Looking forward to Noem's RSAC keynote in March...

Five years ago.

Trump Pretends To Block State AI Laws; Media Pretends That’s Legal The mainstream media just failed a basic civics test so badly that you'd think their brains have been pickled by the kinds of folks who spend all their time on X (oh, wait…). Headlines across major outlets are breathlessly…

I honestly don't know what the fuck we're doing here. www.bbc.com/news/article...

Exactly why the Ellisons are completely unfit to own Warner and CNN — even with all their wealth, what a bunch of acquiescent stooges. They are uninterested in making journalism better or a better business, but happy to make it better for Trump.

Couldn’t Sam Altman just ask ChatGPT how to make itself profitable

This is actually quite brilliant, up to and including the final sentence 🔥

One of the changes that OpenAI has made to make ChatGPT safer is a "take a break" nudge. There's something quite interesting about the design here. Which thing does it make you want to click?

For the last few months, we've been talking to current and former employees of OpenAI to understand what went wrong with ChatGPT this year and how the company is fixing it. Here's the story: www.nytimes.com/2025/11/23/t...

Big news on the corporate accountability (or lack thereof) front: The SEC just dropped its case against SolarWinds and its former CISO for allegedly defrauding investors about the company's cybersecurity posture prior to its major hack. www.sec.gov/enforcement-...

My story on today's vote: www.cybersecuritydive.com/news/fcc-eli...

Breaking: The FCC has voted 2-1 along party lines to eliminate cybersecurity requirements for telecom companies that the commission adopted at the end of the Biden administration. Telecoms had lobbied for the change. Democrats said it would invite another Salt Typhoon. Story coming shortly.

Another Fortinet zero-day vulnerability under exploitation. And more questions about silent patching and disclosure practices. www.darkreading.com/vulnerabilit...

Good for Google. It's great to see the company taking action against Lighthouse and the Smishing Triad. That said...why didn't they go a step further and pressure Telegram to take down all the channels hosting this stuff? And if they did try, why not say it? www.darkreading.com/threat-intel...

Excuse me, what? www.wsj.com/tech/musk-te...

60 Minutes Edits Donald Trump Telling Them 60 Minutes Should Edit Donald Trump Talking About How 60 Minutes Paid Him For Editing Kamala Harris 60 Minutes is under new management and things are getting stupid faster than you might expect. Last night’s episode featured President Trump, which is…

Fear the "SessionReaper" -- exploitation activity is ramping up for CVE-2025-54236, a critical flaw in Adobe Commerce (formerly Magento). www.darkreading.com/vulnerabilit...

Techno-optimists in 2023: AI will soon cure major diseases, and those who impede its progress are basically murderers. Techno-optimists in 2025: Ladies and gentlemen, please welcome the Fembots!

In the wake of Medusa ransomware attacks on CVE-2025-10035, Fortra yesterday confirmed the maximum-severity GoAnywhere vulnerability was exploited as a zero day. But there are still some big unanswered questions about the flaw. www.darkreading.com/vulnerabilit...

Red Hat says their GitLab instance was breached, not their GitHub repos. www.darkreading.com/application-...

CISA will furlough 65% of its staff if the government shuts down on Wednesday, keeping about 890 people to handle mission-critical cybersecurity protection work. www.cybersecuritydive.com/news/cisa-go... As in other agencies, employees there are worried about potential RIFs of furloughed staff.

For the second time in as many months, Infoblox has published research tying commercial adtech companies directly to malicious activity. This time, it's PropellerAds, Adtech Holding, and an operation tracked as "Vane Viper." www.darkreading.com/vulnerabilit...

When Trump took office, the FCC was creating a security label for IoT devices. Now it's probing the company it picked to lead the program over ties to China. I wrote about how this could affect the program's rollout, vendor participation, and customer trust. www.cybersecuritydive.com/news/fcc-cyb...

The Columbia settlement is an “astonishing transfer of autonomy and authority to . . . an administration whose disdain for the values of the academy is demonstrated anew every day.” New @knightcolumbia.org analysis of the Columbia settlement, just published. knightcolumbia.org/blog/what-th...

ICYMI last night: The Senate confirmed Sean Cairncross to be Trump's national cyber director, handing the reins of a relatively new office to a political operative with scant cyber experience. www.cybersecuritydive.com/news/sean-ca...

Stand by this: www.politico.com/newsletters/...

