Psalm 149:6-9
Let the high praises of God be in their mouth, And a two-edged sword in their hand, To execute vengeance on the nations, And punishments on the peoples; To bind their kings with chains, And their nobles with fetters of iron; To execute on them the written judgment. This honor have all His saints. Praise the LORD!
Psalm 149:6-9
Let the high praises of God be in their mouth, And a two-edged sword in their hand, To execute vengeance on the nations, And punishments on the peoples; To bind their kings with chains, And their nobles with fetters of iron; To execute on them the written judgment. This honor have all His saints. Praise the LORD!
Friday afternoon @gadievron says "I'm working on a CISO community document for Monday. Want to collaborate? Releasing Monday." I said "Sure." (I have a problem with that word.)
@AnthropicAI had dropped Mythos on Monday. @cloudsa is running an emergency CISO Zoom on Tuesday. @SANSInstitute was already building BugBusters this Thursday with Ed Skoudis, Joshua Wright, and Chris Elgee. The entire community was asking the same question: what do we actually DO about this?
Three nights later we have a 30-page strategy briefing with 60+ contributors. "Sure" turned into barely sleeping Friday, Saturday, Sunday while @gadievron and @rmogull dragged this thing into existence. (My son checked to see if I was still breathing around hour 40. I think he was mostly concerned about if Uber Eats delivered Five Guys yet.)
The contributing authors list reads like someone raided a cybersecurity hall of fame: Jen Easterly, Bruce Schneier, Chris Inglis, @philvenables, Heather Adkins @argvee, @RGB_Lights, @sounilyu, @jimreavis, Katie Moussouris @k8em0, Jon Stewart, Maxim Kovalsky, David Scott Lewis, Joshua Saxe, John Yeoh, Ramy Houssaini and James Lyne. Every single one said yes within hours.
Cloud Security Alliance @cloudsa, @SANSInstitute, [un]prompted, @OWASPGenAISec -- four organizations that don't usually build things together at this speed. This is the start.
SANS reviewers who showed up: Chris Cochran @chrishvm, @edskoudis, Viswanath S Chirravuri @vchirrav, @bettersafetynet, Ciaran Martin
Thursday @edskoudis, @joswr1ght, and @chriselgee stop talking and start showing.
Live AI-assisted vulnerability discovery against real code. No slides about the future. Terminals and bugs. (The kind of demo where something breaks and that IS the point.)
Full reviewer list is in the doc. If you know someone on it, send them a note. They earned it.
But an even bigger thank you -- seriously -- from the entire cyber security community needs to go to @gadievron for once again bringing the avengers together -- like in Endgame (is that what Mythos is?) -- and you all know the scene -- but we need someone to create the meme with Gadi Evron with his shield and Mjölnir saying "Avengers..... assemble!" because that is exactly what he does. A lot it seems.
Read it: https://t.co/pppV1gi4Vc
Going to sleep now. Setting my alarm for Thursday. (Not joking.)
#CyberSecurity #AISecurity #SANSInstitute
There is little that makes me prouder to be an American than that we would gladly lay our lives down to rescue one of our own. No soldier left behind 🫡
I’m noticing a lot of foreigners who seem to not understand why we’d risk hundreds of lives, spend millions of dollars, and sacrifice several aircraft to rescue one guy. And the reason they don’t understand is also the reason people can’t be made American by a piece of paper.
As the cost of cybercrime, particularly social engineering, has dropped to something approximating zero the number of attempts has sky rocketed. Institutions are already being stressed by the increase in volume. I suspect that soon they will be forced to adopt Agentic technologies in external facing roles like support and fraud just to survive.
@IceSolst You are spot on! EDR vendors should have the edge here but I think the newest SASE companies could also get in the game. Either way, zero trust now has to extend to the process level.
@Bezner I imagine you also wish more pastors would have spoken out on Churchill. Sure that German guy is bad, but we lose credibility if we don’t call out both sides.
No, “being a decent person” in politics isn’t about polite speech, performative empathy, and a choir-boy persona. If a political candidate advocates aborting babies, transing kids, and releasing violent criminals into society, he is not a decent person—he is enabling evil.
Of all tyrannies, a tyranny sincerely exercised for the good of its victims may be the most oppressive. It would be better to live under robber barons than under omnipotent moral busybodies. The robber baron's cruelty may sometimes sleep, his cupidity may at some point be satiated; but those who torment us for our own good will torment us without end for they do so with the approval of their own conscience.