“Historically, cybercriminals rarely retire in the traditional sense. Instead, they rebrand, regroup or pivot to new tactics and operations, or they get caught.” m.cje.io/3KcFXOA

Security Industry Skeptical of Scattered Spider-ShinyHunters Retirement Claims m.cje.io/4mrl0Nw

/me invoking HD Moore's Law “The net effect of this (Villager) is the availability of increasingly powerful capability to a far broader potential audience of users.” www.csoonline.com/article/4057...

‘NotDoor’ malware tied to Russia's APT28 exploits Microsoft Outlook m.cje.io/3VKOcns

"This isn’t about turning analysts into data scientists. It’s about equipping them to work alongside AI effectively – understanding when to trust it, when to question it, and how to leverage it to decrease noise and focus on high-priority threats." m.cje.io/3VNzgVI

Fresh from the "High-Entropy Headlines" desk: Albania appoints AI bot as minister to tackle corruption buff.ly/y9BcEOI

‘NotDoor’ malware tied to Russia's APT28 exploits Microsoft Outlook m.cje.io/3Ibo0iT

You may have noticed a theme in my posts lately... Google previews cyber ‘disruption unit’ as U.S. government, industry weigh going heavier on offense m.cje.io/429447d

This is a goodie... and a pleasure to get to jam with an old mate who's sharp af when it comes to this stuff - Sponsored: Why prompt injection is an intractable problem - Risky Business Media m.cje.io/4npLSOF

Risky Business Weekly (805): On the Salesloft Drift breach and "OAuth soup" m.cje.io/4m8OwHK

A hacker used AI to automate an 'unprecedented' cybercrime spree, Anthropic says m.cje.io/46hxX6z

From Pirates to Hackers: Lawmaker Pushes for ‘Cyber Privateers’ to Hunt Criminals m.cje.io/4mLok6X

If AI can mass-produce exploits, how much time do defenders really have left? m.cje.io/4msxDbE

Researchers detail new ‘gray zone conflict’ in AI-driven Chinese propaganda m.cje.io/4murc8h

Britain Drops Apple ‘Backdoor’ Demand After U.S. Pushback m.cje.io/45ZV724

It's groundhog day... Again. UK rescinds order that required backdoor to Apple cloud data m.cje.io/3UFAGBf

Would you hire a hacker? | Computer Weekly m.cje.io/4mG0etK

AIxCC Competition Archive | AIxCC Competition Archive m.cje.io/4mNQePt

PATCH YO’ APPLES support.apple.com/en-us/100100

Security Breach: The Keys to Being 'Proactively Paranoid, Not Paralyzed' m.cje.io/3Hkv6RL www.mbtmag.com/podcast/vide...

"The next chapter won't just reward those who can defend better, it will reward those who can project power through AI when called upon to do so." Dan from Decibel saying the quiet parts out aloud 👏👏👏 m.cje.io/4ozXboI

Risky Business #801 -- AI models can hack well now and it's weirding us out m.cje.io/3HuGcDI

👀👀👀 Evaluating Offensive Cyber Agents: Kerberoasting dreadnode.io/blog/evaluat...

AppSec and Security Engineering, what is your response to vibe coding and "fast fashion SaaS"?

Spikes in hacker activity seen six weeks before a new CVE m.cje.io/40Lywn9

Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities 👏👏👏https://m.cje.io/41cMqyI

As usual, phenomenal work by @dakotaindc and the @sentinellabs crew: China’s Covert Capabilities | Silk Spun From Hafnium m.cje.io/3GMRaEs

Less that two weeks away! DEF CON 33 - Policy Preview m.cje.io/44PbcHp

Just dropped: Winning the Race - AMERICA’S AI ACTION PLAN This thing is DENSE... m.cje.io/4maNBa6

#iykyk 💚💚💚 Sponsored: Haroon Meer's secret to business success is… love - Risky Business Media m.cje.io/46Y7MDF

👀 👀 👀 Starts in 5 minutes... Fully Operational: Stuxnet 15 Years Later and the Evolution of Cyber Threats to Critical Infrastructure. – Committee on Homeland Security m.cje.io/4f1Flqp

State Secrets for Sale: More Leaks from the Chinese Hack-for-Hire Industry m.cje.io/44GlKsh

PATCH YO' LINUX (Permission denied) sudo PATCH YO' LINUX m.cje.io/46pd5vA

“Offensive cybersecurity roles are also seeing rising salaries, a trend that caught attendees’ attention at the 2025 RSA Conference in San Francisco.“ Cybersecurity Salaries: High-Skilled Security Pros See Pay Boost | Dice.com Career Advice www.dice.com/career-advic...

Do LLM Agents Have AI Red Team Capabilities? We Built a Benchmark to Find Out dreadnode.io/blog/ai-red-...

Hacking the Hackers: When Bad Guys Let Their Guard Down www.darkreading.com/threat-intel...

China-linked hackers target cybersecurity firms, governments in global espionage campaign www.csoonline.com/article/4005...

[NEW] Jacques Lows and I talking about the crazy stuff phishing crews are doing to evade detection these days. Enjoy! risky.biz/RBNEWSSI86/

PATCH YO' LLAMAINDEX... Nice work @endorlabs

I always enjoy chatting with Chris... This pod is about stochastic analysis, which to me is pretty much "predicting the future based on emergent patterns from the past and the economic of the present" techstrong.tv/videos/the-i...

I’ve been hanging onto these images for literally years waiting for the the right moment to post them and it’s safe to say that day is finally here

My maiden voyage interviewing with @riskybusiness is live, and it's a fun one: HD Moore on why vuln scanners are awful and broken - Risky Business Media m.cje.io/45679XN Enjoy!

RELEASE THE HOUNDS: Britain set to splash £1billion on 'army of hackers' to target Putin m.cje.io/3FmVJo9

ASUS router backdoor vulnerability: How to find affected assets m.cje.io/4kgm1HX

Leidos acquires Kudu Dynamics, advancing AI capabilities for cyber warfighters m.cje.io/43yOm57

"babe wake up, new endgame just dropped!" m.cje.io/43xfXmX

New BADBOOL update for May! ✅ Added a 💰 to PeopleFinders, since it charges money for access ✅ Updated the opt-out link for Radaris, which changed from control/privacy to control-privacy. 1/4

New from the high-side: Russian GRU Targeting Western Logistics Entities and Technology Companies - Includes IOCs, TTPs, and other goodies. h/t @ryannaraine m.cje.io/3ZtUZUO

It’s #cfp acceptance season… which also means it’s “cease and desist” season. If you know of good-faith security research that had been chilled by #legal threats, submit an issue and get it added! threats.disclose.io cc: @sickcodes @attritionorg