Just curious: Republicans control a majority of US states as governor (27 vs 23 Dems). Of 5 territories, 2 are R-controlled (Guam and Puerto Rico). There's also D.C. with a D mayor. There are 574 federally recognized tribal authorities. Any data around on their leadership affiliation?

✨ New report: Undead by design ✨ Zombie OSes aren’t just outdated, they’re risky. On Oct 14, Windows 10 goes EOL & 1/3 of Windows assets lose support. @todb.hugesuccess.org reveals how to protect your org: 👉 Read the (ungated!) report: www.runzero.com/resources/un...

So are tech journos going to cover the sunsetting of the Cybersecurity Information Sharing Act(2015)? Or are we just going to keep sharing IOCs and TTPs with the USG and risking pre-2015 evidentiary exposure and just be cool now? I like being cool. I also kinda liked that law. #lawfare

👻 ATX, Oct 9: the horror gets real. We're conjuring up a haunted house pop-up with our friends at Ghost Security with: 💀 Spooky cocktails + treats 🎤 @todb.hugesuccess.org talking creepy EoL things 🕷️ Maxim G analyzing evil at scale 🔮 Greg Martin on AI in AppSec 🎟️ Get your creds: luma.com/klzl0t1h

North Carolina secures 1.3M+ devices across 343 schools with only a handful of IT staff. Learn how in our live webcast with Samuel Carter & @todb.hugesuccess.org. 📅 Oct 21 | 10AM PT / 1PM ET 👉 www.runzero.com/north-caroli...

The CVE program nearly lost its funding. Cue the collective InfoSec panic. But only ~20% of incidents start with a CVE exploit. The rest? Misconfigs + bad segmentation exposures tools shrug at. @todb.hugesuccess.org explores what a post-CVE world might mean: www.runzero.com/blog/grappli...

If you’re a creative sort and ever wondered what life would be like while living with the Comics Code Authority or the Hays Code in Hollywood, well, you’re in luck!

I wrote a plea to cybersecurity curriculum developers about what I would like to see covered in OT cybersecurity coursework. tisiphone.net/2025/09/10/t...

We're poking the 🐻‍❄️... safely... so that you can radically change the way you scan for vulns. We just added 100s of new critical remote vuln checks that are super safe + way faster than traditional scanning. Tune into runZero Hour next Wednesday to see how we do it: www.runzero.com/research/run...

wild how people want to get rid of autistic trans people and think that the Internet would still work

Trump plans to send Kilmar Abrego Garcia to Uganda now that he was allowed to return home. “We are not going to stop coming after him,” a senior Trump administration official tells Rolling Stone. “He isn’t getting away.” www.rollingstone.com/politics/pol...

Because blocking debate during a midnight vote is really the hallmark of democracy. In America, the voters choose their legislators. In Soviet #Texas, politicians choose their voters. www.washingtonpost.com/politics/202...

Manager: "What's this milestone about ..'Living on a prayer'?" Lead: "That's the documentation deliverable" Manager: "What's the status of that?" Lead: "We're halfway there" Manager: "Why is progress so slow?" Lead: "You fired Tommy" Manager: "So?" Lead: "Tommy used to work on the docs"

Risk scores shift constantly. But which ones actually matter? @todb.hugesuccess.org is sharing our new tool, EPSS Pulse, with the Black Hat crowd today. It tracks daily CVE volatility so you can prioritize smarter. 🔎 Tool: www.runzero.com/epss-pulse/ 📖 Blog: www.runzero.com/blog/introdu...

Social media companies ​​are blocking wide-ranging content - including posts about the wars in Ukraine and Gaza - in an attempt to comply with the UK's new Online Safety Act, BBC Verify has found. www.bbc.com/news/article...

It’s almost as if the Internet was designed to treat censorship as an error, and route around it.

runZero Hour #20 is LIVE NOW - This is an amazing episode that includes Rishi & Sandeep of https://projectdiscovery.io/; here to give us the backstory on their company and the Nuclei open source vulnerability scanner (already bigger and more popular than […] [Original post on infosec.exchange]

🎙️ runZero Hour Recap: CVE chaos, MCPs, and the fight for better vulnerability data! In Episode 19, @todb.hugesuccess.org sat down with Rob King and @jgamblin.bsky.social to dissect the state of vulnerability data. 🧠 Read the recap and watch the full episode here: www.runzero.com/blog/runzero...

Reports that a Canadian citizen who has resided in the US since age 10 was abducted at a green card interview. Her husband is begging ICE to let him fly her back to Canada and they refuse to release her.

Support your local wannabe hooker by donating to my congressional campaign: secure.actblue.com/donate/abu-b...

🎙️Just dropped! Our own @hdm.io joins @paulasadoorian.bsky.social + the rest of the crew on Paul's Security Weekly to discuss finding all the things and why vuln management is dead as we know it. 📺 Full episode: www.runzero.com/resources/is... More on default creds: www.runzero.com/blog/integra...

