NEW from yours truly: Whether its tools from the frontier companies or agentic pen-testing platforms: AI is breaking things faster than anyone can fix them. I talked to a host of security leaders across the industry are racing to figure out what comes next. cyberscoop.com/ai-powered-c...

Big decision on closely watched Supreme Court case weighing whether FCC fines against major telecom companies were illegal finds that the penalties were constitutional and did not violate the firms' rights to a jury trial therecord.media/supreme-cour...

2026 election news: Intelligence agencies are no longer providing the classified threat briefings that gave state election officials insight into foreign and domestic efforts to disrupt voting or influence results, along with guidance on how to counter them www.bloomberg.com/news/newslet...

Do read this at @fedscoop.bsky.social by @mattbracken.bsky.social fedscoop.com/trump-ai-ord...

A Cyber Force budget would require at least $10 billion, new commission report says breakingdefense.com/2026/06/a-cy...

Full statement of Scott Pelley after he's fired from CBS 60 Minutes, detailing the sort of corruption of journalism Bari Weiss has brought to CBS News:

An absolutely insane story from @telliotter.bsky.social about a US government employee who exposed Elon Musk's DOGE for accessing and exfiltrating sensitive data. Days after he went public, he was driving his car and discovered his brakes had been cut.... www.wired.com/story/he-ble...

Top Pentagon cyber policy official Katherine Sutton said recent conflicts have emphasized the importance of cyber, and that the department can’t make old mistakes with AI security. via @timstarks.bsky.social cyberscoop.com/pentagon-cyb...

Seeing a lot of company names flying around as part of this new cohort, but only have Rubrik confirming their participation. If you know of any others, reach out in the DMs/Signal

And here is @derekbjohnson.bsky.social on Trump signing a pared-back EO on AI - cyberscoop.com/donald-trump...

The U.S. government handed a 3-year-old to an abuser to torture him to death, and then his mother was allotted one hour for his funeral.

Microsoft said Monday it has “no intention to pursue action” against security researchers who uncover vulnerabilities and publish their findings, days after an official blog post sparked a backlash from the security community.

NEW: Microsoft is so mad that a researcher published a handful of zero-days, and code to exploit them, that it is threatening legal action and even calling the cops on them. Yes, it's 2026, and one of the richest companies in the world is beefing about the ethics of disclosing bugs.

Michele Spagnuolo allegedly placed multiple trades on the prediction marketplace, abusing internal access to Google’s nonpublic data on the most searched people in 2025. via @mattkapko.com cyberscoop.com/google-secur...

It’s part of a series of examinations at the House Homeland Security Committee that now will include a public event. via @timstarks.bsky.social cyberscoop.com/house-hearin...

House panel poised to hold hearing centered on AI impact on cyber cyberscoop.com/house-hearin... (first in CyberScoop, btw)

Scoop: Central Command is getting reports that military personnel are being targeted using commercially available location data. Few details available, but it’s a sign that the tech industry’s advertising-surveillance complex is having consequences on the battlefield. www.reuters.com/business/med...

Oura has announced a new wearable ring. This is a good time to remind you that Oura receives government demands for users' sensitive data stored on its servers, but won't say how many demands it gets — or how often it gives that data to authorities. From me, last week:

Silent Ransom Group isn’t prolific, but it's demonstrated a knack for attacking the legal services sector with an extraordinary dual use of social engineering and in-person visits to victims’ workstations. via @mattkapko.com cyberscoop.com/fbi-warning-...

Security researchers chained together five separate weaknesses in the popular workflow automation service Zapier that, if first discovered by a malicious actor, could have granted access to millions of user accounts and the systems those accounts connect to. cyberscoop.com/zapier-bug-c...

This detail is presented almost as an afterthought, but it's remarkable: "[T]he executive order that made it to Trump’s desk was closely held and did not go through the interagency process..." www.politico.com/news/2026/05...

New: Top White House cyber policy official Alexandra Seymour is expected to leave her job soon, per two people familiar -> www.nextgov.com/people/2026/...

Anne Keast-Butler, head of the GCHQ, said her agency was developing an artificial intelligence-powered cyber shield as other nations were deploying AI in warfare. via @timstarks.bsky.social cyberscoop.com/gchq-warns-a...

