cje

cje

@cje.io

founder @bugcrowd && co-founder @disclose_io || hacker, entrepreneur, executive, advisor || عصا موسى || #w00w00

2.7K followers1K following420 posts

Pinned

cje
@cje.io

threat actor = someone who wants to punch you in the face threat = the punch being thrown vulnerability = your inability to defend against the punch risk = the likelihood of getting punched in the face

cje
@cje.io

tl;dr: AI is probablistic towards deterministic decisions. Risk distills these choices back into a probability, and this has always been true. The vulnerabilities were always there. AI is here to stay. Defender and attacker capability and increasing alongside each. cje.io/2026/10/26/s...

cje.ioDichotomiesIf you follow me on the socials, you might have noticed me saying that "I miss nuance" a number of times lately. I thought I'd try to shake out few takes on some of the less-productive "camps" I've…
cje
@cje.io

"ACN urges the digital community and ethical hackers to report all "Zero Day" vulnerabilities." - L’ACN invita la comunità digitale e gli hacker etici a segnalare tutte le vulnerabilità Zero Day m.cje.io/3WpQCvn

m.cje.ioL’ACN invita la comunità digitale e gli hacker etici a segnalare tutte le vulnerabilità "Zero Day"Il Direttore Generale Acn, Andrea Quacivi, ha adottato la “Politica Nazionale di divulgazione coordinata delle vulnerabilità (CVD)”: “Si consolida un modello di collaborazione tra istituzioni,…

cje reposted

Bob Lord
@boblord.bsky.social

Vulnerability Disclosure Policy: A Vulnerability Disclosure Policy (VDP) defines how a software manufacturer will receive, respond to, and credit reports of security defects from external researchers.

cje
@cje.io

Cost shouldn't decide who gets a seat in the AI security conversation. $100K+ in scholarships for [un]prompted (SF, Oct 27-29): 100% of the $850 registration covered, no means test. Under 3 weeks out. Put your hat in the ring 👇 decibel.vc/unprompted-scholarship-2026

cje reposted

Australian Strategic Policy Institute
@aspi-org.bsky.social

'For both [Canada and Australia], distance is not simply a transport problem. It affects how capabilities need to be designed,' writes Raelene Lockhorst.

aspistrategist.org.auAustralia and Canada face similar northern logistics problems | The StrategistAustralia and Canada are separated by half a world, but a new defence partnership is exposing an unexpected similarity. Canada is buying Australian surveillance technology developed to monitor the vas...
cje
@cje.io

again, please sponsor @archive.org

Mark T. Sneed@marktsneed.bsky.social

“Every record has been destroyed or falsified, every book rewritten, every picture has been repainted.... History has stopped. Nothing exists except an endless present in which the Party is always right.” ― George Orwell, 1984

cje reposted

Micah Lee
@micahflee.com

Flock cameras are riddled with security vulnerabilities and hard-coded credentials. Here's my analysis of today's @ddosecrets.org Flock leak micahflee.com/flock-camera...

micahflee.comFlock cameras are riddled with security vulnerabilities and hard-coded credentialsThis morning, DDoSecrets published an exciting new dataset: Filesystem images of the partitions from an in-use Flock ALPR camera. 404 Media and Wired published a joint investigation into it. I downloa...
cje
@cje.io

This is a *really* solid read, mirrors my experience atm, and reinforces the whole "defensive cyber is an economics game" conversation. ty @gadievron for the link: Just a rumour of a bug is enough to find a security exploit these days anil.recoil.org/notes/rumour...

anil.recoil.orgJust a rumour of a bug is enough to find a security exploit these daysThinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
cje
@cje.io

Highly recommended viewing for nerds and spooks of all generations: To have Cliff's utter joy for building, learning, and teaching is something to aspire to <3 @DefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll www.youtube.com/watch?v=6560...

youtube.comDefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll40 years ago today, I tripped over a 75-cent accounting glitch in a Unix system. That tiny clue led to a year-long chase across networks, modem banks, and international borders, ultimately uncovering…
cje
@cje.io

w00t! The @unpromptedau Schedule is now LIVE and we're (checks website) 29d 07h 42m and 07s out... Have you got your tickets yet? unprompted.au: Australia's Premiere AI × Cybersecurity Conference

cje
@cje.io

nso really need to establish a support line or something

International Cyber Digest@intcyberdigest.bsky.social

‼️ One of our Israeli followers received a real threat notification from Apple after being targeted by spyware. They told us their phone battery had been draining unusually fast.

cje
@cje.io

This is kinda wild... The White House letters of marque memorandum almost directly quotes the language of the Computer Fraud and Abuse Act. It basically says "Hey, so you know that thing that we explicitly told you not to do? Do that" m.cje.io/3Ubjma8

cje
@cje.io

I wrote this back in April, and it feels like a pretty salient time to repost it. A missing piece of the “attack of the clankers” conversation is that all of the offensive outcomes were possible in the first place. Offense Scales with Compute. Defense Scales with Committees. cje.io/2026/04/08/o...

cje.ioOffense Scales with Compute. Defense Scales with Committees.Why AI is widening the attacker-defender gap faster than anything we've built to close it — and what that actually means for the next decade of security.
cje
@cje.io

little reminder: if you're hustling at @BlackHatEvents @BSidesLV @defcon this year (job hunting, consulting, recruiting, etc) i made a tool creates a sexy looking linkedin QR code wallpaper, so you can share details without the fumble (*) qr.cje.io * = it's especially handy after 10pm or so 🙃

qr.cje.ioLinkedIn QR Wallpaper: Skip the app. Share your profile from your lock screen.For those on the hustle: generate a lock screen wallpaper with your LinkedIn QR code. One click, zero apps. Free.