570!! Five hundred and seventy! That’s how many vulnerabilities in this month’s patch Tuesday. Don’t let the number distract you though, hit the emergency and critical ones first.
Kenton Smith
@kentonsmith.bsky.social
Cyber Leadership Advisor/Educator. Photography, Music, Sports, Politics, Coffee
Hey vendor risk management platforms! AI is really good at parsing through documents, don’t make me fill out a 150 question questionnaire when you could ingest my SOC2 Type II report and get the answers yourself. I will dislike you forever after if I have to supply both.
Surprise, it’s driven by venture capital’s need to find additional revenue streams. www.404media.co/buspatrol-pu...
‘BusPatrol’ Put AI Cameras in Tens of Thousands of School Buses. Now They Want to Give Cops Access
BusPatrol plans to scan the license plates of all vehicles the buses drive past, and then let law enforcement search that data. The plan would essentially turn school buses into roaming surveillance v...
404media.co
The most rigorous, precise, brilliant piece I have read on Albertan separatism. www.readtheline.ca/p/clarke-rie...
Clarke Ries: How two Alberta judges shot separatist delusions to death
(And, not for nothing, they probably just wrecked Quebec separatism, too.)
readtheline.ca
🇨🇦 Canada's Privacy Act is finally up for review. 40 years is long enough–don't let Ottawa rewrite the rules that govern all public sector agencies without YOU! Take our quick survey by June 15! 👉 openmedia.org/2026privacy-... @openmedia.org
OpenMedia Survey: Tell Ottawa How to Fix the Privacy Act
🇨🇦 Canada's Privacy Act is finally up for review. 40 years is long enough–don't let Ottawa rewrite the rules that govern all public sector agencies without YOU! Take our quick survey by June 15! 👉 htt...
openmedia.org
The only cruise I've ever thought I might do WAS an Antarctic cruise... www.jalopnik.com/2165260/hant...
Hantavirus Outbreak On Luxury Antarctic Cruise Kills 3, Strands Nearly 150 Without Aid - Jalopnik
A 70-year-old Dutch man died on the Hondius on April 11. Things would quickly escalate into a public health matter.
jalopnik.com
Curious what the stats are currently for how many agencies are meeting the two week target and for what percentage of their assets. This 3-day target sounds good, but in practice it seems unattainable. securityboulevard.com/2026/05/u-s-...
securityboulevard.com
Some really great information in here about the Apple push notification system.
When deleting Signal is not enough: the FBI, iPhone notifications, and what forensics can reveal
A few days ago, 404 Media published a detailed report that made a lot of people uncomfortable: the FBI managed to recover Signal messages from a suspect’s iPhone, even though the app had already been uninstalled. No encryption was broken. No Signal server was compromised. The messages were sitting in the phone’s own notification database, waiting to be found.
andreafortuna.org
Your Word of the Day John Adams had a term for the current White House and its flunkies in Congress: “oligarchical junto.” Such a gang seeks “to destroy all the records, memorials, and histories of former times, which it did not like.”
Peter Norton@norton.bsky.social · last yr.The recent executive order “Restoring Truth and Sanity in American History” is ridiculous. But what’s the point? John Adams understood. Honest history exposes the illegitimacy of tyrants. To survive, tyrants must police history like they police their own citizens. Tyrants fear honest history.
Countersurveillance can be critical when you’re at a protest. If you’ve used EFF’s Surveillance Self-Defense guides to ensure you’ve taken the right precautions to protect your privacy, take the next step and become an EFF member to help us. eff.org/join
Defend Privacy and Free Speech
Donate to the Electronic Frontier Foundation and support the mission to defend civil liberties and human rights online.
supporters.eff.org
Security leaders are often trapped in endless assessments and opinion-giving without driving actual change. Staying busy with spreadsheets, dashboards, and emails doesn't move the organization forward. Here's how we can break out of the "Chief Opinion Officer" mode:
From Chief Opinion Officer to Action-Taker
Security leaders who only assess risks and express concerns operate as Chief Opinion Officers rather than change agents. Delivering outcomes requires agreeing with colleagues on what's real, deciding ...
zeltser.com
I’m happy to continue supporting the “left wing nut jobs” at @anthropic.com
This is insane. What are store managers and supervisors doing? Oh yeah, they’re being fired. www.theverge.com/ai-artificia...
