2026 DBIR sneak peek: “Water plays an increasingly significant role in [ransomware] attacks. In 2024, 100% of recorded ransomware events were attributed to threat actors that drink water”

What is an “AI-enabled Ransomware”?

i'm inventing a new kind of roguelike where instead of poker, slot machines or coin flipping you play as a little guy with a sword

THE MEME IS REAL

I did a long, in depth podcast with Shannon Lantzy, you can listen at https://www.shannonlantzy.com/post/from-microsoft-s-crisis-to-medical-device-revolution-the-evolution-of-threat-modeling

Putting the whole “chat bots are bad for your psyche” thing aside, this is brilliant experiment design. www.businessinsider.com/reddit-aita-...

As a Brazilian-American, my feelings about 9/11 are now very conflicted.

This one did make the DBIR Breach Hall Of Fame 2019. First and only breach where the threat actor was outside planet Earth. github.com/vz-risk/VCDB...

Now available on-demand. What Gets Measured, Gets Done: A National Dashboard for Cybersecurity www.youtube.com/watch?v=yBeV... with lumanaries in the cyber measurement field. #cybersecurity #cybermetrics #threatintelligence

If AI models were able to do all the things people claim they do, the foundational model companies would be raking in Trillions from the additional output and they would keep the AI itself under lock and key. It’s like buying a “how to get rich” course off the internet.

PHENOMENAL work by @censys.bsky.social w/special shout out to one of the best cyber researchers out there (Himaja, who is smartly not on social media). They discovered sophisticated proxy infra designed for long-term espionage operations, & most victims probably have no idea they're compromised.

Are there any good write ups on the Salesforce data exfils that have been happening? Did ShinyHunters create a mass credential dump tool just like the one we had last year with Snowflake?

It seems like berries really are the LLM model’s weakness.

Rare glimpse of the 2026 DBIR editorial document: “Given the prevalence of file transfer and management servers in 2023 and perimeter devices in 2024, you may ask yourself which one of those led the vulnerability exploitation vector in 2025.” “The answer is, of course, yes.”

Oh no! Terrible week for it.

Trump subiu no telhado. (For all the PT-BR idiom enjoyers out there)

I laughed so hard I thought I was going to cough up an organ. Every line is gold.

• What these signals might reveal about attacker workflows • How defenders can use this information to act early Read the full research report here: www.greynoise.io/resources/ea... Always happy to discuss or answer questions about the data — just drop a line at [email protected].

Three high-profile former CISA employees have joined @istorg.bsky.social to keep working on Secure by Design and figure out a stable future for the CVE program. www.politico.com/newsletters/...

Saving this to read tomorrow.

I’m partial to “Habsburg models” to describe this model - en.m.wikipedia.org/wiki/House_o...

New episode of DISCARDED featuring the great @alexcp.bsky.social discussing the 2025 Verizon DBIR! Join us for hot takes, insights into the current threat landscape, interesting findings about vulnerability exploitation and third-party risk, and so much more. podcasts.apple.com/us/podcast/d...

Dan is a brilliant writer. This summarizes my feelings about Generative AI in general, and the next time someone asks me if I will be using Generative AI in my work, I’ll just send them this link.

On the other hand, pro-AI people talk about it like they’re trying to unload a shitty used car. “Does it always work right? Absolutely not! Do you need to take extra annoying steps to receive worse results? Of course! But that’s the real beauty of it…”

as is tradition, I just published my commentary on this year’s Verizon Data Breach Investigations Report: kellyshortridge.com/blog/posts/s... as ever, I mix philosophy, market analysis, and lazy math to guide our #cybersecurity sensemaking. thx @alexcp.bsky.social for the advance copy 🖤

#TenableResearch contributed to the 2025 #VerizonBusiness 2025 Data Breach Investigations Report (#DBIR) with data on the 17 widely exploited edge CVEs. Find out where patching still lags. Read our recap here: http://spr.ly/633272Z599

DBIR authors 1 x AGI 0 (It obviously does nothing on most of them but I found this result super amusing)

We're in 👀 competition with the DBIR but it is pre-RSAC "report season". We took a look at "resurgent" vulns — CVEs published between 2010-2020 that cause real problems (and sometimes return from the dead like zombies) now. I'll be dropping a larger thread […] [Original post on mastodon.social]

lol. Lmao even.

The 2025 #DBIR is out! Go get it. Verizon.com/dbir

New @censys.bsky.social video with me and the brilliant Ariana Mirian talking about finding various services on weird ports. youtu.be/qr6Xdl9WfLM?...

I'm excited to announce that I'll be joining Cybersecurity Dive as their senior reporter on April 21. My exact beat is TBD, but I'll still be covering many of the same stories. I'll be focusing on news that decision-makers need to do their jobs. Can't wait to get started! www.cybersecuritydive.com

I know it is kinda silly we all continue to work as if nothing was going on but the 2025 Verizon DBIR is going to be out in a couple of weeks, so some publicity is warranted. We have worked so hard on this one and I believe this is the best one by far I’ve ever been a part of. verizon.com/dbir

I want out Mr Bones’ Wild Ride.

I know it is kinda silly we all continue to work as if nothing was going on but the 2025 Verizon DBIR is going to be out in a couple of weeks, so some publicity is warranted. We have worked so hard on this one and I believe this is the best one by far I’ve ever been a part of. verizon.com/dbir

This week, four buddies, no problems! Katie Moussouris is joining the show 🌺 Set your alarms ⏰ Spotify: bit.ly/3DH5wEO Apple: bit.ly/3budprob YouTube: bit.ly/TBP-YT @k8em0.bsky.social @craiu.bsky.social @jags.bsky.social

It's been a mystery what happened to Morgan Marquis-Boire when he disappeared yrs ago after being accused of rape. Turns out he secretly co-founded Unciphered, which cracks crypto wallets for owners who lost passwords. He used a fake name to hide his identity from employees until they unmasked him

Disappeared: Mahmood Khalil Disappeared count: 1 Khalil was a Columbia University graduate student, US permanent resident, and husband of a US citizen detained by order of the White House on 3/9/2025. He spoke out against the Israeli government, which is believed to be the reason he was targeted.

its amazing how chatgpt knows everything about subjects I know nothing about, but is wrong like 40% of the time in things im an expert on. not going to think about this any further

Two stories published Friday reporting that Trump admin had ordered US Cyber Command and CISA to "stand down" on their work to detect/counter Russian cyber threats. But new info has come out to contradict them. I dug into what we know and don't know. www.zetter-zeroday.com/did-trump-ad...

Hi y'all! If you or anyone you know is interested, I've got an opening for a Cyber Risk Engineer (think someone who helps underwriters understand cyber security risks) in Europe! libertymutual1.avature.net/LSMCareers/F... 1/3

Romney / Cheney 2028

Can someone please do a wellness check on the “imposing cost” folks at Twitter who were confident this administration would institute a “hack back” policy?

EXCLUSIVE: Defense Secretary Pete Hegseth last week ordered U.S. Cyber Command to stand down from all planning against Russia, including offensive digital actions. On @therecordmedia.bsky.social therecord.media/hegseth-orde...

📢 GreyNoise’s 2025 Mass Internet Exploitation Report is here. 40% of exploited CVEs were 4+ years old — attackers relentlessly targeted new and old CVEs in 2024. Are you tracking live exploitation? 📥 Report: www.greynoise.io/blog/2025-ma...

Thankfully, the DBIR team has no shame and making terrible jokes is part of the job. (Great research, btw!)