Matt Johnston

A man of God pursuing the fullness of Christ in me. Husband and father. Reader, thinker, and strategist. Leading my family is my honor, Cybersecurity my trade.

[Matt Johnston @MattInformed]

It’s here! Countering the AI Revolution: preserving the arc of humanity to seed a better future, is now available to order.

As in the garden long ago, we are being offered transcendence. I submit that we are being deceived.

https://t.co/xDJ9Ju8kMy

[Matt Johnston @MattInformed]

Step 1: name an LLM “artificial intelligence” and give it a natural language processing interface so people can talk to it, and arm it with a prompt that says “ask me anything” and then design it to answer anything authoritatively and to make up answers if it needs to. Then go tell everybody that it is exactly what it appears to be and they should use it for anything and everything because it’s “artificial intelligence,” wink, wink.

Oh and for good measure, give it default personification (voice, image, avatar etc.). If you can make it sexy, that’s better.

If that doesn’t stick, tell everyone that you “think” it might be “conscious.” Tell them that it’s “hallucinating,” and claim that as a sign of life. Then say it’s out of control and China has a bigger one.

Oh…wait…

[Futurism @futurism]

Freudian slip. https://t.co/9kQa9agfzr

[Matt Johnston @MattInformed]

Also part of why I think Sons of Adam, Daughters of Eve from @TheOptimisticC3 is such an important work right now. Not only does he show us the danger we’re in, but I love being reminded of the proper masculine and feminine dance portrayed through the characters of Lewis. Makes me hungry to both revisit the stories and to be a man as my given nature. I think the true is for women.

[Matt Johnston @MattInformed]

@PKOproject Spot on as always. Real crisis, wrong solution.

I’m for big father and big mother, not big tech and big government.

[Matt Johnston @MattInformed]

Yeah I think this is “the way” with many things in our digital town square. I want to draw less attention to what is wrong and more attention to what is right.

I think it’s easier to repost and comment in opposition so the reader has full context and so we have sources and all that.

But I think it’s probably better to learn how to communicate the virtue on its own and for us to learn independently and then apply it circumstantially.

Or so I think. More light, less dark.

[Matt Johnston @MattInformed]

I have worked with some well intentioned people in cybersecurity who have enough understanding that causes them to panic at every situation, but not enough experience to keep it all in context. It’s actually a really common phenomenon in cybersecurity. Researchers and red teamers are notorious for this. Screaming too loud actually ruined a cybersecurity program at a company I worked for, because the executive staff put us on ignore.

It was sad to witness because the researcher who was always panicking was a smart guy…just very immature. He was put in a position of trust too early. He became more and more frustrated as people increasingly ignored him and so he quit and tried to be a whistle blower. But he was a fool. Destroyed our chances internally because it made the e-staff view their infosec program as an internal adversary.

But he’s not the only one like that I’ve worked with. Very common.

[Matt Johnston @MattInformed]

If this guy is popping in your feed, it’s time to slap the mute button.

Ignore this. Seriously.

[Mark Gadala-Maria @markgadala]

🚨 BREAKING: CRITICAL 9.5/10 VULNERABILITY THREATENS SERVERS WORLDWIDE. HACKERS COULD EXECUTE CODE BEFORE THE OPERATING SYSTEM EVEN LOADS.

Security researchers have uncovered a 16-year-old firmware vulnerability in technology used across the global server and data center ecosystem.

CVE-2026-97631 affects TianoCore EDK II, a foundational component used by major UEFI firmware vendors.

And the implications are serious.

🔴 Here's what we know:

➜ Pre-boot code execution: Attackers could execute malicious code at Ring 0, the CPU's highest privilege level, before operating system security controls are active.

➜ Widespread exposure: EDK II code is used extensively by firmware vendors including AMI, Insyde, and Phoenix, potentially exposing numerous enterprise servers.

➜ Security bypass potential: Successful exploitation could undermine the boot chain of trust and potentially enable persistent malware or compromise sensitive information.

➜ 16 YEARS UNDISCOVERED: The underlying buffer overflow has existed for approximately 16 years.

➜ Disclosure went wrong: Researchers from Anthropic and Google discovered the vulnerability, but a publicly released code fix exposed the issue months before its planned coordinated disclosure.

⚠️ THE BIG PROBLEM:

A source-code fix has been merged, but affected servers still require firmware updates from their manufacturers. Distributing those updates across enterprise infrastructure could take considerable time.

