Vulnerability management is in some trouble and I have thoughts on how to deal with it. TL;DR - exploitation is happening too fast for traditional vuln mgmt to be effective. open.substack.com/pub/defendersi…

Saturday repair project time! My partners’ thousands of hours in Rocket League have taken their toll on these poor PS5 controllers.

This Italian hacking magazine needs to calm down

✍️ 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽𝗽𝗲𝗱 🪖 We have back-to-back reviews from Larry Pesce. Today, Larry offers his insights on Chris Miller's widely well-regarded book, 𝘾𝙝𝙞𝙥 𝙒𝙖𝙧, from a cyber pro's perspective: 📝 You'll want to read this review cybercanon.org/chip-war-the... #CybersecurityBooks | @haxorthematrix

New: Fintech firm Marquis, used by hundreds of banks & credit unions across the U.S., told its customers that it plans to seek compensation from its firewall provider SonicWall after blaming the company for a breach that allowed hackers to steal tons of people's personal and financial data & SSNs.

@erratarob.bsky.social I imagine they don't even realize that they're reusing a security tool name which makes me feel old www.databricks.com/blog/announc...

A joke for the history buffs: Germany’s satirical newspaper @der-postillon.com titles: “Vienna Academy of the Arts offers Trump admission as a student — They don’t want to get blamed again“

Attack surface management used to mean “outside the firewall.” Now it’s everything: cloud, SaaS, IoT, shadow IT... In this Enterprise Security Weekly webcast, @hdm.io + @todb.hugesuccess.org join @sawaba.bsky.social to talk how to find gaps before attackers do. ▶️ www.runzero.com/resources/as...

Is *If You Give a Mouse a Cookie* about people with ADHD? #RandomThoughts

It's that time of year again. The #WinterSolstice. The day the only hand on my annual clock points straight up, at 12:00

I'm gonna be live with @JohnHammond, talking about Cyber Deception in 25 minutes! www.youtube.com/watch?v=Zn2X...

NSF is about to dismantle NCAR at Russell Vought's direction to protect the fossil fuel industry. It's hard to communicate just how much NCAR does, so let's take a look: I've never worked at NCAR, and I've worked with NCAR researchers once ever. What scientific discoveries has NCAR made possible? 👇

As someone not with NCAR, I use NCAR-based software everyday to help identify and track regions of excessive precipitation to help NWS forecasters protect lives and property. NCAR is extremely valuable and we need them.

0️⃣🔐 𝗖𝘆𝗯𝗲𝗿𝗖𝗮𝗻𝗼𝗻 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽 0️⃣🔐 This week, Adrian Sanabria provides his perspective on George Finney's existing Hall of Famer, 𝙋𝙧𝙤𝙟𝙚𝙘𝙩 𝙕𝙚𝙧𝙤 𝙏𝙧𝙪𝙨𝙩. 🏆 Review: cybercanon.org/project-zero... 🛍️ Support our mission: amzn.to/3XspBon #CybersecurityBooks #CyberCanonHallofFame #ZeroTrust @sawaba.bsky.social

I'm baffled every time someone claims attackers are getting more advanced and sophisticated. They don't need to be, because their targets aren't getting more advanced or sophisticated. Adversaries aren't about doing extra work they don't need to do to achieve their goals.

if you missed the recent interview of Rob Reiner by Terry Gross, it was a good one.  "Rob Reiner's 'Spinal Tap' Still Goes To 11" Fresh Air

Operation Bluebird wants to relaunch “Twitter,” says Musk abandoned the name and logo arstechnica.com/information-...

Exposure is everywhere now — cloud, SaaS, IoT, shadow IT, unmanaged vendors. Replay the SC Media webcast with @sawaba.bsky.social, @hdm.io & @todb.hugesuccess.org to learn why continuous discovery matters & how attackers exploit what you can’t see. 👉 www.runzero.com/resources/as...

💡𝗧𝘂𝗲𝘀𝗱𝗮𝘆, 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆💡 “Antifragile isn’t a cybersecurity book, but it might be one of the most important books for cybersecurity leaders to read." --Walt Powell in his review of Nassim Nicholas Taleb's 𝘼𝙣𝙩𝙞𝙛𝙧𝙖𝙜𝙞𝙡𝙚, a Hall of Fame nominee! 📝Review: cybercanon.org/antifragile-... (1/2..)

So proud of my Dad. The pinnacle of his engineering career, he’s been working on ITER for many, many years now and it just made the cover of National Geographic!

📺 Live webcast Dec 3 with SC Media! Your attack surface doesn’t end at the firewall. Join @hdm.io, @todb.hugesuccess.org, and @sawaba.bsky.social to learn how continuous discovery + attack path mapping keeps you ahead. 👉 www.scworld.com/cybercast/at...

