+1 million and if you don’t have time to read it, check out this podcast x.com/historyhit/s...

evacide@evacide.bsky.social · 7mo ago

As the year comes to an end, may I interest you in my favorite book of 2025? It's @adapalmer.bsky.social's Inventing the Renaissance: press.uchicago.edu/ucp/books/bo... You think you don't need a 700+ page romp through mostly Renaissance Italy, but you do.

Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software. Just fuck you. Fuck you all. I can't remember the last time I was this angry.

Pleased to lend my support behind this important effort… let’s get the right advice out there for folks!

Bob Lord@boblord.bsky.social · 8mo ago

📢 Announcing hacklore.org 📢 It’s time to retire outdated cyber advice! More than 80 cybersecurity veterans have signed an open letter urging a shift from folklore to guidance that actually helps people avoid the most common attacks. 🔐 Blog: medium.com/@boblord/let... Site: www.hacklore.org

Shared some thoughts on Big Sleep, Code Mender and ffmpeg. X-posting to X because I’m not good at social media. 😎 x.com/argvee/statu...

Heather Adkins - Ꜻ - Spes consilium non est on X: "We’re excited to see the security and OSS communities engage on vulnerability disclosure in light of new AI technologies that we believe will enable both defenders and attackers alike. Existing and emerging norms around disclosure are important debates, and we’ve noted the" / X

We’re excited to see the security and OSS communities engage on vulnerability disclosure in light of new AI technologies that we believe will enable both defenders and attackers alike. Existing and emerging norms around disclosure are important debates, and we’ve noted the

x.com

Stop what you’re doing and read this… don’t get surprised by what’s coming. It’s time to rethink everything you’re doing on cyber defense. H/T to Gadi and Bruce for partnering on this opinion piece. www.csoonline.com/article/4069...

Autonomous AI hacking and the future of cybersecurity

AI agents are automating key parts of the attack chain, threatening to tip the scales completely in favor of cyber attackers unless new models of AI-assisted cyberdefense arise.

csoonline.com

Gadi Evron@gadievron.bsky.social · 10mo ago

The upcoming AI vulnerabilities cataclysm on CSO Online, by Heather Adkins, Bruce Schneier, and myself. www.csoonline.com/article/4069...

Today as part of our commitment to transparency in this space, we are proud to announce that we have reported the first 20 vulnerabilities discovered using our AI-based "Big Sleep" system powered by Gemini — goo.gle/bigsleep

Today @Google Project Zero announced a new trial policy: Reporting Transparency. We’ll now share when we report a security vuln to a vendor within 1 week including products + deadlines. Goal: shrink the patch gap + drive faster, safer updates for users: googleprojectzero.blogspot.com/2025/07/repo...

Good article out from @danielmiessler.bsky.social on using AI properly. danielmiessler.com/blog/how-to-...

Why Prompt Engineering and Context Engineering Both Miss the Point

The debate between prompt and context engineering misses what really matters: clear thinking and vision

danielmiessler.com

Some excellent work by @craiggidney.bsky.social that reduces the number of qubits (in a quantum computer) required to break RSA by 20-fold. If you don’t have a migration plan to safe algorithms, now is the time to start one!

Craig Gidney@craiggidney.bsky.social · last yr.

I'm often asked if I'll redo the 2019 quantum factoring estimate. Denser storage by yokes, smaller magic factories by cultivation, slimmer approx arithmetic by Chevignard et al… surely the cost is lower now? Yes, it's lower now. security.googleblog.com/2025/05/trac... arxiv.org/abs/2505.15917

Good news: egg production is up! www.ams.usda.gov/mnreports/am...

We will have memory safety… it will take many steps forward, over the long haul. Here’s an update from Chrome on replacing FreeType with a Rust based alternative. developer.chrome.com/blog/memory-...

Memory safety for web fonts  |  Blog  |  Chrome for Developers

Learn how and why the Chrome team has replaced FreeType with Skrifa.

developer.chrome.com

While listening to @patrick.risky.biz and @metlstorm.risky.biz on this week’s risky biz podcast I dreamt up a nice retirement project: “Case Studies for Security Engineering”. Highly curated technical descriptions of incidents written in such a way that solutioneers can understand attacks. 1/2

Good morning.

Ever wake up in the morning and think to yourself: wish I could do an official review of that incident. 👀

CyberScoop@cyberscoop.bsky.social · last yr.

#SaltTyphoon gained initial access to Cisco devices as part of the Chinese nation-state threat group’s sweeping attacks on U.S. telecom networks, the company confirmed Thursday in a #threat intelligence report. via @mattkapko.com cyberscoop.com/cisco-talos-...

Exceptionally good analysis of the current geopolitical discussion re: Ukraine and Russia negotiations. x.com/nicholadrumm...

It's #WorldPasswordDay!! At @Google we're celebrating the journey on deprecating passwords! We're happy to report passkeys have been used 1B+ times across 400M Google Accounts. We're also sharing how we'll use them to protect high risk users: blog.google/technology/s...

Passkeys, Cross-Account Protection and new ways we’re protecting your accounts

For World Password Day, we’re sharing updates to passkeys across our products and sharing more ways we’re keeping people safe online.

blog.google

‘Brand new’ ‘greenfield’ and ‘multi-billion dollar global business’ are not reassuring words to see in a CISO job posting.

Today @MunSecConf #MSC2024 @Google is announcing its AI Cyber Defense Initiative aimed at tapping into the potential AI can bring to defenders and continuing investments in AI-ready tools, research and AI security training: blog.google/technology/safety-security/google-ai-cyber-defense-initiative/

‼️🚨NEW report and blog from the @Google TAG and @Mandiant teams explores the implications of the Israel-Hamas war and where things stand with cyber in the Russian war in Ukraine: blog.google/technology/s...

Excited to see some awesome Safety Engineers in Munich this week!

Today I am grateful for those all over the world that dedicate their lives to keeping others safe. Thank you for all the work you do, and wherever you are on the world, Happy Thanksgiving!

During @AspenDigital's #AspenCyber Summit today in #NYC we announced our latest Titan Security Key which now works with #passkeys & our commitment to provide 100,000 keys to high risk users in 2024. More from at blog.google/technology/safety-security/titan-security-key-google-store/

Today, CISA’s Cyber Safety Review Board announced it will review Cloud Security and assess the recent Microsoft intrusion. Given scope, I have recused myself from the Board’s review. https://www.dhs.gov/news/2023/08/11/department-homeland-securitys-cyber-safety-review-board-conduct-review-cloud

The CSRB has released its second ever report on cyber safety, a study of a loosely affiliated hacker group that compromised dozens of well-defended companies with low-complexity attacks. https://www.cisa.gov/resources-tools/resources/review-attacks-associated-lapsus-and-related-threat-groups-report

Irrationally excited about Blackhat/Defcon/hacker summer camp. See you all in Vegas!

Happy Pride, London!

A beautiful Friday afternoon.

My feed is fully of puppy dogs so balancing the universe with a kitty photo. He apologizes for his sad face, as he is mysteriously missing a claw and is not feeling well. Be rest assured he’s being extremely pampered.

So, how do we get the medievalists, volcanologists, seismologists and weather nerds over here?