What an entrance

Apple and OpenAI. When talent is scarce? The labor market can become a high-bandwidth exfiltration channel. No cybersecurity team has authority over it.

Dress for the job you want.

Backrooms (2026) is simply a metaphor for tech debt. Fight me.

Layoffs are a failure of leadership.

“AI creates no new threat categories,” news story after story reports. “Yet,” I always whisper with a grimace.

Give me model liberty, or give me technical debt. Just in time to celebrate America’s 250th bday, let’s let model freedom ring. We should be pushing for broad defender access, not building guardrails that shoot down defenders and burn excessive compute. www.lutasecurity.com/post/fable-5...

"we will never ask you to paste a command" is the new "we will never ask for your password”

“whoami”. First thing many criminals type. I like to think it is a moment of retrospection. Who am I, really? What life decisions brought me here? Who do I want to become? Do I really want to install this infostealer?

This is why simulated phishing tests get a bad reputation. These tests should be primarily to test the effectiveness of your email security infrastructure and whether staff will report any suspicious emails. They should NOT be tests to see how "clever" IT are in "tricking" their fellow employees

Please. Repeat after me: AI is not an employee. AI is not a teammate. AI is not a friend.

This could happen with your phone. This could happen with your laptop. This could happen with your credit card. It's a long list. Some of us have been working on this, but most large players, public and private, have stayed in fantasyland. Care to join us? www.euractiv.com/news/anthrop...

Rolled out of bed this morning and gave a webinar to 370+ forensic practitioners from around the world. I had folks from *33* countries on FOUR continents show up to listen to me ramble. 😳

In case anyone is curious about gasoline prices in Michigan…

Bing really did win the Search Wars. Wow. I did not see that coming.

"We understand that people do not want to use the Wrong Answer Machine. Our solution is to make it impossible not to use the Wrong Answer Machine."

Anthropic’s Claude Managed Agents can now “dream” arstechnica.com/ai/2026/05/a...

NEXT WEEK IS ALMOST HEEEERE! Check out the schedule for @bsides312.org and come hang out in Chicagoland. Me, @lintile.lol, @seemsgood.lol, @cillic.bsky.social, @j0hnnyxm4s.johnnyxmas.net in the same building. The perfect storm of batshit, she is brewing.

No, kid, I will not “clock it.” You have your own iPhone. It has it a clock timer. You’re all set. Come on. What is even happening.

#Mythos strategy coauthored by @gadievron.bsky.social @argv.bsky.social Rob T Lee, Jen Easterly, Bruce Schneier, Chris Inglis, Phil Venables, @rgblights.bsky.social, @sounil.bsky.social, Jim Reavis, Jon Stewart, Maxim K., Dave Lewis, Joshua Saxe, John Yeoh, Ramy Houssaini, James Lyne, me & many more

The Moon: oh wow you guys decided to come back Artemis II crew: earth’s haunted

"My screen has just turned blue and there's nothing I can do"

At the same time, I’m exploring new full-time or contract opportunities in: •Security and privacy education •OSINT and investigations •Program and product management

A bittersweet announcement: I was impacted by the layoffs at Consumer Reports, alongside a number of extremely talented colleagues. I’m deeply grateful for the opportunity and so proud of the work we did fighting for consumers and helping people stay safer online.

I’ve posted it before, but it feels evergreen The two hardest problems in Computer Science are 1. Human communication 2. Getting people in tech to believe that human communication is important

A round of hot or not, at #rsac. youtu.be/D2BgOCm_WhE?...

At #rsac? Grab lunch and come talk zero trust with Helen Patton and me.

Paying to market your company on an Incel Camino is *A Choice*. I didn't know anything about SecureOS before I saw this. Now I'm on a mission to ensure that doesn't change.

Cyber: Humans are the weakest link! Also cyber: Human-in-the-loop is the only way to make AI safe!

Ok @bsidessf.org are we ready to do this keynote together this morning?

RSAC 2026 looms large. The only thing I know for sure is I’ll be on stage Wednesday with Helen Patton, re-imagining and re-contextualizing Zero Trust. Other than that? You’ll have to find me. Coffee or cocktails on me, if you can.

Announcing the Zero Token architecture. Instead of burning AI tokens, you learn to think for yourself, and complete tasks using your brain.

Generative AI will never be able to do research like a PhD student. It will never have that level of self doubt or the urge to take up unrelated hobbies.

BSides Detroit is inTechTown Detroit on Saturday, May 30. Tickets went on sale yesterday. Only 25 left. Get ‘em soon! www.eventbrite.com/e/bsides-det...

Awwwww… it’s so sweet of the spammers to want to wine & dine me before they steal all my data. 🥰🥰🥰

I saw the best minds of my generation destroyed by AI.

Ladies in technology or technology adjacent field in and around the Milwaukee Area, this one's for you!! Our monthly brunch series is back for 2026. There's still time to RSVP and join us tomorrow or if that's too late of notice, watch this space for the link for next month. www.thebrunchclub.tech

My lovable echo chamber machine thinks I should walk to the car wash. That’s fine, I’m sure.

What eternal September was for the early open Internet, is that what OpenClaw and moltbook is? A flood of inexperienced personalities let loose on the Internet with little understanding and less oversight.

Putting a tiny hyper addictive computer in everyone’s hands 24/7 was a fucking horrible idea it turns out

I am a Product Manager looking to do 30-minute user interviews with people currently writing and using Python at work to find out more about how they use Python. These are 30-minute user interviews and not sales calls. These are about you, not my company, I want to learn what you are doing.

Biometric locks for phones aren’t just convenient for you, they are convenient for the cops. “explicitly authorized law enforcement personnel to obtain Natanson’s phone and both hold the device in front of her face and to forcibly use her fingers to unlock it” theintercept.com/2026/01/30/w...

5 jobs you’ve had: IT guy IT guy IT guy IT guy, fancy IT guy, senior Hmm. This reads like a cry for help.

Frozen pipes. I call my favorite plumber. Their AI answers. We schedule a visit for tomorrow. Hours later, the plumber calls back. He can’t do the work. His AI hallucinated. The best part was the plumber saying, “You need to punch your zipcode and frozen pipes into Google.”

OODA loop can be useful. But also can be over-used. First, most organizations aren’t fighter jets. They are aircraft carriers. Big. Slow. Second, most teams are cross-functional. Cyber may OOD. But it’s front-line teams that Act.

Being understood and feeling understood is two very different things, especially when what’s doing the understanding is a server farm.

The sound of dialup screaming was really warning us of what was to come

I’d definitely see that! Can I just say in the original PRD for what became Duo’s Beyond edition, there was a large section at the bottom underneath a heading that read “Here be dragons” that was all additional context about the enormity of it all

Excited for my RSAC talk with Helen Patton, on all the ways the zero trust buzzword has failed us, and all the ways to make the most out of buzz.

Their claims towards inevitable AGI are akin to claiming they can teach the solar powered calculator collecting dust in a drawer in your house how to love. It's so stupid on the face of it that it can only be the result of a concerted propaganda effort leveled at people too lazy and dumb to learn.