Something to check out for those interested in AI and pentesting. hackersidekick.com

This is the first full weekend in forever that the whole family has nothing going on. What have I done? Figured out how to fix the master bedroom shower and replaced the cabin air filter on my Jeep Compass. 1/2

recently bought the hardcover deluxe edition of Ghost in the Shell. Started reading it, and am loving it. The anime movie so far did a pretty good job with picking what to show on screen.

Met up with an old friend to do karaoke at a place a different old buddy runs it at. Singing is medicine for me and it has been much needed. Songs I sand: Different Shade of Blue - Joe Bonnamassa Tennessee Whiskey - Chris Stapleton Where the Streets Have No Name - U2 Turn the Page - Seger

To be clear, SANS didn't just "let this happen." It's not like ICE employees made a bunch of registrations at public conferences and SANS had to figure out whether or not to take their money. SANS actively pursued a sole-source contract with ICE. This requires intent. It was NOT passive.

Reminder: the answer to Life, The Universe and Everything is 42, not AI.

Great post on the supply chain issue of using AI. You know, when you are not in control. Already seen people talk about Claude Code going downhill after an update. iamnor.com/2026/04/19/v...

CVE-2026-33824: Remote Code Execution in Windows IKEv2 https://www.thezdi.com/blog/2026/4/22/cve-2026-33824-remote-code-execution-in-windows-ikev2

Day 9: Ransomware deployment. The threat actor RDP’d from the beachhead to backup & file servers and dropped the Lynx payload “w.exe” using a compromised Domain Admin account. Full breakdown 👇 thedfirreport.com/2025/12/17/c... #DFIR #Ransomware #ThreatHunting #BlueTeam #CyberSecurity

Disappointed to see an org I was so involved with for so many years taking nearly $500k in blood money from ICE. Seriously disappointed with SANS today. I get that the economy is bad and sales are hurting. But taking money from ICE is *a choice* sam.gov/workspace/co...

What if C2 traffic could hide inside a valid TLS handshake? At BSides312, John Mathot is breaking down how data can be embedded inside TLS 1.3 signatures, completely invisible and indistinguishable from normal traffic. You'll never look at TLS the same way again. May 16th. Chicago. bsides312.org

Yeah.. I feel called out...

Current #InfoSec status.

#Vercel customers: don't wait. Proactively rotate keys, passwords and environment variables ASAP. vercel.com/kb/bulletin/...

No I don't have a rig with enough power to have a home LLM to play with and I have yet to see a compelling reason to subscribe to any of the major players. Need to figure out what to focus on with AI.

Afternoon er workout warped wall NO KNEE BRACES AT ALL! #hackerhealth #psuh4progress #wehackhealth

Tough true circuit today but made it through. #hackerhealth #push4progress #wehackhealth

Laser-based hardware attacks are only for nation-state actors, right? Wrong. At BSides312, Larry Trowell and PANTH13R are showing how they built affordable laser-based hardware analysis tools using an open-source microscope and consumer-grade diode lasers. May 16th. Chicago. bsides312.org

AI and its hallucinations look to be the new boy who cried wolf for SOC/IR. This is why we still need boots on the ground and not automated decisions without human validation. buff.ly/TXZ0otO

Enterprise AI adoption is all about finding the use cases you can formally align with output being "close, most of the time" or at least reliably identifying failure cases. Most orgs aren't remotely ready to evaluate, let alone accept, agentic risks.

We were so busy replacing all the employees with objectively worse performing AI that we forgot to ask who would buy all the software licenses.

Yesterday my #push4progress included a major test for the stability of my right knee. No brace on a slackline. Yes I had a crutch above but am proud of the advancement I made.

Citizen Lab continues to be one of the more important institutions in our current age, I think, doing some of the most important work.

The end game I see for Project Glasswing with its limited partners is non-partner companies falling behind, besides the end of bug bounty programs, disguised as a way to protect from not ready for prime time AI.

Minor programming note: I'm going to probably push most of the threat intelligence material I usually post through @ifin-intel.org , so it's a clear channel for actionable information.

Interesting development in ClickFix working through a script editor on MacOS. Taking a step out of the process via copy/paste could result in more people getting infected. www.jamf.com/blog/clickfi...

