One issue I'm having: knowing when to pivot between improving the system vs. using it to do work. It's never been more enticing to sharpen your tools. But you can lose days on that instead of cutting the log. Message for myself. Maybe you too.

My 2026 cybersecurity predictions: The primary question becomes how good your AI is vs. attackers' AI. Agents will finally make asset management possible. Security certs plummet in value. Junior talent faces massive pressure. https://danielmiessler.com/blog/cybersecurity-changes-2026

Just read. One book at a time, or 17. I’m currently reading: Letters to a Young Poet, The Dharma Bums, Accelerando, The Peregrine, Dominion, and more. It’s chaos. I’m embracing it.

One good way to think about AI—and all major tech movements like electrification, the internet, etc—is as a Technological Weather Event. Not just to say that it’s mostly unavoidable, but that it really matters how we think about and prepare for them as a population.

You don’t have to believe that companies want to fire all their employees to see AI’s threat to jobs. That’s negative framing. Most company leaders are regular, decent people who generally care about others. danielmiessler.com/blog/better-...

The future of hacking isn’t smarter tools—it’s better context. Why defenders (and attackers) will win by building real-time world models. 📽️ New video: youtu.be/UwTTcka1Wd8

We're about to get precisely the right amount of AI Security. No more and no less. Hear me out… I talked before about what I called the Efficient Security Principle, which says the excitement for a technology lowers its required security bar... Read more here: danielmiessler.com/blog/ai-secu...

With all this AI job and economy disruption, don’t forget that we tend to overestimate short term progress and underestimate it in the long term. Read the full essay to see what I think it will look like: danielmiessler.com/blog/slow-th...

🚀This week's UL is live! Featuring: 🧠 AI finds a 0-Day 📦 Postman leaks secrets 📹 Unified Entity Context explainer 🔓 GitHub MCP leaks ⚔️ Google vs. OpenAI vs. Apple (AI vision) 💡 High Agency as a mental model …and more newsletter.danielmiessler.com/p/ul-482

Watched The Accountant 2 and loved the concept of Acquired Savant Syndrome—when brain injury unlocks genius. What if ASI could figure out how to trigger that intentionally? AI shouldn’t just make better AI. It should make better humans.

The future isn’t AI plus context—it’s context first, then AI. I call it Unified Entity Context, and I think it changes how we approach everything from security to decision-making. New video: youtu.be/IHUqk90ch7I Sponsored by Project Discovery → ul.live/PD1

🚀This week's UL is live! Featuring: 🎧 AirPod cameras? ⚙️ Systems > tools 📚 Can AI boost education outcomes? 🔐 VC data breach 🌐 Claude gets web search 🎤 Speaking at Nahamcon + RSA recap w/ @jhaddix ...and more: newsletter.danielmiessler.com/p/ul-481

Most every task is easier if you have more information. One of AI's primary benefits won't be just making smarter decisions itself, but providing the narrative context to make the decision easy for anyone.

Our jobs mentality is based on a lie. ➡️ We were told that there are special people who make things—but we're not one of them. ➡️ And our role is to work for one of them, hopefully… Fuck that. The illusion is collapsing. You are the special person. You can make things.

What if AI enables megacorps to become giant incubators of millions of startups? - Identify problems anywhere - Find the best solution - Make a better solution - Distribute using your network How do regular startups beat that? danielmiessler.com/blog/ai-solu...

🎙️ I sat down with Bar-el Tayouri of Mend AI to talk about the future of AI security—and why it’s evolving faster than any category before it. We covered malicious models, agent discovery, and more. If you're building with AI, this one's essential. youtu.be/538JTah7dTY

I’ve been thinking about how AI might reshape what it means to be a developer. We’re hearing a lot of predictions—some saying tech jobs will vanish, others saying AI will supercharge demand. But I think the more interesting shift is in who companies will need. 🧵

One of the biggest use cases for prompt injection and persuasion will be in product API’s targeting models and digital assistant agents with marketing. Marketing targeting humans won’t be nearly as important as the marketing targeting the AI working for the humans.

🚨 This week’s UL is live! Featuring: 🚢 Supply chain disruption incoming 🗳️ Easterly speaks out on cyber politicization 🖼️ Images now in the OpenAI API 🧠 Context + AI = Enterprise AI 🧾 Microsoft Recall returns …and more 📬 newsletter.danielmiessler.com/p/ul-479

Here's something nobody's talking about with AI... Removing the Fog of War. Elite generals and principal engineers shine when info is scarce. Expertise = stitching limited info into a usable world model. 🧵

🚀 This week’s UL is live! Featuring: 🔓 Pliny’s jailbreak repo 📜 tRIOT—now in blog form 🏥 Health data leaking via Google Ads 👁️ Protester surveillance tactics 📺 How YouTube won the UGC war newsletter.danielmiessler.com/p/ul-478

Moats aren’t just for businesses. In the age of AI and infinite replication, individuals need them too. Ask yourself: — What makes you hard to copy? — What will still be uniquely you in 5 years? This is the new career planning.

💡People are obsessing over the specific AI tech that will replace human workers… …but the bigger point is that companies are so excited about replacing workers in the first place. 🔥Corporate Mindset ➡️ Independent Mindset

Visual persuasion is a double-edged sword. Once you see something, your brain starts believing it—even if it’s false. In a world of AI-generated content and visual manipulation, literacy isn’t enough. We need epistemic defense systems. How are you building yours?

💡 Want to improve your strategy? Try inversion. Instead of asking what to do, ask: 👉 What actions would guarantee failure? Then… just don’t do those things. It’s a simple but powerful shift. What are your top “don’ts” for your space?

