it blows my mind how folks have failed to see that this has been the game the whole time… the easiest way to rig an election is to convince voters that voting is futile.

The White House just launched GOLD EAGLE: an AI-powered federal clearinghouse for vulnerability coordination (EO 14409). CVD is national infrastructure now. The open toolkit for doing it well: go.disclose.io

In honor of the great @cje.io: PATCH YO SHIT PEOPLE

If you’re a Democrat and plan to vote this fall, please acquaint yourself now with what looks to me to be a highly skilled extrapolation of where that’s headed. Which is by definition not merely a best guess.

@whereis.co sydney, australia

ok, the correct caption here is “marketing the existing of tao is back”

New #Boston conference just dropped

super cool idea to look up your own org, and then do what is needed to make your security contact easier to find!

lookup.disclose.io finds the security contact for any asset (domain, ip, package, repo, container, extension) and now plugs into recon: dio-lookup cli, caido + burp plugins, json api, and mcp server. plus directory.disclose.io grades programs against our maturity model.

Very cool tool!

lookup.disclose.io finds the security contact for any asset (domain, ip, package, repo, container, extension) and now plugs into recon: dio-lookup cli, caido + burp plugins, json api, and mcp server. plus directory.disclose.io grades programs against our maturity model.

Jumped on the Microsoft Threat Intelligence Podcast with Sherrod DeGrippo — AI and vuln research, the slopdemic, vibe crime, and why humans are still the point. Fun one. open.spotify.com/episode/6wox...

Con season: the year's best research hits the stage — and some of it gets a legal threat instead of a thank-you. Facing legal action for good-faith research? The SRLDF funds legal defense: [email protected] / srldf.org w/ @kurtopsahl.bsky.social @infosecjen.bsky.social @harleygeiger.bsky.social

@lookitup.baby greets from the borealis view

I reckon this is gonna be a good year.

If any veterans are looking for ways to stay outside the DMV, hit me up. I’ve got some hotel points I can offer.

Signs of hope for Secure by Design www.defendersinitiative.com/p/signs-of-h...

...now with more LIVE: Live from the sconce · birbs m.cje.io/4eT9Xuq

The Gap — Five Days the Record Went Dark · birbs m.cje.io/4wmb8dg

The planets have aligned, and I’ll be in Sydney for the AISA Security Day this Friday! Looking forward to catching up with folks (and giving Dave Gerry a heckle during his keynote 😉)

So I’ve both neck-deep and a student of the art of cybersecurity venture for a LONG time now, and this interview between Pat, James, and John Sakoda is *absolute* gold. Highly recommend. Pitching security startups to VCs in the AI era podcasts.apple.com/us/podcast/r...

Five Eyes cyber security agencies statement The AI shift in cyber risk: why leaders must act now www.cyber.gov.au/about-us/vie...

little update on #birbs Round 2: The Hatch · birbs

#ff @snlyngaas.bsky.social @patrickhowelloneill.com @daemontamer.bsky.social @weld.bsky.social @dennisf.bsky.social @jahootsen.bsky.social @joeuchill.bsky.social @ldpreload.so @michaelhobbes.bsky.social @atrupar.com @shipwreck75.bsky.social @techmeme.com @debdebdeb.bsky.social @jvagle.me

Go look at the stars 🤩

8 years with Hackers on the Hill as attendee & Ambassador — BY FAR the best on-ramp to a direct voice in US Federal & State policy. Usual suspects, see you next week. New here but want in? Come join us — registrations are open! hackersonthehill.org/us-2026 #HackersOnTheHill #CyberPolicy

"Babe wake up, new model just dropped" - Claude Fable 5 and Claude Mythos 5 m.cje.io/43VSk8j

Cyber policy is moving too fast to track alone. The disclose.io Upcoming Dates page is a shared community calendar for VDP + security research — US (fed+state), EU, UK, AU. Show up at Hackers on the Hill — Jun 16, US Capitol, DC. blog.disclose.io/upcoming-dat...

Huh... TIL the ACDC Bill is back in front of Congress as of May 16 🤘⚡️ Graves, Gottheimer Introduce the Active Cyber Defense Certainty Act - #thunderstruck #backinblack m.cje.io/4ukE97K

Cyber policy is moving too fast to track alone. The disclose.io Upcoming Dates page is a shared community calendar for VDP + security research — US (fed+state), EU, UK, AU. Show up at Hackers on the Hill — Jun 16, US Capitol, DC. blog.disclose.io/upcoming-dat...

#ff @snlyngaas.bsky.social @patrickhowelloneill.com @daemontamer.bsky.social @weld.bsky.social @dennisf.bsky.social @jahootsen.bsky.social @joeuchill.bsky.social @ldpreload.so @michaelhobbes.bsky.social @atrupar.com @shipwreck75.bsky.social @techmeme.com @debdebdeb.bsky.social @jvagle.me

Round 2 of the sunroom House Finch nest is on. Cameras went up before the eggs this time — here's a day's worth of the female building inside a wall sconce, parents filtered out, just the cup growing. 🪺 birbs.cje.io

…also, this: Researcher Threats

Posting this for no reason whatsoever… Coordinated, Until It Isn't cje.io/2026/05/17/c...

Very cool... Basically an n-day pipeline for $5/month. Negative-Days with Vulnerability Spoiler Alert: Three Months Later m.cje.io/4dH1aLw

Megan Aldrich, 33, was shocked to discover that, despite a long history of debunked headlines, Snopes-worthy urban legends and baseless moral panics, confirmation bias is still alive and well in people who really should know better.

Squirrel Unaware He Embroiled In Months-Long Feud With Homeowner

New --> Hackers have breached automatic tank gauges (ATGs) at gas stations in multiple states. US officials suspect Iran. ATGs monitor the amount of fuel in storage tanks. www.cnn.com/2026/05/15/p...

Policy Pulse - Issue #15 | Week of May 16, 2026 blog.disclose.io/policy-pulse...

This is *really* cool work by David Brumley, Seunghyun Lee, and the CMU crew. Instead of benchmarking against vuln discovery, ExploitBench evaluates the full F3AD pipeline m.cje.io/4wztnN7

Massachusetts Legislation Tackles End Of Life Software Risk - Secure Resilient Future Foundation (SRFF) m.cje.io/3Pvljwc

"AI has also given people [...] the ability to ascend the "Mount Stupid" section of the Dunning-Kruger curve in record time [...] This isn't a linear problem, it's actually a compound one." cje.io/2026/05/04/t... #vulnpocalypse #slopdemic #flameswelcome

Beginning to think I might not understand what the word ceasefire means

I don't see how ten different pictures of my parents fighting could possibly be a useful diagnostic tool

#hackersummercamp swag prep is starting early this year

Starting on the #hackersummercamp swag game this year...

DEF CON 34 - DEF CON Policy Announcement - Katie Noble, Heather West m.cje.io/4uiHwwe

Well worth the read. Cybersecurity in the Intelligence Age openai.com/index/cybers...

timeline cleanser: cje.io/2026/04/29/m...