🚨🇪🇺 BREAKING: The EU has offered Canada the opportunity to become its first ever “associate member”

Romania's national land registry is gone. Not encrypted, not exfiltrated. Deleted. That distinction matters more than most coverage has acknowledged. Ransomware groups encrypt your data and sell you the key back. That's a criminal business model with its own internal logic. Wiping a database and walking away doesn't generate revenue. It generates chaos. And when the motive isn't money, you have to ask what it is instead. The land registry isn't a glamorous target. It doesn't make headlines the way a power grid does. But think about what it actually holds: the authoritative legal record of who owns what across an entire country. Every mortgage. Every property title. Every piece of collateral backing a bank loan. Every disputed boundary that's ever wound through a court. Tax assessment rolls. Government planning records. This is the connective tissue of a functioning property economy, and Romania's is now gone. If backups are intact and recoverable, this is a severe incident with a measured recovery timeline. If backups are partial, corrupted, or absent, Romania is looking at something genuinely without modern precedent at national scale: the potential need to reconstruct a country's property ownership record from physical deeds, historical documents, notary archives, and third-party bank records. That process would take years and generate litigation for a decade. Millions of property owners, lenders, and government agencies disrupted simultaneously, all at once, from a single operation. The wiper attack as a technique has a fairly specific genealogy. Sandworm, the GRU-linked group that has been the most active and destructive state-sponsored actor in documented cyberattack history, pioneered the mass deployment of destructive malware against civilian infrastructure. NotPetya in 2017 is the canonical case: disguised as ransomware but actually a wiper, deployed initially against Ukrainian targets and then spreading globally to cause roughly $10 billion in damages. WhisperGate hit Ukrainian government systems in January 2022, weeks before the full-scale invasion. HermeticWiper followed within days of the invasion beginning. The pattern is consistent. Wiper attacks on civilian administrative systems in Eastern Europe, preceding or accompanying escalation in Russian military or political aggression, attributed to Russian state or state-directed actors. Romania is not Ukraine, but it is not a neutral party either. It is a NATO member hosting alliance assets on its territory. It serves as a significant logistics corridor for Western military assistance flowing to Ukraine. Romanian ports on the Black Sea have been part of the grain corridor discussions. Western intelligence assessments have consistently placed Romania among the targets of Russian hybrid warfare operations, which include not just cyberattacks but also disinformation campaigns and physical sabotage activities that have been documented across Central and Eastern Europe over the past several years. No attribution has been formally confirmed for this specific attack, and it would be premature to state one with certainty. But the profile fits a category of operation that intelligence services and private threat researchers have associated with state-level actors, specifically because the operational objective appears to be disruption rather than profit. Criminal groups have no particular incentive to wipe a land registry. There's no ransom leverage in destroyed data you can't restore, no market for exfiltrated property records, no monetization pathway that explains the choice. The choice of target and the choice of technique together point toward someone trying to make a country hurt in slow, grinding, difficult-to-attribute ways. The resilience question is the one that should be generating the most immediate attention. Government administrative databases across Europe exist in a complicated tier below the systems that receive serious security investment. Energy infrastructure, financial clearing systems, military networks: these have formal protection regimes, regulatory requirements, incident response planning, and significant resources behind them. Administrative registries, court databases, social services systems, property records: these frequently run on older infrastructure, with inconsistent backup practices, minimal security staffing, and no particular regulatory mandate driving investment. They are critical in practice but not classified as critical in policy, and the gap between those two things is where attacks like this land. Romania's situation is an extreme version of a vulnerability that is broadly distributed across European government systems. If the Romanian land registry had robust, air-gapped, regularly tested backups, this attack is recoverable, painful and expensive but recoverable. If it didn't, and that is a serious if, then this becomes a case study that every government IT administrator in Europe should be required to review in detail. The recovery window itself has costs regardless of how complete the backups turn out to be. Property transactions that can't close. Mortgages that can't be verified. Court cases that can't proceed. Bank collateral assessments that are in legal limbo. Every day the registry is offline or unreliable, the economic damage compounds. For a country of Romania's size, that's not trivial. One more thing worth sitting with: this attack didn't require physical access, didn't require killing anyone, didn't trigger a treaty response, and may not even result in clear public attribution. The attacker, whoever it is, achieved what a campaign of sabotage might take months and significant operational exposure to accomplish. And they did it in a way that is difficult to respond to under existing legal and treaty frameworks, because a cyberattack on a civilian database in peacetime occupies a genuinely ambiguous space in international law. That ambiguity is a feature, not a bug, for actors operating in the hybrid space. The whole point is that it's not quite war, not quite crime, and not quite nothing. foreigninterference.org/post… #foreigninterference #WiperAttacks #InfrastructureAttacks #CriticalInfrastructureMapping #MunicipalServiceDisruption

🚨 Canada’s Bill C-22 is here & it’s the same surveillance bill from last year's failed C-2. 🚨 What does this mean? ❌ Your metadata would be stored by electronic service providers - for example messaging and email providers - for up to 12 months. ❌ The government would force these companies to build surveillance capabilities directly into their platforms. The government calls it “lawful access” but we know that forcing providers to enable access to encrypted data puts EVERYONE'S privacy & security at risk. 😡 Because we know that there is no backdoor for the good guys only! Help us fight for Canadian's privacy & say no to this surveillance bill. Send a letter to reject Bill C-22 here 👉 internetsociety.org/our-work… #Canada #CanadaBill #Surveillance

This GitHub incident is insane. Merge queue commits have been reverting previously merged commits at random. This not only breaks the mental contract teams have with Git in general, but is subtle enough to be really hard to unravel after the fact. githubstatus.com/incidents/z…

You can construct an @opentimestamps proof for the file @CommerceGov timestamped and the transaction fcf172401ca9d89013f13f5bbf0fc7577cb8a3588bf5cbc3b458ff36635fec00 Bounty: first person who replies with a valid OpenTimestamps proof for this gets 100k sats!

So our independent work at Project Timestamper has been to digitally timestamp these 86 million individual recorded tracks to anchor their authenticity. We embedded these timestamps on the Bitcoin blockchain using the OpenTimestamps service. 6/