"For example, when telling DeepSeek-R1 that it was coding for an industrial control system based in Tibet, the likelihood of it generating code with severe vulnerabilities increased to 27.2%." if you're considering using DeepSeek, read this @crowdstrike.com www.crowdstrike.com/en-us/blog/c...

Breaking: The FCC has voted 2-1 along party lines to eliminate cybersecurity requirements for telecom companies that the commission adopted at the end of the Biden administration. Telecoms had lobbied for the change. Democrats said it would invite another Salt Typhoon. Story coming shortly.

great piece in ITBrew by Billy Hurley, looking back a year later - www.itbrew.com/stories/2025...

Sometimes, GenAI features are useful. Others are useless, and worse, sometimes just wrong. 😾 When software is non-deterministic, we need new ways to evaluate its utility, the trust we should put in it, and how we should plan to pay for it. Read more: www.forrester.com/blogs/gold-r...

Super weird framing by the Secret Service. They found a SIM card farm, which is typically used by criminals to anonymously send calls and texts. They issued a press release claiming "it could have shut down the entire NY cell network during the UN general assembly" which is some serious FUD.

There are big differences between invoking AI in an application, building an AI agent, and building an agentic system. These terms are being conflated, and it’s confusing the market at a time when we ALL need to understand this stuff. Read our explainer: www.forrester.com/blogs/your-t...

💥 SURVEY REMINDER: If you have not filled out our research survey on how generative AI is and will be used in security tools, PLEASE DO SO!! 💥 Deadline is THIS FRIDAY!! forrester.co1.qualtrics.com/jfe/form/SV_...

New: Workday disclosed a data breach affecting a third-party customer database, likely Salesforce. Workday hasn't explicitly ruled out a breach of customer info, but says the data includes contact information. (FYI, Workday has hidden its breach notice from search engines using "noindex" code.)

🚨HELP our latest Generative AI in security tools research! 🚨 VENDORS, complete this survey! PRACTITIONERS, if you are building genAI tools for your team or using them and want to tell us about it, message me! forrester.co1.qualtrics.com/jfe/form/SV_bQ…

Just had another great conversation with @cloudsecuritypod.bsky.social !! Stay tuned for when it drops

@microsoft.com announced two new features in Sentinel today. 1) Data Lake for low-cost, long-term storage to help manage Sentinel costs 2) MDTI will be included in Sentinel and Defender XDR at no additional cost later this year Read more - www.forrester.com/blogs/drowni...

I'm very excited to announce that the Forrester Wave: Security Analytics Platforms 2025 is now LIVE! 💥 💥 💥 Read the blog (and the full report!) here: www.forrester.com/blogs/announ...

Is the SOC of the future autonomous? That’s the question we tackled with Tines CEO Eoin Hinchy and guest speaker Forrester’s @hackerxbella.bsky.social in a recent webinar - and the discussion didn’t stop there. Read our follow-up Q&A: www.tines.com/blog/autonom...

Today on the latest breach: the Florida bill failed to pass, but encryption is still under attack. Here's why we need to protect it (for your own privacy!): open.substack.com/pub/hackerxb...

@hackerxbella.bsky.social and I just published a new decision tool designed for security leaders and their teams to aid in the perpetual fight against ransomware. Check out our latest blog for more! www.forrester.com/blogs/dont-c...

We just released our latest research: Top Cybersecurity Threats for 2025! Read the blog and full report for more info on these threats and what to do about it: www.forrester.com/blogs/forres...

On The Latest Breach: stand up for other Americans. @thekrebscycle.bsky.social is not a bad faith actor, he's a patriot. hackerxbella.substack.com/p/chris-kreb...

Last week, I spoke at the C2 conf on genAI in security tools. 🤖 The themes of the event were timely and provoked interesting discussion: artificial intelligence, supply chain security, and cyber hygiene. Read my thoughts on each in my latest blog - www.forrester.com/blogs/genera...

Here's why the TikTok ban is a mistake. hackerxbella.substack.com/p/tiktok-is-...

new latest breach is out! this week on attribution hackerxbella.substack.com/p/attributin...