A cyberespionage campaign tied to UNC3886 is using old VMware vulnerabilities to compromise organizations' virtual environments. Additionally, the campaign -- dubbed Fire Ant by Sygnia researchers -- is bypassing network segmentation to reach isolated areas. www.darkreading.com/vulnerabilit...

This is an insane thing to write about game development. www.nytimes.com/2025/07/28/a...

Awesome, GenAI is going full Longlegs.

This is interesting: After AT&T and Verizon refused to turn over Mandiant's Salt Typhoon–related assessments of vulnerabilities in their telecom networks, @cantwell.senate.gov is asking Mandiant directly for those documents. www.commerce.senate.gov/services/fil...

Trump wants to shift critical infrastructure protection responsibilities to the states. What would that mean for cybersecurity? Less support, more vulnerabilities, and more attacks, experts and industry leaders told me. My new story: www.cybersecuritydive.com/news/critica...

When I was little, the U.S. military came to our home at gunpoint and took me and my family away. We were imprisoned for years in barbed wire camps simply because we were Japanese American. I have spent my life telling that story, hoping it would never be repeated.

Don't worry -- the techno-optimists say AI will save us.

The "Techno-Optimist Manifesto" was a giant, flashing warning sign -- to put it as lightly as possible -- and we drove straight through it.

Just remembered that one of the big features the Tesla community are excited about is the idea that Grok will be available to talk to in Cybercabs soon... which with latest Grok developments, means you'll be sitting alone in a cab trying to avoid Hitler-loving Hal starting a conversation with you.

Scattered Spider is back in the news again with attacks on North American airlines. Members of the loose cybercriminal collective recently breached an unnamed organization in an attack chain that began with obtaining the CFO's credentials. www.darkreading.com/cloud-securi...

Thanks to Amy Hockert for having me on @fox9mn.bsky.social‬'s All Day Live yesterday to talk about Minnesota native Sean Cairncross's nomination to be Trump's national cyber director. www.youtube.com/watch?v=ttpY...

DHS plans to transfer $143.6M from CISA (including from its frozen election-security program) to ICE to fund detention beds. Senate Approps HS subcommittee ranking member @chrismurphyct.bsky.social‬ is objecting & asking for more info about impact on CISA. www.murphy.senate.gov/imo/media/do...

ConnectWise confirmed that CVE-2025-3935, a high-severity vulnerability in ScreenConnect, was exploited in the company's breach and that "we have not observed further suspicious activity in ScreenConnect cloud instances since the patch was installed." www.darkreading.com/cyberattacks...

New: Nearly all of CISA's top leaders — including 5 of its 6 operational divisions and 6 of its 10 regional offices — have left or are leaving this month, the agency's new deputy director told staff. Exits are fueling worries about CISA's capabilities. www.cybersecuritydive.com/news/cisa-se...

Scattered Spider, the loosely affiliated hacking group, has shifted closer to ransomware gangs, raising questions about the group's ties to the Russian cybercrime underground. www.darkreading.com/cyberattacks...

If you load this page it contacts 82 IP addresses executing 256 separate HTTP transactions to download 18MB of data writing 64 cookies to your device to tell you “no”

I was hoping the industry would learn something from the Sports Illustrated debacle in 2023, when it was caught running fake articles with AI-generated authors via a 3rd party. But I guess we need a Voight-Kampff test for news outlets, which is just unfathomably sad. www.404media.co/chicago-sun-...

A House hearing on Thursday showcased broad industry support for reauthorizing a key cyber-threat information-sharing law — as well as a few ideas for improving it. My story for @cybersecuritydive.bsky.social: www.cybersecuritydive.com/news/cisa-cy...

I wrote about why Scattered Spider and other cybercriminal groups are turning to dynamic DNS providers, and why it has some infosec experts concerned. www.darkreading.com/threat-intel...

This week, 52 U.S. orgs, many representing infrastructure sectors, urged Congress to renew a key cyber info sharing law. The expiring program has been the cornerstone of improved public-private partnerships, including sharing *within* the private sector. www.cybersecuritydive.com/news/cisa-re...

Scoop: NIST's Computer Security Division — responsible for research & standards on cyber, privacy, cryptography, AI, etc. — has lost more than a dozen people, including its chief, to early retirements. www.cybersecuritydive.com/news/nist-cy... The departures could imperil key work.

DOJ's new settlement with defense contractors over cyber compliance failures suggests that Biden's Civil Cyber-Fraud Initiative might still be active. DOJ won't comment, but there's reasons to believe to think Trump might continue the CCFI. My story: www.cybersecuritydive.com/news/biden-c...