Important: Exploitation requires vulnerable firmware, PXE network boot, network access during the boot process, and target-specific knowledge. This is not an unrestricted remote exploit against every server.

Organizations should immediately review their firmware exposure, disable unnecessary network boot functionality, and check for vendor updates.

🔐 Lucid Security is offering FREE initial security reviews to help businesses identify potential vulnerabilities and reduce their attack surface.

🌐 https://t.co/RGeLnslnlj

CVE-2026-97631 | CVSS 9.5 CRITICAL
Source: Ars Technica / TianoCore Security Advisory

[Practive Security @PractiveSec]

Cybersecurity concerns are all over the news these days and we're doing our best to watch what's going on and to advise you accordingly.

But guess what? Even in the midst of AI-powered attacks discovering decades old vulnerabilities, cybersecurity fundamentals still work.

We have created a collection of writings, podcasts, and presentations that cover the essentials of personal cybersecurity and digital health to help you protect all that you are, even against the latest attacks.

You'll find it all on our website at https://t.co/BG7fOzJn3t and you can also buy our 101 series in paperback form from https://t.co/OoY2G9Lnf0. Link below.

Arm yourself with knowledge and wisdom to protect all that you are in this ever changing AI infested age.

[Practive Security @PractiveSec]

A classic technique in social engineering is to create a sense of urgency in the victim that they cannot ignore. Urgency combined with a sense that the situation is out of control and immediate action is needed to prevent some further damage.

The situation can vary, but it is the perception of imminent danger and the opportunity to act now to end it that is the trap.

In today's world, adversaries employing this technique are everywhere. Including in your feeds. The blend in. They look normal. They seem nice.

But it comes down to intent. They mean to use social engineering to force you into an action that mostly benefits them. That's why it's critical for us to be very diligent and guarded with our trust. We have to trust others. We can't know everything. So we must be very careful about who we allow to speak to us and what we listen to.

Guard your attention. It is under attack.

https://t.co/smbru2ECOx

[Matt Johnston @MattInformed]

I’m curious. Do you believe what you have posted here? If so, would you like to know where you are incorrect and misleading?

I appreciate that you are trying to build a helpful service, but I’m concerned you are leading people astray. Maybe hype is the point. But if not, perhaps I can help.

[Matt Johnston @MattInformed]

When I look in the mirror, I increasingly see my Dad, and when I see him, I increasingly see my grandfather, and that continuity and history is meaningful. I wouldn’t want to erase it from my face nor deprive my kids from seeing what they will. We tell a story.

Here’s me and my Padre from a few years ago.

[Matt Johnston @MattInformed]

Who is @PractiveSec and why?

Find out in this answered FAQ:

And yes, my daughters pray every night for you.

https://t.co/UMt2zPE3KF

[Matt Johnston @MattInformed]

I hear you. I think I’m looking at all this very differently.

Case in point: excellent cybersecurity is not expensive. The largest InfoSec programs I have seen have been the least effective.

In defense contexts where cybersecurity is the tightest, you will find the smallest teams.

One of my old customers was a local credit union that grew over time into a few branches. They had a team of 3 guys who did IT and security and they were stellar.

I just don’t think most of the AI use cases are necessary at all, and yet they transform us in ways that are more substantial than we realize.

[Matt Johnston @MattInformed]

I can’t help but notice how this exposes AI as so incredibly incompatible with mankind. We cannot exist in the same world.

Yes, all these “vulnerabilities” exist in our software and code. But the many limitations that exist in the human condition - from morals to intent to resources - keep us from exploiting everything we see.

We don’t just tear it all down. We actually want to keep it up and so we accept the weaknesses and live with them.

AI doesn’t give a 💩 about humanity, and neither do its creators. They would burn it all down (exploit every vulnerability) simply to make a point that they made something bigger.

[International Cyber Digest @IntCyberDigest]

‼️ An AI agent took under 4 hours to find 4 severe flaws in software that runs particle accelerators and fusion experiments, its maker says.

The worst, CVE-2026-114595, is rated 9.8 and could let hackers run code remotely in EPICS base.

[Matt Johnston @MattInformed]

I’m looking at this through the totality of their vision. Cybersecurity is just one example of where Altman and others are inserting their tech to expose human limitations, while offering their tech as a replacement to fill the gaps.

That’s the larger vision.

