NEW @citizenlab.ca report: Cellebrite Used on Kenyan Activist and Politician Boniface Mwangi citizenlab.ca/research/cel...

Making my GREM index like...

These dudes are awesome! Highly recommend their training if you get the opportunity.

Early career pen tester wanted to break some of azures specialist clouds. #infosecJobs

Non-Deterministic: The most important word you need to understand about AI 🤖 teriradichel.substack.com/p/non-determ...

This week's show is up on YouTube (presented by Thinkst Canary @thinkstcanary.canary.tools) WATCH www.youtube.com/watch?v=fvKM...

If Pentesting, AppSec, Bug Bounties or Security Engineering is your focus the Security Bugs section of my blog may be for you. Here I explore a serialization CVE in SolarWinds and prevention methods Programming Languages and Serialization CVEs teriradichel.substack.com/p/programmin...

🔥 #ThreeBuddyProblem Ep83 has been pushed to your earholes. Poland CERT on Russian wipers, Sandworm or not Sandworm, new FortIvanti nightmares + some KasperSekrets chit-chat @craiu.bsky.social @jags.bsky.social securityconversations.com/episode/a-de...

Today’s Daily Cartoon, by Teresa Burns Parkhurst. #NewYorkerCartoons

NPR built a visual archive of the Jan. 6, 2021, attack on the Capitol, showing exactly what happened through the lenses of the people who were there. In "Chapter 2: Stop the Steal," we look at how false claims of a stolen election mobilized Trump supporters.

The 2025 selection follows its predecessors, "brain rot" from 2024, "rizz" from 2023 and "goblin mode" from 2022.

A fresh problem has been pushed to your podcast platforms! @craiu.bsky.social @jags.bsky.social - Spotify open.spotify.com/episode/68US... - Apple podcasts.apple.com/us/podcast/w... Presented by our friends at ThreatLocker 😍

AI isn’t reinventing ransomware — it’s industrializing it. That’s the core finding from new @sentinellabs.bsky.social research on how threat actors are actually using LLMs today. s1.ai/llm-rw

Outgoing 15-year head of GAO says he's worried the government is "taking our foot off the gas at CISA" and would "live to regret it." He also said CISA's one-third workforce cut was "obviously untenable" and "they may not be postured" to support the midterm elections. fedscoop.com/cisa-workfor...

The BloodHound Query Library, launched by @martinsohn.dk & @joeydreijer.bsky.social, democratizes tradecraft with a shared, searchable ecosystem. With 180+ Cypher queries & counting, the library is an increasingly valuable tool for the BloodHound community! Browse ➡️ ghst.ly/bql_eoybsky

Today’s Daily Cartoon, by Brendan Loper. #NewYorkerCartoons

AI tooling and MCP servers are entering enterprises fast, often faster than security teams can assess the risks. During a recent engagement, @xpnsec.com found a new Claude Code vuln (CVE-2025-64755) while exploring MCP abuse paths. 👀 Read the details: ghst.ly/49ybl4W

White Knight Labs: Part 2

A U.S. District Judge has ruled that interim U.S. Attorney Lindsey Halligan (who had no prosecutorial experience before this role) was improperly appointed by the Trump administration, agreeing with Comey’s defense team. The ruling means that both federal indictments are dismissed. trib.al/WZbNPi9

@cyberwarcon.bsky.social how do you get so much talent packed into one day? This is my favorite conference. Every talk is a banger.

When Matt Thomas dropped out of law school, he devoted himself to a sport he initially thought was a joke: chess boxing. cbsn.ws/3LB3nOz

79-year-old Paul Bojerski was born to Polish parents in a WWII German refugee camp. His family legally emigrated to the U.S. when he was 5. He’s been taken by ICE in Florida. www.orlandosentinel.com/2025/11/16/s...

This Thursday @strandjs.bsky.social join us to talk about China! A cross between history and technology John breaks down exactly what he will be discussing in his webcast here! Interested? Come join us and register here: events.zoom.us/ev/AhsoFeh2O...

Politico is reporting that the breach at the Congressional Budget Office is "ongoing." “Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.

I found myself using this career advice slide a lot lately and thought I would share it more broadly.

