@rgblights.bsky.social
Cyber guy. Former NSA cybersecurity director and chief of TAO. Lover of memes. Warning - occasional outrageous Christmas light content.
Thrilled to share that I’ve joined Starseer as an advisor. Starseer is making AI models into transparent, understandable systems and helping to secure deployments while generating audit‑ready documentation. Make them a partner to secure your AI solutions.
www.starseer.ai?utm_content=...
lol. Perfect capture!
13.07.2025 03:04 — 👍 2 🔁 0 💬 0 📌 0
Wow. Spain is putting salt typhoon out of business. They are just going to hand it all to them: Huawei contracted to manage their wiretaps….
therecord.media/spain-awards...
Wow. Spain is putting salt typhoon out of business. They are just going to hand it all to them: Huawei contracted to manage their wiretaps….
therecord.media/spain-awards...
Have you thought about your company’s Agentic AI as a possible insider threat? Try this new perspective that I co-authored.
explore.pwc.com/autonomous-a...
I was interviewed by the National Cryptologic Foundation on forensics in critical infrastructure (and a lot of other stuff!) and it was a very fun chat. They have an interesting assortment of interviews on their podcast and I really recommend you check them out: open.spotify.com/episode/5kzz...
27.06.2025 15:27 — 👍 57 🔁 13 💬 0 📌 0
Predatory Sparrow strikes again. This time they drained funds from an Iran-based crypto exchange. Beyond theft, they targeted trust, undermining a key tool Iran uses to evade sanctions. Nobody with options will keep crypto assets there now.
www.jpost.com/middle-east/...
This is a big deal. Predatory Sparrow’s past cyber attacks on Iranian steel plants and gas stations have demonstrated tangible effects in Iran. Disrupting the availability of this bank’s funds, or triggering a broader collapse of trust in Iranian banks, could have major impacts there.
17.06.2025 12:07 — 👍 5 🔁 2 💬 0 📌 0
"At RSAC last year, I told people: 'Don't worry about the zero-day AI armageddon,' but I am increasingly worried that AI is going to be a good bug finder this year, [and] an exploit developer in the near future," Rob Joyce told me at RSAC.
01.05.2025 03:18 — 👍 19 🔁 8 💬 0 📌 1
Not a lot of people make me look small!
The point guards I played with came to my shoulders. Magic Johnson easily had me in height and reach. Wow. For scale, I’m 6’4” (6’5” in the day) and not a small guy!
As I testified to congress, I’m worried about TP-Link products!
Breaking: DOJ “criminal antitrust investigation into pricing strategies by TP-Link Systems Inc, a California-based router maker with links to China whose equipment now dominates the American market”
www.bloomberg.com/news/article...
Since being part of the CSRB that reported on security shortcomings, I've seen tangible efforts improving the security at Microsoft. The Secure Futures Initiative is making progress: www.microsoft.com/en-us/securi...
23.04.2025 13:00 — 👍 2 🔁 0 💬 0 📌 0TP-Link origins: “Chinese corporate records and government announcements show … much of the research, development and manufacturing operations of … new US company remain in China, entrenched in the country’s state-sponsored technology ecosystem”
t.co/mMFw4LkUDv
How should you think about security related to the threat of Quantum Computers? Businesses need to start their multi-year journey now. In my role as PwC US Cyber, Risk & Regulatory Senior Fellow, I offered some thoughts here:
www.pwc.com/gx/en/issues...
Groan….
24.03.2025 21:08 — 👍 13 🔁 0 💬 2 📌 0
Huawei not only uses predatory pricing practices to undercut the more secure western products but it appears they use bribery too…
www.reuters.com/world/europe...
AI empowered software development is advancing at an astonishing pace. Check out my story about creating a custom iPhone app in only 30 minutes. New tools enable friction-free development with remarkable efficiency. It is the dawn of a new era...
www.joycecyber.com/my-post
I got to testify to the House Select Committee on the Chinese Communist Party last week. One focus area was the threat from TP-Link routers. Having 60% of the US consumer Wi-Fi market flooded with devices that get automatic software updates from the PRC is a risk we can't accept.
13.03.2025 02:07 — 👍 52 🔁 13 💬 4 📌 2Always great to be on the Risky Business podcast! Give it a listen here!
12.03.2025 17:58 — 👍 13 🔁 1 💬 0 📌 0This week's special guest co-host is @rgblights.bsky.social, who'll be joining @metlstorm.risky.biz and I to talk through the week's news. Then we'll chat with SpecterOps about new features they've built in Bloodhound to address NTLM-related risks to your network
NTLM.. still a problem
In 2025 :(
Sorry. Correct link
drive.google.com/file/d/1fwlE...
My opening statement to the House Select Committee on the CCP
drive.google.com/file/d/1fwlE...
Former top NSA cyber official: Probationary #firings ‘devastating’ to cyber, #nationalsecurity. Rob Joyce emphasized during a House hearing how important probationary employees are to #NSA efforts to counter #China and other threats in #cyberspace.
cyberscoop.com/joyce-china-...
Sinking to new depths…
01.03.2025 01:14 — 👍 14 🔁 2 💬 0 📌 0Australia beat us to the Huawei ban. The US got rid of Kaspersky first.
26.02.2025 03:11 — 👍 21 🔁 6 💬 0 📌 0
I continue to be impressed by the capabilities of Sandfly Security. If you run Linux—whether on big servers or embedded devices—you should check out their creative and powerful agentless approach!
www.linkedin.com/feed/update/...
We need to make sure we don’t cripple ourselves in the 5G race!
thehill.com/opinion/tech...
A day watching robot violence!
16.02.2025 16:13 — 👍 22 🔁 0 💬 1 📌 0
Are your home Wi-Fi routers a secret entry point for nation-state hackers? I discussed the alarming trend of PRC cyber ops using devices like TP-Link routers, along with intrusions into critical infrastructure & telcos: NatTech Sec podcast. @scsp.bsky.social
scsp222.substack.com/p/episode-68...
