honestly very nice to have people bragging about how FEW employees they have. The world was a messed-up place when companies were bragging about their pace of hiring.

FSB phoning it in on disguises.

FWIW, I do think we are in an efficiency race and AI shifts scalability of both cyber offense and defense and we need to rethink what are the contrained resources of each side. AI requires everyone to update their intuitions and then continue to update as AI evolves.

Solid intelligence on AI use by threat actors. Some actual data to balance the speculation from thought leaders predicting either imminent AI apocolypse or dissmissing AI outright.

Meet our speaker Patrick Whitsell! Patrick dedicates his expertise to monitoring and defending against cyber espionage threat actors. His talk, "Cyber(trade)war: Paradigm Shift in Economic Espionage", will cover PRC state-sponsored cyber espionage, historically associated with

NEW: How former L3Harris Trenchant boss Peter Williams was able to steal zero-days worth millions of dollars, based on court docs and interviews with former colleagues. “No one had any supervision over [Williams] at all. He was kind of allowed to do things the way he wanted to.”

@nosilverv I still think all the models converging to You’re Absolutely Right! bc that’s what we want to hear deep down is so embarrassing for us as a species

The revelations this week around Trenchant make me feel even more dubious about outsourcing offensive cyber operations to the private sector. And I've always been pretty dubious.

Context:

Trenchant manager accusded of stealing and selling secrets (probably exploits) to the Russians is having his $107 USD Casio watch seized amongst other things.

Google is the only big company in the world where people with ADHD thrive more than people without ADHD.

What if the real AI hacking risk is AI hacking and taking over everyone's dopamine reward pathway?

.@DavidDeutschOxf: "A lot of what humans do is not creative. It’s not human level creative, it’s just a lot of things need to be done, for pragmatic reasons, but creativity is not really needed. And people spend a lot of time on that. And the less time they spend on that, the

A good descripton of infosec in an essay not about infosec by @eriktorenberg We need to incentivize actual security more.

The Catholic Church and Assyrian Church of the East divided in 431 over an argument around calling Mary "Mother of God" vs "Mother of Christ" only to resolve it as a misunderstanding in 1994. And I thought threat intel had long running naming disputes...

Rhubarb and orange is the actual winning combination.

My position on the "doomsday" risk of superhuman AGI is that if IQ offered you a decisive advantage, the world would be run by nerds. I think it's essentially a geek power fantasy. The returns on puzzle-solving skills rapidly diminish past some modest threshold.

Get ready! We are excited to announce that RooCon is planned to be a two-day conference this year, on 5-6 November 2025, packed with an amazing agenda of CTI content. 🦘 ⏲️📅 Guest registration will open next week at 0930 AEST on 2 Sep 2025 🧵 #RooCon #RooCon25 #CTI

“You wouldn’t happen to have anything that could help me understand today’s ever-changing threat landscape? Perhaps involving a bit of AI?”