How Does “The Com” Work? | SLEUTHCON 2025 YouTube video by SLEUTHCON

Watch the full talk: www.youtube.com/watch?v=TydZ...

We are less than a month away from #PIVOTcon26 #CfP deadline,come present your best research in a trusted,vetted environment attended by some of the best researchers. We created such an environment so that we can feel safe to exchange beyond the blogposts #CTI #ThreatResearch #ThreatIntel #MemeGuide

In my opinion - this should be a much bigger story and regulators and AI firms worldwide should be much more engaged.

If there’s no lines *at all* with GenAI, there will be harm.

Orgs and regulators can’t talk big about AI safety in public and then say nothing when this unfolds.

Principal Researcher Company Description: Our MissionAt Palo Alto Networks® everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world...

Palo Alto Unit 42 has another job opening looking for #synapse experience on a high impact team! 💚🤩🎉
jobs.smartrecruiters.com/PaloAltoNetw...

Shields Up: Alleged Microsoft Office Zero Day for Sale - Dataminr Alleged Microsoft Office zero-day exploit is being advertised for $300,000 on the RAMP forum by "zeroplayer," a seller with a history of legitimate zero-day sales. The unconfirmed exploit reportedly b...

Shields Up: Alleged Microsoft Office Zero Day for Sale
www.dataminr.com/resources/in...

Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger | Google Cloud Blog Russia state-aligned threat actors target Signal Messenger accounts used by individuals of interest to Russia's intelligence services.

For no reason at all, re-upping this blog from @danwblack.bsky.social, which shows the high interest that Russian APTs have in getting access to Signal messages.

cloud.google.com/blog/topics/...

🔥BREAKING NEWS: Two sources have told me that the Department of Veterans Affairs payroll system (VATAS) has been down since Friday. It is operating in 'Emergency Mode' only and will have to resort to straight time cards to get people their base pay on Friday.

This_Is_Fine.gif

Critical Warning: 'Cisco has not released software updates to address the vulnerabilities described in this advisory. There are no workarounds that address these vulnerabilities.' 👀 sec.cloudapps.cisco.com/security/cen... #cybersecurity @gate15.bsky.social

Former top NSA cyber official: Probationary firings ‘devastating’ to cyber, national security Rob Joyce emphasized during a House hearing how important probationary employees are to NSA efforts to counter China and other threats in cyberspace.

“I want to raise my grave concerns that the aggressive threats to cut U.S. government probationary employees will have a devastating impact on the cybersecurity and our national security.” @rgblights.bsky.social

cyberscoop.com/joyce-china-...

Earth with ampersand

Celebrate April 22nd with ATT&CK v17!

The next version of ATT&CK is almost here, with new content related to the ESXi hypervisor, broad improvements to defenses, and updates to techniques, groups, and software across the framework.

Jesus fucking Christ

I mean this so sincerely

If you participated in erasing Sam Nordquist's fucking identity at the NYT, a TRANS man from Minnesota who was murdered in New York, I think you are fucking scum.

"But I would have gotten fired!"

Get fired then.

Don't be a fucking coward.

DOGE as a National Cyberattack

In the span of just weeks, the US government has experienced what may be the most consequential security breach in its history—not through a sophisticated cyberattack or an act of foreign espionage, but through official orders by a billionaire with a poorly defined…

We got a DOGE staff list. From a McKinsey alum to a former Clarence Thomas clerk, here are the workers powering Elon Musk's cost-cutting squad. A list of White House DOGE staffers shows about 30 young tech, finance, and legal professionals remaking the federal government.

Here's a list of DOGE staff, assembled and annotated by my colleagues at BI. Whatever you do, please don't share it.

www.businessinsider.com/doge-staff-l...

The current view of waste.gov, which says the content is password protected and prompts for a password.

10/10, no notes

We are in Hell and Hell pushes directly to prod.

And it begins.

FBI class action lawsuit against the retaliatory purge.

First Amendment
Violation of Due Process
Rights to Privacy

www.justsecurity.org/wp-content/u...

a close up of a man 's face with a drum in the background ALT: a close up of a man 's face with a drum in the background

Every vet this morning, thinking about all those years of information awareness training and threats of UCMJ for using flash drives

From a journalist friend: Just spreading the word. The CDC is purging data, so people should archive their favorite CDC datasets today, namely ones around race/ethnic diversity, LGBTQ, and reproductive health. Also health data involving climate. The youth risk behavior survey has already gone down.

The Recorded Future annual report is out!

TL;DR - 2024 was bad and 2025 will likely be worse.

Intelligence officials are starting to leak to me now too. Here’s a memo Defense Intelligence Agency personnel received instructing them to suspend observances including:
- Holocaust Remembrance Day
- MLK Day
- Juneteenth

"In the past year, Dozens of hacking groups turned to Google’s Gemini chatbot to assist with malicious code writing, hunts for publicly known cyber vulnerabilities and research into organizations to target for attack, Google’s cyber-threat experts said."

www.msn.com/en-us/money/...

I have a feeling someone may need this today.

This is a time that will try all our souls. We must let our friends & family know we see them, we value them & we will stand up to protect everyone’s right to be themselves.

A ton of folks are still using the old server and are going to be sad December 18th when it's shut down for good and their apps/scrips break.

Moving to TAXII 2.1/STIX 2.1 is more than just a URL change, so the time to get started is yesterday. Please help us spread the word that the end is nigh.

The Community Driven CTI Library
ORKL provides easy access and (re-)search capabilities to a large number of publicised cyber threat intelligence (CTI) reports.

orkl.eu

TY, this looks handy!