Justine Bone

[Nico Waisman @nicowaisman]

This is extremely important. The bug is very serious, but exploitation is not trivial.

[Justine Bone @justinembone]

What Dino said

[Dino A. Dai Zovi @dinodaizovi]

Over-privileged security products are an anti-pattern. Also, the threat model that cryptocurrency exchanges have had to deal with for the last decade is likely to be the threat model that everyone will have to deal with going forward (b/c of AI changing attack economics).

[Dino A. Dai Zovi @dinodaizovi]

It's simple: if Cyber-critical AI models were able to find and exploit vulnerabilities in critical attack surfaces of systems designed using security engineering principles like OpenSSH, firecracker, seL4, etc, we'd have evidence of it by now.

We already have the tools and know how to defend against and contain advanced AI, it just isn't applied everywhere that it needs to be yet.

[Ian Miers @secparam]

153 million driver's license scans for sale should be the death knell for "just upload your ID" age verification and AML/KYC schemes
Not quite an I-told-you-so, this looks like meat-space scans, but it proves the risk and hands forgers 153 mil genuine IDs
https://t.co/YZG13shu9k

[BLOCKCHAIN WEEK – UNGA EDITION @BlockchainWeeks]

2/6
Featured Speakers:
• Kedar Mohile (Amazon)
• Anisha Salunkhe (Amazon Web Services)
• Phillip Lord @philliplord1 (CEO, Bitcoin Japan | former Bakkt)
• Lewis Tuff @tuffleuk (CTO, Brevan Howard Digital)
• Justine Bone @justinembone (Executive Director, Crypto ISAC)
• Eric Guthrie @BetterMEWE (Partner, Cogent Law)
• Wook Lee (CEO, EDENA Capital Partners)
• Ali Abou Daya @aliaboudaya (CEO, Transactix)

[Justine Bone @justinembone]

@trailofbits In 2006 it cost us our top 3 researchers 6 months of focus to find one VMware escape 0day. About…. $200k in expenses.

[Dan Guido @dguido]

AI is calling in all of our security debt, all at the same time.

Most sandboxes were never very secure, but that didn't matter because expertise was scarce and effort was expensive. Not so in 2026.
https://t.co/NTn3bGdwo4

[Justine Bone @justinembone]

@francescpicc @AitelMax

[Laura Shin @laurashin]

Erik Voorhees on the crypto UX realisation that took 15 years

"Crypto has always had this UX challenge with humans. Every time you go to a crypto conference, whether it was back in 2011 or tomorrow, people talk about how do you make this stuff more usable to people"

"It seems like perhaps it's just much more usable for robots and the machines and the AI, and that crypto is actually built for the machines and we didn't know it. The machines are now going to start running on the stuff and utilizing it"

"They have no trouble with public key pairs, that's easy for them"

"I don't see a future where the robots are using bank accounts at Wells Fargo. I do see a future where they're using crypto assets on decentralized rails"

[Justine Bone @justinembone]

@davidsenra @diogenes @mickymalka @RibbitCapital And Crypto ISAC

[Dino A. Dai Zovi @dinodaizovi]

Periodic reminder how important random number generation is for cryptography:

[Daniel Cuthbert @dcuthbert]

modern frontier lab guardrails are literally 1990s AV sig scanning approaches

"Batch 3 hit a safety filter (likely tripped by exploit-content keywords)"

yeah parsing markdown files that talk about raptor exploit architecture is bad

[Justine Bone @justinembone]

Watch this move - Dino is legend

[Dino A. Dai Zovi @dinodaizovi]

Today is my last day at Block, closing out almost 11 of the last more than 12 years helping build security into products that serve tens of millions of people and safeguard billions of USD in monetary value.

I'm exceptionally proud of what we accomplished during my time there: growing Square to EMV payments and international markets, building security into Cash App's cloud platform from the very beginning, establishing pervasive application-layer encryption across Cash App services, growing client authenticity signals into a platform that now protects tap-to-pay, making bitcoin custody significantly safer and secure, creating data classification frameworks that became company-wide standards, safely migrating critical encryption infrastructure to the cloud, meeting PCI certifications for mobile payments acceptance, and shipping exciting new secure-by-design hardware products.

I'm grateful to the incredibly talented people I worked alongside. It's rare to find a place where you can do interesting work that matters with such great people at that scale for that long.

As for what I'm doing next, stay tuned. I'm excited to start again somewhere new (to me)!

[Daniel Cuthbert @dcuthbert]

Waht a time to be alive. SDLC advice from TeamPCP

[Justine Bone @justinembone]

@chrisrohlf @AnthropicAI Congrats!!

[Justine Bone @justinembone]

@TheTradingSword @coconuthaxor

[Crypto ISAC @Crypto_ISAC]

Today, our very own Executive Director Justine Bone (@justinembone) is speaking at Financial Services Explained Day in Washington, DC.

Crypto ISAC is looking forward to joining a panel discussion on cryptocurrency, cybersecurity, and what meaningful protection for the digital asset ecosystem requires in practice.

We’re glad to be part of the conversation with public-sector and technical cybersecurity stakeholders working to better understand emerging threats and strengthen collaboration across the ecosystem.

#CryptoISAC #Cybersecurity #DigitalAssets #ThreatIntelligence #PublicPrivate

[Crypto ISAC @Crypto_ISAC]

Great to wrap “Securing, Not Assuming Trust” with Justine Bone @justinembone at #Hederacon2026.

Appreciate the thoughtful discussion and perspectives shared by moderator, Joe Blanchard of @hashgraph, alongside Marc Baumann of @dfnsHQ, Steven Walbroehl of @HalbornSecurity, and Nick Percoco of @krakenfx.

Resilience at scale requires coordination. Collaboration across the ecosystem is becoming essential to building the infrastructure needed for the next generation of digital finance.

If you were there, would love to hear your takeaways.

#HederaCon #CryptoSecurity #Cybersecurity #DigitalAssets #CryptoISAC

[Justine Bone @justinembone]

@DriftProtocol You should also join @Crypto_ISAC

[Crypto ISAC @Crypto_ISAC]

"The gap between the threat level and the defensive infrastructure has been stark. That gap is why @Crypto_ISAC exists."

Our ED @justinembone on what last week's @USTreasury announcement really means and what the industry needs to do next.

➡️ https://t.co/2fhZs3ty6C