I'm putting together a webinar on modern vulnerability management and I'm REALLY trying to drive a point home So naturally, I bought 3 old Sonicwall firewalls

yeah sure, okay

Starting to get some coverage from the media on the Destroyed by Breach site! www.cybrsecmedia.com/breaches-don...

This is _the_ most underrated cybersecurity project. Awesome to have a website instead of the spreadsheet 🥳

We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted.

Big news: Sean Plankey has withdrawn from consideration to be Trump's CISA director after his nomination languished for more than a year amid bipartisan holds in the Senate. CISA hasn't had a permanent director since Trump retook office. www.politico.com/news/2026/04...

I am thrilled to announce that my Destroyed by Breach research project finally has a proper website! destroyedbybreach.com

🚨 BREAKING: Vercel has been breached. A threat actor has listed their customers' data, source code, databases, and keys up for sale. Vercel has also publicly disclosed they've identified a security incident involving unauthorized access to their internal systems.

Some thoughts on the Vercel/Context breach turducken www.defendersinitiative.com/p/breach-les...

Notepad sheds Copilot from toolbar as Microsoft gives subtlety a try

Saturday morning vibes Making brunch in the kitchen in utter silence like a psycho No music, no YouTube, no audiobook, no podcast

Monday #RSAC sessions with CyberCanon Committee Members and Authors: 🤖 Caroline Wong - The Foundations of AI 👁️ Adrian Sanabria - A Failure Is a Terrible Thing to Waste: The Case for Breach Transparency 🪖 Nicole Perlroth - Resilient Infrastructure as National Defense (part 1/3)

Vulnerability management is in some trouble and I have thoughts on how to deal with it. TL;DR - exploitation is happening too fast for traditional vuln mgmt to be effective. open.substack.com/pub/defendersi…

Saturday repair project time! My partners’ thousands of hours in Rocket League have taken their toll on these poor PS5 controllers.

This Italian hacking magazine needs to calm down

✍️ 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽𝗽𝗲𝗱 🪖 We have back-to-back reviews from Larry Pesce. Today, Larry offers his insights on Chris Miller's widely well-regarded book, 𝘾𝙝𝙞𝙥 𝙒𝙖𝙧, from a cyber pro's perspective: 📝 You'll want to read this review cybercanon.org/chip-war-the... #CybersecurityBooks | @haxorthematrix

New: Fintech firm Marquis, used by hundreds of banks & credit unions across the U.S., told its customers that it plans to seek compensation from its firewall provider SonicWall after blaming the company for a breach that allowed hackers to steal tons of people's personal and financial data & SSNs.

@erratarob.bsky.social I imagine they don't even realize that they're reusing a security tool name which makes me feel old www.databricks.com/blog/announc...

A joke for the history buffs: Germany’s satirical newspaper @der-postillon.com titles: “Vienna Academy of the Arts offers Trump admission as a student — They don’t want to get blamed again“

Attack surface management used to mean “outside the firewall.” Now it’s everything: cloud, SaaS, IoT, shadow IT... In this Enterprise Security Weekly webcast, @hdm.io + @todb.hugesuccess.org join @sawaba.bsky.social to talk how to find gaps before attackers do. ▶️ www.runzero.com/resources/as...

Is *If You Give a Mouse a Cookie* about people with ADHD? #RandomThoughts

It's that time of year again. The #WinterSolstice. The day the only hand on my annual clock points straight up, at 12:00

I'm gonna be live with @JohnHammond, talking about Cyber Deception in 25 minutes! www.youtube.com/watch?v=Zn2X...

NSF is about to dismantle NCAR at Russell Vought's direction to protect the fossil fuel industry. It's hard to communicate just how much NCAR does, so let's take a look: I've never worked at NCAR, and I've worked with NCAR researchers once ever. What scientific discoveries has NCAR made possible? 👇

As someone not with NCAR, I use NCAR-based software everyday to help identify and track regions of excessive precipitation to help NWS forecasters protect lives and property. NCAR is extremely valuable and we need them.

0️⃣🔐 𝗖𝘆𝗯𝗲𝗿𝗖𝗮𝗻𝗼𝗻 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽 0️⃣🔐 This week, Adrian Sanabria provides his perspective on George Finney's existing Hall of Famer, 𝙋𝙧𝙤𝙟𝙚𝙘𝙩 𝙕𝙚𝙧𝙤 𝙏𝙧𝙪𝙨𝙩. 🏆 Review: cybercanon.org/project-zero... 🛍️ Support our mission: amzn.to/3XspBon #CybersecurityBooks #CyberCanonHallofFame #ZeroTrust @sawaba.bsky.social

I'm baffled every time someone claims attackers are getting more advanced and sophisticated. They don't need to be, because their targets aren't getting more advanced or sophisticated. Adversaries aren't about doing extra work they don't need to do to achieve their goals.

if you missed the recent interview of Rob Reiner by Terry Gross, it was a good one.  "Rob Reiner's 'Spinal Tap' Still Goes To 11" Fresh Air

Operation Bluebird wants to relaunch “Twitter,” says Musk abandoned the name and logo arstechnica.com/information-...