On a road trip to Savannah, we stopped just north of Columbia at a roadside diner. I spotted “raw fries” on the menu and am intrigued. Surely they’re not going to bring raw potatoes over??? I order it and the waitress asks “floppy or crispy?” I request crispy. This is what hit the table.

At our Committee Review Meeting, Dr. Georgianna (George) Shea and Adrian Sanabria led discussions of 2 HoF candidates. 🏭 George discussed 𝘾𝙤𝙪𝙣𝙩𝙚𝙧𝙞𝙣𝙜 𝘾𝙮𝙗𝙚𝙧 𝙎𝙖𝙗𝙤𝙩𝙖𝙜𝙚 by Andrew Bochman and Sarah Freeman 👉 tinyurl.com/4pdbrufk 🏗️ Adrian shared Ross Haleliuk's 𝘾𝙮𝙗𝙚𝙧 𝙛𝙤𝙧 𝘽𝙪𝙞𝙡𝙙𝙚𝙧𝙨 👉 tinyurl.com/2envxjx9

I have found the best pigeon.

I know absolutely nothing about anime or manga, but really enjoyed this latest story by @lorenzofb.bsky.social; it's fascinating that this comic from 30 years ago — predating the modern Web — got so much right about cybersecurity today.

there are no llms online today, everything is faceplanted through cloudflare, which makes it a perfect day to slip out the worst possible updates, rug-pulls, and files am i right? qualcomm arduino just pushed a privacy policy and terms qualcomm-rewrite TODAY...

The 404 Media Podcast is up! This week - the Epstein email dump is a mess - contractor paying randos on LinkedIn $300 to physically track immigrants - subscribers-only: a new code of conduct in the adult industry Watch here: youtu.be/_6tVI4jh__Y

Starlink on a flight is indistinguishable from solid WiFi at home. It is free on this United flight and I’m streaming YouRube at 1080p while doing other work

Cloudflare wasn’t down, it was just resting My pings came back, they just took 14,400 seconds to do so

A government contractor is recruiting randos on LinkedIn to physically track undocumented immigrants for ICE. $300 per person found www.404media.co/contractor-p...

What I hear when I hear modern country music youtu.be/lR2pslqKNP8?si…

Your attack surface is sprawling & full of blind spots. 🎥 On Dec 3 at 2 PM ET, SC Media brings together @hdm.io, @todb.hugesuccess.org, & @sawaba.bsky.social to reveal how to operationalize attack surface management without losing your mind. 👉 Register here: www.scworld.com/cybercast/at...

this is cool and people saying "just buy a whistle on amazon" did not read the story, have lost the light in their hearts, and will not enter heaven with that attitude www.404media.co/the-latest-d...

Every time someone’s like “put that in the louvre,” my head now goes “and then steal it from the louvre, the security password is louvre”

The dude that bankrolled the movie Half Baked acquired a controlling interest in NSO Group Doesn’t look like he’s ever ventured outside entertainment before, I don’t see any obvious connection or rationale (though I haven’t dug very deep) This was not on my 2025 bingo card

Trump wants to erase any "negative" content from educational sites at National Parks. This week, @samleecole.bsky.social speaks to a group of data preservationists behind "Save Our Signs" who want to save the real history of parks before the administration erases it.

My partner nailed it - this is what AI chatbots feel like youtu.be/ptz4vng6HX0

There's some really big caveats to this. A thread.

I’m so relieved to hear this. It’s not just hyperscalers either. Every time I build even the simplest things these days, it feels like trying to build a lego set while a bunch of monkeys do their best to tear it apart.

Yes! Most people's experience with AI is not "a very tedious, data-heavy, repetitive process that if automated could vastly improve the quality of my work and job." It's "mom sending me fake videos of riots in her neighborhood, she's scared to go outside" or "trump shits on protestors."

Remember that heist at the Louvre a few weeks back? Some details about the state of tech debt and cybersecurity at the Louvre have been made public and I shared some thoughts. www.linkedin.com/posts/adrian...

You know how cybersecurity is a market for lemons? This creates an opportunity for lemonade makers. I share some thoughts on why and how this happens. open.substack.com/pub/defender...

“a new study… showed that everyone was bad at estimating their own performance” This is old news. Dr. Dunning already came to this conclusion before GenAI was a thing. Later in his career, he came to believe that this was more of a scale, and everyone was somewhere on it.

When human police are abolished there will be only one law on the mean streets: Horse Cop

Never again will an Apple Watch tell me to stand up when I’m already standing up. New Pebble and old Pebbles: back in business! thanks @ericmigi.com

Can’t think of a better way to spend Halloween than to set up old video games at my favorite bar and teach younger generations to blow on cartridges (I do this once a month at Crafty Bastard if you’re in the Knoxville area) And spend time with my trivia team, spending our winnings

The Pebble is baaaaaack!!! Already doing a better job than my Apple Watch and I've had it on for 5 hours.