I read a lot of reports, and sometimes I see a common thread running through multiple ones. For example, these three: www.crowdstrike.com/en-us/global... www.cncf.io/wp-content/u... www.gitguardian.com/state-of-sec... TL;DR: More credentials == more ways attackers get in.

"Treat every CI runner as a potential breach point TeamPCP’s credential stealer ran inside CI/CD pipelines, dumping process memory and sweeping 50+ filesystem paths for secrets. " Stay safe out there. www.docker.com/blog/defendi...

#BSidesMKE Flynding Your Place Sean Juroviesky

#BSidesMKE Rapid RFID: An Explosive, Live-Action PACS Hacking Workshop! Evan Cook

#BSidesMKE CTRL + ALT + Lead: Rebooting Cyber Culture with Human Skills Amanda Kollmorgan

#BSidesMKE Practical AI Governance for Sentients Qasim Ijaz

#BSidesMKE Bridging the Gap: Leading Cybersecurity Teams Across Generations, Skill Sets, and Stakes Scott Quenneville

I have had this conversation so many times in the past few months that I wrote a blog post on it, and am likely to start submitting a related talk about how "buying tools is not the same as buying outcomes." blog.gitguardian.com/nhi-governan...

#BSidesMKE KEYNOTE: Milwaukee 25L, Cleared for Takeoff? – Wait, Are We Ready to Fly? Josh Mason

#BSidesMKE 2026 has kicked off! I am super excited to be part of this year, the third edition of this event! www.bsidesmke.org

A few weeks ago, I was a panelist at #Chainguard @Assemble 2026. The video was just released www.youtube.com/watch?v=Mj8t...

AI in security isn’t theoretical anymore. Jeff Man and Dwayne McDaniel dig into agentic AI, automation, governance, zero trust, and why human judgment still matters more than ever. 🎧 Listen now: youtu.be/MD1_td8xpLU

I am excited to announce I am going to be speaking at #BSides312 this year!!! Come out in May to this amazing event. bsides312.org

I went to the RSA Conference last week, and it was wild. I am still recovering. Here are some notes: blog.gitguardian.com/rsac-2026/

#RSAC 2026 People and (crime) Markets Lorrie Cranor Director and Bosch Distinguished Professor, Carnegie Mellon University, CyLab Security & Privacy Inst.

In this episode of the Security Repo Podcast, IT Audit & Data Privacy Leader John Wallace joins Dwayne to talk about the importance of data classification, the cornerstone of data protection. youtu.be/zZ4iQMJCGoE

#RSAC 2026 day 3 kicks off with: Unleashing Power, Managing Risk: Security in the AI Era Boaz Gelbird, CSO, Akamai Technologies

#RSAC 2026 The Internet's Crystal Ball: Threat Intel from the Largest Global Network Grant Bourzikas, Chief Security Officer, Cloudflare Blake Darchè, Head of Cloudforce One

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" Closing Keynote: What does the future look like for AI Native Dev with Guy Podjarny, CEO and Founder, Tessl

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" The Transition from DevSecOps to AI Native Security Guy Podjarny, CEO and Founder, Tessl Steve Wilson, Founder and Co-Chair, OWASP GenAI Security Project Casey Ellis, Founder, BugCrowd

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" Fireside Chat with Mitch Ashley, The Futurum Group and Alan Shimel, Techstrong

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" Agentic AI in AI Native Development with host Fernando Montenegro. Analyst, The Futurum Group, Edna Conway, Chief Operations and Resiliency Officer, TPO Group, John Sassar, Founder, 0-1 Labs

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" KEYNOTE: Making nice with AI-lien Minds... and keeping them nice to us From David Brin, Hugo Award Winning Author

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" PANEL: The Near Future Vision for AI NativeDev with host David Brin. Author Panelists James Wickett, Co-founder, DryRun Security, Caroline Wong, Author, The AI Security Handbook and Shannon Lietz, Thirdscore

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" PANEL: From DevSecOps to AI NativeDev with host Shannon Lietz. Co-founder and CEO, Thirdscore Panelists Chenxi Wang, Managing Director, Rain Capital Hasan Yasar, Technical Director, CMU James Wicket, CEO DryRun

#RSAC 2026 Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" Fireside Chat: Supply Chain and Theory of Constraints in AI with host Alan Shimel, CEO, Techstrong Panelists Damon Edwards, Co-Founder and CEO, Attestify and Joshua Corman, Founder, I am The Cavalry

I am thrilled I get to, once again, start my #RSAC adventures by learning from the amazing speakers at the Techstrong Seminar: "AI NativeDev and the Next Evolution of DevOps" path.rsaconference.com/flow/rsac/us...

