is powerful and sensitively written: www.msn.com/en-us/news/u...

Raphael Satter@raphae· Jan 23

Brutal.

Raphael Satter@raphae· Jan 23

Doing some LLM benchmarking and asked Llama 4 what I was known for. (This book doesn't exist/seems to be a riff on a 1991 work by Larry Sabato.)

In 2017, Satter published a book titled "Feeding Frenzy: How Attack Dogs, Mainstream Media, and Freak Out Folks Are Increasingly Ruining America," which explores the role of media and politics in shaping public discourse.

Raphael Satter@raphae· Jan 10

Obviously X is where it's at in terms of AI-enabled nonconsensual imagery but don't sleep on the violent AI slop being pushed to Facebook users: