Black Hat is almost here. Forget the vendor swag and AI buzzword bingo. The real value is knowing which talks, Arsenal demos, summits, and hallway convos are worth your time before you land. I put together my insider's guide to Black Hat See you at Mandalay Bay. semgrep.dev/blog/2026/bl...

MOTHER'S DAY AD: "Get her flowers! Jewelry! Soaps and lotions! Her favorite candles! A weekend spa getaway! Nothing is too good to celebrate the woman who gave you life!" FATHER'S DAY AD: "I don't know, he probably likes grilling things, get him a sassy apron or something."

Look, it was green in Logan’s Run.

Thinking of the people who told me this threat was overblown, how Apple was doing things to keep people safe. Note this example, even with those safeguards, the women had their home and work locations exposed. I get airtags are handy, but I loathe their existence. www.youtube.com/watch?v=6Tv9...

Tonight, Game 1 of the Calder Cup Finals. This is the AHL (one step below the NHL) version of the Stanley Cup. 4 Wins till the #ChicagoWolves are the champs. #WeWantTheCup

Due to weather related travel issues, our sponsor this month is not able to be at tonight's meetup. If you are planning on coming be aware of weather conditions and be safe

Time for stupid Shecky theories: One of the biggest if not the biggest contributor to burnout is imposter syndrome. It drives people to overwork and not take care of themselves to beat it back, but it keeps rearing its head so the cycle continues until one is burned out.

Even if Chrome is nerfing old ones, ad blockers still matter. Get them on your users' systems for one of the most impactful one-move security wins available.

Ivanti's latest perfect 10—this time a preauth command injection—has been confirmed exploited in the wild. discourse.ifin.netwo... #ThreatIntel #ThreatIntelligence #IFIN

The show, "The Odd Couple" which I am in opens this weekend. Got performances Sat and Sun afternoon, then next week Fri and Sat evening. No I am not a lead in this one, but do have a fun time in the character role I am in.

Well written thread on the pros and cons of LLMs and potential loss of skills.

We all know marketplaces like VS Code are suppose to be safe. We all know that malicious software/extentions can get through. Here is an instance of one that is being attributed to a DPRK intelligence operation. #ThreatIntel #CTI #infosec yeethsecurity.com/blog/2026-06...

Game 5. Series tied 2-2. #LetsGoWolves #ChixagoWolves

Biggest steam train in the world, the 4-8-8-4 Union Pacific Big Boy was in town this week, so the two trainiacs went to see it. Last time we got to see it was in 2019.

As proud sponsors, we are excited to be attending the first ever Wisconsin Information Security Conference! This new cybersecurity conference brings together the brightest minds in the field to navigate the rapidly evolving threat landscape. Connect with us at our booth if you’ll be there! wiscon.io

Our final Lightning Talk of the day will be Sai Jagadeesh presenting "Deep Link Vulnerabilities: When One Click Leads to Account Takeover". (talk description in alt text)

Great FIRST CTI Conference talk by @pylos.co released today, very worth 25 minutes of your time. #infosec #cybersecurity #threatintel www.youtube.com/watch?v=lmnZ...

Well it's another week, so here's yet another NPM package compromise in the "Mini Shai-Hulud" family of compromises. This time, it's Red Hat cloud services. Some interesting differences here, including 100% trusted site exfiltration, with Claude being the primary!

Daddy Son day at the Illinois Railway Museum! Even got a tour of the Illinois Terminal Diesel engine that was pulling the passenger coach and the CTA 100 year old 4000 series was running from the old CTA Platform. #familytime

This is my friend I can vouch it is legit 😊 please help Joce

Sounds about right for the U.S. now.

At 2pm in Introsec, Track Two, we've got Nick Regelman 🚨presenting "Looking for a mentor? You might already be one." (talk description in alt text)

The fab @hacks4pancakes.com pays a visit to the "Smashing Security" podcast in episode 469, to discuss how the Oura ring fitness tracker transmits unencrypted data... but the company can't say how often it shares it with law enforcement Check out the Smashing Security show in all good podcast apps!

Threat intel and Cybersecurity research firms: if you're not providing RSS feeds to your blog, you're hurting your brand.

This week I got the honor of doing the anthem for the South Bend Cubs. It was an educational day game. (Schools at the game) So close to sold out which is over 5K people. Love being able to do this.

Add Laravel to the list of large projects whose GitHub repos have been compromised. discourse.ifin.netwo... #ThreatIntel #ThreatIntelligence #IFIN

This morning's workout. So ded after it. #hackerfit #push4progress #wehackhealth

New, by me at this.weekinsecurity.com: Health wearable giant Oura says it has received government demands for users' information (because Oura does not use end-to-end encryption). Will Oura say how often it gets demands for user data, and how often Oura hands over users' data to authorities?

This... So much this.

Seems the NSA has put out a 17 page document on MCP Security Design Considerations: www.nsa.gov/Portals/75/d...

What I would like to do to those shoving AI down everyone's throat.

Marketing words does not do the following: 1) Make a product better 2) Make a product more secure 3) Make it different than similar products Yes I"m talking about Microsoft Mythos...er GPT 5.5 CyberSecurity AI...er MDASH. Bet all wind up in the Gartner Magic Quadrant

ATTN: LAST MINUTE SPONSOR ADDITION! Thanks to @FiligranHQ for sponsoring us tonight! 6pm at D'Agostino's in Wheeling!

Hope to see people at @bsides312.org on Saturday. For those looking to pregame for it tonight is @north.burbsec.com In Wheeling at D'Agostino's and @south.burbsec.com In Hickory Hills. I'll be at North as a FYI.

Hey Austin hope to see y’all at 5:30 tonight here… www.eventbrite.com/e/may-2026-o... For the #HackerMeetup!!! 😊 💜🤗💜

Web only cyber news sites that completely bury links to original research articles they're reporting on are haram.

Just goes to show in the current economy how well a company is doing does not equal job security. As was said back in the 80's "Greed is good", or should that be god.

If you think folks are going to let things like this get built in their communities and operate with impunity, you have another thing coming. I'm not saying they *should* be sabotaged; I'm saying they positively *will* be.

Friendly reminder: BSides312 physical patch badges are back. If you were there last year, you know how fast these went. Limited. Will not last. Arrive early or live with regret. Doors open 9:00 AM. May 16th. Chicago. bsides312.org

I've been sitting on this one, but happy to finally explain the issue. Teachable's CDN isn't fully fixed, and still exposes creator content through the paywall.

In the end we must try to be the best version of ourself that we can. The world is tough enough out there as it is.

We will be happening at D'Agostino's in Wheeling, IL this Thursday. Official Start time is 6pm. Yes it is two days before @bsides312.org so a chance to start those conversations early! See you There!

We at #BSides312 thank #SpecterOps for being a Gold level sponsor. We encourage you to check them out at specterops.io and visit their table at our even on May 16. Tickets are still available at bsides312.org #BSides

Your phishing program has great metrics but your employees are still clicking. Mr. Sprawl is sharing a blueprint that took a startup from a 40% click rate to under 10% in a year. May 16th Chicago → bsides312.org