My boss would be mad at me if I ran a story with the headline "that 16 billion password breach story is a pile of bullshit" so this will have to suffice cyberscoop.com/colossal-dat...

What comms app is this?

“What is the draw anymore if the mission is rooted in who the president is and your job can be taken without warning or process?” the Labor attorney asked. “Who in their right mind will ever take a gamble on a government job again?”

🧠 CVEs need context—and @jgamblin.bsky.social has ideas. Catch him live on #runZeroHour this Wed, June 18 @ 1PM ET with @todb.hugesuccess.org. We’ll talk LLMs, MCP, and the future of vulnerability intelligence. 🔗 runzero.com/research/run...

News: The Washington Post has suffered a cyber intrusion that compromised the emails of at least several reporters at the paper, including those on the national security and economic policy teams, according to people familiar with the matter.

CISA has asked organizations to install firmware updates or restrict access to pan-tilt-zoom security cameras from four vendors Firmware updates are only available for PTZOptics camera models. ValueHD, multiCAM, and SMTAV have failed to reply to security researchers www.cisa.gov/news-events/...

I encourage everyone to consider attending one of the many demonstrations planned for tomorrow across the country. Show up. Demand accountability. Peacefully protest. Find the rally closest to you: NoKings.org

“Tesla’s driverless ‘robotaxis’ could launch in Austin as soon as June 22. But a demo in Austin today showed a $TSLA, manually driven to test its Full Self-Driving system, failed to stop for a child-sized dummy at a school bus—and hit it.” @cbsaustin @velez_tx

This is a lie. We all saw the video. The Senator clearly identified himself, and he did not "lunge" toward anyone.   If these miserable propagandists will lie to you about roughing up a U.S. Senator in a room full of reporters, what won't they lie to you about?

The cybersecurity equivalent of 'drugs in Halloween candy' is 'malware on airport USB charging ports'. Something that has not one single record of it ever having happened.

10 ways to encode IPs to bypass validations 👇

Most jarring thing was noting how many people here from Europe are not coming to DefCon this year because traveling to the United States is considered a bad idea. I don’t blame them.

I love getting medical advice from ChatGPT and I am amazed this shit doesn’t run into any guardrails at all.

Seriously every company that cares about PR should just hire a recent high school graduate whose only job is to review press and marketing for accidental self-owns. It wouldn’t be that expensive and would be such a huge boon to the Gen Alpha economy.

Three Trail of Bits engineers audited core Go cryptography for a month and found only one low-sev security issue... in unsupported Go+BoringCrypto! 🍾 Years of efforts on testing, limiting complexity, safe APIs, and readability have paid off! ✨ Yes I am taking a victory lap. No I am not sorry. 🏆

There’s only a few reasonable whole number pairs that can possibly result in a 413% increase. This stats smells fishy.

pro tip, biz travelers: don’t connect through EWR until the next election resolves.

It's almost time! @todb.hugesuccess.org takes the stage at 11:30 ET at @northsec.io to dissect the three most-used vulnerability scoring systems — CVSS, EPSS & SSVC. He'll be unpacking what they reveal, where they mislead, & how to read between the scores. Tune in: www.youtube.com/watch?v=9IT6...

Lol, put federal employees in trauma to get them to leave, institute hiring freezes across the government, then lament that there’s a lot of trouble getting new blood in. Very smart.

I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓

⚡ New Report⚡ Divining risk isn’t just for mystics. Defenders do it every day — reading signals, spotting patterns, & deciding what really matters. @todb.hugesuccess.org analyzed the scoring systems at the core of modern triage: CVSS, EPSS, & SSVC. See what he found: www.runzero.com/resources/de...

jiminy christmas www.rollingstone.com/politics/pol...

A Black woman who believed in the power of learning. Which amounts to three strikes in Trumpworld.

I really wish we would stop calling that guy RFK. Can we just call him Kennedy or Robert or whatever? I just don’t feel like he’s earned the shorthand.

It's delightful that several people seem to have actually watched the entire movie (Sneakers) through this.

we lost two Super Hornets to the waves and I haven’t seen any discussion of the race or gender of anyone who might be at fault, which means I have a pretty good guess as to the race and gender of everyone who might be at fault

Welp, I never thought I'd side with West Lake in #Austin, but here we are. "Residents of an upscale enclave outside Austin, Texas, learned the hard way what it’s like when a multibillionaire moves into the mansion next door." archive.ph/0JGeh

I wrote up a detailed analysis of TM SGNL, the unofficial Signal app that senior Trump fascists use to organize their war crimes micahflee.com/tm-sgnl-the-...

When I hang out with non-infosec people and the conversation turns to Whiskey Leaks, I’ve had to shift from assure them that it’s just as bad as it sounds to it’s so much worse than it sounds.