State Data Privacy Regulators Are Coming. What Story Will You Tell Them? Regulators are ready to enforce new state data privacy laws. Here's how experts say organizations can stay compliant and avoid penalties.

State Data Privacy Regulators Are Coming. What Story Will You Tell Them?: bit.ly/40Ye03b by @nerdiegaga #DRTheEdge

Trump Fires DHS Board Probing Salt Typhoon Hacks In a letter sent today, the acting DHS secretary terminated membership to all advisory boards, including the Cyber Safety Review Board tasked with investigating state-sponsored cyber threats against t...

Here we go: www.darkreading.com/threat-intel...

Has the TikTok Ban Already Backfired on US Cybersecurity? The Supreme Court has affirmed TikTok's ban in the US, which has its users in revolt and is creating a whole new set of national cybersecurity concerns.

The TikTok ban is already going down very poorly cybersecurity-wise www.darkreading.com/threat-intel...

Biden's Cyber EO Gives Trump a Blueprint for Defense New order mandates securing the federal software supply chain, communications networks, as well as deploying AI tools to protect critical infrastructure from cyberattacks — but will the Trump administ...

New from me on the new Biden #cybersecurity Executive Order: www.darkreading.com/threat-intel...

Active Directory Flaw Can Crash Any Microsoft Server Windows servers are vulnerable to a dangerous LDAP vulnerability that could be used to crash multiple servers at once and should be patched immediately.

Extra bad Active Directory bug needs a patch: www.darkreading.com/vulnerabilit...

Chinese State Hackers Breach US Treasury Department In what's being called a 'major cybersecurity incident,' Beijing-backed adversaries broke into cyber vendor BeyondTrust to access US Department of Treasury workstations and steal unclassified data, ac...

New from me on the “epic” US Treasury hack www.darkreading.com/cyberattacks...

Like seriously yikes.

People are losing their minds right? It’s because there’s no hope because the oligarchs suck up all the wealth by scamming everyone right? And we are all armed like soldiers? Yikes y’all.

RATs as a service I mean

Trojan-as-a-Service Hits Euro Banks, Crypto Exchanges At least 17 affiliate groups have used the "DroidBot" Android banking Trojan against 77 financial services companies across Europe, with more to come, researchers warn.

Banking Trojan RAT’s as a service operations are a thing now: www.darkreading.com/threat-intel...

And money laundering. That’s what crypto is really used for.

Media literacy matters but as the legacy media outlets crumble look to the business journalists. I think they will have a crucial role in covering the next administration.

As this administration shifts every government function imaginable over to the private sector its business journalists who are going to have the best view of what’s really happening and the freedom to deliver the information without having to be “entertaining”

I was on a call this week with dozens of business journalists covering all sorts of vertical markets like manufacturing, waste management and the garment industry and these are world class pros covering this sectors like Watergate

At the same time journalists who really wanted to work for their hometown paper have found employment at liable wages in business journalism.

Business journalism has a market. People want to know where the money is always and are willing to pay for that info

Decades of craven negative campaign ads have destroyed Americans’ interest in civic life. That left local news with no one to care. There are of course other reasons but to my mind that’s a biggie

Over the next four years look to business journalists and journalism for information. Why?

Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack In a first, Russia's APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street.

This is… something www.wired.com/story/russia...

Cross-Site Scripting: 2024's Most Dangerous Software In addition to XSS, MITRE and CISA's 2024 list of the 25 most dangerous security vulnerability types (CWEs) also flagged out-of-bounds write, SQL injection, CSRF, and path traversal.

Looks like DevSecOps isn’t going anywhere anytime soon. www.darkreading.com/application-...

Drudge giving me serious WWIII kickoff vibes

Palo Alto Patches Critical Zero-Day Firewall Bug The Expedition appliance's PAN-OS firewall interface tool has racked up three critical security vulnerabilities under active attack in the past week, leading the vendor to advise customers to pull it ...

New from me: www.darkreading.com/cyberattacks...