roses are red, violets are blue, Discombobulating… You’re absolutely right! #valentinesday

roses are red, violets are blue, some poems rhyme, but this one doesn’t. #valentinesday

Happy Friday... PATCH YO' IOS (EXPLOITATION ITW) Apple security releases - Apple Support (SA) m.cje.io/4bTDrc3.

The [un]prompted Con Agenda has dropped and it is LIT m.cje.io/4axb40O

Next things...

ok this is freaking cool... spaceraccoon/vulnerability-spoiler-alert-action: GitHub Action to alert on security patches before the CVE drops. m.cje.io/4a6lZjc

Undead by design: Benchmarking EOL operating systems www.runzero.com/resources/un...

Under Pressure: Exploring the effect of legal and criminal threats on security researchers and journalists – DataBreaches.Net m.cje.io/46mghr0

Sponsored: AI is critical to the future of cyber defence The big idea: Adversary tradecraft is now 80-95% quality parity with the US... but they have 10-100x MORE operators. We can't hire our way out of that gap. m.cje.io/4keZaNxhttps...

this one’s for @dennisf.bsky.social

Patch yo' Office (@cje.io voice) decipher.sc/2026/01/26/m...

Poor little guy... I hope he got his term sheet after all of that San Francisco Mountain Lion Is Tranquilized and Captured for Release Elsewhere | KQED www.kqed.org/news/1207121...

Opposite seasons. Same extremes. #ClimateContrast #ExtremeWeather #BostonCold #MelbourneHeat

Risky Chinese Electric Buses Spark Aussie Gov't Review m.cje.io/4aa8EpQ

Tickets Open: CrikeyCon 11 m.cje.io/45VRrxS

finally, we're living through precedented times

For some reason I thought about Aloria today. She was an inspiring woman, and this quote about her mental health struggles will always stick with me: “It’s a long hard road ahead sometimes, but that doesn’t mean that the journey isn’t going somewhere, and it isn’t worthwhile.” A powerful reminder.

YEET YO' GPG gpg.fail

But the issue is not just about diverting young people from cyber crime today, Ellis believes. It is also about casting the net wider to better outsmart the criminal gangs and “future proof” the industry. www.computerweekly.com/feature/Woul...

2026 cybersecurity forecast: China's PLA centenary looms, AI turns anyone into a malware developer, and economic pressure pushes more people toward cybercrime. Shift-left finally start working—but only for modern code. The rest of the internet? A triage trash fire. cje.io/2025/12/27/2...

reminder: this is still a thing… threats.disclose.io (opensource researcher threat repo) #39C3

🚨🚨🚨 PATCH YO' MONGODB - PUBLIC POC AVAILABLE 🚨🚨🚨 m.cje.io/4q2Bi1Y

2026 is shaping up to be an interesting year... #cyberwarfare #activedefense #forceprojection english.news.cn/20251226/ef2...

HARDEN YO' N8N - [CVSS 10.0 RCE] Remote Code Execution via Expression Injection m.cje.io/4qhl2JX cc: @networkchuck @danielmiessler @jhaddix

Yesterday was the 30th anniversary of the release of Michael Mann's HEAT, a hacker movie classic. (Shoutout Kelso.) We did an episode on HEAT last year with the great @meggardiner.bsky.social (co-author of HEAT 2) and our friend @cje.io. The podcast IS the juice! youtu.be/b2cfEXeWSn0?...

Trump Administration Turning to Private Firms in Cyber Offensive www.bloomberg.com/news/article...

Serious Hackers Wear TWO Black Hoodies www.podcasts.nu/episodes/cis...

A new Three Buddy Problem pod has been pushed to all podcast platforms @craiu.bsky.social @jags.bsky.social Have a listen! pod.link/1414525622

“From an attacker perspective, #React2Shell is the kind of vulnerability that affords massive opportunity for crime, but that also has a narrow window for exploitation, partly because of public awareness leading to patching, and partly because of competition.” securityboulevard.com/2025/12/atta...

