Chat, let me tell you something
In cybersecurity there are two things of immense value that will determine your career prospects as well as how your peers will treat you.
1. Your knowledge base
2. Your ability to shut up
Literally nothing else matters.
You don't have to be some 1337 demigod zero day researcher to have respect, but if you're educated enough in your discipline (cloud security, physical security, malware, whatever), you're golden. Pick a topic, know your stuff, don't be a jerk.
The infinitely MORE valuable asset though is your ability to remain SILENT.
Hear some crazy rumor? Shut the fuck up and don't say anything to anyone.
Hear about a potential arrest coming from some Threat Intel people? Shut the fuck up and don't say anything to anyone.
Did you hear some Threat Actors discuss a compromise? Shut the fuck up and don't say anything to anyone.
See someone get "doxxed"? Shut the fuck up and don't say anything to anyone.
Did a colleague or peer disclose something to you that they shouldn't have? Shut the fuck up and don't say anything to anyone.
Are some Threat Actors having a conflict online? Shut the fuck up and don't say anything to anyone.
The only time, with little to no nuance, something can be discussed is if it is public-public. Otherwise, it is in your best interest to remain quiet and mind your own business. Being loud can cause many problems, but drama and conflict is a big no-no in our field especially with it being so relatively small
Massive regression in security maturity across the board:
-Fixate on 0days and bugs.
-No concern for provenance (skills, mcp).
-Build basic PoC-level tools.
-โfix all exploitable vulnsโ
-pwnd? Blame AI
-no logs
Itโs like we forgot everything weโve learned in the last 20 years
Watching #vibecoding videos make my head hurt. Like how do you not know how to download a package using brew...
What's the equivalent of tech debt in coding/dev? Because we are about to drown in that in a few years..
โผ๏ธ๐บ๐ธ The hacktivist group Handala Hack has posted a threatening message on their Telegram channel claiming an imminent data leak targeting Lockheed Martin, the major U.S. defense contractor.