LOL, the never ending DFIR versus malware reversing "which side of the spectrum are you on" forensics personality test strikes again... https://www.reddit.com/r/GIAC/comments/1orkfos/gcfa_hassle/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

I have this weird, horrible, learned calculus about approving my hundreds of waiting LimkedIn requests. Do I know them? Did they send me a note? Have I met them? Are they somewhere people want queer people dead? I’m sorry. It’s so hard to know who to trust anymore.

"Why their decisive election victories mean bad news for Democratic prospects in 2026" - Tomorrow's NY Times, probably.

Babes wake up new SHEIN forensic gear just dropped Now I can get cheap mektop and cheap hard drive adapters at the same time

Oh man. The bots were totally not programmed for this outcome, go to any news site Facebook news comment section and they’re all posting nearly identical stuff about popcorn.

Zohran Mamdani wins! He ran on an unabashedly pro-transgender platform, stood up for the most vulnerable, as so many have pushed for the Democratic Party to abandon trans people in order to win. Major win for trans New Yorkers - he has vowed for intense resistance to anti-trans Trump policies.

I wish it hadn’t taken a year to get a large number of Americans to care like this, but I’m really glad they finally seem to be. Now we have a year of work maintaining momentum, mitigating the retaliatory damage, and fighting a huge shit sandwich of anti-election and gerrymandering efforts.

Oh good, I’ve gone from the person who critiques every hacking show scene to the person who critiques every immigration scene

The problem of reaching some moderate level of fame and success is that everyone thinks you’re great✨, all the time. Your life must be glamorous. Nobody ever checks on you. Nobody ever compliments your work. You’re never the award or prize winner. Nobody mentors you. Never again. You must be✨super.

The whole MIT / @GossiTheDog malware study saga is so funny, because aside from the paper absolutely being crazy AI marketing FUD, there’s a crack of accidental admission about the fact that what the industry been hyping this whole time as 📣✨AI✨📣 is just sparkling ML and polymorphism.

The rest of the world is moving on.

Discussion and my thoughts on the cybersecurity market in a conversation happening on BlueSky

This is a good Reddit post about cybersecurity cons for junior people and newcomers, with a lot of good and genuine answers from community friends. https://www.reddit.com/r/cybersecurity/s/YZakYHIwNJ

I taught a live translated class remotely to business people in Japan on OT malware reversing while wearing a kuromi onesie for Halloween, from a friends spare bedroom in a third country if you were wondering how shit is going

Not me with a big smile every time I get to talk about the @volatility team in classes. They are so nice and so cool.

Look who just got thrown back into a Russian penal colony for 10 years: Pavel Vrublevsky, one of the main cybercrime figures in my 2014 book, Spam Nation. "The Khamovnichesky Court of Moscow found Pavel Vrublevsky, the founder of ChronoPay, guilty and […] [Original post on infosec.exchange]

@hacks4pancakes yup this is why several people, some historians, advised people to keep a diary or a list of things they think will never change, or that they would never do, in trump's first term it feels far more pressing now to do those things, and […] [Original post on mastodon.online]

Overheard someone say the other day, "Thing is, cybercriminals aren't hacking in anymore. They're just logging in." And there's a lot of truth to that. But even that's archaic already. The whole truth is far more terrifying: They're not even logging in most of the time. They're basically copying […]

So...taxpayers are paying Don Jr. to build his own army of killer drones for Dad? Isn't there an entire Star Wars movie about how this is a bad idea? From the Financial Times: "A little-known drone company backed by Donald Trump Jr has won its largest contract from the Pentagon, as the US […]

To better describe what immigration is really like even when you’re incredibly privileged, I’ll be teaching my class next week from a floor at a friend’s house in another country while also being translated into Japanese to not interfere with my residency application.

Who is it? Who’s my second best new peloton friend???

Just realized I am now Midwest nice plus Australia nice and all I need to do is move to Canada for a bit and I'll be -unbearably- friendly and apologetic.

