Heather Adkins

Stop what you’re doing and read this… don’t get surprised by what’s coming. It’s time to rethink everything you’re doing on cyber defense. H/T to Gadi and Bruce for partnering on this opinion piece. www.csoonline.com/article/4069...

Did you buy it?

Today as part of our commitment to transparency in this space, we are proud to announce that we have reported the first 20 vulnerabilities discovered using our AI-based "Big Sleep" system powered by Gemini — goo.gle/bigsleep

Today @Google Project Zero announced a new trial policy: Reporting Transparency. We’ll now share when we report a security vuln to a vendor within 1 week including products + deadlines. Goal: shrink the patch gap + drive faster, safer updates for users: googleprojectzero.blogspot.com/2025/07/repo...

Why Prompt Engineering and Context Engineering Both Miss the Point The debate between prompt and context engineering misses what really matters: clear thinking and vision

Good article out from @danielmiessler.bsky.social on using AI properly. danielmiessler.com/blog/how-to-...

Some excellent work by @craiggidney.bsky.social that reduces the number of qubits (in a quantum computer) required to break RSA by 20-fold. If you don’t have a migration plan to safe algorithms, now is the time to start one!

Zotero?

It is still worth it to get a credit card that earns miles. Then you can spend those miles on buying an upgraded fare.

It’s not worth it to play the airline status game anymore. There are too many high-status fliers and the airlines are now making it harder to get it. There are no guarantees beyond paying for a business/first class ticket.

The pdf is safe

Good news: egg production is up! www.ams.usda.gov/mnreports/am...

There’s no better time for it… I feel like we are on the edge of another historical precipice where someone is hailing a new age of greatness whereby we will toss aside what we know now in favor of a perceived gleaming future. 🤮

Concur. I could see myself accidentally chatting with the wrong ppl from my contacts, getting them confused between one another. The usability is really poor.

How do you like the polestar?

Memory safety for web fonts  |  Blog  |  Chrome for Developers Learn how and why the Chrome team has replaced FreeType with Skrifa.

We will have memory safety… it will take many steps forward, over the long haul. Here’s an update from Chrome on replacing FreeType with a Rust based alternative. developer.chrome.com/blog/memory-...

I can’t believe it’s already been 5 years… wow.

Need to do the reciprocal benefits for Russia. They get all the rest too.

Everyday is a good day to patch.

So often, I see design docs and product pitches reference shoddy news articles, Wikipedia, etc and not apply the kind of scrutiny and skepticism Pat and Adam do. We need a solid repo of material. 2/2

While listening to @patrick.risky.biz and @metlstorm.risky.biz on this week’s risky biz podcast I dreamt up a nice retirement project: “Case Studies for Security Engineering”. Highly curated technical descriptions of incidents written in such a way that solutioneers can understand attacks. 1/2

Good morning.

Always easier to be objective (and less stressful) if it was someone else’s incident :-)

Ever wake up in the morning and think to yourself: wish I could do an official review of that incident. 👀

Exceptionally good analysis of the current geopolitical discussion re: Ukraine and Russia negotiations. x.com/nicholadrumm...

Passkeys, Cross-Account Protection and new ways we’re protecting your accounts For World Password Day, we’re sharing updates to passkeys across our products and sharing more ways we’re keeping people safe online.

It's #WorldPasswordDay!! At @Google we're celebrating the journey on deprecating passwords! We're happy to report passkeys have been used 1B+ times across 400M Google Accounts. We're also sharing how we'll use them to protect high risk users: blog.google/technology/s...

‘Brand new’ ‘greenfield’ and ‘multi-billion dollar global business’ are not reassuring words to see in a CISO job posting.

Today @MunSecConf #MSC2024 @Google is announcing its AI Cyber Defense Initiative aimed at tapping into the potential AI can bring to defenders and continuing investments in AI-ready tools, research and AI security training: blog.google/technology/safety-security/google-ai-cyber-defense-initiative/

‼️🚨NEW report and blog from the @Google TAG and @Mandiant teams explores the implications of the Israel-Hamas war and where things stand with cyber in the Russian war in Ukraine: blog.google/technology/s...

Excited to see some awesome Safety Engineers in Munich this week!

Today I am grateful for those all over the world that dedicate their lives to keeping others safe. Thank you for all the work you do, and wherever you are on the world, Happy Thanksgiving!