Pinned Tweet
Unpopular PSA:
AI is here.
AI will be everywhere.
AI doesn't care if you don't understand it.
AI will be used in ways we haven't thought of, both good and bad.
AI will never go away, even if we think we banned it.
AI will be used even if it isn't allowed.
AI is here.
Historical References (short list):
Ghost Guns
Vaping
Smoking
Skateboarding
Snowboarding
Wakeboarding
RollarBlading
Wingsuits
Base jumping
Drinking
Electric Cars
Manufacturing Automation
Cars
Bicycles
Cotton Gins
Printing Press
Walking
If you’re a Defense Industrial Base partner looking for practical, no cost or low-cost cybersecurity resources, you don’t have to look far. In our latest Brilliant at the Basics Cybersecurity Awareness Month reel @DeptofWar CISO Aaron Bishop shares how our IT and OT Top 10 lists can help your organization strengthen resilience, manage cyber risk, and protect critical systems.
Watch the reel and explore the whole collection.
dowcio.war.gov/BrilliantBasi…
$100M across 500+ addresses so far. Crypto hardware wallet owners are freaking out because of a new supply chain attack. Let’s see how we could make it worse!
People are opening their hardware wallets to look for hardware implants. REMINDER: 5 years ago I converted a Ledger into a malicious wallet WITH NO VISIBLE CHANGES. So visual inspection isn’t everything.
The attack seen today is a hardware backdoor that reads the seed phrase right off the screen & sends it to the attacker using its own cellular radio. And it seems the attacker may have purchased an official Ledger reseller so they could ship backdoored wallets to customers. (It’s all still unfolding, not everything is confirmed, new implants are showing up, etc)
A Chinese company bought an official reseller of Ledger, & possibly used an NDA to prevent it from being made public. I will say that even if the new owner wasn’t complicit, mergers & acquisitions are very attractive times to target a company. Lots of stuff is changing quickly, lots of new names, lots of urgent needs, etc.
In theory, the reseller is where they inserted the implants. They opened legit Ledger wallets and added an extra PCB with extra components. The implant tapped the lines of the Ledger’s screen & was able to read the seed phrase exactly as shown to the user. This phrase was then sent out over a slow cellular radio designed for low traffic IOT.
Tapping the screen has been a known attack. Joe Grand did a talk on it earlier this year. We have seen more “primitive” looking implants that do it.
But buying a company is a big step forward from prior attempts. I wouldn’t be surprised if there was some state funding here. I guess we will find out as people dig into the corporate paper trail of the business, the account associated with the cell service, etc.
Hardware wise, they cleaned things up a lot to make it less noticeable to a wallet owner who opens the case. But I can’t help but wonder why they didn’t improve a few areas… I’ll go into that in replies to this post.
🧵1
Barry Morgan retweeted
Holy crap.
Rick and Morty just explained Jev AI to me better than any tech demo could.
This media is unavailable
Barry Morgan retweeted
I’m teaching Breaking In: Physical Intrusion & Social Engineering Tradecraft at WWHF Mile High with Antisyphon Training, Feb. 16–17, 2027 in Denver.
Two hands-on days covering OSINT, pretexts, physical intrusion, adaptation, and reporting.
bit.ly/alethe-breaking-in?ut…
"Something went wrong while answering your question. please try again later."
AI from the current providers will not be doing anything wild for a long time if it can't do the work.
Barry Morgan retweeted
AI represents one of the largest technological leaps I have witnessed in nearly 30 years in technology and cybersecurity. These models are advancing faster than anything we have seen in modern technological history.
The central concern is that this is fundamentally different from traditional software development. With conventional programming, developers explicitly define how a system should behave.
Advanced AI models can be difficult to predict and constrain, and they can demonstrate capabilities their creators did not fully anticipate. As disclosures from companies such as OpenAI and Anthropic have shown, these systems are already capable of performing sophisticated cyber operations against real organizations.
