Katie Moussouris (she/her/she-hulk/she-ra)🌻

I’m so inspired by young people getting involved in their communities, running for office, & driving progressive change.

“Just do something & you’ll end up where you want to go.”
— Vivek Prakriya, Redmond City Councilmember & youngest elected in a city with over 75k residents in America

Go Vivek!

Solidarity Pledge Let's stand strong and stand together - with the people of Minnesota demanding #ICEOUT this Friday. With our communities as we demand a country that works for us, not the billionaires. And with our na...

#solidarity #iceout #generalstrike
actionnetwork.org/forms/solida...

The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it. storage.courtlistener.com/recap/gov.us...

AI found 12 of 12 OpenSSL zero-days (while curl cancelled its bug bounty) — LessWrong This is a partial follow-up to AISLE discovered three new OpenSSL vulnerabilities from October 2025. …

Have we reached the stage of “many AIs make all bugs shallow”?
Great writeup on AI, open source, & bug bounties by @stanislavfort.bsky.social cofounder of AISLE.

“Mass adoption collapsed the median quality (“slop” killed bug bounty..) but.. raised the ceiling”

www.lesswrong.com/posts/7aJwgb...

Oh node! 😱 Low quality bug reports breaking another Open Source project. Trying to throttle the flood using a bug bounty platform reputation system & forking bug reporters with low signal score to…the OpenJS Foundation Slack?! Oh node indeed 😩

You don’t have to run for office to help shape what happens next. 👀

Becoming a delegate is one of the easiest ways to show up, speak up, and help decide the future of our party. Self-nominate here: Tinyurl.com/26DemDelegate

LD 48 Dems need you. Yep, you. ✨

Sign up and get in the room. 💙🗳️

AI was the accelerant on a perverse incentive fire sparked by bug bounty platforms that reward spray & pray. Both open source & orgs without dedicated vuln response teams get overloaded when they offer cash there. cURL is right to leave AI shark-infested waters to start fresh.

I think there is a discussion to be had here, but it shouldn't be taken out on people who are *using* AI.

we do need to have a reckoning about how UBI gets passed and funded, with taxation of the profits of those developing these labour-replacing/augmenting models. but yelling at users doesn't help

(over a photo of protesters holding “ICE OUT” signs) ICE OUT FOR GOOD WEEKEND OF ACTION: JANUARY 10-11

We’re mobilizing across the country this weekend to honor Renee Nicole Good, demand accountability for ICE’s killing of Renee, and make visible the human cost of ICE’s terror: docs.google.com/document/d/1...

“Unbeknownst to Smith at the time, she had no right to vote… much less run for office. Though she was born in a U.S. territory, and has a U.S. passport and Social Security number, she is not a U.S. citizen.

American Samoa is the only US territory where people are born without automatic citizenship”

Not going to quote this AI slop or comment on it so that their gambit for engagement farming doesn’t algorithmically pay off, but these aren’t the cyber experts you’re looking for… | Katie Moussouris ... Not going to quote this AI slop or comment on it so that their gambit for engagement farming doesn’t algorithmically pay off, but these aren’t the cyber experts you’re looking for… | 11 comments on Li...

🎶 When you’re sloppy and you know it, clap your non existent hands because you’re AI 👏🏼👏🏼

www.linkedin.com/posts/kmouss...

Puerto Rico enters the chat with a line forming behind it, including Guam, the US Virginia Islands, Guam, the Northern Marinara Islands....

“Why would free money make people work more? Because it takes money to make money. Basic income acts like venture capital for regular people.”

Hearty chicken stew in a pot with carrots, chicken, green beans, and kale

Happy #SouperBowlSundat to all who celebrate 🍲 🎉

www.eatingwell.com/recipe/26574...
(I used bone broth, doubled it & the & thickener, & added fresh thyme, kale 🥬, & salt)

The ensloppification* of the internet continues, with VC backing

*/ht Cory Doctorow for “enshittification”

““UBI = a foundation…income is earned on top. A poverty-line UBI is not “the replacement paycheck for the post-work apocalypse.” .... It prevents the worst outcomes, stabilizes consumer demand, & gives ppl leverage to say no to exploitation”

TIL about robot karaoke!

The "basic" in universal basic income does not mean low. It means basic as in base. Foundational. Primary. First. Basic income is an income floor. All other income adds to it. It's basic income because it's everyone starting income.

I find your posts very hinged. Very hinged for these unhinged times.

Dark Web, Underground Hiring Blurs Lines Between Legit and Illicit Work Some skilled tech and cybersecurity pros are turning to underground forums for work, drawn by lucrative but illegal opportunities. Experts caution that these jobs blur the line between legitimate and…

When it comes to developing skills through underground organizations, recent geopolitical issues have also helped muddy the waters of how some professionals think about ways to earn a living, said Casey Ellis, founder at @Bugcrowd.

www.dice.com/career-advic...

We’ve seen other orgs attempt 3rd party bug bounties, thinking it will help their ecosystem become safer. Inevitably, the safety of software depends more on the maturity of the org producing it than how many bugs are reported to it. Bug foie gras isn’t the safest path to maturity

When I started Microsoft Vuln Research in 2008, we found out just how few orgs were ready for vuln disclosure. When I started Microsoft’s 1st bug bounty in 2013, I never imagined it would grow to paying for 3rd party bugs. I hope the 3rd parties were warned & OSS gets tested patches supplied to them

Why bug bounty schemes have not led to secure software | Computer Weekly Computer Weekly speaks to Kate Moussouris, security entrepreneur and bug bounty pioneer, about the life of security researchers, bug bounties and the artificial intelligence (AI) revolution.

I spoke with @billgoodwin.bsky.social of @computerweekly.bsky.social on NDA bug bounties failing to increase security & effects of gov disclosure requirements on nat security, plus how AI threatens the future human expert pipeline & why UBI may be our best bet
www.computerweekly.com/news/3666362...

Heli Tiirmaa-Klaar a blonde woman dressed in black with a pink blazer delivers a keynote on stage at CyberThreat London 2025

“AI is helping to identify over 70% of targets. Sometimes AI is hallucinating targets. So we always need humans in the loop.” - Heli Tiirmaa-Klaar in her SANS CyberThreat keynote “Cyber war by proxy: What Ukraine teaches us about
defense coalitions and digital policy at scale”

YouTube video by BSides Lisbon [BSL2025] KEYNOTE Trey Darley - Rick & Morty Walk Across Mordor

“why the red team keeps winning: not because they are stronger—but because the blue team keeps mistaking comfort for capability.” — @treyka.bsky.social reveals wisdom in history, physics, & Rick & Morty in his brilliant Bsides Lisbon keynote

youtu.be/egg_83hh0ZA

You’ve given us all so much of yourself. Please save some for you. You deserve it. We love you

YouTube video by Decipher Rich Mogull on the Cloudflare Outage, Resilience, and Single Points of Failure

The internet is not a network, it's a small handful of platforms held together with rock n roll and silly string (@k8em0.bsky.social ™) and sometimes it falls down. On the @deciphersec.bsky.social pod, @rmogull.com helped me figure out why.
youtu.be/2118EJ4Gb5s?...

a group of people are dancing together with the words everybody shots shots shots ! Alt: a group of people are dancing together with the words everybody shots shots shots !

Glad you’re getting protected! 🙌🏼

I know. I’ve already alerted everyone on that page with their (sometimes misspelled) name URL on that site

No our fake profile pages are all there under /teams/[first]-[last] deliberately not linked from the main site. They know exactly what they are doing.