Happy @cyberwarcon.bsky.social to all who celebrate!

The hunt will now be on to find a few 2025 pennies, as they will be the last!

It can happen!!!

Surveillance software historically used by authoritarian governments to spy on dissidents, civil society, and journalists. There is no need for this sort of surveillance technology in the United States. It must be de-platformed and blocked wherever possible.

It is so dark out at 3:40 pm and raining so hard right now that even Shadow is like “nope, I’m good.”

Local legal peeps - sharing for reach and digging through my own content for extras.

As CISA 2015 has sunset, here’s a quick video of 7 ideas for TI and IR teams (and ISACs) to think about until the rules are re-established: youtu.be/-kNgoJKfvTg?...

Meet our speaker David Magnotti! He leads development of cyber threat intel. systems helping protect AWS customers from malware + more. He will be joining Dlshad Othman in their talk, "Ping First, Boom Second", to discuss Iranian cyber-threats Imperial Kitten and Muddy Water. www.cyberwarcon.com

The reduction in punitive damages is a shame.

This one’s for the lawyers! I met a young woman tonight whose name was Calea. She pronounced it “KAL-ay-ya” and had never heard of the CALEA Act. I told her she would be incredibly popular in DC. She was shocked that googling her name pulled up telecom legal results.

Thanks #SecTorCA @blackhatevents.bsky.social for an amazing time! Agentic AI needs major work in identity and security teams need the help of corporate leaders and governments to enable the secure future we want.

With the CISA Act renewal and state and local funding being debated in Congress, the new episode of @advancingcyber.com with former CISA exec Jeff Greene and local CISO Doug Cavit is terrific! Also on Spotify and Apple Podcasts! youtu.be/ZwlX3yjYm2I

Not today, bad guys! Spotted on Regent Street, London, at 10:30 am. Of course, I threw it out.

Absolutely love this new @advancingcyber.com podcast Origin Stories conversation with @k8em0.bsky.social - so good we made it into two parts - part 1 on YouTube/ Spotify/ Apple Podcasts today! youtu.be/KbxOxP5YJmA?...

Really enjoyed the hacking back conversation with Stacy O’Mara and Nathan Case on the new Advancing Cyber Podcast. Full episode out now on YouTube, Spotify, and Apple Podcasts: youtu.be/SuAykWWKt3g?...

Businesses need to think about US state legislation like EU member state legislation - there are a lot of nuances and the fines can be massive. (See, e.g., Texas and data protection).

New @AdvancingCyber.bsky.social podcast with @chrispainter.bsky.social talking cyber norms, diplomacy, cybercrime, inter-gov’t tensions, and policy development. It sounds like TV but it's a great Origin Story. Listen now on Spotify, Apple Podcasts, and on YouTube! open.spotify.com/episode/5qbv...

New @advancingcyber.com podcast with Chris Painter coming Monday - a hint of what’s to come! youtube.com/shorts/6IWvL...

So excited for the @advancingcyber.com Podcast Origin Stories series to start with @racinrapp.bsky.social. There’s no better beginning than the start of US cyber policy! On Spotify, Apple Podcasts, and our new YouTube channel: youtu.be/ZOYXaHabbvw?...

Ooof I haven’t been on a redeye to DC in a loooong time. This is going to be painful. 😣 🛫😴🫩

I am glad hearings are happening, but wish it were back in 2011 and 2012 before the EU started down this path of spyware. Now it’s so much harder to reverse, but even more essential.

Landing approach into DCA is a lot closer to DC than it used to be! Ready for a few days of cybering!

I am hearing New Order’s Bizarre Love Triange at my local QFC grocery store and it hits me right in the produce section.

At home after an amazing week at RSA. My brain and heart are full. Will take a few days to process my takeaways and share here.

We know @thekrebscycle.bsky.social and that he will continue to have the support of the cybersecurity community. Just like before, he’ll keep defending democracy.

