We have two malware analyst openings at Dragos! In many malware jobs, your work disappears into the void. But at Dragos, it's easy to see the impact of your work across the company and community. And you get to work on interesting cases across OT verticals. job-boards.greenhouse.io/dragos/jobs/...

Associate Principal Malware Analyst

United States

job-boards.greenhouse.io

Just in time! With @rapid7.bsky.social killing the best information source they probably didn't know they had (AttackerKB), we instantly get a plausible replacement! It's funny that I was also just talking to somebody at BSidesLV about how I miss bugtraq lists.securityfocus.com/hyperkitty/l...

I loved @eliselzer.bsky.social 's guest Rex Parker NYT crossword blog today. I doubt the right people will see it or care, but we need more of this rexwordpuzzle.blogspot.com/2026/08/litt...

I just noticed that my "2tb storage plan" at Google is now called "AI Plus", which I guess makes the metrics for their shitty AI look better? Bundling to scam investors

My phone was low on storage so I clicked on the "delete backed up photos" button It deleted all the photos and drawings from my notes app WTF Android. Why do you think that's over??

Chet Faliszek@chetsucks.com · 5d ago

The YouTube studio app was using 100gb of storage on my iPhone. How do you free up all that unused storage? Only one way. Delete the app and reinstall it. This from the biggest media app in the world… feels like we have just given up any concept of quality control.

we now have a (draft) @metasploit-r7.bsky.social exploit module in the queue for CVE-2026-16232, leveraging the authentication bypass for RCE against vulnerable Check Point Security Management Server appliances: github.com/rapid7/metas...

Hey friends! What are the cool events at BSides and Defcon next week that I haven't heard about??

Hey it's @todb.hugesuccess.org!! I'll be there!

BSides Las Vegas@bsideslv.org · last wk.

A panel of CVE experts, no prepared remarks, and an hour of audience questions. No topic is off limits. The code of conduct still applies. See Tod Beardsley, Lindsey Cerkovnik, Jerry Gamblin, Madison Ficorilli, Katie Noble @ Common Ground during #BSidesLV on Wed Aug 5 @ 12:00.

"My biggest fears these days are botflies and roadrunners" "ah you also read @tkingfisher.com"

I muted "BREAKING;" on this site, and honestly it's an improvement

This seems super cool!

Catalin Cimpanu@campuscodi.risky.biz · 2w ago

Cisco has released Antares, a family of small language models (SLMs) for finding vulnerabilities within codebases -2 variants available -a third coming soon -designed for local deployments that require data security compliance blogs.cisco.com/ai/introduci...

GHOSTS MADE ME DO IT returns to The Vermillion Thu 7/23! Live improv from They Might Be Ghosts, Jazz Hands and Panic, and Stay Silly - plus live magic. Doors 6:30, show 7pm. 1508 11th Ave, Seattle. FREE - just show up! #SeattleImprov #FreeShow #Vermillion

This guy has officially saved my bike twice.. $6000 value for like $30. Must-buy IMO www.elevationlab.com/products/tag...

AirTag Bike Mount

Secure, nondescript AirTag holder for bikes. Mounts under a bottle cage or alone.  Strong composite body (same material Shimano uses) + solid titanium screws. Stainless security Torx screws, T20 drive...

elevationlab.com

I feel like the only way to get my bike back, knowing where it is and where he lives, is to round up a posse This is kinda ridiculous

Okay seriously Internet. What do you do to retrieve a stolen bike with a tracker? I confronted, got threatened with mace. Found him again, stayed back and called 911, 4 hours later I'm giving up Do I have any options, other than waiting for him to be careless???

Having to log into an Apple account during a mild emergency to use Find My: my account requires personal questions (who remembers?), create a new account, email confirmation doesn't go through, try my work email, it's working!! account locked please contact support

Just for fun, I wrote a @censys.bsky.social fingerprint to label Chatto instances being deployed! It's grown from about 10 to 40 this week, and my family is even running one (behind a VPN) at home! CC the developer @hmans.dev

Maybe it's one of my oldest old man takes but boy do I miss going to stores and being able to ask people questions

Rob Sheridan@rob-sheridan.com · 4w ago

Saw a meme of GenZ baffled by how pre-internet travel worked, and realized we’ve crossed an enshittification threshold where IRL services that once seemed outdated, like travel agents, now seem luxurious: “You meet with a human expert who plans out your whole trip with you” sounds incredible now tbh

A phishing email targeting a politician led to a much bigger discovery. New research from Censys ARC researcher shows how Censys pivots uncovered additional UNC1151 infrastructure, exposing a broader credential theft campaign targeting Belarus and Ukraine. Read more: https://bit.ly/4vqNsEm

Come out tonight to see #Shakespeare the Musical…Improvised, 7 pm at #Vegas Theatre Company as part of Las Vegas' @falloutfringefest.bsky.social. Featuring the talents of Brad Sherwood, Matt Donnelly, Paul Mattingly & Michael Spadoni. Also 7 pm shows tomorrow & Thursday, June 24-25. #comedy #improv

Shakespeare the Musical! • Fallout Fringe

Shakespeare’s plays are famously known, studied and performed for centuries. Why do we know so little about his musicals. Though their original texts have been lost. Las Vegas’s legendary improv co...

crowdwork.com

Sad to see companies I respected scooped up by Accenture :⁠-⁠(

Greg Otto@gregotto.bsky.social · 2mo ago

Accenture shells out $4.18B on three companies in big industrial cybersecurity push - cyberscoop.com/accenture-in...

I made a @censys.bsky.social fingerprint and didn't even crash prod!! platform.censys.io/search?q=hos...

Thank you @runzero.com for being an All In sponsor 🎰 Come check out their table August 3rd–5th! Interested in learning more about their company? Visit www.runzero.com/abou...

You can tell so easily when an infosec blog post was written by AI No sane cybersecurity person starts a technical post directly with the tech mumbo-jumbo without giving it any type of context of what they're about to present Straight into scripts and version numbers... no hi, no nothing

Hey friendsky! My husband is looking for work - he's very good at Linux, cloud, AWS, and networking stuff. He's got an extensive home lab and manages all of our services. Seattle or remote. But he's bad at networking so I'm trying to leverage my network on his behalf. Cheers!

An Ivanti Sentry RCE enters exploitation hours after a detailed write-up goes live www.cisa.gov/news-events/... labs.watchtowr.com/more-evidenc...

Oracle has released an out-of-band security alert for an unauth RCE in PeopleSoft CVE-2026-35273 www.oracle.com/security-ale...

Nightmare Eclipse has published exploit code for a new zero-day flaw dubbed RoguePlanet. Microsoft feud escalates as researcher drops new Windows zero-day www.csoonline.com/article/4183...

Microsoft feud escalates as researcher drops new Windows zero-day

Exploit code for Defender bug published post-Patch Tuesday, reviving clash over uncoordinated disclosure practices.

csoonline.com

The source code of the Miasma worm has been released The code reveals that Miasma evolved from the Shai-Hulud worm, but has extra features baked in, making it a more complete credentials theft toolkit safedep.io/inside-the-m...

Inside the Miasma Software Supply Chain Attack Toolkit

The Miasma worm source code appeared on GitHub through compromised developer accounts. The codebase is a full supply chain attack toolkit with credential exfiltration across AWS, Azure, GCP, and Kuber...

safedep.io

Security Consultant Ian Briley gives a step-by-step breakdown of how to quickly set up a threat detection lab using Splunk Attack Range 🔗 redsiege.com/threatdetection #hacking #infosec #cybersecurity