Cybersecurity was always political. You can’t escape effects on defense, intelligence, and even the increasingly flooded industry job market by closing your eyes really hard and sticking your fingers in your ears. You can’t escape cybersecurity being political by being, “not really into politics”.

CISA staffer interrupting a briefing on the F5 situation to crassly blame Democrats for the shutdown means CISA is now officially dead to me. They can all go pound sand, and the entirety of CISA shld be transferred to ICE or RIF'd.

RE: https://infosec.exchange/@hacks4pancakes/112781757135199287 Happy 1 year anniversary of Mastodon people shaming me for posting this.

I’m speaking today at #cybercon Melbourne. Brand new talk on recent casework. Hope to see friends!

👀👀👀👀👀👀👂 https://www.youtube.com/watch?v=dpn5Rff4gUk&list=RDXjNlP3LrFiY&index=2

Hey guys I bought my first piece of commissioned Australian art and it’s as absurdly nerdy as you expect

Cybersecurity Reddit is devolving between mid career IT with certs saying only degrees are getting hired and grads saying only certs and experience are getting hired - and I’m sorry but this is late stage capitalist hell, comrades. Only people with degrees plus experience and certs are getting hired

I have public lists of cybersecurity reporters and pundits on both BlueSky and Mastodon and find it simultaneously encouraging and discouraging how much of the American’s content has changed from cybersecurity research to tangential privacy rights and even just social justice in the past six months.

Everyone knows the weekends are the best time to push important updates, right? From Jeep Wrangler forum: Did anyone else have a loss of drive power after today's OTA Uconnect update? On my drive home I abruptly had absolutely no acceleration, the gear […] [Original post on infosec.exchange]

I see so much gaslighting of people who are struggling to find jobs at junior and mid-level cybersecurity by folks who got their last job or first job before 2023. It's unreal and uncalled for. The market and the automation in the hiring processes have gone to hell […]

I guess I haven’t clearly articulated this in writing, but friends do not let friends without substantive IT work experience and/or a credible IT degree take cybersecurity career bootcamps in 2025. They are up to no good. Shenanigans. Malfeasance. They are not a safe way to get a job.

I feel like I should see more of Australia, the pacific islands, and Asia in 2026. What conferences should I submit papers to?

Decided to pop by #bsidescanberra today.

I wrote an article about what I wish juniors in cybersecurity would ask for and contribute when asking for a mentor and career guidance, in light of the terrible tech jobs market. https://tisiphone.net/2025/09/24/reasonable-expectations-for-cybersecurity-mentees/ #cybersecurity #infosec […]

Just a reminder for the Melbourne cybersecurity people that we run a meetup for OT cybersecurity education at our Cremorne office every other month. There are community speakers and food & drinks. I am setting up the snacks right now: https://meetu.ps/e/PbvYT/6xCRH/i

At times, it is hard to believe that this is the same country that won World War 2. Perhaps fighting fascism was easier and simpler when the threat is external. When fascism came to America from within, most of our elites and institutions simply capitulated without a fight out of fear and […]

I’m doing an AMA on cybersecurity careers and OT DFIR, etc for the next hour on Reddit, https://www.reddit.com/r/SecurityCareerAdvice/s/0P5SmaGgza Share, #cybersecuritycareers

you don't get to complain you can't afford to go to any infosec cons or talk to any infosec mentors, if you are not tuned into @pancakescon

Okay. I have beer and Tim Tams. I can totally run this con for 14 more hours

My dear friend, This is either burnout or clinical depression, and if you’re feeling like this, (while unfortunately temporarily common in our industry and current world), it is not normal long term - and it will very likely come with serious long term health consequences. You need to seek help!

Censorship Is the Authoritarian’s Dream “More professors in the US have been fired for controversial views in the past week than any other week in all of American history. …consider the case of Darren Michael, prof at Austin Peay State Univ, who was fired because he reposted on social media a […]

I do not know another way to express to people that trying to appease fascists by “being a good minority” or totally deferring to them publicly has saved absolutely no marginalized group or profession in human history. They are coming after us anyway. Even if you l scold peers for not being nice.