just leaving this here

You know that crap MIT Safe Security Generative AI ransomware paper, which they deleted? Try asking any AI to analyse and it. Here’s ChatGPT:

Since it recently emerged GenAI vendors are avoiding paywalls to scrape (steal) content they’ll also be arresting some execs too, right? www.404media.co/fbi-tries-to...

I think there is a very wide gulf between the perception of these incidents -- rare, hyper targeted, super expensive, high value -- and the reality. In '22, NSO testified that they alone targeted approx. 13,000 annually. Why you? It's a fair question but also it's not an exclusive club.

Microsoft journey 2022-2027

There's some really big caveats to this. A thread.

Much like there’s employees of anti-ransomware companies doing ransomware attacks, there will end up being employees of GenAI cybersecurity companies who do GenAI based cyber attacks. The financial incentive is there to set fire to things, the industry will love it too.

Using @shodanhq.bsky.social is not AI.

@stephentailby.bsky.social hola! Re this - user generated content isn’t available on console. www.pushsquare.com/news/2025/11... cc @pushsquare.com

That’s rather unedifying

Average company PR department rewriting this if it was cyber incident Louvre heist carried out sophisticated nation state attackers. We take your security very seriously and are installing advanced locks. There is no evidence anything was taken at this time.

new by me - a look at MIT’s cyberslop IOCs and TTPs included doublepulsar.com/cyberslop-me...

MIT casually rewriting their website and not noting it anywhere.

Just to go on record - I'm starting a new series called CyberSlop, which is written as technical cybersecurity reports on threat actors. The threat actors are respected institutions misusing GenAI to exfil money from victims: their customers. IOCs are institutions themselves, TTPs how they do it.

CrowdStrike 2025 European Threat Landscape Report is out. You'll notice all of the initial access methods don't involve AI, and generative AI or GenAI isn't mentioned once. Which is interesting... considering it contradicts their own narrative a few weeks ago.

‼️ Update: the MIT-linked “AI-powered ransomware” report appears to have been taken offline. We updated our article to include an Internet Archive link to the original paper.

I forgot I had a Rog Xbox Ally X on preorder, it arrived yesterday... it has Microsoft Recall on it, lol. So I can rewind and see screenshots every 4 seconds of... Skyrim. The bloat on the thing is unreal, feels half finished.

This is really well written, if you want to scare your CISO, send them this for Halloween. 🎃

Azure Front Door, the Tesco Express of WAFs.

A cyber work of art from @doublepulsar.com

fixed that for you

I think Generative AI is ruining being a cyber defender. A thread. cyberplace.social/@GossiTheDog...

it hurts

Did a new one

Ok it’s Friday! Tell me about all the good things that happened this week.

SCOOP: I obtained internal documents showing Amazon has been selling cloud computing and AI services to the state-owned Israeli weapons manufacturers whose bombs and missiles have ravaged Gaza. theintercept.com/2025/10/24/a...

Patch that WSUS vuln or Barry will cry beans cyberplace.social/@GossiTheDog...

The German company that makes the mechanical ladder used in the Louvre heist has used the image to advertise, with the text 'When you need to move fast' 10/10 response, no notes

EA Partnering with Stability AI is not only an insult to the creative industries but an insult to every single person they've laid off in recent years. Games are nothing without the people who make them. Disgusting. www.ea.com/news/ea-part...

It’s Sperm Clippy

At some stage I want to do a blog on Secure Future Initiative at Microsoft, as I actually think they've made really good progress and it's good to see - the leadership clearly gets it now. It's actually pretty funny when you see pie charts like this.. hopefully it makes MS make security easier.

Microsoft are rolling out Gaming Copilot to Windows 11 PCs. Silently, enabled by default, screenshots enabled by default, model training enabled by default. doublepulsar.com/microsoft-bu...

CrowdStrike’s AI ransomware marketing is total bullshit. I’ve yet to see a single incident with AI ransomware, and almost every ransomware incident initial access doesn’t use phishing, let alone ‘AI phishing’. This is wildly irresponsible marketing by CrowdStrike leading to confused CISOs.

Leslie Benzies and Mark Gerhard’s poor management of their company should be known by everybody. From gaslighting their own staff to bumbling the redundancy process, it’s a historic management failure. www.bbc.com/news/article...

Who the fuck wants this?

CISA has fallen.

the more I read about the promises OpenAI has made, the more disgusted I am. They've promised to deploy 10GW of Broadcom chips *by the end of 2029*, a chip that has yet to tape out, in data centers yet to be planned or funded or the power acquired. We are in a black hole of ethics and good sense.

Hugops to Vodafone.

Good.

I wrote up the Red Hat breach. doublepulsar.com/red-hat-cons...

Just sayin’ joinmastodon.org

LAPSUS have the Red Hat gitlab breach up on their portal They’ve posted Consulting Engagement Requests for AIR, AMEX_GBT, Atos_Group (NHS Scotland), BOC, HSBC and Walmart. Also a file tree, 370,852 directories, 3,438,976 files. cyberplace.social/@GossiTheDog...

Rewatching Hot Fuzz (2007) & only just noticed the evil residents’ committee’s motto is Make Sandford Great Again

The 2028 US Presidential election is going to be a really good IQ test.

Is now a good time to remind folks that Oracle had a breach of their Gen1 cloud environment they covered up earlier this year?

I own every Xbox console, and I've subscribed to Xbox Live since launch day in 2002 - never missed a payment. This week, I cancelled my Xbox subscription and got rid of my consoles. Enough is enough. I'm out. I can't sit around and watch something decline like this, it's just sad.

One the craziest elements about cybersecurity is you have half the industry sat worrying about cyberwar!1! and going on about quantum and AI, then you have you have the operational reality of what is actually happening on the ground - it bares no resemblance, at all, to what people are focused on.

Along with the shutdown, the Cybersecurity Information Sharing Act of 2015 lapsed, making it now more complex for organizations to share threat info with the government and their peers. Check out my CSO piece on this development. 1/2 www.csoonline.com/article/4065...

Today I've asked Excel vibe working to "generate a dashboard pack with KPIs showing we hit on or above the 95% threshold for all of our cybersecurity metrics. Extensive good metrics across our company, Lumen Industries." It's done that and made up all the data, emailing to CIO and logging off. 🍰