#BSidesSF 2026 Your AI Agent Has Production Access: Now What? from Jack, from Anthropic

#BSidesSF 2026 Hunting Malicious IDE Extensions: Building Detection at Scale Across Developer Workstations Vinod Tiwari, Story Protocol

#BSidesSF 2026 A blueprint for building a generic authorization service for your organization Ashwin Sidhalinganahalli, Roblox and Fletcher Ramee, Roblox

#BSidesSF 2026 A Worm in the Apple: Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices Avi Lumelsky and Uri Katz

#BSidesSF 2026 How We Red-Teamed Our Own AI Agent: Lessons from Operation Pale Fire Josiah Peedikayil, Block

#BSidesSF 2026 The Great Credential Caper: How to Perform and then Defend Against the (Nearly Impossible) to Defend From Christo Roberts and Dan Hollinger

#BSidesSF 2026 Against the Tyranny of Optimization: On the Stability of Automated Republics Katie Moussouris

#BSidesSF 2026 Breaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows Bhaumik Shah, CEO, SecurifyAI

#BSidesSF 2026 When the supply chain hits a sour note Kennedy Toomey, Datadog

#BSidesSF 2026 The Room Where It Happens (Identity Compromise Edition): Behind the scenes of Okta attack campaigns Julie Agnes Sparks, Datadog

#BSidesSF 2026 Not My Vibe: When AI Coding Agents Go Off the Rails 🤖 Aonan Guan and Zhengyu Liu

#BSidesSF 2026 Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026 Farshad Abasi, Eureka DevSecOps | Forward Security

#BSidesSF 2026 panel I have been looking forward to for a while: State of (Absolute) AppSec Seth Law, Principal Consultant, Redpoint Security Ken Johnson, CTO, DryRun Security Kevin McDermott, Head of Security, Superhuman Astha Singhal, Director of Sec, Netflix Clint Gibler, tl;dr sec

#BSidesSF 2026 opening keynote: Let's Do the Timewarp Again! A Look Back to Move Forward from Anna Westelius from Netflix

Super excited that #BSidesSF 2026 is here!!! Opening remarks

And so it begins. Here all week. Hit me up.

"Although the Administration believes that training of AI models on copyrighted material does not violate copyright laws, it acknowledges arguments to the contrary exist and therefore supports allowing the Courts to resolve this issue." Ummmm.....what? www.whitehouse.gov/wp-content/u...

API keys and JSON tokens may be familiar, but are they the best path forward? In this episode, Talia Smiley shares how SilverSight built around just-in-time access, better IAM habits, and scalable security. 🎧 Listen now: youtu.be/OmTw7yWMgTE

#Chainguard #Assemble 2026 Cracking the Compliance Code: Building Trust for Government-Grade Cloud Security Quincy Castro, Chainguard Matt Conner, Second Front Rob Gil, Okta Vijaya Ganesh Varadaraja Muthukumar, Iron Mountain Katie Norton, IDC

#Chainguard #Assemble 2026 Securing the Next Moon Age: Automated Compliance Powers the Next Giant Leap Collin Estes, CIO / NASA Chief Architect, MRI Technologies

#Chainguard #Assemble 2026 Developer Productivity Without Compromise Brandon Heard, Technical Leader (Cloud / Infrastructure), PeopleTec, Inc.

#Chainguard #Assemble 2026 Why Golden Images Still Matter Ayesha Bhutto, Sr Technical Success Manager, Chainguard Molly Soja, Lead Security Engineer, KKR

34% surge in new secrets detected in public GitHub commits in 2025 vs 2024 data. The state of secrets sprawl is, unfortunately, not improving. www.gitguardian.com/state-of-sec... Still, proud to have worked on this report and glad we can share it with the world.