NEW from @timstarks.bsky.social — someone tasked with looking into NSO Group found Pegasus on their phone as they were investigating the spyware company cyberscoop.com/pegasus-spyw...

Trump budget boss Russell Vought open to re-staffing CISA cyberscoop.com/russell-voug...

The White House isn’t planning to review DOGE's performance as the Elon Musk-launched project that eviscerated federal agency personnel roles winds down, Russell Vought said Tuesday - fedscoop.com/no-doge-acti...

Real breaking news that won't be retracted in 10 min - DHS is bringing back a key cybersecurity info sharing effort with critical infrastructure, more than a year after the Trump admin shuttered an existing nerve center between government and private sector. cyberscoop.com/dhs-anchor-c...

“I’ll be honest with you, in any other era this case should have been a 9-0 [decision]....This is a slam dunk, the states clearly have the authority to do this, they’ve been doing this for decades and decades.” cyberscoop.com/supreme-cour...

“A new technology should not transform what individuals had reasonably thought they could withhold from the Government" cyberscoop.com/supreme-cour...

"cybercriminal sentenced for DraftKings hack" is an insta-byline from me (also the photo is a choice, iykyk) cyberscoop.com/draftkings-h...

Great conversation/venting session @mccrarycyber.bsky.social about the Mythos mess in D.C.

An epidemic of cyberattacks on open-source software has mounted in recent months, making clear how uniquely difficult it is to protect the code, from both a policy and a technical perspective. @timstarks.bsky.social has more cyberscoop.com/open-source-...

Quantum EOs being signed as we speak. @derekbjohnson.bsky.social & @madialder.bsky.social with the details - cyberscoop.com/trump-execut...

Seeing a lot of people freak out about the Warner-Rudd exchange in The Economist. Someone on the other app explained it well.

I have absolutely been sucked into the idea that Freddy is a very dumb psyop. Now a pet project of mine to figure out what’s going on here

LOGZONE, an Alabama-based logistics services provider, has agreed to pay more than $507,000 to resolve allegations that it misrepresented its compliance with Pentagon cybersecurity requirements while doing work with the Navy defensescoop.com/2026/06/18/d...

NEW: The threat actor behind 1,000+ compromised open-source packages in 4 months may be primarily one person. Google traced TeamPCP's IP connex to South Africa. Palo Alto says the core operator goes by "ResoluteXBF," with two others: "diencracked" and "Shinigami." cyberscoop.com/teampcp-brea...

Accenture shells out $4.18B on three companies in big industrial cybersecurity push - cyberscoop.com/accenture-in...

Members of Congress responded with skepticism and caution Tuesday to the Trump administration’s decision to impose export controls on Anthropic’s newest AI models. cyberscoop.com/congress-rea...

Screaming into the void: Unless someone has proof that the nation-state is in fact doing the stuff you are emailing me about, there will be no story. Exhausted at the "[GROUP] claims hack of [ENTITY] because of [GOVERNMENT ACTION]" only to run another later graf saying "the claim is prob bullshit"

lol thevulnpocalypse.com

Open belly laugh in the newsroom on this one www.foodandwine.com/coors-light-...

As promised - cyberscoop.com/cisa-vulnera...

ALT HED that @derekbjohnson.bsky.social wanted to run for my gamers: Anthropic nerfed Mythos to create Claude Fable 5

New from @derekbjohnson.bsky.social: Anthropic has just released Claude Fable 5, which the company says is Mythos-like, but contains tested safeguards to prevent jailbreaks related to cybersecurity and other safety threats - cyberscoop.com/anthropic-cl...

Some news in this @timstarks.bsky.social story - CISA is set to pub a binding operational directive Wednesday that fundamentally reevaluates how it prioritizes risks and vulnerabilities cyberscoop.com/cisa-cyber-r...

Adaptive Security is behind this. The intro video is pitch perfect

I swear on my life i just got this in my inbox, it is real

Really having a tough time determining what is new with this Five Eyes brief on Chinese spying via LinkedIn when the country has long been carrying out this sort of program. @jeffstone.bsky.social covered this is 2019. It doesn't strike me that a lot has changed cyberscoop.com/linkedin-chi...