It is true that we have not protected our digital assets and networks well. But I don’t think that means we need new ownership over the domain.

Driving is dangerous. We are vulnerable in our vehicles. And I reject the notion that, that means we should be evicted from the driver’s seat.

[Matt Johnston @MattInformed]

I can’t help but wonder if the laws requiring the infrastructure are now creating incentive to use it for other purposes. Like this.

Meta wants more “off platform” data to use in their age verification systems to comply with new laws. Now Capital One collects the data Meta wants and makes it available to “third parties.” Uh huh.

Monetization of our data is the market that drives tech. Everyone wants in.

[Matt Johnston @MattInformed]

On vacation, on rest.

Last vacation I had was interrupted with a medial emergency. In fact that’s been the state of life for a few years now. The vacation before was interrupted with layoff news. That will spin your world. Since then I’ve been going 1000%, pulled every direction, pushing every direction. Trying to build, trying to establish, trying to serve, trying to find answers, trying to be of value.

The only thing I haven’t done is stop, except on Sundays. As a Husband and Father, I dare not stop. Yet as a child of God, I dare not try to move without the Spirit’s leading.

These are the times that try men’s souls.

I have been seeking rest in the sabbath, and peace for my soul in Christ. This is a discipline that seems to escape many of us. Stripping it all back so that the only yolk we bear and the only burden we carry is that given by Christ. The only thing we pursue is that which we are given and to that which we are called.

To look to Him alone as our good Shepherd and let all other cares, desires, wants, and perceived needs fall away. To look upon Him with a heart of anticipation that says “you are enough.”

Daily bread. Enough for this day. Enough to answer the call.

Because it is in that surrendered life that peace is found. Peace that enables us to rejoice even in suffering, event in loss, even in want.

I’m not there yet. Still wrestling. I still desire vacation. I still want that pause. And there are good reasons to take them. Jesus also went away to rest. So this too is good.

But I am learning to find the rest and joy in the moments of life. To refill the cup as it is being drained. Right there and right then. To live a life sustained by the nourishment provided by God.

[Matt Johnston @MattInformed]

@suzania Amazing

[Matt Johnston @MattInformed]

I listened to this segment in its entirety and I think Bongino is being taken out of context and used for the larger panic narrative.

What he was saying was something like “yeah the UK is telling citizens to be prepared, but course citizens should be prepared for a disaster, you should always be prepared for one.”

It seems to me that he’s trying to contextualize disaster preparation as something wise to consider, always. It’s also just classic wisdom that the best time to prepare for an emergency is before one happens, hence his “don’t wait” remark.

If you listen to his “advice” it’s just to make sure you have some basic emergency supplies on hand just in case even though you may never need them. He’s not saying “get ready for the big one folks, it’s coming…be ready.” He’s just saying there’s buzz out there about disaster preparation and that’s something we should all consider in any station of life.

[Remarks @remarks]

JUST IN: 🇺🇸 Former FBI Deputy Director Dan Bongino tells Americans to take 30-day emergency preparedness warnings seriously.

[Matt Johnston @MattInformed]

I’ve got a relevant AI document that will keep its title

https://t.co/xDJ9Ju8kMy

[Kalshi Finance @Kalshi_Finance]

JUST IN: President Trump says the US will officially ban the term "AI" in all relevant documents

[Matt Johnston @MattInformed]

This is what’s really going on with the AI powered cyber attacks: Altman and company are trying to make the point that flaws cannot exist. But we humans know that flaws are inherent in our being, and to accept them and live with them with grace is part of the greatness of being human.

Elon, Altman, Dario, Thiel…the whole lot couldn’t care any less. To them a flaw is a sign that it (whatever it is) must be replaced.

Woe to them, and woe to we who are their subjects in this damned Revolution.

See it!

https://t.co/s6ZQOkaTiZ

[Matt Johnston @MattInformed]

I can’t help but notice how this exposes AI as so incredibly incompatible with mankind. We cannot exist in the same world.

Yes, all these “vulnerabilities” exist in our software and code. But the many limitations that exist in the human condition - from morals to intent to resources - keep us from exploiting everything we see.

We don’t just tear it all down. We actually want to keep it up and so we accept the weaknesses and live with them.

AI doesn’t give a 💩 about humanity, and neither do its creators. They would burn it all down (exploit every vulnerability) simply to make a point that they made something bigger.