Cynthia Brumfield
@metacurity.com
DC resident and cybersecurity writer, analyst, book author, publisher. https://metacurity.com/ https://cyberriskbook.com/
https://www.csoonline.com/profile/cynthia-brumfield/ https://infosec.exchange/@metacurity
Send tips to Cynthia.507 via Signal.
https://www.csoonline.com/profile/cynthia-brumfield/ https://infosec.exchange/@metacurity
Send tips to Cynthia.507 via Signal.
Pinned
Cyberattack on a critical third-party vendor could expose top banks' customer data
An insider shared internal CrowdStrike screenshots on Telegram, Hackers stole Salesforce-stored data from 200+ companies, DOGE has purportedly disbanded, Harvard is the latest Ivy to get hacked, AI mo...
www.metacurity.com
Check out today's Metacurity for a ton of critical infosec developments you might have missed over the weekend, including
--Cyberattack on a critical third-party vendor could expose top banks' customer data, 1/4
www.metacurity.com/cyberattack-...
--Cyberattack on a critical third-party vendor could expose top banks' customer data, 1/4
www.metacurity.com/cyberattack-...
Reposted by Cynthia Brumfield
I concur.
very odd that the Post would write up someone’s speciation as if it’s news. What are we doing here
November 26, 2025 at 11:39 PM
I concur.
www.tiktok.com/t/ZTrj43PQ6/
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
I’m never not thinking about @Julie Benko in funny girl. #masterit #broadwaymusicals #actorslife #musicaltheatre #theatrekid
TikTok video by Douglas Goodhart
www.tiktok.com
November 26, 2025 at 10:21 PM
www.tiktok.com/t/ZTrj43PQ6/
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
Reposted by Cynthia Brumfield
No matter how long I live after we get through this dark chapter, I will never get over the immorality, the amorality, the corruption, the criminality and the cruelty in service to one of the worst humans to ever walk the earth.
November 26, 2025 at 1:13 AM
No matter how long I live after we get through this dark chapter, I will never get over the immorality, the amorality, the corruption, the criminality and the cruelty in service to one of the worst humans to ever walk the earth.
Reposted by Cynthia Brumfield
If the devil picked up a pen to design a “peace plan” that guarantees 🇷🇺’s appetite for war grows from large to unquenchable, step 1 would be: force 🇺🇦 to cede territory before a ceasefire.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
November 26, 2025 at 7:35 PM
If the devil picked up a pen to design a “peace plan” that guarantees 🇷🇺’s appetite for war grows from large to unquenchable, step 1 would be: force 🇺🇦 to cede territory before a ceasefire.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
Reposted by Cynthia Brumfield
Update: West Virginia Gov. Patrick Morrisey initially announced on X that both Guard members had died.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
Two National Guard members injured in shooting near White House
Police said a suspect is in custody and the investigation is ongoing.
www.axios.com
November 26, 2025 at 9:33 PM
Update: West Virginia Gov. Patrick Morrisey initially announced on X that both Guard members had died.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
Reposted by Cynthia Brumfield
Look kids! It’s Ask Jeeves! Over here Jeeves!
November 26, 2025 at 8:26 PM
Look kids! It’s Ask Jeeves! Over here Jeeves!
Reposted by Cynthia Brumfield
man this just fucking sucks
this never should have happened, they never should have been there
this never should have happened, they never should have been there
NEW: The governor of West Virginia says that two members of the state National Guard shot today in DC have died.
November 26, 2025 at 8:57 PM
man this just fucking sucks
this never should have happened, they never should have been there
this never should have happened, they never should have been there
Reposted by Cynthia Brumfield
2 kids who should never have been sent to DC and who likely did not want to be there are dead bc of a political stunt. Regardless of the proximate reasons these deaths happened, the ultimate outcome will be days of right wing rage followed by worse decisions that put more people at risk.
NEW: The governor of West Virginia says that two members of the state National Guard shot today in DC have died.
November 26, 2025 at 8:55 PM
2 kids who should never have been sent to DC and who likely did not want to be there are dead bc of a political stunt. Regardless of the proximate reasons these deaths happened, the ultimate outcome will be days of right wing rage followed by worse decisions that put more people at risk.
Reposted by Cynthia Brumfield
I think that it is bad that the National Guard is deployed in a city for absolutely no reason and today's tragedy could be easily avoided by not deploying the guard for made-up reasons.
November 26, 2025 at 8:56 PM
I think that it is bad that the National Guard is deployed in a city for absolutely no reason and today's tragedy could be easily avoided by not deploying the guard for made-up reasons.
Reposted by Cynthia Brumfield
“They should do it the right way”
November 26, 2025 at 8:18 PM
“They should do it the right way”
Reposted by Cynthia Brumfield
Almost certainly a targeted attack at two people who had basically nothing to do with the moment and would have preferred to be home with their families. Compounded tragedy.
NEW: The governor of West Virginia says that two members of the state National Guard shot today in DC have died.
