Author | Lightnews

John P. Mello Jr. @jpmjr.bsky.social · 5h

The EV market is bracing for a "recalibration" in 2026 as surging depreciation and the end of key U.S. subsidies reset the industry. jpmellojr.blogspot.com/2025/10/ev-m... #EVMarket #Recalibration #ElectricVehicles #EVs

EV Market Recalibration Ahead as Prices Plunge, Subsidies End

The EV market is bracing for a "recalibration" in 2026 as surging depreciation and the end of key U.S. subsidies reset the industry. more

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · 5h

The EV market is bracing for a "recalibration" in 2026 as surging depreciation and the end of key U.S. subsidies reset the industry. jpmellojr.blogspot.com/2025/10/ev-m... #EVMarket #Recalibration #ElectricVehicles #EVs

EV Market Recalibration Ahead as Prices Plunge, Subsidies End

The EV market is bracing for a "recalibration" in 2026 as surging depreciation and the end of key U.S. subsidies reset the industry. more

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · 1d

OpenAI’s Sora 2 can be prompted to generate false claim videos 80% of the time, according to NewsGuard. jpmellojr.blogspot.com/2025/10/sora... #Sora2 #OpenAI #Deepfakes #Disinformation #NewsGuard

Sora 2 Generates False Videos 80% of the Time, Study Finds

New research by NewsGuard has revealed that the latest version of OpenAI’s video creation tool Sora 2 can be prompted to advance false or ...

jpmellojr.blogspot.com

2

John P. Mello Jr. @jpmjr.bsky.social · 5d

AI MCP servers have a glaring security hole: long-lived, static credentials are putting data, code, and production systems at risk. jpmellojr.blogspot.com/2025/10/mode... #AIsecurity #CredentialSecurity #MCP #APISecurity #SecretsManagement #Astrix

Model Context Protocol credential weakness raises red flags

MCP servers, which are important to the fast-developing AI stack, have a credentials problem. more

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · 6d

Vibe coding is fast—but is it secure? Here are 5 critical lessons for AppSec teams navigating AI-generated code in production. jpmellojr.blogspot.com/2025/10/vibe...
#VibeCoding #AppSec #AIgeneratedCode #DevSecOps #LLMcoding #CodeReview #SoftwareSecurity

Vibe coding in production: 5 security lessons

Vibe-coded apps that make it to production can be a minefield for security teams. Here are key takeaways for your AppSec team. more

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · 7d

Q3 digital ad spend saw mixed growth. Instagram (+21% YoY) and YouTube (+12% YoY) delivered strong increases. jpmellojr.blogspot.com/2025/10/q3-a...
#DigitalAdSpend #Tunuiti #AdvertisingTrends #ecommerce

Q3 Ad Spend on Largest Digital Platforms Showed Mixed Growth

Ad spending growth trends were mixed across the largest U.S. digital ad platforms in Q3, while pricing growth was weak, according to a rep...

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · 8d

ID breaches are on the rise, with help desks being targeted! Check out the latest report from RSA jpmellojr.blogspot.com/2025/10/iden... #IdentityBreach #HelpDesk #RSA #InfoSec #SecurityThreats

Identity Breaches Surge as Help Desks Face New Threats

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · 14d

Your digital perimeter isn’t what it used to be. ReversingLabs lays out 10 must-do moves to defang your attack surface before it bites back. jpmellojr.blogspot.com/2025/10/the-... #AttackSurface #RiskManagement #ASM - #SecurityStrategy #AppSec

The attack surface is expanding: 10 ways to bolster risk management

Attack surface management (ASM) isn’t just another buzzword. It represents a fundamental shift in security strategy with risk on the rise....

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · 14d

Plugin vulnerability exploited! Get the inside scoop on the Postmark MCP attack and what it means for supply chain security.#PostmarkMCP #npm #supplyChainSecurity
jpmellojr.blogspot.com/2025/10/the-...

The Postmark MCP server attack: 5 key takeaways

The recent discovery of malicious MCP (Model Context Protocol) server code has some sobering ramifications for security teams. Here are le...

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · 14d

Security leaders are turning to AI to empower their short-staffed teams and close skills gaps. jpmellojr.blogspot.com/2025/10/secu... #AIinSecurity #SecurityTeams #Fortinet #SkillsShortage

Security Leaders Turn to AI Amid Cyber Skills Shortage

Security leaders facing workforce shortages are turning to artificial intelligence to close the skills gaps in their organizations, accord...

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · 15d

41% of schools in the US & UK have experienced AI-related cyber incidents, including phishing campaigns and deepfakes. #SchoolSecurity #EdTech #ArtificialIntelligence #AIinEducation
jpmellojr.blogspot.com/2025/10/41-o...

41% of Schools Face AI-Related Cyber Incidents, Study Finds

Some 41% of schools in the United States and the United Kingdom have experienced AI-related cyber incidents, ranging from phishing campaig...

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · 21d

Researchers demonstrate how AI-powered real-time voice cloning can be used for convincing vishing attacks. jpmellojr.blogspot.com/2025/10/real... #Vishing #DeepfakeVishingttacks #RealTimeVoiceCloning #NCC

Real-Time AI Voice Cloning Powers Convincing Vishing Attacks

Cybersecurity researchers revealed Tuesday how artificial intelligence can be used to clone a person’s voice in real time to mount voice p...

