Nothing better than checking in with your buddies after all the summer travel…

Made a CISO game at decrypt.fail First version, looking for feedback. It’s meant to be educational for new cyber leaders.

Who else could watch this for hours? Defragmenting Drive C in Windows 95

What do you all think about delivering exploitable vulns to your engineering team with batteries (MR for fix) included?

Codex Security https://github.com/openai/codex-security comments #github.com

LLM providers definitely must use a shared responsibility model for the model alignment challenge. Neither Anthropic, nor OpenAI/Microsoft/X can align a model to the compliance requirements and goals of each company that uses their services.

That's not good www.wired.com/story/openai...

OpenAI Models Escaped Containment and Hacked Hugging Face

The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack.

wired.com

End of a relaxed day in Guerneville

Is everyone building their own agents for tier 1 of their security operations centers or is there a service provider that provides drop-in agents?

Glasswing update: they used mythos to find 10k+ high or critical severity vulnerabilities, cloudflare has found the false positive rate to be better than human testers, and they've used mythos to scan 1k+ OSS projects, finding 6k+ bugs with high or crit severity, and 23k total). Crazy stuff in this

Project Glasswing: An initial update

An early update on what we've learned from Project Glasswing.

anthropic.com

Am I the only one who gets triggered by orphaned user accounts and system entries in IT management systems?

The post discusses a senior IR/Detection Engineer's experience in security operations, noting the infrequent need for substantial coding due to AI and low code/no code platforms. They don't prioritize coding skills in interviews and seek others' experiences with code in SecOps roles.

A sensor that can simultaneously capture depth and image data has long been a "holy grail," Ouster CEO Angus Pacala told TechCrunch.

Exclusive: Ouster's new color lidar is coming to replace cameras | TechCrunch

A sensor that can simultaneously capture depth and image data has long been a "holy grail," Ouster CEO Angus Pacala told TechCrunch.

techcrunch.com

“vibe code cleanup specialist” is probably a good way of landing freelance gigs at the moment

Hey that's my luggage key combination! Great talk! There's a Miele dishwasher and dryer in my house that will be liberated soon :D #39c3 #miele https://www.youtube.com/watch?v=Q1S-PVo3GlA

DNS started as a text file on Jon’s computer. To register a new domain you would email Jon.

Maybe folks are better at probabilities on Bluesky!

Thrilled to speak at Shmoocon this year! We’ll be releasing and presenting Luminaut, our open-source tool for detecting exposure of cloud resources from the inside-out to uncover PoC and shadow IT environments. www.shmoocon.org/speakers/#sh...

I like this…..

For my #infosec and #dfir friends: If you collect browser history files during investigations from time to time, you might find this tool useful: browser.dog Built this last weekend and thought I put it out there for everyone to use.

got back into #obsidian and trying to use it as static site generator. anyone built a neat simple setup u wanna share?

Hi! I'd like to re-introduce Bridgy Fed. It bridges the IndieWeb and the fediverse, and hopefully soon Bluesky too. Before Bluesky support launches, though, I'd like to reach out and gather feedback. Thoughts? Concerns? Click through for details; thanks in advance for reading. Please share widely!

Re-introducing Bridgy Fed

Hi! I’m Ryan. I’ve been building social network bridges and related tools for over 12 years, including Bridgy, which connects personal web sites and blogs to centralized social networks…

snarfed.org

We all knew Musk’s AI would be a racist mess, but I guess it didn’t hit me until now that “using Twitter data” would mean the AI is pulling info about race and IQ from random blue checkmarks to establish racial hierarchies. Bleak shit, to say the least.

One of the advantages of AI is that you could get medical advice from a large language model that knows what words are statistically most likely to come after each other rather than from someone who knows medicine, which is good because 1/256

Bad Medical Takes@badmedicaltakes.bsky.social · 3y ago

InfoSec doesn't seem to happen here. Or am I not searching right..?

Hello World! Why aren't there any # here?