YEET YO' GPG gpg.fail

But the issue is not just about diverting young people from cyber crime today, Ellis believes. It is also about casting the net wider to better outsmart the criminal gangs and “future proof” the industry. www.computerweekly.com/feature/Woul...

2026 cybersecurity forecast: China's PLA centenary looms, AI turns anyone into a malware developer, and economic pressure pushes more people toward cybercrime. Shift-left finally start working—but only for modern code. The rest of the internet? A triage trash fire. cje.io/2025/12/27/2...

reminder: this is still a thing… threats.disclose.io (opensource researcher threat repo) #39C3

🚨🚨🚨 PATCH YO' MONGODB - PUBLIC POC AVAILABLE 🚨🚨🚨 m.cje.io/4q2Bi1Y

2026 is shaping up to be an interesting year... #cyberwarfare #activedefense #forceprojection english.news.cn/20251226/ef2...

HARDEN YO' N8N - [CVSS 10.0 RCE] Remote Code Execution via Expression Injection m.cje.io/4qhl2JX cc: @networkchuck @danielmiessler @jhaddix

Yesterday was the 30th anniversary of the release of Michael Mann's HEAT, a hacker movie classic. (Shoutout Kelso.) We did an episode on HEAT last year with the great @meggardiner.bsky.social (co-author of HEAT 2) and our friend @cje.io. The podcast IS the juice! youtu.be/b2cfEXeWSn0?...

Trump Administration Turning to Private Firms in Cyber Offensive www.bloomberg.com/news/article...

Serious Hackers Wear TWO Black Hoodies www.podcasts.nu/episodes/cis...

A new Three Buddy Problem pod has been pushed to all podcast platforms @craiu.bsky.social @jags.bsky.social Have a listen! pod.link/1414525622

“From an attacker perspective, #React2Shell is the kind of vulnerability that affords massive opportunity for crime, but that also has a narrow window for exploitation, partly because of public awareness leading to patching, and partly because of competition.” securityboulevard.com/2025/12/atta...

PATCH YO’ IOS About the security content of iOS 26.2 and iPadOS 26.2 - Apple Support support.apple.com/en-us/125884

"If you do the math, then it’s reasonable to assume that these two things will net to an increase in SOC alerts and the need for a shift in strategy to deal with it." m.cje.io/3KNy6aP

🚨 REQUEST FOR COMMENTS IS OPEN 🚨 Agency Information Collection Activities; Revision; Arrival and Departure Record (Form I-94) and Electronic System for Travel Authorization (ESTA) m.cje.io/48NHyTL

When it comes to developing skills through underground organizations, recent geopolitical issues have also helped muddy the waters of how some professionals think about ways to earn a living, said Casey Ellis, founder at @Bugcrowd. www.dice.com/career-advic...

Exclusive | AI Hackers Are Coming Dangerously Close to Beating Humans www.wsj.com/tech/ai/ai-h...

Fortinet warns of critical FortiCloud SSO login auth bypass flaws www.bleepingcomputer.com/news/securit...

By partnering with The Bugcrowd Academic Program, universities can shape how cybersecurity is discovered, taught, and advanced. Request a demo today to see how Bugcrowd can elevate cybersecurity at your university.  www.bugcrowd.com/blog/the-bug...

TYPHOONS HAVE ENTERED THE CHAT China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) | Amazon Web Services aws.amazon.com/blogs/securi...

@cje.io joined the judging panel at the Monterey #Cyber912 Strategy Challenge, hosted by the @cyberstatecraft.bsky.social, where student teams navigated a simulated crypto crisis gone global 😱🌏 It’s one thing to talk cyber policy, another to test it under fire. Congrats to the teams who did both 👏

wen bont

🚨PATCH YO’ REACT Critical Security Vulnerability in React Server Components – React react.dev/blog/2025/12...

