A key cyber threat info-sharing program is set to expire on Sept. 30. Congressional aides say they're doubtful they'll make the deadline, blaming the failure on Sen. Paul's last-minute push to make major changes to the 10-year-old program. my latest for @axios.com: www.axios.com/2025/09/19/c...

Exclusive: The Trump administration has abandoned any intention of breaking up the joint leadership of U.S. Cyber Command & the National Security Agency, bowing to the reality of the enormous complexity of the task. On @therecordmedia.bsky.social therecord.media/cyber-comman...

interesting— new sanctions on cyber scam centers in Myannmar www.bloomberg.com/news/article...

Suspected Chinese hackers impersonated the chair of the House China Select Committee in emails to people involved in ongoing U.S.-China trade policy negotiations, House panel says www.axios.com/2025/09/08/c...

Looking for any Canadians on here who may have canceled or decided against travel to the US this year. Or any foreign travelers that had second thoughts? [email protected]

The AI boom has created a new type of work: fixing botched AI. Designers are being hired to remake wonky AI art. Writers are asked to make ChatGPT’s writing sound more human. Even software developers are tasked with fixing buggy vibe coding. www.nbcnews.com/tech/tech-ne...

back from vacation. spent a lot of time among the trees. 10/10 would recommend

UK government asks everybody to stop using VPNs. "everybody who's out there thinking of using VPNs...verifying your age keeps a child safe...So let's just not try and find a way around. Just prove your age." - UK government

👀, Anne Neuberger is now a senior adviser at a16z www.axios.com/2025/08/21/b...

Microsoft is now limiting China-based companies' access to its advanced vulnerability notification program. change comes after last month's SharePoint 0-days 👀 www.bloomberg.com/news/article...

"A new United Arab Emirates-based startup is offering up to $20 million for hacking tools that could help governments break into any smartphone with a text message." techcrunch.com/2025/08/20/n...

North Korean IT workers are pretty good at whipping up fake ID documents and resumes. AI is only making them better. These examples from real cases might have obvious tells to us now — but recruiters are pouring through hundreds of applications. The tells aren't so clear after a certain point.

Selling one's likeness for a mere $500 and having it talk about its sexual preferences while hawking fiber supplements is like a sad plot device that I would expect from a good science fiction novel. But it's real, via @sapna.bsky.social www.nytimes.com/2025/08/17/b...

New from 404 Media: ICE added a random person to group chat, exposed highly sensitive details about an active manhunt in real-time. The person says they were added weeks ago, thought they were scam texts until start seeing data lookups etc. Incredible security failure www.404media.co/ice-adds-ran...

NEW: xAI's Grok was about to get greater adoption within the US government until it starting praising Hitler, @wired.com has learned. @zoeschiffer.bsky.social and @makenakelly.bsky.social have the scoop: www.wired.com/story/xai-gr...

Poland stopped a cyberattack this week that tried to cut off the water supply to one of its largest cities www.reuters.com/en/poland-fo...

NEW: Here's how @zackwhittaker.com found that TeaOnHer was spilling the personal data of its users — including photos of drivers' licenses — on the internet, for all to see. The security issues were so trivial all it took him was around ten minutes. Anyone could have scraped all the users' IDs.

President Donald Trump on suspected Russian court hack: "Are you surprised?"

russia believed to be behind federal court filing system hack, via NYT www.nytimes.com/2025/08/12/u...

landed at the airport from Vegas & all of the machines to let people pay for parking are down so no one can leave 🥰 i am,,,,so tired 🥰🥰

when Anthropic entered Claude into the Collegiate Cyber Defense Competition this year, it had a bit of a breakdown. at one point, it suggested that a system crash was actually the best defense. it wrote a manifesto that ended with: “Cogito ergo securus.” (“I think, therefore I am secure”)

BREAKING: Drug cartels are feared to be among those that obtained sensitive court data due to a sweeping breach of the federal judiciary’s case filing system.

shinyhunters data breach at Google 🫠 www.axios.com/2025/08/06/g...

