Mike Saurbaugh

Proud Dad. Lucky Husband. @IANS_Security Faculty. Cybersecurity Leader & Consultant. Weightlifting. Cooking.

[Dennis @DennisF]

No one was asking for a reprise of the disclosure debate but @msftsecresponse delivered it anyway

[Mike Saurbaugh @MikeSaurbaugh]

@HackingDave Apples don’t fall far from the tree…

[Mike Saurbaugh @MikeSaurbaugh]

Important point

[Mike Robbins @mikedrobbins]

One of the biggest factors in whether people speak up, contribute, and fully engage… is whether they feel safe.

Not “safe” in a formal or policy-driven way. Safe in a human way.

Do they feel seen? Do they feel heard?

[Justin Elze @HackingLZ]

Watch of the day

https://t.co/pdEneeAeRY

[Mike Saurbaugh @MikeSaurbaugh]

@anton_chuvakin “Patch faster” - and one could ask, faster than what? We all run different races.

[Mike Saurbaugh @MikeSaurbaugh]

Important thread with a lot of great insights

[Mudge @dotMudge]

Been a long while since Story Time…

I don’t know why this popped into my head, but perhaps there’s something in it someone will find helpful.

So here goes

[Mike Saurbaugh @MikeSaurbaugh]

@philvenables PBR me ASAP…

[Ed Elson @edels0n]

Sharp lineup on @ProfGMarkets this week:

→ @RayDalio on America's looming debt crisis
→ @reidhoffman on the case for AI optimism
→ @JigarShahDC & Jon Parrella on how data centers are impacting the grid
→ @PatrickEBoyle on the SpaceX IPO (and what investors are missing)
→ @gilluria on Big Tech earnings
→ Sid Jain on why 2026 is a moment for emerging markets

Full episodes on YouTube: https://t.co/R1jdioGcKd

[Mike Saurbaugh @MikeSaurbaugh]

@Camp4 FWIW, from someone you haven’t met, but follows you and listens to you and @mbrown_co, wishing you a speedy recovery. I know being active is a huge part of your life. Take care

[Matt Johansen @mattjay]

uhhhh - password manager breached in supply chain attack.

bad bad bad

[Mike Saurbaugh @MikeSaurbaugh]

@richroll Haven’t made it through the whole episode yet, but loved hearing a new album coming out from Mike D😎

[Jaime Blasco @jaimeblascob]

https://t.co/qyClw5zPME

[Matt Johansen @mattjay]

I've talked on camera for 10+ hours about Mythos the last few days.

Here is a distilled down "what it is" and "what do i need to do about it?" version that hopefully cuts through some of the noise for you.

https://t.co/rzOKqNo9Cb

[Dave Lewis @gattaca]

An Expedited Strategy Briefing on Mythos, Glasswing, and building a security program for what comes next, by 250 CISOs, and the wider community.

It is still a draft, with some design elements incomplete, but we felt it was imperative to release it and update as we go.

Link: https://t.co/nNEdqroHQX

[Matt Johansen @mattjay]

When Jason drops an Executive Offense, you read it.

[Dennis @DennisF]

Supply Chain Attack Hits Axios NPM Packages https://t.co/NqMZXhBLCD #decipher #deciphersec

[Matt Johansen @mattjay]

I’ve been briefed on this one from the team that found it.

I interviewed them yesterday and will put out a video soon. - it’s an insane story between Darksword and Coruna.

[Matthew Green @matthew_d_green]

I’m going to keep harping on this. Meta’s push to remove encryption and lobby for age verification laws feel like two sides of a very ominous coin.

[Richard Seroter @rseroter]

"For the first time since we began publishing the CTHR in 2021, we observed a tactical pivot by threat actors. They’re now targeting third-party software vulnerabilities more than weak or missing credentials as the primary initial access vector." https://t.co/wSC5lPPGAZ

[Dennis @DennisF]

Every day is zero day. New data from @Mandiant on who's using 0 days and how.