update: I’m being told this is the witness list for next week— Logan Graham, Anthropic’s frontier red team lead Royal Hansen, Google vice president of security & privacy   Eddy Zervigon, Quantum Xchange CEO Michael Coates, Seven Hill Ventures

Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week. These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.

OMG! It’s been too long since we had a good mobile ransomware sighting!

one of the wildest stories i've seen in a minute: twin brothers who previously pled guilty to hacking the State Department while gov't contractors... got new jobs as gov't contractors.... then allegedly deleted a bunch of gov't data... and were just arrested again. www.axios.com/2025/12/03/v...

Europol has seized the domain of the Cryptomixer cryptocurrency mixing service. The site was allegedly responsible for helping criminal groups launder funds. Officials also seized €25 million worth of assets. www.europol.europa.eu/media-press/...

publishing this at 8:30pmPST the night before thanksgiving was a choice openai.com/index/mixpan...

New from me: House lawmakers have called on Anthropic CEO Dario Amodei to testify next month on how Chinese hackers used Claude Code to automate most of a wide-reaching cyberespionage campaign. More on @axios.com: www.axios.com/2025/11/26/a...

NEW: The FBI spied on a Signal group chat of NY immigrants' rights volunteers organizing court watch+ labeled activists “anarchist violent extremist actors.” Joint FBI/NYPD report shows law enforcement accessed private planning convo of ppl monitoring ICE Docs obtained by @propertyofthepeople.org

cloudflare says today's outage was due to just one oversized file www.axios.com/2025/11/18/c...

Scoop: CISA plans to embark on a hiring spree and change some workforce policies in an effort to rebuild its depleted ranks ahead of a possible conflict with China, according to a memo from its acting director that I obtained. www.cybersecuritydive.com/news/cisa-hi...

Politico is reporting that the breach at the Congressional Budget Office is "ongoing." “Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.

As federal election security support shrinks, Pam Smith warns smaller offices may be left “flying blind.” Still, she reminds us: “We ran elections before there was critical infrastructure support, and we'll have elections again, even without federal support.” @samsabin.bsky.social bit.ly/4hM06Ib

apparently the password for the Louvre's video surveillance system was just.... "Louvre" 🫠 www.pcworld.com/article/2961...

OpenAI is rolling out a new security agent, built on GPT-5, in private beta. The agent is designed continuously scan source code, find & validate bugs and propose patches. More on @axios.com: www.axios.com/2025/10/30/o...

apparently it’s #nationalblackcatday so here’s the sweetest lil hunter there is 🥰🙏🏻

F5 — the networking security company that disclosed a nation-state cyberattack this month — just warned on an earnings call that their short-term revenue will likely take a hit as customers slow buying decisions as they patch vulnerable devices. more for @axios.com: www.axios.com/2025/10/27/f...

Breaking: The Department of Justice announced it will "monitor polling sites in six jurisdictions [in New Jersey and California] ahead of the upcoming November 4, 2025, general election to ensure transparency, ballot security, and compliance with federal law." www.justice.gov/opa/pr/justi...

More than 200 people showed up at Coast Guard Island earlier today to protest the federal enforcement threats looming over the Bay Area. oaklandnorth.net/2025/10/23/p...

🚨SCOOP🚨 DHS ordered OpenAI to identify a user who'd made 2 specific prompts. User was anonymous and accused of helping run 15 child abuse sites. They'd disclosed the prompts to an undercover agent. First example of what I'm calling a reverse AI prompt search. www.forbes.com/sites/thomas...

New: The recent layoffs in CISA's Stakeholder Engagement Division have virtually shuttered SED, eliminating teams focused on critical infrastructure support, nationwide partnerships, and international coordination. My story with details cuts and impacts: www.cybersecuritydive.com/news/cisa-st...

CISA's stakeholder engagement division hasn't sent updates about the F5 intrusion in the last week, an industry source tells me. and following RIF notices this month, the division is expected to host a town hall Thursday to discuss those cuts. new from me: www.axios.com/2025/10/21/f...

nation-state hackers broke into F5, exfiltrated data and stole source code. the company estimates that over 80% of the Fortune Global 500 uses its tools. a top U.S. cyber official says the incident is part of a "broader strategic campaign" against supply chains. www.axios.com/2025/10/15/f...

Apple is now paying upwards of $2M for high-severity bug findings, including those that could lead to zero-click and close proximity attacks www.axios.com/2025/10/10/a...

just got to do a talk radio hit for my hometown station, life is worth living 🙏

NEW: ICE is planning to hire a team of nearly 30 people to surveil social media 24/7, build dossiers on people, and flag them for arrest and deportation. @dell.bsky.social has the scoop: www.wired.com/story/ice-so...

something they don't teach you in j-school is just how much of your career can become traveling to go interview people + juggling flight plans w/ the 12 other story ideas you have. on a related note, i'm tired :)))

To clarify, tt says it won't renew with CIS, but it will maintain information sharing with MS-ISAC.

