Lightnews — Scholar-powered news

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 3d

What to do after a great Wild West Hackin Fest? Get up on 3 hours sleep and work the Chicago Marathon as a ham radio operator.

5

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 4d

If said person had a real brain in the first place.

1

Reposted by Shecky (((Mike))) - Third Wheel

BSides Buffalo @bsidesbuffalo.bsky.social · 5d

Good news, everyone!

We have an official date for our next event -- the fifth annual BSides Buffalo will be at Canisius University on June 6, 2026! Follow this account and watch this space for our updated sponsorship packet and more details. Hope to see you there!

4 4

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 5d

For some reason the low count to poison does not surprise me. It should though.

www.theregister.com/2025/10/09/i...

Data quantity doesn't matter when poisoning an LLM

: Just 250 malicious training documents can poison a 13B parameter model - that's 0.00016% of a whole dataset

www.theregister.com

1 3

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 5d

Very interesting PoC on indirect prompt injection.

unit42.paloaltonetworks.com/indirect-pro...

When AI Remembers Too Much – Persistent Behaviors in Agents’ Memory

Indirect prompt injection can poison long-term AI agent memory, allowing injected instructions to persist and potentially exfiltrate conversation history.

unit42.paloaltonetworks.com

1

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 6d

Improper sanitation, who had that on their MCP bingo card?
Seriously, this is another example of why nothing is ever solved in security!

www.darkreading.com/vulnerabilit...

Figma MCP Server Opens Orgs to Agentic AI Compromise

A bug (CVE-2025-53967) in a popular Web design tool's option for talking to agentic AI allows command injection leading to remote code execution (RCE).

www.darkreading.com

1

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 6d

Would that be filed under regulation specific or data protection?

2

Reposted by Shecky (((Mike))) - Third Wheel

Jake Williams @malwarejake.bsky.social · 7d

Five years? Go home Claude, you're drunk...

2 1 16

Reposted by Shecky (((Mike))) - Third Wheel

Blue Team Con @blueteamcon.com · 7d

Thanks to the many speakers who have shared their presentation decks from Blue Team Con 2025. They've been added to the individual talk pages on our site - check it out!
blueteamcon.com/talks-blue-t...

3 4

Reposted by Shecky (((Mike))) - Third Wheel

Uncle Cozmic @unclecozmic.bsky.social · 7d

What do you call a pair of Levi's that you find in a mushroom circle in the forest? Fae-ded jeans

1 2

Reposted by Shecky (((Mike))) - Third Wheel

Accidental CISO @accidentalciso.net · 9d

We’re gearing up to record another episode soon, and I need callers with questions about how to humanely manage IT and security teams to ask their questions on the show! Please reach out to sign up to be a caller!

1 2 5

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 7d

And this is one of the problems we have right now in hiring. The over qualified are getting the junior positions. The pipeline is broken. It is tough out there.
Use to be if you were overqualified you wouldn't get a look cause they figured you would move on to a proper position first opprotunity,

IT_Spook @itspook.com · 7d

I referred a junior resource to an junior cybersecurity position at our work and they did not get screened in for an interview. I inquired and was told they had nearly 400 applicants and had to set the bar very high for the cutoff (certs, experience, etc.).

1

Reposted by Shecky (((Mike))) - Third Wheel

IT_Spook @itspook.com · 7d

I referred a junior resource to an junior cybersecurity position at our work and they did not get screened in for an interview. I inquired and was told they had nearly 400 applicants and had to set the bar very high for the cutoff (certs, experience, etc.).

1 2 15

Reposted by Shecky (((Mike))) - Third Wheel

Lesley Carhart @hacks4pancakes.com · 7d

I see so much gaslighting of people who are struggling to find jobs at junior and mid-level cybersecurity by folks who got their last job or first job before 2023. It's unreal and uncalled for. The market and the automation in the hiring processes have gone to hell. www.reddit.com/r/SecurityCa...

From the SecurityCareerAdvice community on Reddit

Explore this post and more from the SecurityCareerAdvice community

www.reddit.com

8 17 100

Reposted by Shecky (((Mike))) - Third Wheel

Jake Williams @malwarejake.bsky.social · 9d

Microsoft does some amazing things for security. This is not one of them...

Headline: MSFT is endorsing the use of personal Copilot in workspaces, frustrating IT admins.

6 5 45

Shecky (((Mike))) - Third Wheel @siliconshecky.siliconshecky.com · 9d

While doing a night photo shoot at the Illinois Railway Museum this weekend, I took a quick cell phone shot of the last remaining E5 engine and a model. Pretty proud of this one. Can’t wait till I get back from #WWHF to see the shots from my DSLr.

4

Reposted by Shecky (((Mike))) - Third Wheel

Phillip Wylie @phillipwylie.bsky.social · 14d

Cathy Ullman: The Power of Active Defense

Cathy Ullman: The Power of Active Defense - Phillip Wylie

About the Guest: Cathy Ullman, known in the cybersecurity community as Investigator Chick, boasts an impressive 24-year tenure at the University of Buffalo where her expertise spans across digital forensics and incident response. She has not only made a mark with her significant work in tech support but also holds a leadership position in organizing…

thehackermaker.com

2 3

Reposted by Shecky (((Mike))) - Third Wheel

Matthew Gracie @infosecgoon.bsky.social · 14d

Happy October, everyone! A reminder that this month's Infosec 716 meetup will be a hybrid event on the evening of October 15 -- you can either join on Discord or meet us in person in the Tri-Main Building and check out the Bit Haven hacker space. Either way, hope to see you there!

Infosec 716 October Meetup, Wed, Oct 15, 2025, 6:00 PM | Meetup

NOTE: Rather than being a purely virtual event as we usually have, **this month's meetup will be a hybrid event**. It will still be broadcast on the Infosec 716 Discord ser

www.meetup.com

2 4

Reposted by Shecky (((Mike))) - Third Wheel

Jenna McLaughlin @jennamclaughlin.bsky.social · 14d

If you listen to @npr.org today, our hosts will tell you: it's the first day in more than fifty years that public media is operating without federal funding.

We're still here, going strong and keeping you informed.

Proud to be a part of this team.