👇
Last night's slopfest surrounding the bogus PHP exploit and the subsequent panic wave is a perfect example of why good cybersecurity researchers are still needed, why LLMs are not infallible, and why critical thinking cannot be automated away.
AI can accelerate research, but clanker confidence is not evidence and consensus built on unverified claims in the end is still just speculation.
Next time we might not be so fortunate, so maybe as a community we need to tighten and review how we handle patching and assume leaks will happen and be prepared to counter that.
👇
arstechnica.com/security/202…
The private keys for these certs are literally the numbers 4, 56, 66, 115, 155, 156, 230, and 237 (life imitates XKCD, again).
Marco (Marc) Ayala retweeted
This is tremendous news for America's children. An entire generation will grow up as SpaceX owners. Well done @elonmusk! 🇺🇸
👇
Replying to @HuntressLabs
Impacted organizations should immediately disable this application (ID: 506e08f9-6e9a-4da4-942b-a099a03644ae) in the Entra Admin Center, following the instructions here.
Important updates to our Privacy Policy and Terms of Service …. If you use it you may want to check the fine print.
Marco (Marc) Ayala retweeted
Player. Coach. Legend.
Mike Ditka embodied the spirit of Chicago and will be deeply missed.
Marco (Marc) Ayala retweeted
NFL legend Mike Ditka has died at 86
Ditka led the 1985 Chicago Bears to a Super Bowl XX victory
Marco (Marc) Ayala retweeted
We are committed to protecting this vital national interest through close collaboration with election partners to strengthen resilience and protect public confidence in the voting process. Dive into our 2026 Election Infrastructure Security Plan: go.dhs.gov/5aB
Marco (Marc) Ayala retweeted
A global credential-compromise campaign known as FortiBleed is actively targeting internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. Today, the @FBI and @SecretService issued a Joint Cybersecurity Advisory to warn organizations about this activity.
Threat actors are exploiting reused or leaked credentials and legacy SHA-256 password storage, enabling threat actors to harvest and crack authentication at scale. More than 86,644 devices have been compromised across 194 countries, with some organizations locked out of systems.
We encourage organizations to review the advisory for TTPs and IOCs associated with this activity and implement our recommended mitigations.
👉ic3.gov/CSA/2026/261006.pdf
👇🧯
New Dell System Update flaw lets hackers gain root privileges
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
👇
Dell asks admins to patch max severity CSM flaws as soon as possible
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
An array of Penn State alumni, faculty, and students have played an essential role in NASA’s upcoming Dragonfly mission, a groundbreaking exploration of Saturn’s largest moon in search of a new understanding of the origins of life on Earth. pennstatermag.com/alumni/fli…
👇
.@SECWAR “Today—at my direction—we are launching FORTRESS America—a national insurance policy for the American homeland.
FORTRESS stands for: Federal Operations for Resilience, Troop Resources, Energy, Supply, and Survivability.
And here is what FORTRESS calls for:
Every major military installation in America is going to generate its own power. Independent of the civilian grid. If an adversary takes down the grid—by cyberattack, by sabotage, by any means—our bases stay lit. Our aircraft keep flying. Our command centers never go dark.
We are bringing our critical supply chains home. The rare earths, the specialty metals, the semiconductors, the propellants—mined in America, refined in America, built in America, by American workers.”
Marco (Marc) Ayala retweeted
New Cyberattack Series report: a threat actor reset one password and ended up inside the systems where code gets built and shipped. No malware, no exploits. Full report: msft.it/6011acvYc
























