Brian Pendleton (Yaga)

Security BSides Northern Virginia's Hacker Happy Hour. Friday, February 13th from 5-8pm. Bunnyman Brewing. 14140 Parke Long Court A-C Chantilly, VA 20151.

Join the #BSides Northern Virginia crew for our first Happy Hour of 2026! It's our 10th anniversary year, so let's kick off our milestone with some fun!

Friday, February 13th from 5pm-8pm at bunnymanbrewing.com in Chantilly, Virginia!

I still amazes me that Hinton is rolled out to events or interviewed. He’s not even a has been

Glad to see you’re still posting here. This rebalance is just another L in a long line of them this year

It’s not up to just the Dems. No one person or party is going to make things right. This will require everyone that cares about the country to solve.

I really dislike it when an airline still shows a flight boarding and taking off on time when the plane hasn’t reached the gate 5 minutes before boarding begins

#GRT3 Update: The @aivillage_dc will be hosting their third Generative Red Team event online in about a month. To learn more and get involved, visit grt.aivillage.org

I applaud the paper but it important to note that this very topic has been discussed for along time in security. AI researchers, policy makers and writers should be looking at all the previous work before reinventing the wheel

Click Here to Serve: How Volunteering Builds Cyber Careers When people think about a career in cybersecurity, they often picture certifications, technical exams and entry-level jobs that require years of preparation. For those coming from non-traditional back...

"By volunteering in cybersecurity, you protect what matters most in your community while gaining the skills, connections and confidence to pursue your career goals. Service need not be a detour from your professional path - for many, it is the path itself."
www.bankinfosecurity.com/blogs/click-...

Just because the company is in the cybersecurity business, doesn’t mean every employee is a cybersecurity expert and even the best people can be fooled.

picture

picture

lol, you can steal a boat at @DEFCON / @MaritimeVillage
https://maritimehackingvillage.com/dc33/maritime-gta

I awakened Sinister but really wanted Ultron

Wish I was there!

Come to LLMSEC at ACL & hear Niloofar's keynote

"What does it mean for agentic AI to preserve privacy?" - Niloofar Mireshghallah, Meta/CMU

(Friday 1st Aug, 11.00; Austria Center Vienna Hall B)

See you there!

#acl2025 #acl2025nlp

Just have to find the right crowd. There are still going to be some that are throughly anti-AI but I feel there’s many more that want to have great discussions about the good and bad of AI

Are you attending Def Con? If so, please consider registering (and attending!) my 2-hour, live, "Building Better Security Champions Workshop" with Stanley Harris of Katilyst! It's in the #OWASP Community room, and you need a #DefCon ticket to go.
https://twp.ai/9PUwCL @owasp.org

docs.google.com Blackhat Women In Security Breakfast

Join myself, and many other women, in Las Vegas for a WWT -sponsored breakfast with The Forte Group, on Thursday August 7th from 8-10 am. Meet other women in cyber, make friends and network!

https://twp.ai/9PV5RJ

And to learn you aren’t and never will the SME, you’re just building the model that the actual experts should be guiding you to build.

Of course there are so many AI engineers that believe because they can build a model, it means they are an expert in everything. Who needs AGI when you have them?

A Little-Known Microsoft Program Could Expose the Defense Department to Chinese Hackers The Pentagon bans foreign citizens from accessing highly sensitive data, but Microsoft bypasses this by using engineers in China and elsewhere to remotely instruct American “escorts” who may lack expe...

One of the worst kept secrets at DoD and other USG agencies is how contractors put profits over national security

www.propublica.org/article/micr... Microsoft “Digital Escorts” Could Expose Defense Dept. Data to Chinese Hackers — ProPublica

Person on a beach overlooking water with people swimming. Thought bubble says, "I should submit that talk idea to the BSides Northern Virginia CFP."

A good idea can come from anywhere! 🤯

While you're relaxing over the #4thofJuly holiday weekend, think about that talk you've always wanted to give or a topic you don't hear enough about at #InfoSec conferences

... then submit to our #CFP by Aug 15th!
sessionize.com/bsidesnova-2...

Call for Presentations. sessionize.com/bsidesnova-2025. Hacker U BSidesNova. Where Curiosity Becomes Capability. October 10-11, 2025.

🍂 We're already thinking ahead to October🍂

🍂 You should, too, if you want to get in on our Security BSides fun in Northern Virginia🍂

📣 Call for Presentations
🏫 George Mason U - Arlington
🗓️ Friday, October 10th & Saturday, October 11th
🤖 sessionize.com/bsidesnova-2...

To quote Ted Lasso:

The butt is an amazing muscle. With God as my witness, your butt will heal

We also need to be exploring ways to make chips, other computer components, operating systems and software more power efficient. We focus too much on the the model and not enough on the systems

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation In this post I’ll show you how I found a zeroday vulnerability in the Linux kernel using OpenAI’s o3 model. I found the vulnerability with nothing more complicated than the o3 API &#821…

Hey @jags.bsky.social , have you seen this blog post?

sean.heelan.io/2025/05/22/h...

If you were perfect, you wouldn’t need one 🤣

Great job you two. Not going to Blackhat so I’ll take you out for lunch in exchange for a private presentation. 😉

Black Hat Black Hat

If you're interested in the security of agentic systems, you're not going to want to miss this talk. @beccalunch.bsky.social will present NVIDIA AI Red Team findings in real world agentic systems, and I'll talk about how the AI Security team helps mitigate them.

www.blackhat.com/us-25/briefi...

Introducing our new blog series: "From Compute to Congress: Decoding AI Policy" by Dreadnode Head of Policy Daria Bahrami | Read the first post here: dreadnode.io/blog/from-co...