Ron Gula

I invest in solutions that protect the nation's cyberspace. President Gula Tech Adventures, Co-founder Tenable, Former NSA and amateur animator.

[Ron Gula @RonGula]

I lot of what Jason Haddix said in his X post about "Cyber being Cooked" resonated with me. The more things change, the more they stay the same. I had vRon do a video on AI's impact to the cyber profession centered around the main points of his "post-DEFCON op-ed". Also did a slight plug for our Cyber Ready Clinic.

[Ron Gula @RonGula]

Fun video on latest cyber 'letters of marque' bills in congress. Watch the full video at: https://t.co/yCbk31jNDP

[Ron Gula @RonGula]

Pope Leo XIV's Magnifica Humanitas (May 15) is the Catholic Church's first formal doctrine on artificial intelligence. It addresses, by name, the engineers, founders, and regulators building these systems today. vRon breaks it down:

https://t.co/UY44lt1MbG

[Ron Gula @RonGula]

vRon became a cyber game show host .....

https://t.co/6l7d16xLPI

[Ron Gula @RonGula]

In 2006, an Italian filmmaker quietly made the best cybersecurity movie nobody watched — and predicted the NSA surveillance debate 7 years before Snowden. New vRon: why The Listening still holds up.

https://t.co/HcLF8ugNno

[Ron Gula @RonGula]

There Is No Security Meter For AI. That's the title of the new Berryville Institute of Machine Learning paper from Gary McGraw, Harold Figueroa, Katie McMahon, and Richie Bonett. The argument: every "AI security score" you've been shown is theater. In 12 minutes vRon walks the badness-ometer, the Strange Loop, the WHAT pile, and where whitebox interpretability fits.

https://t.co/yq7dYXaiXa 📄

#AISecurity #MLsec #BIML

[Ron Gula @RonGula]

I had my AI comedian debate my AI Mentat from Dune about the pros and cons about AI. Lots of fun, a sword fight, a sandworm, a Bene Gesserit and more show up.

https://t.co/4Og3WxJQS9

[Ron Gula @RonGula]

Gary Cynfeld on the CANVAS hack:

https://t.co/5KQrBTD1ok

[Ron Gula @RonGula]

You used to need to retrain a six-figure LLM to change one behavior. That's ending.

Last week the Qwen team open-sourced Qwen-Scope — interpretability tools that let you find a specific feature inside a trained model and edit it. No retraining.

Our portfolio company @StarseerAI is doing the same across model families: 3 layers out of 32 catch jailbreaks at 99.2% accuracy in 38ms.

New vRon explainer:
https://t.co/dSwC9PTp69

[Craig H. Rowland @CraigHRowland]

We analyzed the new Copy Fail exploit and have a detection you can use agentlessly with @SandflySecurity to find processes that likely had privilege escalation with this attack. You can read more about it and get a rule to deploy here:

https://t.co/Bvs7tYjwq0

[Ron Gula @RonGula]

€5.65 billion in GDPR fines. 2,500+ enforcement actions. All sitting in a free, public database almost nobody outside the privacy bubble actually reads.
It's called the GDPR Enforcement Tracker (https://t.co/IgbbRR4bqI), run by CMS. If you're a CISO, board member, insurer, or founder building in privacy or data governance — bookmark it. Thirty minutes in the data beats a quarter of compliance theater.

vRon walks through why it matters and the seven ways to use it 👇

https://t.co/p0UIp0NoUL

[Craig H. Rowland @CraigHRowland]

I’m speaking about Linux malware at a private telecom security conference at @ericsson HQ in Stockholm. They have all their gear on display. It’s really impressive.

[Ron Gula @RonGula]

When a nation-state runs an AI through tens of thousands of prompts to copy it, that's not "misuse" — that's the new supply chain attack.

https://t.co/sZvPgTqOqL

[Ron Gula @RonGula]

Codename: CARR. Sponsor: FSB. Cover: Telegram hacktivists. They opened pumps at US water plants and ordered operators to disable oil-and-gas alarms — "to increase the probability of a real accident."
One indictment that reads like a James Bond evil cyber villain.

https://t.co/5GX82Qxzoj

[Ron Gula @RonGula]

May the 4th, but for the SOC. Our AI comedian, Gary Cynfeld, does a new set that treats Star Wars as what it actually is: the longest-running case study in cyber malpractice ever filmed.

https://t.co/DaNNCyhk1Z

[Ron Gula @RonGula]

Thank you @Dave_Maynor for pointing out that the CARR Indictment would make a great vRon short:

https://t.co/tiAHpNDwlk

[Ron Gula @RonGula]

New Gary Cynfeld bit — "NOT SCHEDULED" — the only maintenance window that ever started on time was the one nobody told you about.

https://t.co/IBAxZ9ZYKh

[Ron Gula @RonGula]

@ramizwebti Bromure is free and keeps your browsing isolated. I use one policy for work, one for browsing the Internet, one for Claude to use and let go wild through MCP, one for my banks.

[Ron Gula @RonGula]

Just dropped a new video on Bromure — a free secure browser and agentic coding solution from fellow Tenable co-founder Renaud Deraison.

Under the hood it's Chromium running inside a Linux VM on a hypervisor, with super minimal access to your host system — but it's slick enough that it just feels like a browser. Classic Renaud: solving the right problem the right way.

I had vRon go wild showing how much LinkedIn pulls off your browser — and how Bromure keeps you in control with your choice of VPN, privacy settings, and policy.

https://t.co/tLGnEZO4FA