Burger King will use AI to check if employees say ‘please’ and ‘thank you’
Have it your way?
theverge.com
#Disney+ has the weirdest pricing on their invoices. I only want Disney+ without ads, so I should be paying $1.05.
One more BIG reason that we shouldn’t trust 3rd parties to verify our identities online. cybernews.com/privacy/pers...
Same company verifies mugshots for ChatGPT, and offers 269 surveillance checks for US government
The identity verification company used by ChatGPT and other major services accidentally exposed its government-authorized platform, which is capable of extensive surveillance.
cybernews.com
I guess I’ll be a “teen” on @discord.com after March. No way I’m giving them my government ID to use all the features on the site. therecord.media/discord-age-...
Discord to require video selfies or government IDs to verify all users’ ages
Discord will soon require all its users worldwide to verify their ages by sharing video selfies or providing government IDs, a move that coincides with a push for age verification across social media ...
therecord.media
In today’s #404DeepDive, @jasonkoebler.bsky.social gets into Ring’s new feature Search Party which was advertised at the Super Bowl which essentially turns the entire neighborhood into a security dragnet. Read more: www.404media.co/with-ring-am...
Just don't do this, don't. Seriously, nothing good can come of it. 9to5mac.com/2026/01/26/a...
Apple Watch user gave ChatGPT Health his data, with troubling results - 9to5Mac
ChatGPT Health launched recently with Apple Health integration, but a journalist’s experiment with the new technology didn’t go very well.
9to5mac.com
This is basically OpenAI saying we’ll pay you to make AI good enough to steal your job. The ultimate in training your replacement. www.wired.com/story/openai...
OpenAI Is Asking Contractors to Upload Work From Past Jobs to Evaluate the Performance of AI Agents
To prepare AI agents for office work, the company is asking contractors to upload projects from past jobs, leaving it to them to strip out confidential and personally identifiable information.
wired.com
FOR THE LOVE OF ALL THAT IS GOOD IN THE UNIVERSE PLEASE DO NOT USE THIS THANK YOU FOR YOUR ATTENTION TO THIS MATTER www.theverge.com/ai-artificia...
OpenAI launches ChatGPT Health, encouraging users to connect their medical records
But it’s ‘not intended for diagnosis or treatment.’
theverge.com
Now #Delta, #VirginAirlines, #WestJet et al are moving to the “hold you upside down by the ankles and shake every last penny out of you” pricing model. And you won’t even know they’ve done it.
Delta Air Lines is using AI to set the maximum price you’re willing to pay
And seeing “amazingly favorable” results.
theverge.com
Amazon Ring is introducing a new feature that would allow police to request live-stream access to people’s home security devices. Helllll no. If you have one of those things, get rid of it. Kill it with fire
Amazon Ring Cashes in on Techno-Authoritarianism and Mass Surveillance
Ring founder Jamie Siminoff is back at the helm of the surveillance doorbell company, and with him is the surveillance-first-privacy-last approach that made Ring one of the most maligned tech devices....
eff.org
🎥 Missed one of my past conference talks? Let’s fix that. I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs. “Security Learns to Sprint” 📽️ https://twp.ai/9PU4Ry #CyberSecurity #SecurityAwareness #appsec
youtu.be
[2019-Keynote] Security Learns to Sprint: DevSecOps by TanyaJanca
twp.ai
Sometimes maybe a little humour is what it takes…
How Much More Must We Bleed? - Citrix NetScaler Memory Disclosure (CitrixBleed 2 CVE-2025-5777)
Before you dive into our latest diatribe, indulge us and join us on a journey. Sit in your chair, stand at your desk, lick your phone screen - close your eyes and imagine a world in which things are ...
labs.watchtowr.com
"The ministers of Environment from Alberta and Ontario are asking the federal government to “refrain” from reintroducing legislation that would mandate Canada to provide safe drinking water to First Nations across the country." #abpoli #ableg #cdnpoli www.aptnnews.ca/national-new...
Alberta, Ontario don't want feds to reintroduce First Nations safe drinking water law
Environment ministers in Alberta and Ontario don't want the federal government to reintroduce the safe drinking water law for First Nations.
aptnnews.ca
