Let's Talk About... Bordeaux 2025: Part 1 Podcast Episode · The Wine Conversation · April 19 · 7m

A nice update from @janeanson.bsky.social on the 2025 vintage from Bordeaux.

I think there’s a lot of that right now. Anyone who claims to have the answer to job situation right now is probably trying to sell you something.

They Were the Most Sought-After Workers in America. Now They’re Unemployable. What Happened? — Slate The golden era of the tech industry is dead—leaving 1.2 million laid-off workers like me scrambling in a job market that no longer wants us.

Those of us who have been in tech a loooonggg time got this lesson during the dot-com implosion, unfortunately many younger people are just learning this now ☹️

Today in the SUN we feature an article from @sansinstitute.bsky.social on 10 Gaps Executive Cyber Exercises Consistently Reveal.

Read more below:
www.sans.org/blog/from-ta...

#cybersecurity
@andyjabbour.bsky.social

A square promotional graphic with a light blue background and rounded corners. At the top-left is the Sherpa Intelligence logo, three overlapping blue mountain peaks, with the text "SHERPA INTELLIGENCE" and tagline "Your Guide Up a Mountain of Information". At the top-right, the text "Information Security" and "Data Privacy" is displayed. Below this is a speckled ceramic mug of coffee, seen from above, featuring an intricate swirl pattern of cream and coffee. Large, bold dark blue text below the mug says: "Subscribe now and read over your morning coffee." A subheading follows: "Weekend News Roundup:" with the date "April 17-19, 2026". At the bottom center, the website URL "SHERPAINTELLIGENCE.SUBSTACK.COM" is shown with a bookmark icon in the bottom-right corner.

What do a háček, Kelp, and Kurdistan have in common?

They're all mentioned in my Monday morning newsletter.

Subscribe now and read about them tomorrow!

Information Security & Data Privacy Weekend News Roundup: April 17-19, 2026
open.substack.com/pub/sherpain...

That was my thought to, but I haven’t seen direct evidence to tie the two things together (especially since I know how long it takes Microsoft to work on Vulns sometimes).

Microsoft drops its second-largest monthly batch of defects on record The vendor disclosed one actively exploited zero-day vulnerability in Microsoft Office SharePoint that allows attackers to view information and make changes to disclosed information.

Le sigh 😔

Microsoft drops its second-largest monthly batch of defects on record

via @mattkapko.com & @cyberscoop.bsky.social

(h/t @zackwhittaker.com)

This AI company leaked its own code. It's also built something terrifying Podcast Episode · Smashing Security · April 15 · 45m

Another great episode of @smashingsecurity.com featuring @shehackspurple.bsky.social!

NIST to limit work on CVE entries as submissions surge NIST said it will only add details and information to the records of vulnerabilities that meet a certain threshold — changing a longstanding mission to categorize every CVE, which stands for cybersecu...

Interesting choice with the number of CVEs surging…

NIST to limit work on CVE entries as submissions surge

via @jgreig.bsky.social & @therecordmedia.bsky.social

Nice! I’ll check it out.

Fascinating, if you are in San Francisco, the American Bookbinder Museum is hosting an exhibit of 250 years of banned books in the United States.

RSA Conference 2012: Security industry “at serious risk of failing” The last 12 months have challenged the security industry more than ever before. But it's not too late to fight back, said RSA's Art Coviello in his keynote to open the annual security event.

I was trying to look up something from 2012's RSAC and found this keynote.

So, here's my question to you:

Have we failed?

Because, honestly it feels a bit like we, as an industry, we have failed.

As Peru’s rural vote came in leftist presidential candidate Roberto Sánchez, a former foreign trade and tourism minister, surged into second place. Because Keiko Fujimori is so widely despised, that means there is a VERY good chance Sánchez will win the June 7 runoff and be the next president.

Majority of Australian youth still use social media despite ban, researchers find Despite a social media ban implemented in December, new research found that most Australian children between the ages of 12 and 15 can still access their accounts on social media platforms.

Quelle Surprise 🤪

Majority of Australian youth still use social media despite ban, researchers find

via @suzannesmalley.bsky.social & @therecordmedia.bsky.social

Lab Space The landing page for agile CSA community projects

The CSA CISO Community, SANS, [un]prompted, and the wider community released a briefing on how AI-driven vulnerability discovery is reshaping the defender timeline.

