Rob Wright
@robwright22.bsky.social
Security news director at Informa TechTarget's Dark Reading, patron saint of TT's "Bagel Wednesday." Formerly of SearchSecurity, Tom's Hardware, CRN, and a whole lot more. Signal: rwrightTT.20
I can't compete with this. www.npr.org/2026/07/28/n...
Trump shattered ethics norms. Will voters trust Democrats to fix them?
Democrats are making the case that now is the time to tackle anti-corruption reforms — to serve as a check on Donald Trump and to overhaul a system voters say is co-opted against their interests.
npr.org
Senior Trump administration cyber officials will kick off next month's Black Hat conference, per an announcement this morning. Keynote from NCD Sean Cairncross, then panel with CISA, FBI, and DOD. www.businesswire.com/news/home/20...
CISA has published a report about a contractor's recent leak of CISA security keys on GitHub. It's fairly candid about the agency's shortcomings and offers advice for other organizations. www.cisa.gov/news-events/...
I ask again, where are all the techno-optimists who breathlessly warned about bureaucrats impeding progress and equated AI deceleration with murder? Isn't the Anthropic ban *exactly* the kind of red line they swore to oppose? What happened?
Techdirt@techdirt.com · last mo.VC Bros Claimed They Backed Trump To Protect AI. Trump Is Shutting Down AI. It Was Always About Access & Power Back in July of 2024, when two of the… https://www.techdirt.com/2026/06/29/vc-bros-claimed-they-backed-trump-to-protect-ai-trump-is-shutting-down-ai-it-was-always-about-access-power/
If you've been wondering about the NIST's reduction in CVE enrichment and the effects the shift has had since it was implemented two months ago, the folks at Volerion analyzed more than 13,000 CVEs published to the NVD and found some concerning trends. www.darkreading.com/vulnerabilit...
NIST Enrichment Reductions Impact CVE Coverage, Accuracy
NIST scaled back on the number of CVEs it selects for in-depth analysis, but the move has produced mixed results.
darkreading.com
VC Bros Claimed They Backed Trump To Protect AI. Trump Is Shutting Down AI. It Was Always About Access & Power Back in July of 2024, when two of the… https://www.techdirt.com/2026/06/29/vc-bros-claimed-they-backed-trump-to-protect-ai-trump-is-shutting-down-ai-it-was-always-about-access-power/
VC Bros Claimed They Backed Trump To Protect AI. Trump Is Shutting Down AI. It Was Always About Access & Power
Back in July of 2024, when two of the biggest big shots in venture capital, Marc Andreessen and Ben Horowitz, explained why they had decided to go all in to back Donald Trump's campaign for re-election, they talked up a good game about how they would support any candidate who supported their "little tech" agenda. This always rang hollow — Andreessen has been on the board of Meta for years, which is the most anti-little tech company around.
techdirt.com
More Salesforce data thefts, but this time it's a different third-party app integration and a different threat group: www.darkreading.com/cyberattacks...
Salesforce Data Thefts Continue via Klue App Compromise
Klue's Battlecards is the third integrated app compromised to steal customers' Salesforce data; victims include Huntress, the cybersecurity vendor.
darkreading.com
New: Since the Trump administration eliminated funding for the MS-ISAC, the state and local cyber defense group has lost roughly 70% of its membership, forcing it it to cut staff and raising questions about the future of its vital services. My story: www.cybersecuritydive.com/news/ms-isac...
So...where are all the "techno-optimists" and staunch opponents of oppressive government regulation who have been arguing for years that deceleration of AI progress was akin to murder? www.darkreading.com/cyber-risk/u...
US Cracks Down on Anthropic AI Models Amid Abuse Concerns
Anthropic suspended all access to Fable 5 and Mythos 5 after receiving an export control directive that banned foreign nationals from using the AI models.
darkreading.com
Supply chain attacks are never a good thing, but they're especially bad when attackers use the same compromised account that was abused in a similar attack just a few weeks earlier. www.darkreading.com/application-...
Miasma Supply Chain Worm Burrows Into 73 Microsoft Repositories
The attacks stemmed from a GitHub account that was also compromised in a previous Miasma attack on Microsoft last month.
darkreading.com
Seeing a lot of reports that TeamPCP is behind the "Megalodon" supply chain attack against GitHub. Not sure where this is coming from, but both SafeDep (which discovered the attack) and OX Security (which verified the findings) say there's no link at this point: www.darkreading.com/application-...
'Megalodon' Malware Infects Thousands of GitHub Repos
In just six hours, the campaign quietly pushed malware to more than 5,500 GitHub repositories, stealing credentials, developer secrets, and more.
darkreading.com
Oh my fucking god I thought they made this up. They did not. I just tried it myself
Hypervisible @hypervisible.blacksky.app · 3mo agoIt’s going great.
It turns out that Google API keys are only *mostly dead* when you delete them. And mostly dead is slightly alive.
Dark Reading@darkreading.bsky.social · 3mo agoGoogle API Keys Remain Active After Deletion: https://bit.ly/4x1fXdd by Rob Wright
You have to wonder if the steep budget cuts and on again/off again layoffs at CISA contributed to this blunder.
