🧨 🚨 NEW POD UP! (presented by @thinkstcanary.canary.tools) - The Coruna iOS exploit kit, the connection to the Peter Williams/Trenchant exploit sale to Russians, how it slipped from government hands into criminal use @craiu.bsky.social @jags.bsky.social
LISTEN everwhere 👇
pod.link/1414525622
These things have always been true:
1. The ability to generate buggy code has never been greater.
2. The ability to find bugs in code has never been greater.
3. The ability to fix bugs in code has never been greater.
4. Many, many more people want to do 1 or 2 than 3.
Now scale this with AI.
REKT
Our blog at @Censys now has a proper RSS feed https://censys.com/feed/
(cc: @Feedly #GoogleReader)
Could've had a Chomps, Dave.
Why learn to code when you can use an LLM and pay a subscription fee for the rest of your life.
NEW @citizenlab.ca report: Cellebrite Used on Kenyan Activist and Politician Boniface Mwangi
citizenlab.ca/research/cel...
Making my GREM index like...
These dudes are awesome! Highly recommend their training if you get the opportunity.
Early career pen tester wanted to break some of azures specialist clouds. #infosecJobs
Non-Deterministic: The most important word you need to understand about AI 🤖
teriradichel.substack.com/p/non-determ...
My dog prefers that I listen to the podcast. She wants that 3 hour walk!
This week's show is up on YouTube (presented by Thinkst Canary @thinkstcanary.canary.tools)
WATCH www.youtube.com/watch?v=fvKM...
If Pentesting, AppSec, Bug Bounties or Security Engineering is your focus the Security Bugs section of my blog may be for you. Here I explore a serialization CVE in SolarWinds and prevention methods
Programming Languages and Serialization CVEs
teriradichel.substack.com/p/programmin...
🔥 #ThreeBuddyProblem Ep83 has been pushed to your earholes. Poland CERT on Russian wipers, Sandworm or not Sandworm, new FortIvanti nightmares + some KasperSekrets chit-chat @craiu.bsky.social @jags.bsky.social
securityconversations.com/episode/a-de...
No.
a bald eagle surrounded by stars and stripes and the text "oh my god, what the fuck"
Today’s Daily Cartoon, by Teresa Burns Parkhurst. #NewYorkerCartoons
NPR built a visual archive of the Jan. 6, 2021, attack on the Capitol, showing exactly what happened through the lenses of the people who were there. In "Chapter 2: Stop the Steal," we look at how false claims of a stolen election mobilized Trump supporters.
The 2025 selection follows its predecessors, "brain rot" from 2024, "rizz" from 2023 and "goblin mode" from 2022.
A fresh problem has been pushed to your podcast platforms! @craiu.bsky.social @jags.bsky.social
- Spotify open.spotify.com/episode/68US...
- Apple podcasts.apple.com/us/podcast/w...
Presented by our friends at ThreatLocker 😍
AI isn’t reinventing ransomware — it’s industrializing it.
That’s the core finding from new @sentinellabs.bsky.social research on how threat actors are actually using LLMs today. s1.ai/llm-rw
Outgoing 15-year head of GAO says he's worried the government is "taking our foot off the gas at CISA" and would "live to regret it." He also said CISA's one-third workforce cut was "obviously untenable" and "they may not be postured" to support the midterm elections. fedscoop.com/cisa-workfor...
The BloodHound Query Library, launched by @martinsohn.dk & @joeydreijer.bsky.social, democratizes tradecraft with a shared, searchable ecosystem. With 180+ Cypher queries & counting, the library is an increasingly valuable tool for the BloodHound community!
Browse ➡️ ghst.ly/bql_eoybsky
Today’s Daily Cartoon, by Brendan Loper. #NewYorkerCartoons
AI tooling and MCP servers are entering enterprises fast, often faster than security teams can assess the risks.
During a recent engagement, @xpnsec.com found a new Claude Code vuln (CVE-2025-64755) while exploring MCP abuse paths.
👀 Read the details: ghst.ly/49ybl4W
Caffeine raises my heart rate and makes me sweat. Team decaf rise up!!!
A woodcut of a bird beside the text "OH MY GOD SHUT THE FUCK UP"
A U.S. District Judge has ruled that interim U.S. Attorney Lindsey Halligan (who had no prosecutorial experience before this role) was improperly appointed by the Trump administration, agreeing with Comey’s defense team.
The ruling means that both federal indictments are dismissed. trib.al/WZbNPi9
