Alex Pinto

Trump subiu no telhado.

(For all the PT-BR idiom enjoyers out there)

In the Future All Food Will Be Cooked in a Microwave, and if You Can’t Deal With That Then You Need to Get Out of the Kitchen As a restaurant owner – I’m astounded at the rate of progress since microwaves were released a few short years ago. Today’s microwave can cook a frozen burrito. Tomorrow’s m…

I laughed so hard I thought I was going to cough up an organ. Every line is gold.

Lots of Chico Buarque playing in my house today.

This is what I think too, but I can’t find a direct citation or reference to “when we took down XYZ group, we found they had a robust R&D practice”.

Have you ever come across something like this?

Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities GreyNoise’s new research reveals a recurring pattern: spikes in malicious activity often precede the disclosure of new CVEs — especially in enterprise edge technologies like VPNs and firewalls.

• What these signals might reveal about attacker workflows
• How defenders can use this information to act early

Read the full research report here:

www.greynoise.io/resources/ea...

Always happy to discuss or answer questions about the data — just drop a line at research@greynoise.io.

Three high-profile former CISA employees have joined @istorg.bsky.social to keep working on Secure by Design and figure out a stable future for the CVE program. www.politico.com/newsletters/...

This War Will Destabilize The Entire Mideast Region And Set Off A Global Shockwave Of Anti-Americanism vs. No It Won’t George W. Bush may think that a war against Iraq is the solution to our problems, but the reality is, it will only serve to create far more.

This is what it make me think about theonion.com/this-war-wil...

Australia would disagree.

Saving this to read tomorrow.

I’m partial to “Habsburg models” to describe this model - en.m.wikipedia.org/wiki/House_o...

DISCARDED: Tales From the Threat Research Trenches Technology Podcast · Updated Biweekly · DISCARDED: Tales from the Threat Research Trenches is a podcast for security practitioners, intelligence analysts, and threat hunters looking to learn more abou...

New episode of DISCARDED featuring the great @alexcp.bsky.social discussing the 2025 Verizon DBIR! Join us for hot takes, insights into the current threat landscape, interesting findings about vulnerability exploitation and third-party risk, and so much more.
podcasts.apple.com/us/podcast/d...

Dan is a brilliant writer. This summarizes my feelings about Generative AI in general, and the next time someone asks me if I will be using Generative AI in my work, I’ll just send them this link.

Gonna tackle “day one”? The RNG is really brutal there.

It worked at least once on a custom model! bsky.app/profile/alex...

On the other hand, pro-AI people talk about it like they’re trying to unload a shitty used car. “Does it always work right? Absolutely not! Do you need to take extra annoying steps to receive worse results? Of course! But that’s the real beauty of it…”

Hope you enjoyed it!

We really try to reward (or punish) the cover-to-cover readers with the jokes and footnotes.

Shortridge Makes Sense of Verizon's 2025 Data Breach Investigations Report (DBIR) This post includes Shortridge’s commentary and summary of Verizon’s 2025 Data Breach Investigations Report (DBIR).

as is tradition, I just published my commentary on this year’s Verizon Data Breach Investigations Report: kellyshortridge.com/blog/posts/s...

as ever, I mix philosophy, market analysis, and lazy math to guide our #cybersecurity sensemaking.

thx @alexcp.bsky.social for the advance copy 🖤

Tenable contributed to the Verizon Business DBIR

Tenable contributed to the Verizon Business DBIR

#TenableResearch contributed to the 2025 #VerizonBusiness 2025 Data Breach Investigations Report (#DBIR) with data on the 17 widely exploited edge CVEs. Find out where patching still lags. Read our recap here: http://spr.ly/633272Z599

DBIR authors 1 x AGI 0

(It obviously does nothing on most of them but I found this result super amusing)

In all fairness, it is a good day for one of those: middle of the week, week before RSA…

In all fairness, it IS a good day to release a report.

Middle of the week, week before RSA. Your marketing folks know what’s up.

A minimalist report cover with a black background from GreyNoise titled “A Blindspot in Cyber Defense: How Resurgent Vulnerabilities Jeopardize Organizational Security.” The subtitle reads: “From loud waves to quiet revivals, attackers around the world are exploiting resurgent flaws in critical systems.” The background features a repeating pattern of line-drawn swans, with one swan highlighted in bright cyan, symbolizing an anomaly or standout threat among many.

We're in 👀 competition with the DBIR but it is pre-RSAC "report season".

We took a look at "resurgent" vulns — CVEs published between 2010-2020 that cause real problems (and sometimes return from the dead like zombies) now.

I'll be dropping a larger thread […]

[Original post on mastodon.social]

lol. Lmao even.

2025 Data Breach Investigations Report The 2025 Data Breach Investigations Report (DBIR) from Verizon is here! Get the latest updates on real-world breaches and help safeguard your organization from cybersecurity attacks.

The 2025 #DBIR is out! Go get it.

Verizon.com/dbir

I’m sorry to report the prophecy has not come to pass in the 2025 #DBIR.

Maybe next year will be a nice one.

YouTube video by Censys Making Non-Standard Port Scanning the Standard

New @censys.bsky.social video with me and the brilliant Ariana Mirian talking about finding various services on weird ports.

youtu.be/qr6Xdl9WfLM?...

Good times.