ZeroOneKeys 🔑

Tweeting for a safer and secure digital existence • I eat cuckoo eggs and browser cookies • I hate pixel tracker • : ( ) { : | : & } ; :

[ZeroOneKeys 🔑 @ZeroOneKeys]

Human expertise and rigorous verification still matter, especially when private communications are at stake. #AISecurity #Cryptography

[The Cyber Security Hub™ @TheCyberSecHub]

Google DeepMind melds humans and AI agents to vet Signal's secure messaging techniques: Post-quantum handshake and Triple Ratchet get a… www.​theregister.​com/ai-and-ml/2026/11/10/google-deepmind-melds-humans-and-ai-agents-to-vet-signals-secure-messaging-techniques/5308625

[ZeroOneKeys 🔑 @ZeroOneKeys]

That's basic security hygiene failing spectacularly, with vehicle access at stake. Some risks don't need zero-days. #Cybersecurity #Infosec #RiskManagement

[The Cyber Security Hub™ @TheCyberSecHub]

Default Admin Password Let Researchers Unlock and Start Cars: Default admin password on automaker login servers let researchers unlock and start test cars www.​infosecurity-magazine.​com/news/forgerock-openidm-default-password/ #cybersecurity #infosec #hacking

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm Security operations suffer when constant alerts and escalations become the norm. A calmer operating model isn’t less vigilant. It means better detection, clearer priorities, and enough capacity to respond when something genuinely matters.

[the rational pm 🧠 @rationalpm]

A project can be busy, visible, and badly designed for sustained work. Calm is not laziness. Explore a different operating model: https://t.co/veyw7OVtm4

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm Fatigue is a security risk too. Tired engineers miss warning signs, make configuration mistakes, and exercise poorer judgment under pressure. An exhausted team responding to a crisis can create the next one.

[the rational pm 🧠 @rationalpm]

A failing project can tempt leaders into a final sprint powered by overtime. The article argues for the opposite: protect sleep and preserve the team’s ability to think. Read it: https://t.co/zLzADhAB15

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm In cybersecurity, prolonged alert fatigue can be as dangerous as a missed alert. When everything is urgent, people lose the ability to distinguish real threats from noise. Exhaustion weakens the very judgment security depends on.

[the rational pm 🧠 @rationalpm]

Sustained urgency can become its own project risk. Long hours may look committed, but exhausted people estimate poorly, decide poorly, and eventually stop caring.

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm Incident response often works this way. The critical coordination happens before the formal bridge call. Confirming facts, identifying decision owners, and resolving conflicting assumptions can save valuable time when everyone comes together.

[the rational pm 🧠 @rationalpm]

Half the work happens before the meeting. A quiet call. A clarified assumption. One person finally aligned. By the time everyone joins, the problem looks easy.

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm Security teams face this with dashboards too. If metrics are stale, incomplete, or misleading, people demand another briefing. Better reporting means showing actual exposure, exceptions, and decisions needed, not just reassuring green indicators.

[the rational pm 🧠 @rationalpm]

Some status meetings exist because nobody trusts the status report.

Fix the reporting first. Then decide whether the meeting still earns its place. A useful reset: https://t.co/kNN6XFwtgT

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm Incident response follows the same principle. You don’t investigate every alert with equal urgency during an active breach. Contain the immediate threat, protect critical assets, and sequence the rest. Prioritization is part of controlling damage.

[the rational pm 🧠 @rationalpm]

A troubled project becomes harder to recover when every task is treated as equally urgent. Narrow the goal and time-box the work. See the practical recovery advice: https://t.co/zLzADhAB15

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm Incident recovery works similarly. Restore critical services first, contain remaining exposure, and defer nonessential changes. Trying to fix everything at once increases complexity and the chance of another failure.

[the rational pm 🧠 @rationalpm]

Recovery often starts by making the project smaller. Drop the ambitious extras. Protect the essential outcome. Break large work into smaller pieces that can actually be estimated and finished.

[ZeroOneKeys 🔑 @ZeroOneKeys]

@rationalpm Security failures often emerge at the boundaries between systems and teams. Each component may look healthy while an overlooked integration or access dependency creates exposure. The gaps between owners deserve as much attention as the controls themselves.

[the rational pm 🧠 @rationalpm]

The dependency everyone forgot becomes urgent the morning it blocks testing. Good PMs do not just track tasks. They keep watching the edges of the plan.

[ZeroOneKeys 🔑 @ZeroOneKeys]

The alarms and staff response reportedly prevented the loss. That's why independent safeguards matter when OT systems are compromised. #Cybersecurity #OTSecurity

[Bull Theory @BullTheoryio]

BREAKING: 🇫🇷 Hackers broke into French blood bank refrigerators and tried to heat stored plasma to a boiling 110°C.

No blood was lost because alarm systems caught the temperature change and staff moved the plasma in time.

This is the third refrigerator hack in Europe in 3 weeks.

[ZeroOneKeys 🔑 @ZeroOneKeys]

Automating junior work might save money today while creating a serious expertise shortage tomorrow. #AI #RiskManagement

[Space and Technology @spaceandtech_]

Anthropic CEO Dario Amodei says AI could wipe out half of all entry-level roles across the legal, consulting, and finance industries within five years.