Going to #RSA? I’ll be speaking at Aegis of Tomorrow: An AI & Security Summit on Monday, April 28 from 3–5pm. I’ll be sharing a framework for cutting through AI hype and prioritizing cybersecurity investments based on how attacker capabilities are actually evolving. 👉 Register here: lu.ma/9j1p8ixj

So that's Tariffs, TikTok, and CVE—all deferred for 90 days. This is how you build suspense in a reality TV show.

How many times can somebody get credit for averting a crisis that they themselves caused? The CVE issue is an own-goal. Stop making own-goals. www.bleepingcomputer.com/news/securit...

🚀 This week’s UL is live! Featuring: 🤖 A robot backdoor vulnerability 🪵 Parquet 10.0 vuln with major impact 🧠 Is AI eroding our critical thinking? 📞 Automated voice calls are here 🙅‍♂️ Consulting AI pushback is growing newsletter.danielmiessler.com/p/ul-476

I had a great conversation with Patrick Duffy from Material Security about smarter ways to secure cloud platforms like M365 and Google Workspace—before threats escalate. Tons of great insight on phishing, lateral movement, and automated containment. youtu.be/i1Hlgh6bz9Q

Expressing public support for Chris Krebs, Alex Stamos, and Renee DiResta. They were doing their jobs. And they should be celebrated, not vilified.

Expressing public support for Chris Krebs, Alex Stamos, and Renee DiResta. They were doing their jobs. And they should be celebrated, not vilified.

“You can’t just slap AI on something and say ‘Oh great, this is now a better product.’ It actually requires deep thought and integration to make AI useful.” - @matt.buildingsecops.com with @danielmiessler.bsky.social on the Unsupervised Learning podcast Watch: www.youtube.com/watch?v=YnXw...

🚀 This week’s UL is live! Featuring: 🤖 A robot backdoor vulnerability 🪵 Parquet 10.0 vuln with major impact 🧠 Is AI eroding our critical thinking? 📞 Automated voice calls are here 🙅‍♂️ Consulting AI pushback is growing newsletter.danielmiessler.com/p/ul-476

"Teman then started collecting more and more, from more and more sources. At some point he couldn't tell whether he had slow-read the his knowledge before the change, or if it was part of a scrape / summarization / injection flow. Even more alarming, he stopped caring."

Did you catch this week’s UL? 📱 NSO spyware campaigns 🔥 Was Palo Alto targeted before the attack? 🔍 Anthropic's bug sweeping 📚 Manacled fanfic gets a shoutout 🤖 GPT-4o surprise and much more... Check it out: newsletter.danielmiessler.com/p/ul-475

Not sure if this bothered anyone as much as it did me. danielmiessler.com/blog/star-wa...

Had a great conversation with Matt Muller from @tines.com about automating away security toil, the role of AI in SOC workflows, and how Workbench blends chat and deterministic automation. 🎥 Watch: youtu.be/YnXwtMEPZJs #CyberSecurity #Automation #AI #SOC #Tines

❌ “Learn to code”. ✅ “Learn to make”. Technology is currently the best lever for one person to improve the lives of millions. And today that means making stuff using code. Making should be a core skill, like reading and writing. Learn to make.

I think both AGI and ASI can come from models no “smarter” than they are today. My intuition is that we just need vastly more memory and agent orchestration for both.

I’ve been thinking about how business—and security—becomes a loop: Policy → State → SOP → Action → Repeat. AI will run most of it. The only part that stays human long-term is the idea: What do we want to build, and why? #AI #Cybersecurity #FutureOfWork

🔒Had a great conversation with Slava Konstantinov, @ThreatLocker's MacOS Lead Architect, about their zero-trust approach to cybersecurity. We covered their full product suite, the Mac agent, and upcoming features like Patch Management and Web Control. 🎥Watch the full interview youtu.be/Uf1micPRX10

NPCs will be the first people replaced by AI. If you’re currently one, it’s time to stop. The difference between an NPC and a PC isn’t your profession—it’s how you do that profession.

🚀 This week's UL is live! 🔗 Tinyshell backdoors & cybersecurity risks 💻 Learning to code—where to start 🇨🇳 China’s new AI labeling rules ✍️ Vibe writing & the power of tone 🛑 Sunsetting WHOIS & its impact newsletter.danielmiessler.com/p/ul-473

I think decent robots are going to be way more emotionally disruptive to society than even AGI. They’re tangible. And they replace workers who have fewer options.

As someone who extensively studied WWII since, IDK, 12? This makes my blood scream. Navajo "Wind Talkers" were volunteers in a segregated military. Their handlers had orders to kill them if they might be captured. They are FUCKING AMERICAN HEROES. www.axios.com/local/salt-l...

Not learning to code just because there are AI coding agents is like not learning how to think because there are talk shows. Writing = thinking. Creating = imagining. Coding = building. If you're in tech in 2025 and you can't do these things, your career is at risk. Adapt.

Vibe coding produces insecure MVPs, not professional applications. The next task for AI will be to secure and professionalize the millions of haphazardly assembled applications that are about to be on the Internet. There’s so many ways to make money in this new world of vibe coding.

I'm going to do a video on this, but here's my uber-simple explanation of MCPs. 1️⃣ Tons of applications and databases exist in the world 2️⃣ It takes a lot of manual effort to make them usable 3️⃣ MCP is a client/server protocol for making it easy 4️⃣ 👇🏼

I think the first AGI will come in the form of an enterprise product with marketing like this: “Introducing NewHire: a high-agency, AGI employee for your business… 🧵