PATCH YO’ IOS About the security content of iOS 26.2 and iPadOS 26.2 - Apple Support support.apple.com/en-us/125884

"If you do the math, then it’s reasonable to assume that these two things will net to an increase in SOC alerts and the need for a shift in strategy to deal with it." m.cje.io/3KNy6aP

🚨 REQUEST FOR COMMENTS IS OPEN 🚨 Agency Information Collection Activities; Revision; Arrival and Departure Record (Form I-94) and Electronic System for Travel Authorization (ESTA) m.cje.io/48NHyTL

When it comes to developing skills through underground organizations, recent geopolitical issues have also helped muddy the waters of how some professionals think about ways to earn a living, said Casey Ellis, founder at @Bugcrowd. www.dice.com/career-advic...

Exclusive | AI Hackers Are Coming Dangerously Close to Beating Humans www.wsj.com/tech/ai/ai-h...

Fortinet warns of critical FortiCloud SSO login auth bypass flaws www.bleepingcomputer.com/news/securit...

By partnering with The Bugcrowd Academic Program, universities can shape how cybersecurity is discovered, taught, and advanced. Request a demo today to see how Bugcrowd can elevate cybersecurity at your university.  www.bugcrowd.com/blog/the-bug...

TYPHOONS HAVE ENTERED THE CHAT China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) | Amazon Web Services aws.amazon.com/blogs/securi...

@cje.io joined the judging panel at the Monterey #Cyber912 Strategy Challenge, hosted by the @cyberstatecraft.bsky.social, where student teams navigated a simulated crypto crisis gone global 😱🌏 It’s one thing to talk cyber policy, another to test it under fire. Congrats to the teams who did both 👏

wen bont

🚨PATCH YO’ REACT Critical Security Vulnerability in React Server Components – React react.dev/blog/2025/12...

"Now I Have A Hacklore.org Website. Ho, Ho, Ho" In this @Bugcrowd Security Flash @treyford and i weigh in on The hacklore.org Project, security myths and the role of risk in weighing them up, and how to be an effective "designated nerd" this Holiday Season. Enjoy! m.cje.io/443cZrC

also, HACK YO’ APPLE (Reward increases to 2M for 0c Kernel + others, scope increases, and kinda neat to see the inclusion of flags 👏) Categories - Apple Security Research

Old dogs...new tricks 👏👏👏 Following the success of Prompt||GTFO, @gadievron @dcuthbert @halvarflake @mbrg0 decided to trot out RAPTOR, and offensive (AND DEFENSIVE) agent. If you know the pedigree involved here you also know it's worth checking out. m.cje.io/4oryhX5

PATCH YO’ ANDROID Android Security Bulletin—December 2025  |  Android Open Source Project source.android.com/docs/securit...

Huge props to whoever found and demo’d this 👏👏👏 (…and to Baxter and the FDA for “doing the thing”) Baxter Permanently Removes Life2000 Ventilation System

Spies gonna spy. "This is deliberate exploitation of intentional design, and the fact that it flies under the radar for this reason is being deliberately abused by the threat actors." www.darkreading.com/cyberattacks...

It's Thanksgiving Week in the USA, which we all know means one thing: TECH SUPPORT FOR FAMILY MEMBERS. I'm very pleased to co-sign and have contributed to @boblord's hacklore.org project, which seeks to debunk the most common "Kermit-hands" consumer cybersecurity advice that tends to spread around.

...In which Sean and I unpack the phenomenon of beg bounty, it's rise over the past several years, and the solutions that I've seen actually work redefiningcybersecuritypodcast.com/episodes/beg... cc: @ITSPmagazine @bugcrowd @disclose_io

My favorite part of this interview was when the penny truly dropped re the difference between CSPM and "open cloud security" - Framework + Community + AI = WIN Sponsored: Prowler uses AI how AI works best - Risky Business Media m.cje.io/4nWzghY

Srsly Risky Biz: The cyber regime change pipe dream m.cje.io/4qKXbn5