Exposure is everywhere now — cloud, SaaS, IoT, shadow IT, unmanaged vendors. Replay the SC Media webcast with @sawaba.bsky.social, @hdm.io & @todb.hugesuccess.org to learn why continuous discovery matters & how attackers exploit what you can’t see. 👉 www.runzero.com/resources/as...

💡𝗧𝘂𝗲𝘀𝗱𝗮𝘆, 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆💡 “Antifragile isn’t a cybersecurity book, but it might be one of the most important books for cybersecurity leaders to read." --Walt Powell in his review of Nassim Nicholas Taleb's 𝘼𝙣𝙩𝙞𝙛𝙧𝙖𝙜𝙞𝙡𝙚, a Hall of Fame nominee! 📝Review: cybercanon.org/antifragile-... (1/2..)

So proud of my Dad. The pinnacle of his engineering career, he’s been working on ITER for many, many years now and it just made the cover of National Geographic!

📺 Live webcast Dec 3 with SC Media! Your attack surface doesn’t end at the firewall. Join @hdm.io, @todb.hugesuccess.org, and @sawaba.bsky.social to learn how continuous discovery + attack path mapping keeps you ahead. 👉 www.scworld.com/cybercast/at...

On a road trip to Savannah, we stopped just north of Columbia at a roadside diner. I spotted “raw fries” on the menu and am intrigued. Surely they’re not going to bring raw potatoes over??? I order it and the waitress asks “floppy or crispy?” I request crispy. This is what hit the table.

At our Committee Review Meeting, Dr. Georgianna (George) Shea and Adrian Sanabria led discussions of 2 HoF candidates. 🏭 George discussed 𝘾𝙤𝙪𝙣𝙩𝙚𝙧𝙞𝙣𝙜 𝘾𝙮𝙗𝙚𝙧 𝙎𝙖𝙗𝙤𝙩𝙖𝙜𝙚 by Andrew Bochman and Sarah Freeman 👉 tinyurl.com/4pdbrufk 🏗️ Adrian shared Ross Haleliuk's 𝘾𝙮𝙗𝙚𝙧 𝙛𝙤𝙧 𝘽𝙪𝙞𝙡𝙙𝙚𝙧𝙨 👉 tinyurl.com/2envxjx9

I have found the best pigeon.

I know absolutely nothing about anime or manga, but really enjoyed this latest story by @lorenzofb.bsky.social; it's fascinating that this comic from 30 years ago — predating the modern Web — got so much right about cybersecurity today.

there are no llms online today, everything is faceplanted through cloudflare, which makes it a perfect day to slip out the worst possible updates, rug-pulls, and files am i right? qualcomm arduino just pushed a privacy policy and terms qualcomm-rewrite TODAY...

The 404 Media Podcast is up! This week - the Epstein email dump is a mess - contractor paying randos on LinkedIn $300 to physically track immigrants - subscribers-only: a new code of conduct in the adult industry Watch here: youtu.be/_6tVI4jh__Y

Starlink on a flight is indistinguishable from solid WiFi at home. It is free on this United flight and I’m streaming YouRube at 1080p while doing other work

Cloudflare wasn’t down, it was just resting My pings came back, they just took 14,400 seconds to do so

A government contractor is recruiting randos on LinkedIn to physically track undocumented immigrants for ICE. $300 per person found www.404media.co/contractor-p...

What I hear when I hear modern country music youtu.be/lR2pslqKNP8?si…

Your attack surface is sprawling & full of blind spots. 🎥 On Dec 3 at 2 PM ET, SC Media brings together @hdm.io, @todb.hugesuccess.org, & @sawaba.bsky.social to reveal how to operationalize attack surface management without losing your mind. 👉 Register here: www.scworld.com/cybercast/at...

this is cool and people saying "just buy a whistle on amazon" did not read the story, have lost the light in their hearts, and will not enter heaven with that attitude www.404media.co/the-latest-d...

Every time someone’s like “put that in the louvre,” my head now goes “and then steal it from the louvre, the security password is louvre”

The dude that bankrolled the movie Half Baked acquired a controlling interest in NSO Group Doesn’t look like he’s ever ventured outside entertainment before, I don’t see any obvious connection or rationale (though I haven’t dug very deep) This was not on my 2025 bingo card

Trump wants to erase any "negative" content from educational sites at National Parks. This week, @samleecole.bsky.social speaks to a group of data preservationists behind "Save Our Signs" who want to save the real history of parks before the administration erases it.

My partner nailed it - this is what AI chatbots feel like youtu.be/ptz4vng6HX0