CISA says it won't be renewing its cooperative agreement with the MS-ISAC, which ends Sept. 30, and will hold bi-monthly cals to share "timely cyber defense updates" with state, local and tribal governments. www.cisa.gov/news-events/...

Trump is targeting former deputy AG Lisa Monaco and called for Microsoft to fire her. He also says she’s been stripped of her security clearances and “banned her from all federal properties.” www.axios.com/2025/09/26/t...

CISA has ordered civilian agencies to patch vulnerable Cisco devices ASAP after the company disclosed new zero-days. The order came after Cisco said today it's been working with gov'ts since May to investigate attacks targeting the flaws. for @axios.com: www.axios.com/2025/09/25/u...

It's not looking for good CISA 2015: @samsabin.bsky.social reports that Senate Homeland Security Committee chair Rand Paul "seems reluctant to engage with the private sector or other committee members" on reauthorization. www.axios.com/2025/09/19/c...

new Senate HSGAC minority report dives into DOGE based on several staff visits and whistleblower complaints: "Ranking Member Peters and staff have found that DOGE has, in fact, done little more than put Americans’ most private information at risk." www.hsgac.senate.gov/wp-content/u...

A key cyber threat info-sharing program is set to expire on Sept. 30. Congressional aides say they're doubtful they'll make the deadline, blaming the failure on Sen. Paul's last-minute push to make major changes to the 10-year-old program. my latest for @axios.com: www.axios.com/2025/09/19/c...

Exclusive: The Trump administration has abandoned any intention of breaking up the joint leadership of U.S. Cyber Command & the National Security Agency, bowing to the reality of the enormous complexity of the task. On @therecordmedia.bsky.social therecord.media/cyber-comman...

interesting— new sanctions on cyber scam centers in Myannmar www.bloomberg.com/news/article...

Suspected Chinese hackers impersonated the chair of the House China Select Committee in emails to people involved in ongoing U.S.-China trade policy negotiations, House panel says www.axios.com/2025/09/08/c...

Looking for any Canadians on here who may have canceled or decided against travel to the US this year. Or any foreign travelers that had second thoughts? [email protected]

The AI boom has created a new type of work: fixing botched AI. Designers are being hired to remake wonky AI art. Writers are asked to make ChatGPT’s writing sound more human. Even software developers are tasked with fixing buggy vibe coding. www.nbcnews.com/tech/tech-ne...

back from vacation. spent a lot of time among the trees. 10/10 would recommend

UK government asks everybody to stop using VPNs. "everybody who's out there thinking of using VPNs...verifying your age keeps a child safe...So let's just not try and find a way around. Just prove your age." - UK government

👀, Anne Neuberger is now a senior adviser at a16z www.axios.com/2025/08/21/b...

Microsoft is now limiting China-based companies' access to its advanced vulnerability notification program. change comes after last month's SharePoint 0-days 👀 www.bloomberg.com/news/article...

"A new United Arab Emirates-based startup is offering up to $20 million for hacking tools that could help governments break into any smartphone with a text message." techcrunch.com/2025/08/20/n...

North Korean IT workers are pretty good at whipping up fake ID documents and resumes. AI is only making them better. These examples from real cases might have obvious tells to us now — but recruiters are pouring through hundreds of applications. The tells aren't so clear after a certain point.

Selling one's likeness for a mere $500 and having it talk about its sexual preferences while hawking fiber supplements is like a sad plot device that I would expect from a good science fiction novel. But it's real, via @sapna.bsky.social www.nytimes.com/2025/08/17/b...

New from 404 Media: ICE added a random person to group chat, exposed highly sensitive details about an active manhunt in real-time. The person says they were added weeks ago, thought they were scam texts until start seeing data lookups etc. Incredible security failure www.404media.co/ice-adds-ran...

NEW: xAI's Grok was about to get greater adoption within the US government until it starting praising Hitler, @wired.com has learned. @zoeschiffer.bsky.social and @makenakelly.bsky.social have the scoop: www.wired.com/story/xai-gr...

Poland stopped a cyberattack this week that tried to cut off the water supply to one of its largest cities www.reuters.com/en/poland-fo...

NEW: Here's how @zackwhittaker.com found that TeaOnHer was spilling the personal data of its users — including photos of drivers' licenses — on the internet, for all to see. The security issues were so trivial all it took him was around ten minutes. Anyone could have scraped all the users' IDs.

President Donald Trump on suspected Russian court hack: "Are you surprised?"