Pinned Tweet
Let's not mince words:
* If you don't support trans people, you're a bad human
* If you have to add caveats to your support (e.g. "as long as my kids don't see"), you're one of the worst kinds of human
* Trans deserve your *unconditional* support for their humanity
* If you don't support trans people, you're a bad human
* If you have to add caveats to your support (e.g. "as long as my kids don't see"), you're one of the worst kinds of human
* Trans deserve your *unconditional* support for their humanity
317
225
1,783
It's laughable how much trust some people put in AI.
Yet another example of AI not boosting everyone’s agency equally. Some people exclusively receive a false confidence boost.
Mind you, this isn’t just very basic multi decades old security best practices, it’s documented in the product manual.
1
1
9
1,342
Christmas as we know it today is a capitalist invention, exploiting traditionally religious celebrations. Change my mind.
i hate christmas so much: compulsive gift giving, the red/green/winter aesthetic, it’s fckin cold, santa is stupid, christmas trees are a pain in the ass… i just want it to be autumn until it’s summer again someone help
4
1
26
2,233
Someone please tell me how this isn't disqualifying.
Trump Says He Will Move to Israel to Become Prime Minister If U.S. Turns on Him tmz.me/4Aap1wW
7
2
81
6,587
There's zero question in my mind that organizations employing Anthropic's "team usage" feature without specific policies around it will be sued by employees (and probably rightfully so). We discuss why in today's episode of Breach Please.
2
0
8
2,845
In short, you should be thinking about employee interaction with Claude like email or chat logs. If you don't have "summarize my team's email usage" then you shouldn't have this either (for much the same reason).
youtu.be/lBQ-v4jw2AU
youtu.be/lBQ-v4jw2AU
0
0
3
1,017
Jake Williams retweeted
I came to appreciate today something I do as a leader that's maybe novel. Maybe not. Probably others do it without realizing it. I call it the Strategic Bad Idea: Nothing gets your team to solve a problem faster than their boss proposing a bad idea as the solution.
1
4
10
1,844
Jake Williams retweeted
Talking MCP functionality AND security with @MalwareJake. #unicorndispatchlive
The "S" in MCP doesn't stand for Security.
Bryson Bort and Jake Williams break down the Model Context Protocol on Unicorn Dispatch LIVE: a live purple team demo, plus how to use its power without handing attackers the keys.
Recap: hubs.ly/Q04CtkkY0
3
1
2
930
Jake Williams retweeted
🚨 Brotli2Shell goes beyond HTTP2Shell.
CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Google’s Brotli decoder that has been exploited for RCE and impacts far beyond HTTP.
JFrog reproduced RIP control in FFmpeg via a crafted JPEG XL file and identified additional attack paths in ClickHouse, .NET, and Apache Arrow, where some fixes were still unavailable at the time of writing.
We’ve also released an open-source scanner to uncover potential exposure beyond vulnerable package versions.
Full research and technical details in our blog 👇
CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Google’s Brotli decoder that has been exploited for RCE and impacts far beyond HTTP.
JFrog reproduced RIP control in FFmpeg via a crafted JPEG XL file and identified additional attack paths in ClickHouse, .NET, and Apache Arrow, where some fixes were still unavailable at the time of writing.
We’ve also released an open-source scanner to uncover potential exposure beyond vulnerable package versions.
Full research and technical details in our blog 👇
13
118
680
242,305
Jake Williams retweeted
Feeling super euphoric rn lol
@cyberworm199decided to avoid sharing that post because it's written in an extremely weird way. The article is basically a giant non-sequitur. It starts with "we saw a proof of concept" then immediately jumps into "agentic AI post-exploitation", without making any claim that A led to B.
It's a very strange structure for a threat intelligence report, and none of the segments of the article logical follow each other. I tried asking for clarification about what/why that is, but the response I got was extremely cagy, so I didn't feel comfortable risking my reputation on it.
4
8
220
17,943
Jake Williams retweeted
LIVE... Watch Sam Watson go for gold in the final international Speed Climbing event of 2026. Despite a recent injury, Sam wants to finish 2026 strong. (629 days until the Olympics)
Link: Sam Watson dot live
SamWatson.live
Link: Sam Watson dot live
SamWatson.live
1
2
15
2,417
Jake Williams retweeted
This is all just a very aggressive Cybersecurity Awareness Month campaign
14
292
2,032
26,044
Today's Breach Please is out. We talk about how Chainguard unilaterally broke the embargo on the PHP vulnerability and what that likely means for coordinated disclosure going forward.
It is BY FAR the spiciest episode we've recorded to date. 1/3
It is BY FAR the spiciest episode we've recorded to date. 1/3
1
4
14
2,236
We also dive into the question of whether AI labs are actively hurting security (yes, they are. They just are).
Jess has some pretty strong opinions about the message in this tweet specifically. We don't 100% agree, but the discussion is valuable. 2/3
x.com/JasonDClinton/…
Jess has some pretty strong opinions about the message in this tweet specifically. We don't 100% agree, but the discussion is valuable. 2/3
x.com/JasonDClinton/…
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
2
0
6
914
Not all heroes wear capes.
Some carry tentacles...
Some carry tentacles...
In the past I worked with NCMEC, I built a tool for mining EXIF data from images and had a database of camera serial numbers they could query. If they had the serial number of a camera used to take CSAM they could map it to other photos on the internet that mapped to user accounts.
0
8
67
5,946