happy pride 💕

This episode explores representation in CTI, the impact of women leaders at Mandiant, and why diverse perspectives lead to better intelligence analysis. Really thoughtful conversation from the team. Listen here: www.youtube.com/watch?v=Aqqj... #ThreatIntelligence #WomenInCybersecurity

If you’d told me 15 years ago that in 2026 Donald Trump would be the Republican president and that I would be reading papal encyclicals muttering “fuck yeah, this Pope really gets it,” I would have laughed in your face. And yet here we are.

Security researcher Gadi Evron has open-sourced Honeyslop, a canary to detect and triage AI-hallucinated bug reports github.com/gadievron/ho...

New dataset published: this is the audio + transcripts of AI-generated podcasts using NotebookLM to analyse how it "translated" source documents from different times and cultures. My favourites are the 20 podcasts generated from an empty PDF. The paper about it is in press. doi.org/10.18710/RNT...

28 years ago today, 7 members of the hacking group L0pht Heavy Industries told the U.S. Senate they could "shut down the internet in 30 minutes."

www.faz.net/premium/digi... I wrote a FAZ guest article.

If you've been laid off from a cyber threat intel position and would like to come to @SLEUTHCON this year, please reach out.

France arrested a cybersecurity executive for allegedly buying child sexual abuse material from the dark web Filigran (OpenCTI) founder Samuel Hassine is allegedly one of the 232 suspects identified by police as buyers on the "Alice with Violence CP" portal www.lelibrepenseur.org/samuel-hassi...

Canada turned the Niagara Falls blue for the European Union! They also played Ode to Joy, the EU's anthem, an early celebration of Europe Day which is celebrated tomorrow. Europe & Canada, we are family ❤️ Join eYou the European social media similar to threads here: play.google.com/store/apps/d...

On the 21st May, a wake for Thomas Fischer @fvt.bsky.social has been organised in London to remember, share and celebrate his life. Please only claim an attending ticket if you can attend, there is also a live stream if you wish to pay your respect from afar. www.eventbrite.co.uk/e/thomas-fis...

This cracks me up because kids just think up these things so brilliantly, but also this proves that age verification laws are complete dogshit and don't even work.

Ransomware resource repo (say that three times fast) from an experienced Team Cymru threat intel analyst: github.com/BushidoUK/Aw...

posting for academic purposes

ICYMI: Beyond 'Actionable': How @heinbrian.bsky.social and James Shank Want CTI to Actually Hurt Adversaries www.dnsfilter.com/blog/cti-bri... cc @gate15.bsky.social #cybersecurity

copy.fail THANKS, I HATE IT.

Okay, important question. Is Claude Mythos pronounced: - MY-thos, or -MYTH-os? @masnick.com @pfrazee.com @hailey.at @heinbrian.bsky.social help me out? And while we're at it... Kubernetes? I had a hard enough time with Azure and SANS, tbh.

Dropping 0day is making a comeback! (Not really but this is another disclosure drama, albeit lower stakes than BlueHammer, etc) Disclosure: shittrix.moksha.dk Response: xcp-ng.org/forum/post/1... Patches w/shade: xenbits.xen.org/xsa/advisory...

Glad to see my friend @heinbrian.bsky.social speaking on 'How NOT to Be Your Adversary’s Best Friend,' FIRST CTI 2026: 'cyber threat intelligence should be measured by impact, not by report volume, IOC counts, or other vanity metrics' youtu.be/SOi--TSyF3c?... #cybersecurity @gate15.bsky.social

Ticketmaster Canada will no longer allow tickets for concerts, sports, and other live events in Ontario to be resold above their original price under Ontario’s newly passed Bill 97.

Excellent article by Joe Slowik. “Determining mechanisms to arrive at “good enough” information sooner, rather than “perfect” information later, thus becomes an acute need for modern security operations.” Every day of the week.

