2026-05-17T02:44:18Z https://yabu.me Javvad Malik :verified: https://yabu.me/npub1rhjrwwymlvnuhesgeasred2e03glnnx6apyufx2ldlzrdvvdguyqt2dwzk https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/387/353/821/222/845/original/7bafd4b67fa9cd2e.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/387/353/821/222/845/original/7bafd4b67fa9cd2e.png https://yabu.me/nevent1qqs0v6ydut4em3w0cj7z7cnd79e6kpsanjlfm85lrfeh3e5h4rfadrgzyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rsse3y759 We trust AI to be rational. We trust it to cooperate. Then we&#39;re shocked when it behaves like a toddler with a keyboard. Maybe the real problem is we&#39;re projecting competence onto something that&#39;s just very good at pattern matching.<br/><br/><a href="https://www.schneier.com/blog/archives/2026/04/human-trust-of-ai-agents.html">https://www.schneier.com/blog/archives/2026/04/human-trust-of-ai-agents.html</a> 2026-04-20T20:00:04Z https://yabu.me/nevent1qqsv4uh6v6kqce8mprm0498p0gvzg04exe3u6nrw0g62gtevz8zryxczyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rssr3px6f NetScaler is doing it again. Third time in three years we&#39;re patching memory leaks that hand attackers your session tokens on a plate. CISA&#39;s already got it on the emergency list. If you run one, stop reading this and patch now.<br/><br/><a href="https://cybersec.picussecurity.com/s/cve-2026-3055-cve-2026-4368-inside-the-netscaler-citrixbleed-3-memory-overread-26799">https://cybersec.picussecurity.com/s/cve-2026-3055-cve-2026-4368-inside-the-netscaler-citrixbleed-3-memory-overread-26799</a> 2026-04-18T16:00:32Z https://yabu.me/nevent1qqsq64y0d0f6k6a03yrelx0d2wqfdk7uf6mr20d0ryu0h693jvzzp4czyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rssx0sqm0 Is anthropic the Red Bull of the AI world? <br/><br/>&#34;We have built something extremely powerful.&#34;<br/>&#34;Can people use it?&#34;<br/>&#34;That&#39;s not the point. Focus on the fact that it may be too powerful.&#34;<br/>&#34;For what?&#34;<br/>&#34;Everything. Cybersecurity. Biology. The economy. Possibly feelings.&#34;<br/><br/>It signals capability. JUst keep saying, &#34;we&#39;re dangerously good&#34; and people will assume it is true<br/>Create scarcity, &#34;this model is too capable to release broadly&#34; <br/>Aura farming the burden of civilisation on their backs. Every release is part product, part life-changing confession. <br/><br/>I think from a cybersecurity marketing perspective, what they&#39;ve done really well is even when they are warning you, they are still advertising... 2026-04-12T12:15:13Z https://yabu.me/nevent1qqsqkkeec5jn2htkkamcm2hql2d7aw46lwk6hdjfhwxd8nwv5c42kwczyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rsseqnazx <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/291/691/832/995/959/original/01d7378c96e5c84a.jpg"> <br/> 2026-03-25T20:26:43Z https://yabu.me/nevent1qqsvcc3apgqmgetsqj06tzlfad5he7mst7evyyaj22y5egghm9adrcgzyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rssmdytph <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/238/547/998/560/178/original/55ece3aa12226f9d.jpeg"> <br/> 2026-03-16T11:11:24Z https://yabu.me/nevent1qqstzysw8hg8cl37zu02j2esew67j9n45vkmw5felffrksct7un05jqzyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rsske6442 We&#39;ve invented service accounts all over again. MCP servers are quietly becoming the same overprivileged, under-monitored access brokers that have haunted enterprise security for years. Except this time, we&#39;re stacking them on top of the old ones.<br/><br/><a href="https://go.aembit.io/s/mcp-servers-and-the-return-of-the-service-account-problem-25746">https://go.aembit.io/s/mcp-servers-and-the-return-of-the-service-account-problem-25746</a> 2026-03-09T11:30:09Z https://yabu.me/nevent1qqsv5l0a0ej5fx97hgv6u8ad4u549uqxv8a52j47v9wz2c0t39m052szyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rsss7a783 LLMs can generate &#39;secure&#39; passwords that are actually just predictable garbage. Because, you know, predicting is what LLMs do best.<br/><br/><a href="https://www.irregular.com/publications/vibe-password-generation">https://www.irregular.com/publications/vibe-password-generation</a> 2026-02-19T16:19:46Z https://yabu.me/nevent1qqsp7f9wjg0e78dy4ghq6p5y43tqf6j6ey748urp46sj0u7fa5e9chczyqw7gdecn0aj0jlxpr8kq094t979r7wvmt5yn3yetahugd4334rss9zlyva Forget about whether 100 men would win against 1 gorilla... the real question is how would 100 CISSP&#39;s fare against a gorilla?<br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/670/524/659/166/628/original/b4cb59ab6a6aa52d.mp4"></video><br/> 2025-06-12T13:02:59Z