The announcement builds on work from major tech firms in 2024 to combat AI-infused election chicanery. via @timstarks.bsky.social cyberscoop.com/openai-2026-...

Rudd also convened a “confederation” of senior leaders within CYBERCOM who had experience in special operations to conduct an internal study & come up with “quick wins” to implement. “That came through and it was kind of a big nothingburger." therecord.media/rudd-orders-...

A Trump administration memo published last week replaces one from its predecessor, with at least one analyst fearful of potential harmful results. via @timstarks.bsky.social cyberscoop.com/white-house-...

Anthropic: Mythos finds more than 10,000 software flaws in first month by @gregotto.bsky.social cyberscoop.com/anthropic-my... @cyberscoop.bsky.social

This is a good investigation www.nytimes.com/2026/05/24/u...

NEW: In the first piece in a series about the biggest cybersecurity mysteries ever, I looked at what we know about the Shadow Brokers, the group that leaked several NSA hacking tools a decade ago. Even after all this time, their identity remains unknown, despite causing havoc all over the internet.

Those open-source attacks that are all over the place right now? Looks like it's on CISA's radar. cyberscoop.com/cisa-chief-f...

Microsoft’s AI red team lead talked to CyberScoop about the goals behind open sourcing a pair of security tools meant for developers and incident responders. cyberscoop.com/microsoft-ra...

Bad bad bad cyberscoop.com/github-inter...

NEW: Trump Mobile is leaking customers’ personal data, including email addresses and mailing addresses, according to two customers who have seen their own data. The customers, two well known YouTubers, tried to contact Trump Mobile but have not heard back. They say the data is still exposed online.

A researcher who found a repository that leaked on GitHub said it was one of the worst he’s witnessed. via @timstarks.bsky.social cyberscoop.com/cisa-credent...

NEW from @timstarks.bsky.social: Both the House and Senate want answers from CISA on the news that a contractor's credentials were found on the open internet cyberscoop.com/cisa-credent...

You may see stories this week on the Take It Down Act's 48-hour takedown rules for publishing nonconsensual deepfakes kicking in today. But I already wrote that story for you last week and have been talking to a lot of folks (including FTC commissioners) about what enforcement will look like.

NEW from @mattkapko.com -- Microsoft disrupts cybercrime service that abused software verification systems en masse cyberscoop.com/microsoft-di...

The insurrectionist pedophile in question is Andrew Paul Johnson and it is public record that he tried to silence his victim(s) with promises of Trump millions for J6.

In the "open secret" news category, Canada's 🇨🇦 Ontario Provincial Police have been using spyware, but not disclosing it to the public, and even burying legal cases to keep it secret! www.thestar.com/news/ontario...

Another example of critical infrastructure sitting online that shouldn't be:

UFORCE, a London-based company founded by Ukrainians, is looking to make drones in America. via @timstarks.bsky.social cyberscoop.com/former-cisa-...

Move over, Mythos: Open-source AI systems have been finding serious bugs in critical software for months. I wrote about how a recent DARPA challenge sparked a sea change in AI's bug-finding power, and how it could especially help critical infrastructure. www.cybersecuritydive.com/news/ai-vuln...

A giant of cyber security has passed. www.nytimes.com/2026/05/17/o...

Carcinization is real

I’ve dealt with several thousand cyber incidents over the past 5 years, and currently lead a global emerging threat team. Amount of those being GenAI incidents: zero. Amount being foundational causes: every single one.

AI-Hacking Threat Pushes $130 Billion Crypto Sector to the Brink www.bloomberg.com/news/article...

One Secretary of State responded to my request for comment by saying the White House OLC memo "isn't worth the paper it's printed or the electrons it takes to store and transmit 41 pages of fantasy."

Two independent studies found that Anthropic's Claude Mythos Preview and OpenAI's GPT-5.5 have outpaced every trend line researchers were tracking. No one is sure if this is a one-time leap or the new normal. via @gregotto.bsky.social cyberscoop.com/ai-autonomou...

Important to know – this is *not* a bluff by Signal. They will leave Canada if it's required for them to comply with this bill. This is the same position Signal has had for years in regard to Europe. It couldn't be more firm.

The committee held a closed briefing Wednesday with company reps, and more oversight is in the works. via @timstarks.bsky.social cyberscoop.com/house-homela...