digitalohm

i like computers and synthesizers and cats

[Accidental CISO @AccidentalCISO]

An uncomfortable truth in our field is that as long as C suite execs and boards overwhelmingly view their security programs and audits as checkbox activities to drive sales rather than business aligned risk management activities, we will never solve the security theater problem.

[Scott Hanselman 🌮 @shanselman]

A lot of people don't realize that Windows has a built-in feature called Windows "Sandbox" that boots up a brand new virtual Windows machine in seconds. So I made an MCP server so you can test your apps inside a throwaway machine in seconds. https://t.co/huB9hAoxSv

[Jussi @jussisaur]

if you're frustrated at LLMs now, imagine how frustrated managers have been for the last 20 years

[Today Years Old @todayyearsold]

Put that shit back immediately. 2026 is not the year to be opening ancient mummies

[Rachel Tobac @RachelTobac]

Remember:
If you get RCE in MS Paint
you get RCE in real life.

[Ivan Zhang @1vnzh]

can’t believe they built the pyramids without MCPs

[Autism Capital 🧩 @AutismCapital]

The AI bros pivoted FAST 😂😂😂

[Nathan Clark @nathanclark]

can't believe i got to skip all the early software development languages and just start with english

[log4j @log4j]

“excellent, now say we cover dental”

[Beff (e/acc) @beffjezos]

The right to bear RAM shall not be infringed

[wayward strategy @waywardstrategy]

Found on reddit. Hilarious

[lcamtuf @lcamtuf]

I would like to congratulate the organizers of the 2026 Cybersecurity Awareness Month for putting together a truly spectacular event

[float @notesbyfloat]

If I were a software engineer I would simply leave the bugs out of the codebase. I don’t understand why this isn’t common practice in the industry.

[Dino A. Dai Zovi @dinodaizovi]

Most of the cybersecurity world is focused on the risks and vulnerabilities that lead to initial access, but defenders get *way* more leverage from making lateral movement impossible. You want to get to where the most an attacker can do is screen-scrape the victim's workstation.

[Thrilla the Gorilla @ThrillaRilla369]

Dear @Apple, I really wish “Delete and Report Spam” meant they wouldn’t text me again

[digitalohm @digitalohm]

@UK_Daniel_Card Not just useful but extremely visually appealing! 👏

[Nikhil Krishnan @nikillinit]

We’re like one hack away from me finally being able to get my medical records easily

[Lazy IT Guy @lazy_IT_guy]

Until we get confirmation Jira is safe from the PHP vulnerability, I don’t think anyone should be opening tickets or assigning me work.

[thaddeus e. grugq @thegrugq]

The answer is only relevant to a small niche of infosec. Most organisations are hacked by vectors that don’t involve memory corruption exploits. Agentic hacking doesn’t look like exploits, it looks like breadth-first searches for every possible mistake and misconfiguration.