NEW from yours truly: Whether its tools from the frontier companies or agentic pen-testing platforms: AI is breaking things faster than anyone can fix them. I talked to a host of security leaders across the industry are racing to figure out what comes next. cyberscoop.com/ai-powered-c...

And here is @derekbjohnson.bsky.social on Trump signing a pared-back EO on AI - cyberscoop.com/donald-trump...

Seeing a lot of company names flying around as part of this new cohort, but only have Rubrik confirming their participation. If you know of any others, reach out in the DMs/Signal

NEW: Anthropic expanding access to Project Glasswing -- Roughly 150 new organizations across critical infrastructure sectors will gain access to Claude Mythos Preview, Anthropic's most capable — and most restricted — AI model. cyberscoop.com/anthropic-pr...

Operation Jailbreak: the Army’s massive push to hack its own systems and make them talk to each other defensescoop.com/2026/05/29/o...

NEW: A Department of Commerce IG report found NIST has mismanaged NVD through poor planning, inefficient operations, duplicate federal programs, and failure to communicate with users. cyberscoop.com/nist-nvd-aud...

🤬🤬🤬🤬🤬🤬🤬🤬🤬🤬 CC @brianphillips.lol

New from @timstarks.bsky.social -- A House subcommittee will hold an open hearing next week on how frontier artificial intelligence models are shaping the cybersecurity landscape, for good and for ill. cyberscoop.com/house-hearin...

Security researchers chained together five separate weaknesses in the popular workflow automation service Zapier that, if first discovered by a malicious actor, could have granted access to millions of user accounts and the systems those accounts connect to. cyberscoop.com/zapier-bug-c...

why what happened

Bad bad bad cyberscoop.com/github-inter...

NEW from @timstarks.bsky.social: Both the House and Senate want answers from CISA on the news that a contractor's credentials were found on the open internet cyberscoop.com/cisa-credent...

You may see stories this week on the Take It Down Act's 48-hour takedown rules for publishing nonconsensual deepfakes kicking in today. But I already wrote that story for you last week and have been talking to a lot of folks (including FTC commissioners) about what enforcement will look like.

Whoo boy its a mess out there - cyberscoop.com/mini-shai-hu...

NEW from @mattkapko.com -- Microsoft disrupts cybercrime service that abused software verification systems en masse cyberscoop.com/microsoft-di...

Researchers say AI just broke every benchmark for autonomous cyber capability cyberscoop.com/ai-autonomou...

Wed brought a closed-door briefing for the House Homeland Security Committee from Anthropic. The chairman of the panel’s cybersecurity subcommittee said he is planning to hold a hearing on the topic. And committee Ds are requesting a classified briefing with Anthropic. cyberscoop.com/house-homela...

NEW: I wrote about this Mini Shai Hulud attack, which is unfolding so fast i had to re-write this three times before i just said "enough" and published - cyberscoop.com/mini-shai-hu...

New from @timstarks.bsky.social: Google and Amnesty International teamed up to make it harder for spyware vendors to hide cyberscoop.com/google-andro...

@mattkapko.com with an update: Instructure, the company behind Canvas, said it reached an agreement with the cybercriminals who threatened to leak a trove of sensitive data they claim was stolen during a prolonged cyberattack on the widely used education tech platform. cyberscoop.com/canvas-instr...

I thought I was the only one. www.404media.co/your-ai-use-...

NEW: Google researchers found a zero-day exploit developed by artificial intelligence and alerted the susceptible vendor to the imminent threat before a well-known cybercrime group initiated a mass-exploitation campaign, the company said in a report released Monday. cyberscoop.com/google-threa...

NEW from @timstarks.bsky.social: The Trump admin is redirecting a cybersecurity scholarship program that requires recipients to work in government service toward artificial intelligence, leaving some current program scholars dismayed and bewildered. cyberscoop.com/sfs-scholars...

NEW from @timstarks.bsky.social: Rep. Summer Lee, who’s been at the forefront of efforts to scrutinize the fed gov’s use of spyware wants the Commerce Dept to brief Capitol Hill amid apprehension that the Trump administration might further embrace the technology. cyberscoop.com/democrat-sum...