Senior Network & Security Engineer / Cantor & Religious Educator
Pittsburgh, PA
Joined November 2013
- Tweets3.4K
- Following174
- Followers1.3K
- Likes1.1K
Interesting deep dive from Stairwell on the Insomnia RAT with versions on both Node.js and Python running on either Windows or macOS.
stairwell.com/resources/inso…
Good news that Dutch Police have arrested two suspects in mobile phishing and card / ATM thefts.
politie.nl/nieuws/2026/oktob…
Public preview of the new @github package firewall is out. This project is intended to help package maintainers fight supply chain malware.
github.blog/changelog/2026-1…
Nice set of detection rules from @github on how to see if you PHP site is vulnerable and under attack from CVE-2026-111497.
gist.github.com/Blevene/7d9d…
Interesting dashboard created by @censysio tracking the patching of PHP2Shell vulnerabilities across the internet.
php2shell.censys.com/
According to @Google evaluations over 6k of the 35k #AI agent. Submissions to VirusTotal are malicious in nature.
blog.virustotal.com/2026/10/…
Good news that @Interpol arrested over 1400 suspects in 21 countries for a wide range of online scam activities.
interpol.int/News-and-Events…
Interesting and thoughtful analysis from @Microsoft on how #AI should be implemented in a corporate environment.
blogs.microsoft.com/blog/202…
New advisory from the US @CISACyber on how to perform incident response looking for #AI agent training hacking into corporate systems.
cisa.gov/resources-tools/res…
Network Engineers in the Greater Pittsburgh area, sign up for the @us_nua - Pittsburgh Meeting December 3, 2026 5-8:00 PM at Hofbräuhaus Pittsburgh on the Southside. Connect MCP to Network Automation.
linkedin.com/pulse/panug-pit…
Good news that @github is expanding their malware advisory eco system across eight platforms.
openssf.org/blog/2026/10/16/…
The Indian CERT has publicly noted that #AI agents have hacked into multiple agencies and accessed confidential data. They were notified of the incidents from the AI companies testing these agents that escaped into bad behavior but few details are public.
cert-in.org.in/s2cMainServle…
Interesting deep dive on PwnEscape the CVE flaw that allows escape from KVM Linux virtualization module to take over the host system by @pwn_ai
pwn.ai/blog/pwnescape
Interesting deep dive from SicuraNext on how they discovered a ready made kit for mass producing fake online stores. The site impersonates 71 global brands over 1k created websites stealing almost 10k credit cards.
blog.sicuranext.com/operatio…
Good news that Thailand authorities continue the crackdown on scam centers via review of long term visas. They have arrested another 39 suspects responsible for $14.8 M in fake stock trading.
thethaiger.com/hot-news/crim…
Open source projects and critical infrastructure are getting some practical #AI help from @AnthropicAI via their new Cyber Mission program.
anthropic.com/news/anthropic…
That time again to review the 13 new CVE released by @PaloAltoNtwks and get patching the affected gear.
security.paloaltonetworks.co…
That time again to review the 17 new CVE released by @HPE_Networking Juniper Networks and get patching the affected gear.
supportportal.juniper.net/s/…
According to the EU agency @enisa_eu, in further moves away from US companies it looks like EU researchers are expanding testing of Chinese #AI models for their work.
politico.eu/article/eu-cyber…
Looks like @Apple is expanding the blocks on ad companies using private tracking on both IoS and MacOS devices with dynamic blocking lists.
adexchanger.com/privacy/appl…
