Daniel E. Dumond

Senior IT Security Professional #husband #dad #friend #manager #madscientist #philosopher #dreamer

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[ಗೋಪಿ ಚಿನ್ನಪ್ಪ / Gopi Chinnappa @gopihc]

🚨 LiteLLM alert

Versions 1.82.7 & 1.82.8 on PyPI were compromised.

👉 Malicious .pth file executed code during install

If you used these:
• Upgrade immediately
• Rotate API keys

More: https://t.co/uOgXCPMkiE

#Python #CyberSecurity

[Miguel Avoleván 🇧🇷 @avolevan81]

@TMZ Chuck Norris will not rest in peace, peace will rest in Chuck Norris.

[Air Canada @AirCanada]

Due to an ongoing security situation in Puerto Vallarta impacting the @VallartaAirport, Air Canada has temporarily suspended operations there today. We are monitoring the situation and in contact with local authorities who are working to resolve the issue. (1/2)

[Anthony Etherin @Anthony_Etherin]

I asked Gemini to write a palindrome using the word "spider". It couldn't & told me that it was simply too difficult. I showed it the simple palindrome "Spider art: rare dips", then asked it why humans are so much better than AI when it comes to writing palindromes.

The reply:

[Daniel E. Dumond @ddumond]

I had this same issue. Couldn’t update iOS because system data was eating all the free space even after deleting all my apps and data. The solution that worked for me was to reset the device, which cleared the system data. I installed the latest version of iOS using iTunes while tethered to a computer. Then on first boot, I chose to restore the device data from an iCloud backup. The system data has been fairly small since.

[meg west @cybersecmeg]

i just hit my 2 year anniversary working at @CrowdStrike yesterday and these are some of the top things i’ve learned (in no specific order):
1. a vast majority of attacks nowadays are identity-based (malware-less); have a solid IAM strategy and constantly re-evaluate.

[Daniel Cuthbert @dcuthbert]

Some sad news from the early day of antivirus. RIP David

https://t.co/HJ029DSqL2

[Daniel E. Dumond @ddumond]

Who else has fond memories of dealing with IRQ conflicts and optimizing config.sys and autoexec.bat?

[Valentin Ignatev @valigo]

Computer Science is not science, and it's not about computers. Got reminded about this gem from MIT the other day

[Florian Roth ⚡️ @cyb3rops]

People shouldn’t be scared by this CrowdStrike report. I don’t even know why they added the “AI-enabled ransomware” part -probably a PR idea that nobody stopped

The real issue is wrong risk perception. CISOs worry about what sounds new instead of what actually causes incidents. AI-enabled ransomware” isn’t really a thing. Maybe an AI written phishing email here and there, but the rest is still human work.

Meanwhile, most orgs lack asset visibility, detection on legacy or OT systems, have exposed RDP without 2FA and poor monitoring. Yet somehow this gets less attention than a buzzword in a report.

It’s like when everyone panicked about tracking pixels in emails around 2018–2021 simply because PR people pushed it as a serious issue.

It generates distorted perception of risks. Our job as a community is to make people aware of this distortion.

https://t.co/Mcj0S23KTO

[Retro Nora💾 @RetroNora7734]

Together with TI99/4A I got TV modulator for it.
But it is in poor state, sadly.

[Alex Lieberman @businessbarista]

I stole this idea and now use it with every single employee.

It’s the best illustration I’ve seen of teaching someone to be high agency.

It says there are 5 levels of work:

Level 1: “There is a problem.”

Level 2: “There is a problem, and I’ve found some causes.”

Level 3: “Here’s the problem, here are some possible causes, and here are some possible solutions.”

Level 4: “Here’s the problem, here’s what I think caused it, here are some possible solutions, and here’s the one I think we should pick.”

Level 5: “I identified a problem, figured out what caused it, researched how to fix it, and I fixed it. Just wanted to keep you in the loop.”

Using this framework, here’s what I say to every new employee…

You will live at Level 4 from Day 1 and as we build trust you will rise to Level 5.

Being high agency doesn’t just mean tackling problems in this way. It means your entire way of working should be oriented to being a Level 4+ employee.

Plz feel free to steal it as well.

And ty @stephsmithio for the framework!

[Arista Networks @AristaNetworks]

With #OCPSummit25 (see us at booth A52) and #AIWorld happening this week, Arista continues to be a leader in #AI for networking. Hear what our Partners like @OpenAI are saying:

[Alex Cohen @anothercohen]

Bob Ross vibe coding was the AI slop I never knew I needed in my life

[pikuma.com @pikuma]

Remember 2006 Linux Compiz effects?

[Markus Vervier @marver]

Full details of CVE-2025-53773 (RCE via Copilot in VSCode, Visual Studio, and other IDEs..) thanks to @gitlab and in particular @joernchen for the collaboration.

[Avi Chawla @_avichawla]

A new embedding model cuts vector DB costs by ~200x.

It also outperforms OpenAI and Cohere models.

Here's a complete breakdown (with visuals):

[Akshay 🚀 @akshay_pachaar]

Traditional RAG vs. Agentic RAG, clearly explained (with visuals):