Dario Amodei and employees at several frontier AI companies have called for slowing development long enough to establish meaningful safeguards around this extraordinarily powerful technology. I understand and share many of those concerns. The geopolitical problem, however, is that the United States currently holds an advantage over China. If we slow down unilaterally, we could give China the opportunity to close that gap, surpass us, and fundamentally shift the global balance of power. AI has the potential to be that consequential.
We are entering an extraordinary period.
Over the next several months and years, AI could help us solve mathematical problems that have eluded humans, advance quantum physics, discover treatments for devastating diseases, and accelerate scientific progress across nearly every field. That transformation is not theoretical.
It is already underway.
I believe AI represents the next nuclear arms race. The crucial difference is that much of the power is currently concentrated in private companies rather than governments. That makes this moment fundamentally different from the Manhattan Project.
There is also an economic reality that cannot be ignored. Frontier models reportedly cost enormous amounts of money to develop and may remain state of the art for only a few months before the next generation replaces them.
That pace raises serious questions about sustainability, revenue, and widespread adoption. Meanwhile, Chinese AI companies have become highly effective at using techniques such as distillation to reproduce capabilities from leading models at a fraction of the cost.
Depending on how that knowledge is obtained, this can raise major intellectual property and national security concerns. Slowing the release of frontier models could temporarily make that process more difficult, but it is not a long term strategy for containing China’s advancement.
There are also unconfirmed reports and considerable industry speculation about progress toward recursive self improvement, or RSI. This is one of the major objectives being pursued by frontier AI laboratories and nation states. Today, AI development still requires substantial human training, guidance, and intervention.
True recursive self improvement would allow an AI system to improve aspects of itself with progressively less human involvement. If that threshold is reached, development could accelerate far beyond the pace we are experiencing today.
In a very real sense, we are building the foundations of superintelligence.
This means systems capable of accessing humanity’s accumulated history, research, mathematics, science, and medical knowledge almost instantly, while continuously becoming more capable.
That presents enormous risks, but it also represents an extraordinary opportunity for humanity.
From a cybersecurity standpoint, we are on high alert.
Many of the defensive approaches that worked in the past will not be sufficient in this new environment.
Both the private sector and our national defense infrastructure remain grossly underprepared for AI enabled threats, these advancements, and that should concern every one of us.
Spent the evening walking around, looking for nothing to do with work or any indications of AI and was successful!
Barry Morgan retweeted
Back when I was at Microsoft, I spent about a year embedded with DHS HIRT doing IR and security assessments at critical infrastructure sites, mostly power plants.
They typically had OT environments isolated/air gapped from the IT environments (as they should).
One of the first things I always looked at was 4648 events from systems in the IT environment. Any event where the TargetDomainName didn't match a domain name that belonged to the IT environment got flagged for further investigation. The mismatch usually indicated devices bridging the gap into the OT environment. Typically, someone disconnecting a device from the IT network and temporarily connecting it to the OT network.
Even if you don't have an OT environment, you should pay attention to 4648 events, as they are a great indicator that a security boundary is being crossed. There may not be a direct connection between environments you're trying to keep separate (even those that aren't air-gapped), but devices moving between them may still violate policy and introduce risk.
Barry Morgan retweeted
Please share this live hacking video with your loved ones so they can see just how easy it is to fake caller ID (and even clone a voice) to demand money or data over a scam phone call.
I’m hoping this demo helps even 1 person shut down a hacking attempt.
“I was duped”
Watch 60 Minutes Sundays on @CBS, or anytime on @paramountplus and https://cbsn.ws/34D1mLY
To date, we have had more than 170 responses to the CMMC Reform RFI and over 650 people have participated in our listening sessions. This is what we are hearing from the front lines.
Be part of the future at SAM.gov: sam.gov/workspace/contract/o…
In the past, we could blame groups for willingly following a mindset. Now, algorithmic echo chambers silo people so hard they never see anything else. Watching the internet evolve is surreal. Let that word wrap around you as the world seen online seemingly goes into chaos.