"Now I Have A Hacklore.org Website. Ho, Ho, Ho" In this @Bugcrowd Security Flash @treyford and i weigh in on The hacklore.org Project, security myths and the role of risk in weighing them up, and how to be an effective "designated nerd" this Holiday Season. Enjoy! m.cje.io/443cZrC

also, HACK YO’ APPLE (Reward increases to 2M for 0c Kernel + others, scope increases, and kinda neat to see the inclusion of flags 👏) Categories - Apple Security Research

Old dogs...new tricks 👏👏👏 Following the success of Prompt||GTFO, @gadievron @dcuthbert @halvarflake @mbrg0 decided to trot out RAPTOR, and offensive (AND DEFENSIVE) agent. If you know the pedigree involved here you also know it's worth checking out. m.cje.io/4oryhX5

PATCH YO’ ANDROID Android Security Bulletin—December 2025  |  Android Open Source Project source.android.com/docs/securit...

Huge props to whoever found and demo’d this 👏👏👏 (…and to Baxter and the FDA for “doing the thing”) Baxter Permanently Removes Life2000 Ventilation System

Spies gonna spy. "This is deliberate exploitation of intentional design, and the fact that it flies under the radar for this reason is being deliberately abused by the threat actors." www.darkreading.com/cyberattacks...

It's Thanksgiving Week in the USA, which we all know means one thing: TECH SUPPORT FOR FAMILY MEMBERS. I'm very pleased to co-sign and have contributed to @boblord's hacklore.org project, which seeks to debunk the most common "Kermit-hands" consumer cybersecurity advice that tends to spread around.

...In which Sean and I unpack the phenomenon of beg bounty, it's rise over the past several years, and the solutions that I've seen actually work redefiningcybersecuritypodcast.com/episodes/beg... cc: @ITSPmagazine @bugcrowd @disclose_io

My favorite part of this interview was when the penny truly dropped re the difference between CSPM and "open cloud security" - Framework + Community + AI = WIN Sponsored: Prowler uses AI how AI works best - Risky Business Media m.cje.io/4nWzghY

Srsly Risky Biz: The cyber regime change pipe dream m.cje.io/4qKXbn5

Price Equilibrium, Yo: The simple economics of an external shock to a bug bounty platform m.cje.io/3LzW09T

Truffle Security Raises $25 Million Series B to Expand NHI Security 🎉 🎉 🎉 m.cje.io/4oU5Cut

The tech giant didn’t report active exploitation of any of the patched defects, yet details about potential impacts remain limited. via @mattkapko.com cyberscoop.com/apple-securi...

PATCH YO' APPLE support.apple.com/en-us/125632

BOLD TALKS: Casey John Ellis on Hacking Trust, AI, and the Future of Cybersecurity m.cje.io/3LbZMGt

Ugh… It’s 2025 and vendors still don’t understand the Streisand-effect. cc: @disclose_io (threats.disclose.io) YouTuber with nearly 4M subscribers sued by lock company after he breaks into lock with just a can www.uniladtech.com/social-media...

China’s Vulnerability Research: What’s Different Now? nattothoughts.substack.com/p/chinas-vul...

Eep... Hackers Had Been Lurking in Cyber Firm F5 Systems Since 2023 m.cje.io/4noaaYW

Seriously, I love this post so much - Good weekend timeline cleanser: "Root for Your Friends · Joseph Thacker" m.cje.io/3KYvnLt

He tested his pitch on Uber drivers—then built a cybersecurity platform to $180M raised. | Casey Ellis, Founder of Bugcrowd - A Product Market Fit Show | Startup Podcast for Founders www.buzzsprout.com/1889238/epis...

To quote @cje.io, patch yo' Oracle. decipher.sc/2025/10/06/o...

PATCH YO' F5 m.cje.io/43nNUHo

Takeaway: If you’re building offensive AI capability on top of SOTA alone, it’s about to get *very* competitive.

😬 Major US online retailers remove listings for millions of prohibited Chinese electronics

PATCH YO' IVANTI...OH WAIT NVM ZDI Drops 13 Unpatched Ivanti Zero-Days Enabling Remote Code Execution m.cje.io/48X7Ynz

Awesome stuff from the @dreadnode crew at LABScon25 | Auto-Poking The Bear - Analytical Tradecraft In The AI Age | Wendiggensen & Palm m.cje.io/3VTmpl7

PATCH/THRUNT YO’ VMWARE Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024 thehackernews.com/2025/09/urge...