Tootfinder

CISA issued a directive today reflecting the growing recognition that patching based primarily on severity scores is no longer sufficient in an AI-driven environment where defenders face more vulnerabilities than they can realistically remediate at once.
Check out my latest CSO piece for more details.
Many thanks to Sasha Romanosky of Rand, Jerry Gamblin of RogoLabs, and Michael Roytman of Empirical Security for their insight.

CISA tells agencies to patch smarter, not harder — foreshadowing broader industry practice
A new CISA directive moves federal agencies beyond severity scores and toward a risk-based patching model that prioritizes real-world exploitation, asset exposure, and attacker impact — a framework many security leaders see as the future of vulnerability management.

Berge auf der Insel Putuo Shan (2006) #MountainMonday #Putuoshan

Die #AfD lässt Migrant:innen die Straße putzen: "Wir [...] haben für Ordnung gesorgt. [...] Die Deutschen haben die Schnauze voll!" - nur ein katholischer Pfarrer schlägt Alarm.
Die Parallelen zu den entwürdigenden "Reibpartien" in Wien 1938 oder zum Reichsarbeitsdienst (Oberster Leitsatz: „Keine Wohlfahrtsunterstützung ohne Arbeit“) sind unübersehbar.

Entsetzen über Video | AfD lässt Migranten in Gelsenkirchen putzen
Die AfD filmt, wie sie Migranten in Gelsenkirchen die Straße putzen lässt. Ein Pfarrer schlägt Alarm. So reagieren Betroffene.

It can be exhausting to keep up with the breakneck pace of cybersecurity, so don't miss today's Metacurity for the most crucial developments you should know, including
--Coupang hit with record $409 million fine over massive insider-driven data breach,
--CISA orders faster patching as AI speeds exploitation,
--Suspected Russian hacker extradited to the US over Void Blizzard,
--OpenAI disrupts China-linked campaigns targeting US tech debates,
--Digital bre…

Coupang hit with record $409 million fine over massive insider-driven data breach
CISA orders faster patching as AI speeds exploitation, Suspected Russian hacker extradited to the US over Void Blizzard, OpenAI disrupts China-linked campaigns targeting US tech debates, Digital breadcrumbs lead to alleged leader of The Gentlemen, much more

[1/?]
Using SEO to justify accessibility was only ever a technique for bosses / clients driven by dashboards, money.
Ideally, you want to get past that ASAP to drive better outcomes for humans, not SERPs.
I get it as a foot-in-the-door tactic — hopefully no further.
But it also drove alt text keyword stuffing (among other bad practices).
So I was always wary of companies pitching accessibility *and* SEO in their marketing.

President Pathogen
bot by @…
This is satire, not sedition: I hope you'll lol, not take legal action.
#satire #potus45

🇺🇦 #NowPlaying on KEXP's #DriveTime
Little Dragon:
🎵 Paris
#LittleDragon
https://littledragonmusic.bandcamp.com/track/paris
https://open.spotify.com/track/13NVnPx18PtHzmdMfW1Udw

I've been paying attention to the supply side of the gig economy now that I have a car and might make a buck going somewhere I already was going to. But this, this just makes me sad inside.

„Die öffentliche Demütigung gab es schon mal. Von 1933 bis 1945 wurden etwa Sinti und Roma oder Juden auch gezwungen, vor der Haustür zu kehren und dann wurden sie deportiert. Die Botschaft lautet: Ihr seid nirgendwo sicher.“
Schon klar, wählt die ruhig weiter.
#noAfD #nazisraus

Entsetzen über Video | AfD lässt Migranten in Gelsenkirchen putzen
Die AfD filmt, wie sie Migranten in Gelsenkirchen die Straße putzen lässt. Ein Pfarrer schlägt Alarm. So reagieren Betroffene.

CISA's binding operational directive on the AI EO is coming out tomorrow.
https://cyberscoop.com/cisa-cyber-risk-prioritization-vulnerability-directive/

CISA is rethinking how it prioritizes risks and vulnerabilities for feds, private sector
CISA is shifting federal agencies and critical infrastructure away from blanket patching toward targeted cyber risk prioritization, acting director Nick Andersen says.