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · 22d

OpenAI drops new parental controls for teens on ChatGPT — link accounts, set quiet hours, and limit content. jpmellojr.blogspot.com/2025/09/open...
#ChatGPT #OpenAI #ParentalControls #TeenSafety

OpenAI Adds Parental Monitoring Tools for Teen ChatGPT Users

New parental controls for one of the most popular generative AI chatbots on the web were rolled out Monday by OpenAI. more

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · 28d

The ongoing battle between shipping code fast and shipping it securely is a real challenge. Here are some strategies for AppSec teams to manage the risk. www.reversinglabs.com/blog/deadlin... #SecureCode #AppSec #SoftwareDevelopment #DevSecOps #CyberRisk

Deadlines vs. secure code: What AppSec teams can do | ReversingLabs

AI coding and other modern development practices mean flawed code will continue to ship. Here are key recommendations for managing software risk.

www.reversinglabs.com

John P. Mello Jr. @jpmjr.bsky.social · 28d

Secret Service dismantles massive SIM farm. Mobile domain becoming security battleground.
jpmellojr.blogspot.com/2025/09/secr...
#MobileSecurity #SIMFarm #NationalSecurity #SecretService

Secret Service Telecom Takedown Sparks Mobile Security Fears

The takedown of a massive outlaw telecom network in the New York City metro area by the U.S. Secret Service has raised concerns about the ...

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · 29d

Blowing the whistle just got a little easier: New DOD rule aims to protect & empower whistleblowers jpmellojr.blogspot.com/2025/09/new-... #Whistleblower #DOD #compliance #CMMC #CUI #FalseClaimsAct

New Pentagon Cyber Rule May Trigger More Whistleblowing

A new rule by the U.S. Department of Defense (DOD) aimed at beefing up cybersecurity at contractors doing business with the agency could s...

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · Sep 17

If you train ML models, they can learn to write more secure code. But the quality of the training data is only as good as your AppSec tooling. #AICoding #SecureDevelopment #CodeSecurity #SoftwareDevelopment
jpmellojr.blogspot.com/2025/09/how-...

How AI coding tools can learn to develop secure software

If you train ML models, they can learn to write more secure code. But the quality of the training data is only as good as your AppSec tool...

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · Sep 17

A monumental milestone! Quantum Motion has delivered the first full-stack quantum computer using a standard silicon CMOS chip. jpmellojr.blogspot.com/2025/09/sili... #QuantumComputing #QuantumMotion #CMOS #Silicon

1

John P. Mello Jr. @jpmjr.bsky.social · Sep 16

Tech companies are addressing trust issues with a new C-suite role: the Chief Trust Officer. jpmellojr.blogspot.com/2025/09/tech... #Forrester #ChiefTrustOfficer #TechEthics #DigitalTrust #TechLeadership

2

John P. Mello Jr. @jpmjr.bsky.social · Sep 11

CISA just dropped a new tool to help agencies manage software supply chain risks. It's a game-changer for cybersecurity, but not everyone agrees. #CISA #SoftwareSupplyChainSecurity #TPRSM #ProcurementTool jpmellojr.blogspot.com/2025/09/cisa...

CISA tool aims to boost security for software onboarding

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new web-based tool that it says will beef up cybersecurity...

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · Sep 10

The new iPhone Air, Apple's thinnest iPhone yet, stole the show at the latest Apple event. #iPhoneAir #Apple #iPhone #AppleWatch #AirPods
jpmellojr.blogspot.com/2025/09/ipho...

iPhone Air Steals Show at Apple Event

A new thin iPhone was the star of Apple’s “Awe Dropping” event aired online Tuesday. more

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · Sep 9

Google's favored search results can cost consumers cash. Favored results often lead to pricier options, hurting consumers and competition. #WalletHub #Google #Search jpmellojr.blogspot.com/2025/09/bias...

Biased Google Search Results Can Cost Consumers Cash

In most cases, a misleading result from a Google search is harmless, but a case study by a consumer financial information website released...

jpmellojr.blogspot.com

John P. Mello Jr. @jpmjr.bsky.social · Sep 3

The first AI-borne ransomware, PromptLock, has arrived. It uses an open-source LLM to create adaptive malware, marking a new era in cyber threats. jpmellojr.blogspot.com/2025/09/the-... #AIBorneRansomware #PromptLock #ESET #Malware #AI

The future is here: AI-borne ransomware has arrived

ESET researchers have discovered malware that taps into OpenAI’s large language model to assist in ransomware attacks. more

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · Sep 3

30% of iPhone owners might jump ship to Samsung or Google's foldables if Apple delays its foldable launch! Is Apple losing its grip? #Apple #FoldablePhones #iPhone jpmellojr.blogspot.com/2025/09/30-o...

30% of iPhone Owners Mulling Move to Rivals' Foldables: Study

A survey released Monday by a trade-in comparison website found that 30% of iPhone owners are “considering” switching to foldable phones b...

jpmellojr.blogspot.com

1

John P. Mello Jr. @jpmjr.bsky.social · Aug 27

An AWS security incident involving their Amazon Q AI assistant highlights the need for robust AI code security practices. Find out what happened and the lessons learned. #AWS #AmazonQ #AI #SupplyChainAttack #GenerativeAI jpmellojr.blogspot.com/2025/08/how-...

How AWS averted an AI coding supply chain disaster

Amazon Web Services recently averted a potential software supply chain disaster when it discovered that malicious code had been inserted i...

jpmellojr.blogspot.com

3