Read more below:
labs.cloudsecurityalliance.org/mythos-ciso/

#cybersecurity
@andyjabbour.bsky.social
@campuscodi.risky.biz

UK says it exposed Russian submarine activity near undersea cables A Russian attack submarine and vessels from the country’s Main Directorate of Deep Sea Research (GUGI) were involved in what the UK Ministry of Defence called “nefarious activity over critical underse...

All is right with the world (j/k, it's not) when @alexmartin.bsky.social is reporting on undersea cables!

UK says it exposed Russian submarine activity near undersea cables

via @therecordmedia.bsky.social

How often do threat actors default on promises to delete data?

h/t @zackwhittaker.com

#Mythos strategy coauthored by @gadievron.bsky.social @argv.bsky.social Rob T Lee, Jen Easterly, Bruce Schneier, Chris Inglis, Phil Venables, @rgblights.bsky.social, @sounil.bsky.social, Jim Reavis, Jon Stewart, Maxim K., Dave Lewis, Joshua Saxe, John Yeoh, Ramy Houssaini, James Lyne, me & many more

Hungary’s Orbán concedes defeat as opposition heads for landslide win Péter Magyar’s Tisza party was projected to win 136 out of 199 seats, giving it a two-thirds majority

👀 👀 👀

Hungary’s Orbán concedes defeat as opposition heads for landslide win

Thank you 🙏! We appreciate the kind words.

This is the final day to back the campaign, you absolutely don't want to miss out on the revival of this amazing story.

Plus, since I know you all love to read you can back it at a tier where you get the comic, plus the original book!

Join us today!

a woman wearing sunglasses is drinking from an orange stanley tumbler ALT: a woman wearing sunglasses is drinking from an orange stanley tumbler

I’m normally not a “go shopping on Saturday afternoon” kind of guy. Just not my thing.

But, today I am doing that.

And, y’all it turns out big water cups/bottles are a real thing that people just carry with them everywhere

Weird.

[Grumpy Old Man]
I do love our robot vacuum, but goddamned people, pick up your tissues. Don’t be gross.

Seriously, is this really a problem that needs solving? Like are other households just filled with people who drop their nasty-assed tissues all over the place?

[/Grumpy Old Man]

Happy Friday! Before you head out for the weekend back The Conjure-Man Dies on Kickstarter.

Seriously, you don't want to miss out on this great story and, more importantly, you DON'T want to miss our Kickstarter-exclusive covers!

I sincerely appreciate all the support so far, let's finish strong!

Wait, apologies for questioning the premise of your statement. But, do we have any evidence she was good at bartending?

Yes, she ran the bar. But was she an actual good bartender?

After data breach, $10B-valued startup Mercor is having a month | TechCrunch After falling victim to a hacker, Mercor is facing lawsuits and reportedly losing big-name customers.

More on this from Julie Bort at @techcrunch.com

$10B AI Startup Mercor Bleeds Customers After Data Breach Mercor faces lawsuits and mass customer exodus following security breach

This is fascinating to me. Large scale data breaches happen with alarming frequency. While the Mercor breach was bad, it wasn't even the worst breach that month.

But, the very quick lost of trust from customers and contractors may indicate a deeper problem with some AI-based start ups.

Damned! This looks absolutely amazing. Unfortunately I can't be there. But if you are near Brooklyn you should definitely attend!

The Trammps - Disco Inferno YouTube video by CoooLverstukas

It's been a couple of weeks since we had a truly interesting, newly registered ransomware-themed domain. And here it is...

ransomwareinferno[.]com

No thank you, there's only one inferno I want...

Inside the FBI’s router takedown that cut off APT28’s ‘tremendous access’ FBI Assistant Director Brett Leatherman reveals how "Operation Masquerade" dismantled a "virtually invisible" Russian GRU cyber campaign that hijacked 18,000 routers to spy on home and office traffic worldwide.

Inside the FBI’s router takedown that cut off APT28’s ‘tremendous access’

via @timstarks.bsky.social & @cyberscoop.bsky.social