So…anyone seen details on this?

I’m hiring a sr principal threat researcher. When big things happen on the internet, you’ll lead the threat research to hunt across our vast telemetry & write the threat briefs. Senior role w/ strong comms & collab experience. jobs.paloaltonetworks.com/en…

Sometimes I put this on the projector and just shout “QUADBOX” at my wife until she is forced to acknowledge.

Packers fans are everywhere

The Department of Justice, through U.S. Attorney Jeanine Ferris Pirro and Assistant Attorney General A. Tysen Duva of the Criminal Division, together with its partners, today announced a series of coordinated actions by the Scam Center Strike Force against Southeast Asian criminal organizations operating scam centers that have defrauded Americans of billions of dollars. Read More Here: justice.gov/usao-dc/pr/scam-… @USAttyPirro @FBI @SecretService @USTreasury @StateDept

Had an interview with a “crypto” recruiter. We talked for about 40 minutes, and then they asked me to look at some code. Their first instruction was to clone the repo. I didn’t. They seemed surprised, so I told them I wanted a moment to check whether it was safe first. I ran a quick analysis with Claude. Turns out the code had a backdoor. It would copy my environment variables and send them to a remote server. The recruiter went speechless and ended the call pretty quickly. Be careful who you talk to. Scammers are real.

A special place in hell for the people indicted here.

The @SLEUTHCON CFP closes next week. Don’t waste valuable time doing your taxes. Submit! Submit! Submit!

It’s nice to fantasize about a comprehensive integration into CI/CD pipelines to the point where we all get to hold hands and sip daiquiris on the beach, but you are still a river of fire and brimstone away from that level of tool and patch adoption.

If there are any Delve customers left on @ZackKorman’s list, this should be some sort of blunt force instrument. A brand new “How cooked are we?” metric.

Really can’t believe @smithsonian took Hail Mary off the IMAX for Super Mario.

The FLARE team now freely distributes its quality reverse engineering and malware analysis educational content at github.com/mandiant/flare-le…. Launched with: - Malware Analysis Crash Course - Go Reversing Reference - Intro to TTD

Our blog on the Axios NPM supply chain attacks. We are attributing the incident to a suspected North Korean threat actor we track as UNC1069. That actor is financially motivated and DPRK historically leveraged supply chain attacks to target crypto. cloud.google.com/blog/topics…

We are still looking at the axios supply chain compromise, but we’ve attributed it to UNC1069, a suspected DPRK actor, who we covered in a blog this February. They are financially-motivated and historically DPRK uses these incidents to target crypto. cloud.google.com/blog/topics…

Shoutout to the Badgers captain dropping an F bomb on live TV.

We want to hear from YOU 🫵 Got something you think would make a great talk at SLEUTHCON this year? Full-talk speakers get a $500 honorarium, ALL speakers get the best swag! Don't wait - submissions close April 17th at 11:59 (ET)! Learn more about our CFP and submit yours today

Hong Kong: On March 23, 2026, the Hong Kong government changed the implementing rules relating to the National Security Law. It is now a criminal offense to refuse to give the Hong Kong police the passwords or decryption assistance to access all personal electronic devices including cellphones and laptops. This legal change applies to everyone, including U.S. citizens, in Hong Kong, arriving or just transiting Hong Kong International Airport. In addition, the Hong Kong government also has more authority to take and keep any personal devices, as evidence, that they claim are linked to national security offenses. Read more: hk.usconsulate.gov/security-…

At RSAC Conference —> Google’s threat intelligence arm officially launched its anticipated disruptive cyber unit on Monday, which comes as the Trump admin seeks to create a more offensive, proactive US culture against hackers. nextgov.com/cybersecurity/20…

Admin told me to post feet pics after dark

It's the most wonderful crime of the year! Here's the @SLEUTHCON CFP link to make your work to entertain/inform me: sleuthcon.com/submission-gui… . I always hope for more talks from people with hands on interpersonal and platform fraud, which is generally under-covered. cc: @patio11