Every "Defense Tech" startup and fund should come together in a sign of collective solidarity with Anthropic, they won't (none will), and they're putting their cap tables, their employees, and their futures in the hands of people like Pete Hegseth. Reap the whirlwind, it stinks of victory gin.

My take on Learning Resources v. Trump: the elephant in the room in Chadha and the legislative veto. fivepoints.mattglassman.net/p/the-court-...

You know who else posted a misleading video to "Enter Sandman"... www.justice.gov/archives/opa...

/remembers a LetsRun post that was similar /finds LetsRun post (www.letsrun.com/forum/flat_r...) /letsrun post was 21 years ago /crumbles into dust

I've been name checking Bombing to Win when we cover CNA in my Cyber Operations class for years, but now thanks to @sodrock.bsky.social , I can do it with a meme I don't fully understand.

SOS returns to Brussels on October 22, 2026! As the geopolitical landscape rifts, hybrid threats continue to adapt & evolve. We provide a forum for observers of state-aligned sabotage, espionage, and more to share research with an action-oriented community. Stay tuned for more announcements!

23 different Cinnamon Toast Crunch products in the thread now.

The US focused class of my and @hultquist.bsky.social "Global Cyber Operations" is on April 9, will we have a new cyber strategy to discuss by then? The race is on.

“We need not lose faith in the administrative state itself; we would do better to view it as having functioned with its hands tied tighter and tighter. But we are now starting, particularly in the climate and energy space, to hit real limits.” At @scientistsorg.bsky.social fas.org/publication/...

We have access to the data (could cross-check authenticity with a different leak we were able to obtain) and ran analysis on views counts to find out when the campaign seems to be effective (according to their own metrics) www.zdfheute.de/politik/russ...

New, by @lorenzofb.bsky.social: Google sent personal and financial data about a student and journalist, who attended a pro-Palestine protest in 2024, to ICE agents in response to an "administrative subpoena," which had not been approved by a judge.

A site tracking recent purges in the PLA vs purges at the Trump-Hegseth Pentagon purge-comparison.vercel.app

To the pen testers, red teamers, and IR folks out there: How often are you encountering vibe coding in your engagements? I'm curious whether and how often you're seeing vibe coded software leaving the door open to your clients' networks. @ me or DM me if you have thoughts.

100% endorse

I don't know why they need to make short AI films about the American Revolution when the perfect one was created 18 years ago www.youtube.com/watch?v=sbRo...

Hackers behind cyberattack against Poland electric grid in Dec disabled communication devices for at least 30 sites across a number of energy facilities in country. They rendered the devices - known as remote terminal units or RTUs - not only inoperable but also unrecoverable

New Publication Alert: It is my pleasure to share that my recent report – coauthored with Alexander Leslie and Taylor Grossman through the Center for Security, Innovation, and New Technology (CSINT) at American University – is now live. 1/8 www.au-csint.com/publications...

"stop pretending Jesus was crucified because he preached good vibes and personal growth"

#BREAKING #ESETresearch identified the wiper #DynoWiper used in an attempted disruptive cyberattack against the Polish energy sector on Dec 29, 2025. At this point, no successful disruption is known, but the malware’s design clearly indicates destructive intent. 1/5

Great work by Kim and ESET to get this story out there. The cyber threat has been off the front pages with everything else going on, but is still very real.

The Farmington

I wrote this right after the inauguration. "The Christian nationalism of today is entirely inconsistent with the religion of the Founders. Our founding fathers kneeled to no pope, and they kneeled to no king. That is because they were mostly Episcopalians." tompepinsky.com/2025/01/22/w...

“I have asked the clergy of the diocese to make sure their affairs are in order and they have written their wills.,not the time for statements. It is time to put our bodies between the powers of this world and the most vulnerable”. Rob Hirschfeld, Bishop of the Episcopal Diocese of New Hampshire

Miami, which could not win the ACC, will play for the championship. Makes you wonder what UConn, which beat the ACC champ, and went undefeated* could have done if the powers at be hadn’t conspired to exclude UConn from the playoff. *in regulation

The “prosecute the former regime at every level” candidate has my vote in 2028.