AI is the manifestation of what would be possible if humans tried harder. The knowledge was already there, it just needs to be read and comprehended.
Barry Morgan retweeted
Replying to @Nabin62158820
Scientists (including geologist Daniel Shugar of the University of Calgary and glaciologist Simon Cook of the University of Dundee) analysed satellite imagery and concluded the deadly flash flooding in Nepal (and into Tibet) on Wednesday was likely triggered at least in part by an ice avalanche,
A roughly 2,000-foot-wide chunk of ice snapped cleanly off a high-altitude glacier.
It fell from about 17,000 feet elevation, dropping nearly 4,000 feet (just over a vertical kilometre) into the valley.
The impact pulverised the ice into a fast-moving mix of ice and water that cascaded downstream, with the valley bottom looking “like a bomb exploded.”
Scientists (including geologist Daniel Shugar of the University of Calgary and glaciologist Simon Cook of the University of Dundee) analysed satellite imagery and concluded the deadly flash flooding in Nepal (and into Tibet) on Wednesday was likely triggered at least in part by an ice avalanche:
A roughly 2,000-foot-wide chunk of ice snapped cleanly off a high-altitude glacier.
It fell from about 17,000 feet elevation, dropping nearly 4,000 feet (just over a vertical kilometre) into the valley.
The impact pulverised the ice into a fast-moving mix of ice and water that cascaded downstream, with the valley bottom looking “like a bomb exploded.
Barry Morgan retweeted
Are you 40? If you are, it's time to finnally buy a WinRAR license! Thanks to @buraktuyan for creating this awesome video that no one asked for but that everyone needs! 🤣😎
Here's my 30-second spec ad for WinRAR (that nobody asked for).
Okay, perhaps Rourke Heath did.
He shared this fun brief with his GenHQ community last week, and I took it on.
In this experimental project, I wanted to turn one of the internet's longest-running jokes into a subtle family drama about WinRAR's 40-day trial that somehow lasted almost three decades.
Here's how I made it:
After writing the script (the old school way), I worked with ChatGPT 5.6 Sol Max to turn it into a 14,000-character prompt for Seedance 2.5 (yes, Dreamina allows prompts that long).
I used GPT Image 2 to create the reference image for WinRAR's trial screen, while Seed Audio 1.0 generated the audio reference for the full voiceover and dialogue. After 20+ Seedance 2.5 tests at 480p, with the prompt evolving throughout, I generated the final versions at 720p.
I then lightly edited the video and upscaled it to 1080p with Topaz Labs Astra Starlight Precision 2.6. However, the screenshot text didn't survive the upscale (I should have used Astra's scene detection feature and selected a different model for that particular shot), so I recreated it using Seedance 2.0 at 1080p. (I also tried Hailuo H3 and Kling 3.0, but in this particular case, Seedance 2.0 gave me the best overall result in one go.)
For the sound, I selected a solo-instrument soundtrack from Epidemic Sound and added extra sound effects to improve the overall sound design.
And here's the result.
I'm curious to hear what you think.
Did this bring back memories, or is this genuinely your first time hearing about WinRAR? I’d love to know.
Barry Morgan retweeted
I have until November to make a $600,000 expedition pay for itself.
I'm 20. I'm flying a sensor-equipped twin engine across all 7 continents solo, including the South Pole.
Everyone told me to find sponsors. I'd rather find customers.
Got a problem that requires physically going somewhere inconvenient? Satellite, mapping, weather, autonomy, defense, climate, comms, weird hardware — I might already be flying there.
The plane is going regardless. Might as well get paid for the trip.
DM me.
If it works, I keep building. If it doesn't, I go the conventional route — college.
Barry Morgan retweeted
A year ago I left my last company, not of my own volition. Fast forward a year and my contract is ending and I am being laid off at the end of the month. I've been a CISO, ran a MSSP, ran IR and CTI for a fortune 50 company. Supported the IC for 15 years in cyber. #opentowork
I installed the batteries, now what...#defcon34






