We are on for tonight! 6pm at D'Agostino's in Wheeling! See you there!

What if the biggest security gap in your environment isn't some zero-day, it's the protocol that makes the internet human-readable? At BSides312, Matt Scheurer — host of ThreatReel Podcast, enterprise CSIRT VP, is bringing live demos proving why you shouldn't sleep on DNS. May 16th. bsides312.org

Think about the best leader you've ever had in cybersecurity. At BSides312, Amanda Kollmorgan — Deputy State IT Director, WI Dept of Military Affairs, ~20 years military and civilian experience — is talking about the human skills that actually make cyber teams work. May 16th. Chicago. bsides312.org

“A whole civilization will die tonight” is the most vile thing a US president has ever said, certainly during the post-1945 era when they’ve had the power to kill civilizations with the dropping of a bomb. I’m staring into the darkness. May this not be one of the most fateful days in human history.

Final Steel game of the season and at their venue for the past 11 years.

If you see this, post a pic from your device with no explanation

There's still space for a few more uni students for Bruce Large and my SANS ICS310 community version at BSides Melbourne. Learn about OT cybersecurity! Free from us, only the conference $30 entry fee. events.humanitix.com/bsides-m...

Today's #hackerfit workout. Solid and tough. Also found out where I am going might not be able to have weekeday classes soon. Finding a new place that has a group of people that inspires me to come in regularly is going to be tough. #push4progress #wehackhealth

I had the honor tonight of performing the National Anthem for the Chicago Steel in their next to last game at their current home.

Going to #BSidesMKE today? We are also there. Come visit us, we are next to #Hak4Kidz and have STICKERS!!!! Also, if you haven't gotten your tickets yet, why not? bsides312.org #Bsides312 #BSides

I had a very nice time on the @1password.bsky.social podcast, and the episode is out now... youtu.be/wd74Pnwd-50?... ...we discuss some outrageous stories, but in spite of the fact that today is April 1st, I assure you they're all true! 👍😁👍 Thanks for having me on!

"The kill chain matters, because detection is in part a timing problem. The later you detect, the worse things get." Truer words I have not recently heard. This is a fantastic post about why C2detection should not be your first line of defense. #BlueTeam medium.com/breakout-tim...

Not often a special price is out for BSides312! Don't miss it! Great talks, great community!

Happy trans day of visibility! See her/him/them Listen to her/him/them Learn about her/him/them Include her/him/them Stick up for her/him/them

Question for the hive mind... What is the least expensive way for a blue teamer to learn/work with AI without having to use information from your company, so you can prove that it can be done safely?

This mornings workout stats. Finished with doing the Warped Wall without a knee brace on. Slowly the knee gets better. #Hackerfit #push4progress #wehackhealth

I don't just need more spoons, I need more hours, and not to just switch... ooo SHINY!!!!!

TONIGHT!!! Weather looks perfect for some beers and @cigarsec on the patio with our sponsor @BigID!!

Table is all set for Women In Tech WNY - come visit and learn about cool hacker stuff happening in Buffalo!

The hardest hack in infosec? Losing your job and figuring out what comes next. At BSides312, rand0h — founder of DEF CON 610, SOC Goon, 15 years in cyber — is getting real about the fallout and the resilience it takes to keep going. May 16th. Chicago. bsides312.org

2nd workout without wearing a brace on my right knee which had surgery 2 years ago. Small progress but the gains come. Agility ladder hop was changed to in-outs going sideways. 6 40 sec rounds per station. 1:10 rest between stations #HackerFit # push4progress #wehackhealth

From the just because we can and the WTF files. My head hurts from banging it against my desk while reading this one. www.tumblr.com/sunbentshado...

Ladies in tech and cybersecurity, our next brunch is this Friday, March 27 @ 9:00. Please RSVP and share this with anyone else in the Milwaukee, Chicago, Madison areas who you think would enjoy a nice casual brunch with like-minded folks. thebrunchclub.tech

What does it take to break into digital forensics? Dr. Catherine Ullman — author of The Active Defender, security architect at University at Buffalo — starts with a day-one mystery: a five-second gap in the logs that shouldn't exist. May 16th. Chicago. bsides312.org