Today as part of our commitment to transparency in this space, we are proud to announce that we have reported the first 20 vulnerabilities discovered using our AI-based "Big Sleep" system powered by Gemini — goo.gle/bigsleep

Today @Google Project Zero announced a new trial policy: Reporting Transparency. We’ll now share when we report a security vuln to a vendor within 1 week including products + deadlines. Goal: shrink the patch gap + drive faster, safer updates for users: googleprojectzero.blogspot.com/2025/07/repo...

Good article out from @danielmiessler.bsky.social on using AI properly. danielmiessler.com/blog/how-to-...

Some excellent work by @craiggidney.bsky.social that reduces the number of qubits (in a quantum computer) required to break RSA by 20-fold. If you don’t have a migration plan to safe algorithms, now is the time to start one!

Good news: egg production is up! www.ams.usda.gov/mnreports/am...

We will have memory safety… it will take many steps forward, over the long haul. Here’s an update from Chrome on replacing FreeType with a Rust based alternative. developer.chrome.com/blog/memory-...

While listening to @patrick.risky.biz and @metlstorm.risky.biz on this week’s risky biz podcast I dreamt up a nice retirement project: “Case Studies for Security Engineering”. Highly curated technical descriptions of incidents written in such a way that solutioneers can understand attacks. 1/2

Good morning.

Ever wake up in the morning and think to yourself: wish I could do an official review of that incident. 👀

Exceptionally good analysis of the current geopolitical discussion re: Ukraine and Russia negotiations. x.com/nicholadrumm...

It's #WorldPasswordDay!! At @Google we're celebrating the journey on deprecating passwords! We're happy to report passkeys have been used 1B+ times across 400M Google Accounts. We're also sharing how we'll use them to protect high risk users: blog.google/technology/s...

‘Brand new’ ‘greenfield’ and ‘multi-billion dollar global business’ are not reassuring words to see in a CISO job posting.

Today @MunSecConf #MSC2024 @Google is announcing its AI Cyber Defense Initiative aimed at tapping into the potential AI can bring to defenders and continuing investments in AI-ready tools, research and AI security training: blog.google/technology/safety-security/google-ai-cyber-defense-initiative/

‼️🚨NEW report and blog from the @Google TAG and @Mandiant teams explores the implications of the Israel-Hamas war and where things stand with cyber in the Russian war in Ukraine: blog.google/technology/s...

Excited to see some awesome Safety Engineers in Munich this week!

Today I am grateful for those all over the world that dedicate their lives to keeping others safe. Thank you for all the work you do, and wherever you are on the world, Happy Thanksgiving!

During @AspenDigital's #AspenCyber Summit today in #NYC we announced our latest Titan Security Key which now works with #passkeys & our commitment to provide 100,000 keys to high risk users in 2024. More from at blog.google/technology/safety-security/titan-security-key-google-store/

Today, CISA’s Cyber Safety Review Board announced it will review Cloud Security and assess the recent Microsoft intrusion. Given scope, I have recused myself from the Board’s review. https://www.dhs.gov/news/2023/08/11/department-homeland-securitys-cyber-safety-review-board-conduct-review-cloud

The CSRB has released its second ever report on cyber safety, a study of a loosely affiliated hacker group that compromised dozens of well-defended companies with low-complexity attacks. https://www.cisa.gov/resources-tools/resources/review-attacks-associated-lapsus-and-related-threat-groups-report

Irrationally excited about Blackhat/Defcon/hacker summer camp. See you all in Vegas!

Happy Pride, London!

A beautiful Friday afternoon.

My feed is fully of puppy dogs so balancing the universe with a kitty photo. He apologizes for his sad face, as he is mysteriously missing a claw and is not feeling well. Be rest assured he’s being extremely pampered.

So, how do we get the medievalists, volcanologists, seismologists and weather nerds over here?