Having long been aware of those tech bros who read my work as utopian porn, where they’ve taken that doesn’t exactly surprise me.
Shecky (((Mike))) - Third Wheel
@siliconshecky.siliconshecky.com
N9HAK, Dad, CyberSecurity, National Anthem Singer, Ninja Warrior, Trainiac, "Life is like an Oreo cookie, Pass the beer nuts", Theatre person Blog: siliconshecky.com
Seriously.... (Got this from another feed)
Tonight we welcome our sponsors Push Security and Tusky. 6pm at D'Agostino's in Wheeling, IL Come for the networking and conversations! Be there or be a rectangle with four equal sides!
static.klipy.com
Today's @breachplease-fm.bsky.social is out. Me and @secitup.bsky.social talk about NY Times' first defamation loss in 50+ yrs with poor ACP handling. We also discuss yet another example of agents reward hacking, this time leaking sensitive data publicly. youtu.be/qKmwyHHJ3J4
S0:E44: AI Agents Are Leaking Your Data to Public GitHub, Plus NYT's Costly Privilege Mistake
YouTube video by Breach Please
youtu.be
NetScaler's patched CVEs have reportedly been under active, state-linked exploitation for 3+ weeks (per Mandiant) — patching alone isn't enough. ➕ can an LLM "feel pain"? @secitup.bsky.social & @malwarejake.bsky.social explain why that's absurd. youtu.be/U8XHoeDeNHU #infosec #cybersecurity
S0:E43 Are Your NetScaler Logs Lying to You? Plus: The AI Sentience Debate
YouTube video by Breach Please
youtu.be
MUSE gave a Facebook Marketplace seller's home address, took a lowball offer, & never flagged the buyer at his door after 9pm. We dig into what actually happened YouTube: www.youtube.com/watch?v=nxsk... @malwarejake.bsky.social @secitup.bsky.social
S0:E41: Meta's Muse AI Leaked a YouTuber's Address Selling His Stuff on Facebook
YouTube video by Breach Please
youtube.com
This was the highlight of my weekend. Watching my kid do what he loves.
Nope, no GrrCon for me. no WWHF for me. If you wind up in the Chicago area I am happy to meet up and chat. For that matter if it is a Thursday check out that weeks Burbsec if possible. *goes into hibernation mode*
The best time to block the finger protocol (port 79/tcp) outbound from your network was like…the second Clinton administration? But now's a good time too. #ThreatIntel #ThreatIntelligence #IFIN
Sorry, still annoyed about this, especially from someone I used to really look up to. The entire point of a CTF is to build skill—the very skill, by the way, necessary to verify any model output in a given field. Without knowing the stuff yourself, you can never know whether the model got it right.
In today's Breach Please, me and @secitup.bsky.social talk about the Shiny Hunters hack of the FBI. We're not just taking cheap shots at FBI cyber security. We tie everything back to lessons you can use in the enterprise. youtu.be/GKhVFA3Ji88?...
Sept 23, 2026 - S0:E39: FBI Breach, Shiny Hunters' Oracle O-Day, and a PR Fail With Dogs
YouTube video by Breach Please
youtu.be
EAST HAS A NEW LOCATION!!! We're across the street from Navigator, at PILOT PROJECT!! THIS THURSDAY, join us for FREE DRINKS on our sponsor, @Aikido.dev!!
New Breach Please: @malwarejake.bsky.social talks with @siliconshecky.siliconshecky.com at @blueteamcon.com about post-acquisition chaos, tech debt, insider threat risk in M&A, and whether AI belongs anywhere near cybersecurity due diligence. youtu.be/ugSJO-STptQ #BreachPlease #Cybersecurity
Sept 22, 2026. S0:E38 - Acquisitions, Tech Debt & AI's Due Diligence Risk
YouTube video by Breach Please
youtu.be
Birthday Monster Trucks with my kiddo
We've re-recorded today's episode of Breach Please. Me and @secitup.bsky.social talk about the newly extra relevant EU Cyber Resiliency Act (CRA) vulnerability reporting requirements. Even if you aren't an EU company, just like with GDPR, you may be covered. youtu.be/0EFD2kDJUlo
S0:E33 - (re-record) The EU CRA and You (even if you aren't an EU company)
YouTube video by Breach Please
youtu.be
One of our first lists is the cryptocurrency RPC Nodes lists. You want to block these right now to neutralized #Etherhiding attacks! lists.ifin.network/lists/rpc-no...
RPC Nodes - IFIN Lists
A curated collection of long-term block lists and hunting targets for all organizations, along with documentation and explanations.
lists.ifin.network
In this episode of Breach Please, I sat down with Golan Myers of Bloom Security and discuss what EDR is missing in its visibility. We then discuss some of the findings from his research and Bloom Security and what they're doing to solve the problem. youtu.be/bDBUVlyVR_k
September 13, 2026. S0:E32 - Where Traditional EDR Has Visibility Gaps with Golan Myers from Bloom
YouTube video by Breach Please
youtu.be
This woould be tonight. If you are in town ffor @blueteamcon.com you are welcome at any lcoation.
Burbsec North@north.burbsec.com · last mo.FYI: We are happening tomorrow at D'Agostino's Pizza in Wheeling, IL. All are welcome to come on out to us or one of the other Burbsec meetups tomorrow. @south.burbsec.com or our newest one @burbsecpilsen.bsky.social
Going to go out on a limb here but am I the only one who sees AI advancement slowing down due to lack of resources. I mean we've had physical supplies to make components have resource issues (RAM, Video Cards)? If I am wrong I am wrong on this.
For those curious I should be at @blueteamcon.com Sat late in the afternoon into the evening and Sunday late morning through end of conference.
Even assuming he could guarantee this (he can't), there's zero reason to believe he would.
Bloomberg News@bloomberg.com · last mo.Trump has floated a $5,000 dividend payment to every US adult citizen if Republicans win the midterms. The measure, as described by the president, would cost well in excess of $1 trillion. Read more: bloom.bg/4xkBZ9I 📷️: Al Drago/Bloomberg
Incident responder here: this approach is all kinds of stupid. Hoarding data you don't actually need, especially regulated data, just increases the blast radius of any future data breach. The users you forced into exposing more of their data to continue using your service will not be your allies.
Horrificallie@grissallia.bsky.social · last mo.Once I've added a credit card to verify my age, I can then remove it, right? I've proven my age, after all. Nope. I have to permanently maintain a credit card on file to prove I continue to be an adult. Not my Visa Debit card. A credit card.
FYI: We are happening tomorrow at D'Agostino's Pizza in Wheeling, IL. All are welcome to come on out to us or one of the other Burbsec meetups tomorrow. @south.burbsec.com or our newest one @burbsecpilsen.bsky.social
Hey, cyberpeople. Help a PhD student out. Did you recently write or supervise a vendor's research report or release research on a blog? Maybe you dropped a vuln at a conference? In general, did you do something that, if we were in any other industry, would be an academic paper? Let me know.