If bsky can't stay up I may be forced to read LinkedIn please help me

I too aspire to have an API limit and for you to either pay me more to keep working, or wait until after I've had a nap

Happy Friday! Here's hoping Viktor Orban has a shit weekend!

I went back to capture what the astronauts said in full when the clock was stopped at T-10 minutes and they were asked if they were go for launch: This is Victor. We are going for our families. This is Christina. We are going for our teammates. This is Jeremy. We are going for all humanity.

Yeah that’s cool

The CertGraveyard was created in 2025, but never received a proper introduction. We track abused code-signing certificates. When I created the site, we had 600 entries and now we have 2,250. See the blogpost below for a full overview. 1/3

Die Einstürzenden Neubauten spielen morgen online ein kostenloses Livekonzert. Los geht's um 14 Uhr. Zu hören auf ihren Kanälen in SoMe und auf neubauten.org/de/

Die Einstürzen Neubauten spielen am 1.4. ein kostenloses Online-Konzert auf ihrem YouTube-Kanal. Nicht, dass Ihr sagt, Ihr hättet das nicht gewusst! youtube.com/@neubautenorg

"Why did you decide to devote your life to AI? I just saw so much suffering in the world that needed to be automated." theonion.com/the-onions-e...

SLEUTHCON 2026 is coming! 🐍🐻🌲 Registration is open and our CFP is live! We're back on June 5th, in-person in Arlington, VA and virtually. CFP closes April 17th + tickets will sell out! sleuthcon.com #SLEUTHCON #SLEUTHCON2026 #Cybercrime

Outstanding documentary here by on the dangers of location data tracking. It's in german/french, 60 mins. by @maxzierer.bsky.social @rebeccacie.bsky.social @cutterkom.bsky.social www.arte.tv/de/videos/12...

"Was Europa braucht, ist ein DOGE" Timotheus Höttges, CEO Deutsche Telekom newrepublic.com/post/207857/...

RationalEdge REDS now supports #APK analysis for #Android #malware, along with LLM-assisted code explainability. If you're looking for a malware repository/analysis platform, reach at rationaledge.io MoRE to come @rationaledge.bsky.social #ThreatResearch #ThreatIntel #CTI #ReverseEngineering 1/3

Heading to Munich for #FIRSTCTI26 ❓ Don’t miss the discounted room block—available through March 24th. Click the link to book your stay now ➡️🔗 go.first.org/1OpsO

Abstract Security published a report on the IAB market... and they made it look like one of those underground forums pretty clever www.abstract.security/reports/pric...

Ladies and gentlemen... the weekend. (also: you are important and are not alone 🧡)

My generation (late 70s/early 80s) have managed to hit on both the good (man those late 90's look good now) and the "WTF ARE WE DOING???" (plague, several financial crises, forever war, now stagflation 2.0). Fun times.

Like a blind squirrel, hacktivists occassionally find a nut - but generally speaking these "low skilled threat actors" (h/t @ronfab.bsky.social) are a mix of opportunism and unproven claims. We have one (major) incident right now, buta long-tail of bluster and bull-shit. Thoughts here:

This is Super Mario's origin story

Do I know anyone with access to TGStat / Telemetr / Telegram Analytics who might be able to help me find some deleted / edited posts?

macOS already ships age verification

Short newsletter item about one mistake from disinfo operations #Doppelgänger that makes it possible to tie together >100 domains buttondown.com/readwrite/ar...

If you're following the situation in Iran, this one is of interest to you. We can prove how the regime in Iran is using facial recognition software to surveil its citizens. (Gift link) www.spiegel.de/ausland/iran...

Looking to make some extra cash using your #BugBounty / #ThreatHunting skills? Report security issues and #zerodays through through our website today and maybe make some money- https://linktr.ee/dprkcert #BTC #0day

Our glorious IT workers are excited to lean more about the A and I at [un]prompted this week! #OpenToWork https://unpromptedcon.org/

Cheryl Biswas: From Political Science Major to Cyber Threat Intelligence