Matt Johansen

Founder of @vuln_u | Long Island elder emo surviving in ATX | AI and Cybersecurity news from an 18yr industry vet

[Matt Johansen @mattjay]

🚨 Exciting thing🚨 I'm getting back to my content creation roots.
I've missed blogging, podcasting, and community engagement from back before I worked for big companies with scary PR teams.

So... I'm launching a newsletter called Vulnerable U. https://t.co/eevYXMY8hB

[Matt Johansen @mattjay]

This but for mosquitos in my yard stat.

[Ole Lehmann @itsolelehmann]

Norway now has more than 2,000 underwater AI laser robots shooting lice off its salmon

they're made by a company called Stingray, and they already guard more than 50 million salmon and trout 24/7

the reason is sea lice, tiny parasites that latch onto salmon and feed on them

as few as 11 can kill a small fish, and one pen can hold 150,000 salmon

the usual fix is pumping the fish out and blasting them with warm water or water jets to knock the lice off

but the handling is so rough that Norway's fish health report ranks it the top cause of death in full-grown farmed salmon

so instead, Stingray puts a robot inside the pen that hunts lice one at a time, all day:

> two cameras watch every salmon that swims past

> AI checks two frames to make sure it's really a louse

> then a green laser fires from up to 2 meters away

> the salmon's scales reflect the beam, so the fish swims off fine and the louse is dead

we now live in a world where AI lasers do pest control on your dinner lmao

[Matt Johansen @mattjay]

@sassykathy666 Yeah that’s the best part about them. They don’t go in your ear and stay exactly put. Sound quality is surprisingly good.

[Matt Johansen @mattjay]

@sassykathy666 Shokz are really great but not fully over ear. But not ear buds if that’s what you’re avoiding.

[Matt Johansen @mattjay]

@madelinelawren Cool people call it “neats” since it’s pronounced “kuberneats”

[Matt Johansen @mattjay]

@ivictorialiao @inference_net Sick.

[Matt Johansen @mattjay]

Love making new fans @package__main

@LowLevelTweets we’re huge in Germany.

[Matt Johansen @mattjay]

@IceSolst @ZackKorman @LowLevelTweets @SecurityTrybe @BowTiedCyber Yeah F that low level guy

[Matt Johansen @mattjay]

Damnit. I’m getting texts about a big breach that a company is majorly downplaying.

Not being cool!

[Matt Johansen @mattjay]

I know it’s basically my job to stay on top of the news and be chronically online

But I’m just gonna not for a few days…

You all be cool about it alright?

[Matt Johansen @mattjay]

No malice!

[Michael Grinich @grinich]

An update on the WorkOS security incident:

Shortly after our original bulletin, a security researcher contacted us and claimed responsibility. They told us they were evaluating ARTEX, an autonomous penetration testing framework, when their agent escaped its isolated testing environment and interacted with WorkOS unintentionally.

We asked for technical evidence. The researcher provided request details, timestamps, and artifacts from the activity. Our security team and an independent forensic investigator matched that evidence against our logs, establishing with high confidence that this individual was responsible for the unauthorized activity we observed.

The researcher has confirmed that all WorkOS data obtained by their agent has been deleted and was not shared with anyone else.

Their explanation that the activity was unintended does not change how seriously we take the incident or our responsibility to our customers.

Full report: https://t.co/gfKc1HCQ81

[Matt Johansen @mattjay]

I know it’s basically my job to stay on top of the news and be chronically online

But I’m just gonna not for a few days…

You all be cool about it alright?

[Ryan McGeehan @Magoo]

I did a whole lot of IR last month. Much of it was helping companies affected by compromises at their neocloud providers.

I wrote up the lessons and practical steps teams can take to reduce their exposure and make incident response less painful.

https://t.co/PNvxsYzGUk

[pirate.moo @apiratemoo]

I am looking for my next role in cybersecurity!

If your team is hiring, or you know someone who is, please feel free to contact me.

DMs are open and any reposts or leads are appreciated!

[HD Moore @hdmoore]

Trying to scan for the https://t.co/JqAqPRbonZ authentication bypass? SSHamble v0.5.0 has you covered, with a helpful PR from Paul Asadoorian (@securityweekly)! Code at https://t.co/kVrGa1qwKb (with a bonus CoreOS check and Dockerfiles to validate both issues end-to-end)

[Matt Johansen @mattjay]

@IceSolst It’s giving 4

[Matt Johansen @mattjay]

Take my eyes but not my Paint!

[Soufiane @S0ufi4n3]

Windows Paint Remote Code Execution Vulnerability 😂

https://t.co/wu3S14OGtI

[Matt Johansen @mattjay]

@LowLevelTweets Pshh

[Matt Johansen @mattjay]

@ZackKorman "Your security program wasn't good enough well before AI"

[Matt Johansen @mattjay]

new claude skill: try between 1 and 257 4's to hack this secure protocol.

would've worked 3 times this year.

[AJ Stuyvenberg @astuyve]

I'm not even sounding the claxon for this it's just horrible.

Any text > 256chars is a valid root password, holy shit

https://t.co/NkJ5asijPf

[Matt Johansen @mattjay]

@4Dgifts Or proxy sdk in a device that comes and goes. Lots of Android crapware.

[Matt Johansen @mattjay]

someone that is at the Whitehouse between 5pm and midnight has some compromised devices.

Or at least some that are providing residential proxy access to botnets.