We recently partnered with Okta to ship new identity threat detections, alongside contributing to Okta's open source Security Detection Catalog, so the broader security community benefits.
Big thanks to the Okta Cyber Defense team for the collaboration!
sec.okta.com/articles/202...
Also if you work in sales at a company, do not call me. Email, fine.
I love the Three Buddy Problem and listen to it religiously. My question for @ryanaraine.bsky.social @jags.bsky.social and @craiu.bsky.social - do you think the benefits of staying on Twitter outweigh the hazards?
Each one of those three missiles costs 33% more than the annual budget of the national park where I work.
I do not want AI in @1password.bsky.social. So naturally my next renewal will be a price increase because they’re stuffing AI into @1password.bsky.social.
We should do everything we can to help Democratic politicians leave Twitter behind. Help the AG out!
This is an excellent explainer. 👀 quote: “In rough terms, the workforce of CBP officers and Border Patrol agents commit crimes at an equal or even greater rate PER CAPITA than the population of undocumented immigrants do in the United States.”
patch ye MongoDB, there's an exploit for a vuln which has been in the product for over a decade that allows the remote, unauth read of any memory - which includes plaintext creds.
Somebody posted an exploit on Christmas Day, Merry Christmas!
doublepulsar.com/merry-christ...
That feeling when @iverify.bsky.social tells you about an iOS update before Apple even issues a security bulletin 😍
CVE-2025-55182 (React2Shell): Remote code execution in React Server Components and Next.js
securitylabs.datadoghq.com/articles/cve...
A man and a woman get in an elevator, which one is doing risk assessment?
Afraid of connecting to public Wi-Fi? Terrified to turn your Bluetooth on? You may be falling for "hacklore." Dozens of CISOs and ex-CISA officials have launched an effort to dispel these myths and show you how not to get hacked for real.
After yesterday’s surrender, we’re launching the largest Democratic primary program that we’ve ever run.
We will not back any Senate primary candidate unless they call for Schumer to step down as Minority Leader.
If you’re as pissed as we are, join this campaign to rebuild the Democratic Party. 👇
When you book a flight through major travel sites, a data broker owned by U.S. airlines will sell details about your flight—your name, credit card used, and where you’re flying to the government.
We found out how to opt-out of ARC selling your travel data. A guide:
www.404media.co/how-to-opt-o...
“I’m a law-abiding citizen who never thought I’d be of such interest that the U.S. government would use my tax dollars & yours to try to send me to prison…[after being] manhandled by an Immigration and Customs Enforcement agent trying to remove my phone from my hand.”
www.msnbc.com/opinion/msnb...
So this story is super duper interesting for a whole ton of reasons, but one big one is its a very rare glimpse into the private valuation of high-end exploits held by major defense contractors
bsky.app/profile/lega...
Truly, SS7 is the surveillance gift that keeps on giving: www.motherjones.com/politics/202...
NEW: cost to 'poison' an LLM and insert backdoors is relatively constant. Even as models grow.
Implication: security doesn't scale with LLMs.
Super interesting: Prior work had suggested that as model sizes grew, it would make them cost-prohibitive to poison. 1/
arxiv.org/pdf/2510.07192
Veep wasn’t supposed to be a documentary
🎶Thicker than
A deep dish pie
Joints are sore
Blood pressure high
Pudding, flan
And crème brûlée
None are safe
From the Green Beignets🎶
You can protect me from a 22 Tbps DDoS attack on my website but you can’t protect me from the fact that Cloudflare’s 15th birthday is DDoSing my brain
Sickening behavior by this agent. The fact that Mayor Adams has rolled out the red carpet for ICE is a stain on our city.
1/ Hi, I'm TProphet. I write the Telecom Informer for @2600.com. A lot of people have been asking me about www.nbcnews.com/politics/nat... given that I'm somewhat knowledgeable in the area.
Here's my take: I'm kind of astonished that this is public, and it isn't normal that it would ever be.
Be sure you take a moment today to remember Charlie Kirk for exactly who he was.
Nothing infuriates me more than cybercriminals that target small businesses, so it's time to spend a Saturday burning down the infrastructure of the ones who targeted a contractor I've worked with.
It's bullshit that I agree with David Frum. Things shouldn't have sunk so low that we've reached our level of agreement! We should be in the realm where we disagree on every issue in the news!
I watched Kimmel's three most recent monologues, convinced I had missed the thing MAGA was outraged about. But it looks like this is it.
It has to be more than this, right? There's just no way this is it.
Not really an overstatement to say that the test of a free society is whether or not comedians can make fun of the country's leader on TV without repurcussions.
An AWS error message that reads: “We have identified that your submission may contain potentially malicious content. If you believe this was an error or require assistance, please reach out to our Trust and Safety team directly.”
I am genuinely curious what other type of content AWS thinks I’d be submitting through their “Report Phishing” form…?
