Royce Williams

@tychotithonus.infosec.exchange.ap.brid.gy

Just doing my undue diligence. ISP vet (was AS7782, now AS8047), password cracker (Team Hashcat), security demi-boffin, YubiKey stan, public-interest […] 🌉 bridged from ⁂ https://infosec.exchange/@tychotithonus, follow @ap.brid.gy to interact

CISA wants to hire infrastructure security experts who can work broadly across sectors, rather than people specializing in certain sectors, acting CISA Director Nick Andersen told reporters today at Google's Cyber Defense Summit. My story: www.cybersecuritydive.com/news/cisa-cr...

CISA looks to recruit general infrastructure security experts rather than sector-focused advisers

“I need people that can pivot from day to day,” the agency’s acting chief told reporters.

cybersecuritydive.com

I assume there's been a sharp uptick in requests for API access to commercial grade data / frameworks / engines, but for leaving academic nor commercial use, just "I'm writing this thing for me". It's not, it feels like an interesting middle ground in the licensing space.

Last year, a Georgia Tech team won DARPA's AI vulnerability-hunting competition. That team's leader now works for Microsoft. He told me about the shocking success of his multi-agent code scanner that's now reviewing everything Microsoft's developers create.

Bild

The FBI cyber strategy's biggest promise is that the bureau will start doing more frequent takedown operations against hackers' infrastructure. As part of that increased tempo, the FBI wants to work more closely with a wider range of industry partners that can augment its own capabilities.

Bild