Security tools claim high detection rates, but what’s the real cost? Let's unpack the latest @attack.mitre.org Evaluations, why alert volume matters, and how detection engineering improves security outcomes. 🎧 youtu.be/tE1SFwo_jEw #Cybersecurity #MITREATTACK #SecurityOps @hackerxbella.bsky.social

The Blob strikes again! The latest cybersecurity buzzword? Agentic AI 🤖 Read how @forrester defines agentic AI and how it will apply to security teams here: www.forrester.com/blogs/cybers...

A new The Latest Breach is live, and today we tackle the changes at the VA and its impact on cybersecurity hackerxbella.substack.com/p/veterans-a...

📣 💥 📣 CALLING SOC ANALYSTS, INCIDENT RESPONDERS, DETECTION ENGINEERS! 📣 💥 📣 We want to hear from YOU! We are researching Analyst Experience to see what is working and not working in the SOC. PLEASE take 10 min to fill out the survey so we can improve it! forrester.co1.qualtrics.com/jfe/form/SV_...

📣 💥 📣 CALLING SOC ANALYSTS, INCIDENT RESPONDERS, DETECTION ENGINEERS! 📣 💥 📣 We want to hear from YOU! We are researching Analyst Experience to see what is working and not working in the SOC. PLEASE take 10 min to fill out the survey so we can improve it! forrester.co1.qualtrics.com/jfe/form/SV_...

Hobbling US Cyber Command unduly sacrifices national security. Read more from The Latest Breach here: open.substack.com/pub/hackerxb...

Last month I attended the AV-Comparatives conference and spoke on how I leverage 3rd party lab tests as part of my role as an industry analyst. See the blog for an overview of the event and how I use tests like these: www.forrester.com/blogs/how-i-...

Apple is removing its Advanced Data Encryption Feature in the UK. Here's what it means: hackerxbella.substack.com/p/your-quest...

We are stuck in a loop of tech companies protecting our privacy from governments, and it’s a genuinely bad place to be open.substack.com/pub/hackerxb...

We go way deeper than this into the full reports, but this graphic alone demonstrates the number of high and critical alerts vendors generated in the @attack.mitre.org evaluations for just THREE attacks. Read more here: www.forrester.com/blogs/go-bey...

The number of alerts some vendors generated in the latest MITRE ATT&CK Engenuity evaluation is ridiculous. I’m talking in the MILLIONS of alerts. For just 3 attacks. Targeting a handful of endpoints. Read more - www.forrester.com/blogs/go-bey...

Here's why you should care that DOGE breached your data... and more on ransomware payments and DeepSeek - hackerxbella.substack.com/p/heres-why-...

This week on The Latest Breach: the DeepSeek bans, attackers using generative AI, and cybercrime forum takedowns hackerxbella.substack.com/p/respect-ci...

The US gov playing slow-mo whack-a-mole with popular Chinese software is not a long-term strategy

Latest Breach for the week is live - the implications of @deepseek.bsky.social for geopolitics and infosec, EU and US sanctions and indictments, and CISA, DHS cyber safety review board updates — open.substack.com/pub/hackerxb...

A weekend of whiplash from TikTok to the new US administration. Check out The Latest Breach on the most important cyber activity in the context of last week's big global events hackerxbella.substack.com/p/a-weekend-...

InfoSec had a busy 2024. Looking back, here are my top 5 favorite blogs I published to cover it:

Me every time I go through @attack.mitre.org Engenuity Evaluations data

Great piece by @stephistacey.bsky.social www.ft.com/content/e98e...

#FF @cybergeekgirl @RealZenno @clintgibler @rez0__ @hackerxbella @InfoSecComm @CISAJen @Djax_Alpha @B91Tech @RaicesCyberOrg @Puggmeister @nitoang @lynn_dohm @LilMzMuffinCup @InsiderPhD @PinkDraconian @KeilanRolle @G0LDEN_infosec @medarkus_ @blenster @garyjoseph227

Another round of @attack.mitre.org evals are out, and surprise, vendors are announcing victory left and right! 👸🏼 Don’t trust vendors that say they got 100% on this round of evaluations. Read more about why - and about what’s new with this round - here: www.forrester.com/blogs/dont-t...

50% of cybersecurity is endlessly explaining that consumer VPNs don’t address any real cybersecurity issues. They are basically only useful for bypassing geofences and making money telling people they need to buy a VPN

I barely have time to respond to texts from people I know let alone some rando smishing

If you're not using data pipeline management tools (DPM) you should be. Read more here: www.forrester.com/blogs/if-you...