This campaign got written up by CNCERT, though they have a more chaste explanation for the name than I would have given. www.secrss.com/articles/86568

Amazing innovation happening in Philadelphia (6/10)

I'm hiring a senior threat researcher! If you want to help me build out a team to track the most advanced actors targeting cloud environments, this is the job for you. This job is open to remote, but us-bases only. Feel free to reach out with questions. www.wiz.io/careers/job/...

I'm hiring a senior threat researcher! If you want to help me build out a team to track the most advanced actors targeting cloud environments, this is the job for you. This job is open to remote, but us-bases only. Feel free to reach out with questions. www.wiz.io/careers/job/...

We just launched our new and expanded Adversarial Threat Report! We've been reporting on online threats like foreign interference for 7 years, but today's report expands our work to cover fraud, scams, and AI security threats. There's a ton in the report, I'll try to break it down in this thread. 1/

An article that perhaps got lost in the shuffle - on record interviews with senior Dutch intelligence officials where they lament the firing of fmr NSA director Tim Haugh and reveal they are being more careful sharing intel with US partners volkskrant.nl/binnenland/n...

New from the @wizsecurity.bsky.social team on what we're seeing post CVE-2025-55182 exploitation. www.wiz.io/blog/nextjs-...

Duke, which lost to UConn (like every team that reached a result with UConn in 60 minutes did) won the ACC. PUT UCONN IN THE PLAYOFF

Shout out to whoever is exploiting CVE-2025-55182 to drop cryptominers and using "reactOnMynuts" as your campaign code.

A new blog this evening from Amazon Threat Intelligence detailing ongoing China-nexus cyber actors leveraging React2Shell (CVE-2025-55182): aws.amazon.com/blogs/securi...

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...

An update on Sha1-Hulud from the team here @wizsecurity.bsky.social. Rami & Shay break down how we've seen it spread, the types of environments targeted and what secrets have been leaked. www.wiz.io/blog/shai-hu...

Pete must be held accountable. This is not the opinion of some reactionary lib. I get accused all the fucking goddamn time of being the mainstream. People need to be adjudicated for this. There are ideals of what an American thinks they are that have been violent violated here. We demand justice.

Heads up for East Coast people waking up.

New report from Positive Technologies vivisects recent (2024-2025) APT31 attacks targeting Russian IT firms specifically government contractors and integrators ptsecurity.com/research/pt-...

“Providing tech services to supercharge ICE operations while blocking tools that support accountability of ICE officers is entirely backwards." - @kateruane.bsky.social www.404media.co/google-has-c...

Never assume your audience knows what acronyms stand for.

Remember NFTs? 😂😂😂😂😂😂😂

An interesting article talking about public attribution and the lack thereof in Indonesia and India on @bindinghook.bsky.social. bindinghook.com/india-and-in...

New Iran drop from me tracking an attribution nightmare - UNK_SmudgedSerpent! A little Charming, a little Muddy, and a lot C5. Targeting policy experts with benign conversation starters, health-themed infra, OnlyOffice spoofs, and RMMs. Check out the full story www.proofpoint.com/us/blog/thre...

It's a good night, but I'm a little concerned that New York is going to have a mayor that knows this song: youtu.be/WZzCHcMKyDc?... #NESCAC

I love kids. I have two of them. They’re amazing. However, kids are the absolute least self aware, clumsiest little puffins on the planet. Please don’t drive tonight unless you have to, and if you do drive, drive super slow and pay 100% attention at all times. Happy Halloween! 🎃 👻 💀 #PublicHealth

The romantic fables of peoplehood, of real “men with chests” (Fukuyama 2018) who make national histories… once you treat debates about liberalism in the Global South as reflecting the same common impulses that motivates illiberal politics everywhere else, you begin to see our common humanity /end

Follow this thread 👇 With the inaugural SOS just 18 days away, we'll be highlighting a few of the amazing talks you'll be hearing on October 28 in Brussels! stateofstatecraft.com/agenda Get a ticket while you still can! 🎟️🎟️🎟️

"What if, in the process of trying to ban AI products that quite actually encourage children to kill themselves, we wind up banning chatbots that help children cheat on their homework, diminish their propensity for critical thought, and lead to the development of other forms of AI psychosis?"