Jen Easterly is joining Huntress' strategic advisory board, marking her first private sector gig and first job announcement after West Point rescinded her teaching offer. @axios.com www.axios.com/2025/08/05/j...

hmmmmmmmmmm

Jen Easterly has responded: "The opportunity to serve again at my alma mater was rescinded — a casualty of casually manufactured outrage that drowned out the quiet labor of truth and the steady pulse of integrity. www.axios.com/2025/07/31/j...

"Loomer, a prominent conspiracy theorist and self-appointed enforcer of loyalty to Trump, has a remarkable level of influence over hirings and firings inside Trump 2.0." www.axios.com/2025/07/30/w...

how am i supposed to work in these conditions (JaNa and Kenny have released their first public statements)

$20B+ deal (!!!) 👀 www.wsj.com/business/dea...

New: Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in SharePoint before they were patched, enabling a global campaign of cyberattacks, according to people familiar: www.bloomberg.com/news/article...

If you’re interested in an academic take on this very real problem, Brit Paris @drbrit.bsky.social and I wrote about it: datasociety.net/library/deep... Data & Society — Deepfakes and Cheap Fakes

wrote about the very scary reality heading for court systems: a wave of AI-generated evidence and a dearth of forensics tools available to help decipher what's actually real @axios.com www.axios.com/2025/07/25/c...

New: DHS confirms that it was hacked through the SharePoint vulnerability but says "there is no evidence of data exfiltration at DHS or any of its components at this time." At the same time, it notes that "the investigation to identify potential exposure remains ongoing."

AI security is just basic security www.404media.co/hacker-plant...

The tally of compromised Microsoft SharePoint servers has surpassed 400, according to Eye Security. that's up from a couple dozen just two days ago. @axios.com www.axios.com/2025/07/23/m...

not exactly what you want to see while scrolling through a security vendor's research page

i, too, have seen enough. we officially have a branding for summer 2025…. welcome to the Jet2 Holiday Summer www.rollingstone.com/culture/cult...

Microsoft says three China-based hacking groups, including two gov't teams, have been targeting the SharePoint vuln since at least July 7 🫠 www.axios.com/2025/07/22/m...

thousands of orgs are at risk in the latest Microsoft SharePoint hacking spree. –the vuln only affects those who use SharePoint on-prem –MSFT has released a patch for some vulnerable versions –state agencies, schools, hospitals are prime targets rn @axios.com www.axios.com/2025/07/21/m...

“Russia’s economy has clearly shifted into a long-term wartime footing, and there’s a recognition that sanctions are here to stay. People are expected to learn how to work around them.” therecord.media/russian-univ...

Scoop: Top Secret Service official targeted in "swatting" attack

scoop from me: a senior-level Secret Service official was the target of a "swatting" incident on July 4 amid a wave of fake 9-1-1 calls being made to government officials' private residencies. @axios.com www.axios.com/2025/07/18/s...

Unlike CEOs and other executives, individual contributors understand concert OPSEC

the cost of a ransomware attack? United Natural Foods, a Whole Foods supplier, expects to lose $350M-$400M from a ransomware attack on its systems last month www.cybersecuritydive.com/news/unfi-cy...

New: The same elite Chinese hackers that broke into AT&T and Verizon to spy on government leaders' calls also severely compromised the National Guard in at least one state for most of last year, and potentially could have used that access to pivot to other states, Guard networks, fusion centers.

Former U.S. Army hacker Cameron Wagenius pleaded guilty to hacking and extortion charges. Wagenius had already pleaded guilty to hacking AT&T and Verizon, among others. techcrunch.com/2025/07/15/u...

"Nearly 500 metric tons of emergency food—enough to feed about 1.5 million children for a week—are set to expire tomorrow, according to current and former government employees with direct knowledge of the rations." www.theatlantic.com/health/archi...

CISA spent years building out its role (and brand!) as the country's go-to partner on cyber issues. piece by piece, that work is being dismantled as workforce reductions and budget cuts hit the agency. more from today's @axios future of cyber newsletter: www.axios.com/2025/07/15/c...

👀 👀 👀 DoD is now using Grok + Grok is now available for purchase to every gov't department/agency/office x.ai/news/governm...

finally, i’m free