CISA Exposes Secrets, Credentials in 'Private' Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."
darkreading.com
EFF is finally leaving X and here is a blog post about why: www.eff.org/deeplinks/20...
EFF is Leaving X
After almost twenty years on the platform, EFF is logging off of X. This isn’t a decision we made lightly, but it might be overdue.
eff.org
Hours after Microsoft reveals that Russian hackers have been breaking into poorly secured routers & hijacking DNS requests (sometimes to collect Outlook data) www.microsoft.com/en-us/securi... DOJ says it has kicked those Russians out of the US routers they hacked: www.justice.gov/opa/pr/justi...
See, this is MEANT to be tongue in cheek, with the treating it seriously being ironic. But the New York Times can’t pull it off because of what they’ve become. The mock-seriousness is too close to how they routinely are. /1 www.nytimes.com/2026/04/03/u...
FEMA Official Says He Teleported to Waffle House. Experts Are Dubious.
nytimes.com
The Trump administration skipped last week's major RSAC cybersecurity conference. On the ground in San Francisco and beyond, people were baffled and frustrated. "Engagement with industry is vital," one former official said. My story: www.cybersecuritydive.com/news/rsac-co...
‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void
The Trump administration’s decision to not attend the world’s biggest cybersecurity conference sent the wrong message to partners, experts said.
cybersecuritydive.com
The AI economy looks...really precarious. So @matteowong.bsky.social & I did a bunch of reporting to try to figure out what happens when a potential bubble collides with a war in Iran and a potential resource shortage. The answer is...arguably the most dire stuff i've heard from smart ppl in a while
The AI Boom Wasn’t Built for the Polycrisis
“There are too many ways for it to fail for it not to fail.”
theatlantic.com
The cybersecurity world relies on the CVE Program to vet and label vulnerabilities. But amid U.S. funding concerns, AI-fueled bug reporting and global fragmentation, the program is teetering on the brink, according to a warning from #RSAC today. My story: www.cybersecuritydive.com/news/cve-pro...
Microsoft today published a report on a two-year cybersecurity pilot program for the water sector, finding that utilities need hands-on help, not just free guidance materials, to be successful: www.cybersecuritydive.com/news/water-c...
The biggest crime of the last decade, in Marc's mind, was that people made fun of him when he said stupid, offensive things (which he's done a few times). His entire support of Trumpism was in the belief it would free him up to continue to say offensive shit. Everything else is secondary
Molly Jong-Fast@mollyjongfast.bsky.social · 5mo agoI didn’t think it was real
The Predatorgate convinctions in Greece represented a landmark event in the fight against commercial spyware. But other recent developments in the U.S. have spyware oppenents deeply concerned. www.darkreading.com/threat-intel...
Commercial Spyware Opponents Fear US Policy Shifting
Rescinded sanctions and reactivated contracts have created confusion about the Trump administration's spyware policy and where it draws the line.
darkreading.com
Anthropic lawsuit against Department of Defense here: storage.courtlistener.com/recap/gov.us... An excellent analysis at @justsecurity.org on Friday by Harold Koh, Bruce Swartz et al here: www.justsecurity.org/133247/anthr...
The War on Anthropic: Pretextual Designation and Unlawful Punishment
The Trump admin’s action against Anthropic is barred by statutory limits, the First Amendment, and the Constitution’s bills of attainder.
justsecurity.org
In 2013 Aaron Swartz committed suicide for facing 35 years in prison for mass downloading scientific articles. 13 years later, Meta is almost getting away with an infraction orders of magnitude larger. The law didn't change. torrentfreak.com/uploading-pi...
Uploading Pirated Books via BitTorrent Qualifies as Fair Use, Meta Argues * TorrentFreak
In an ongoing lawsuit, Meta now argues that uploading pirated books to strangers via BitTorrent qualifies as fair use.
torrentfreak.com
Good news: LE agencies and private sector partners took down Tycoon 2FA, a popular phishing-as-a-service (PhaaS) platform that can bypass MFA protections. Bad news: The takedown didn't solve the MFA issue, and other PhaaS platforms use the same bypass technique. www.darkreading.com/threat-intel...
Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform
The phishing-as-a-service platform was popular among cyber threat actors because of its ability to bypass multi-factor authentication defenses.
darkreading.com
So, obviously this isn’t true. But if the CEO actually believes this nonsense, it implies he thinks maybe he’s enslaving a sentient being that has the capacity to feel emotional distress. And he hasn’t immediately halted operations to suss out how to resolve that?
Kat Tenbarge@kattenbarge.bsky.social · 5mo agoLiterally as I’m arguing with someone about whether AI companies are misleading people into believing their technology possesses God-like super-intelligence I see this monstrosity
After the CrowdStrike outage, Microsoft started working w/ 3rd-party security vendors to redesign Windows so their programs could run outside the kernel. I talked to experts and one of those vendors about how this work is going — and why it's so difficult. www.cybersecuritydive.com/news/microso...
New w @janetimm.bsky.social: In the feds' first call with states since gutting CISA's election programs, they promised no ICE at polling places, but weirdly refused to reaffirm states run elections, per people on the call.
DHS official tells state election chiefs there won't be ICE agents at polling places
Members of the Trump administration held a call with state election officials around the country ahead of this year's midterm elections.
nbcnews.com