Recently did an exercise where I was asked my top 25 books of all time. Derived from Adm. John Stavridis’s book about his own top 25. Was a fun (and surprisingly difficult) challenge! www.usni.org/press/books/...

I’m on a call with colleagues I haven’t seen in a while and find myself waving even tho there are 25 people on the bridge and they don’t know who I’m waving to. Waiting for someone to wave back!

Preach, @rgblights.bsky.social. Automatic updates must be based on trust, and that includes the laws of the operating country. Do we need to put flags on the boxes and on screens so people understand whose rules apply?

Preach, @wsj.com. The Covington & Burling team I have worked with for almost 20 years have been nothing but superlative lawyers providing me effective counsel when I needed it.

Hey infosec Skypeeps, I made the NYTimes Cooking Penang curry chicken dinner tonight and it impressed the teen boy. We have a winner!! cooking.nytimes.com/recipes/1024...

Hacking back on steroids. That should go well.

This week has been a month. I am grateful for our cybersecurity reporters, who are doing amazing work. Case in point - @kimzetter.bsky.social fantastic piece on the Russia do we / don’t we situation. www.zetter-zeroday.com/did-trump-ad...

So grateful to @hultquist.bsky.social for bringing the cyber legal community together @cyberlawcon.bsky.social and for bringing the cyber socks to our legal people!

Let the cybering begin! Happy to see my friend @thekrebscycle.bsky.social here @cyberlawcon.bsky.social and talking about not only what matters in cyber, but why cyber lawyering matters too.

Really enjoyed a few days with the Army Cyber Institute and the Cyber Defense Review for the learnings as we worked on articles for an upcoming edition. The Tabletop Exercise was also an interesting insight after hundreds of private sector TTx’s.

Had a unique experience late last week while up high on Whistler Blackcomb in a snowstorm. Two earthquakes! Got this alert on my phone while skiing.

Story 1 here is what defenders are learning from the Black Basta leak. And in 5 months we should see another story about what Law Enforcement learned, when we see some indictments.

A busy week ahead - a few days with the Army Cyber Institute and then @cyberlawcon.bsky.social!!! Can’t wait to get my cyberlaw geek on all week!

America just got phished by Bill Murray. #SuperBowlCommercial #CommercialPhishing

On the latest @advancingcyber.com episode, I talk to Chris Hale of Cisco and Emily Lemaire of Covington & Burling about the EU’s groundbreaking cyber regs: DORA, NIS 2.0, and CRA. open.spotify.com/episode/0VkH... Apple Podcasts link below

New @advancingcyber.com podcast going live tomorrow morning, and it’s a good one. I’m excited for this episode.

Illness, day 19. Starting to turn the corner. Actually getting out of the house today for something other than a medical reason. First time since 2024! Stay healthy, everyone.

This is insane. Day 15 of upper respiratory infection and I can’t remember the last time I was this sick. Take your vitamins, cyber peeps. 🤧🤒😷

This has hints of Emmett from the opening number of the Lego Movie. Anyone else hear the song “Everything is Awesome” when reading this?

Did not have pneumonia on my 2025 bingo card but here we are. At least I’m on the mend now.

I highly recommend @ronanfarrow.bsky.social latest HBO documentary, Surveilled (www.imdb.com/title/tt3381.... …which features the investigations of @citizenlab.ca, and interviews with yours truly as well as Citizen Lab researcher @elies.org

Starting the first working day of my year with a headcold was NOT on my bingo card. Not how I wanted to start 2025!

25 years ago, I remember waking up and being amazed at how effective the Y2K remediation had been. We need that focused effort again to combat threats we face today. If only it were as easy.

Someone tried to open up a credit card under my name this morning. Amex notified me, even tho it wasn’t their card. Spent 2 hours notifying credit agencies and doing the things we tell consumers to do. It sucked. Our process needs to be easier and clearer, not an upsell!

I shared some thoughts about cybersecurity law and policy for the end of 2024 and beginning of 2025 with @claroty.bsky.social #Nexus here: nexusconnect.io/articles/nex...