We deployed MCP honeypots to understand how threat actors engage with AI middleware exposed to the internet. What we observed was unexpected. Full analysis ⬇️ #GreyNoise #AI #AISecurity #MCP #MCPSecurity #Cybersecurity #ThreatIntel

The rushed and uneven rollout of A.I. has made it tempting to conclude that it’s all hype. But its advancement may have profound implications for the field of neuroscience.

🎇New package alert @wired.com! This one has been in the works for months. If WIRED was going to tackle AI -- something we cover daily -- we had to go big. So here are 17 different stories about the way AI is changing us, even as the technology itself keeps moving www.wired.com/ai-issue/

Summary of the Amazon DynamoDB Service Disruption in Northern Virginia (US-EAST-1) Region I bet someone wishes they had checked for an empty value in this code right about now: The root cause of this issue was …

"Hold onto your butts, because one day you might be breathing through them." www.404media.co/breathing-th...

An opinion piece I wrote for Cipher Brief on the next wave of AI threats. The speed and scale of this activity will change the nature of cybersecurity. In order to compete with adversary use of this technology we must adopt it wholeheartedly into defense. www.thecipherbrief.com/ai-cyberatta...

AI as an Amplifier for Human Tradecraft: how scale can meet sharper intelligence. What’s New: In their #LABScon 2025 talk, @dreadnode.bsky.social's Brad Palm and @machinavelli.com show how agentic AI can explore every analytical pathway — at speed and scale.

"[A]gents engulfed my car in tear gas, smashed my driver-side window, and pepper-sprayed my face.... I spent three nights and three days in federal custody. No explanation. No charges. No apology. One day, I was just told, 'you’re free to go.'" #KavanaughStop

My whole Threads feed is Takes (tedious, tedious takes) on That Album that I will never listen to by an artist I’ve never expressed any interest in. It’s wild to see how quickly that algorithm changes a feed to be about one thing only.

NEW REPORT: We uncovered a coordinated network of fake X profiles that is spreading AI-generated content to induce revolt in #Iran. We call this network “PRISONBREAK”. Read the report 👉 citizenlab.ca/2025/10/ai-e...

We're streaming live to YouTube in ~20 mins. Come hang out with us www.youtube.com/watch?v=zjdh...

First public report at Recorded Future by yours truly is out! RedNovember (formerly TAG-100, a.k.a. Storm-2077) is a Chinese state-sponsored threat group focused on intelligence collection, especially on flashpoint issues of strategic interest to China. www.recordedfuture.com/research/red...

Burp Suite is powerful, no doubt. But let’s be real — it’s also a beast to tame. That’s why you need a cheat sheet just as stacked. More: portswigger.net/burp www.youtube.com/watch?v=Gb7O... www.youtube.com/watch?v=lyJi... www.youtube.com/watch?v=xKud.... www.youtube.com/playlist?lis...

The Atlantic Announces Free Digital Subscriptions for All U.S. Public High Schools www.theatlantic.com/press-releas...

Four prosecutors who worked on Capitol riot cases have found a way to continue public service after leaving the Justice Department. They're all colleagues again.

Your cyber threat intel is part of the North Korean strategy: DPRK operators are abusing CTI platforms to see if they’ve been seen—and moving faster because of it. 👀

Cheryl Biswas: From Political Science Major to Cyber Threat Intelligence

CYBERWARCON is coming!!! Registration and CFP are now open for this year's #CYBERWARCON! This year's keynote speaker will be @dmitri.silverado.org!! We are back in Arlington, VA this year on November 19th. www.cyberwarcon.com

There are tons of graphic novels, academic papers, film and TV scripts, & prose novels/nonfiction on the LibGen list Anthropic used. As settlement approaches, make it easy for the class action lawyers to contact you! Here’s how Part 1: is your work in Libgen? www.theatlantic.com/technology/a...

'more than 500 credible reports of human rights abuses...the investigation—led by US senator @ossoff.bsky.social @ossoff.senate.gov ...unearthed 41 cases of physical and sexual abuse; 14 involving pregnant detainees & 18 involving children'- @dell.bsky.social @wired.com www.wired.com/story/senate...