November 26, 2025 at 8:52 PM
Almost certainly a targeted attack at two people who had basically nothing to do with the moment and would have preferred to be home with their families. Compounded tragedy.
Here’s the latest.
www.nytimes.com
November 26, 2025 at 7:59 PM
Reposted by Cynthia Brumfield
Microsoft announced to all its FTEs this same lie that they should buy a different router than tp-link.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
this.weekinsecurity.com/banning-tp-l...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
Banning TP-Link won't save America from its own terrible cybersecurity
TP-Link routers face a ban in the U.S. over the company's alleged links to China, but shoddy cybersecurity is the real insider threat to the United States.
this.weekinsecurity.com
November 26, 2025 at 5:39 PM
Microsoft announced to all its FTEs this same lie that they should buy a different router than tp-link.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
Reposted by Cynthia Brumfield
NEW: Myanmar has made a big show of destroying the notorious KK Park scam compound—even publishing a video of a steamroller driving over thousands of phones
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
The Destruction of a Notorious Myanmar Scam Compound Appears to Have Been ‘Performative’
Myanmar’s military has been blowing up parts of the KK Park scam compound. Experts say the actions are likely for show.
www.wired.com
November 26, 2025 at 5:11 PM
NEW: Myanmar has made a big show of destroying the notorious KK Park scam compound—even publishing a video of a steamroller driving over thousands of phones
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
Reposted by Cynthia Brumfield
NEW: A trivial-to-exploit bug in jury systems used across the United States exposed jurors' sensitive personal data, such as full names, date of birth, emails, cell phone numbers, and home addresses — and potentially health data.
The bug allowed anyone to brute-force and access jurors' accounts.
The bug allowed anyone to brute-force and access jurors' accounts.
Bug in jury systems used by several US states exposed sensitive personal data | TechCrunch
An easy-to-exploit vulnerability in a jury system made by Tyler Technologies exposed the personally identifiable data of jurors, including names, home addresses, emails, and phone numbers.
techcrunch.com
November 26, 2025 at 4:18 PM
NEW: A trivial-to-exploit bug in jury systems used across the United States exposed jurors' sensitive personal data, such as full names, date of birth, emails, cell phone numbers, and home addresses — and potentially health data.
The bug allowed anyone to brute-force and access jurors' accounts.
The bug allowed anyone to brute-force and access jurors' accounts.
Reposted by Cynthia Brumfield
New from me: House lawmakers have called on Anthropic CEO Dario Amodei to testify next month on how Chinese hackers used Claude Code to automate most of a wide-reaching cyberespionage campaign.
More on @axios.com: www.axios.com/2025/11/26/a...
More on @axios.com: www.axios.com/2025/11/26/a...
Exclusive: Anthropic CEO called to testify before Congress about Chinese AI cyberattack
The request comes weeks after Anthropic said China used Claude Code in an espionage campaign.
www.axios.com
November 26, 2025 at 4:47 PM
New from me: House lawmakers have called on Anthropic CEO Dario Amodei to testify next month on how Chinese hackers used Claude Code to automate most of a wide-reaching cyberespionage campaign.
More on @axios.com: www.axios.com/2025/11/26/a...
More on @axios.com: www.axios.com/2025/11/26/a...
Reposted by Cynthia Brumfield
Pretty ominous: the brilliant @hopeseck.bsky.social reports in @militarytimes.bsky.social on the counterintelligence challenges posed by the government shutdown — particularly opportunistic overtures issued by foreign intelligence services to U.S. Army soldiers. www.militarytimes.com/news/your-mi...
Foreign agents preying on disgruntled soldiers, Army intel chief warns
The 43-day government shutdown has presented a particular opportunity for enemies to influence frustrated and disaffected Army personnel.
www.militarytimes.com
November 26, 2025 at 2:48 PM
Pretty ominous: the brilliant @hopeseck.bsky.social reports in @militarytimes.bsky.social on the counterintelligence challenges posed by the government shutdown — particularly opportunistic overtures issued by foreign intelligence services to U.S. Army soldiers. www.militarytimes.com/news/your-mi...
Reposted by Cynthia Brumfield
the utter moral rot of these people compared to the maternal fear of this woman trying to protect her son from the brutal conditions she’s facing.
November 26, 2025 at 2:33 PM
the utter moral rot of these people compared to the maternal fear of this woman trying to protect her son from the brutal conditions she’s facing.
Reposted by Cynthia Brumfield
how does a bubble work
November 26, 2025 at 10:38 AM
how does a bubble work
Reposted by Cynthia Brumfield
Congress is broadly refusing to regulate our main communications infrastructure in spite of a long and storied history of being used to engage in massive espionage and cyber crime campaigns, but sure, let’s go after TP Link… based primarily on ✨the vibe ✨.
this.weekinsecurity.com/banning-tp-l...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
Banning TP-Link won't save America from its own terrible cybersecurity
TP-Link routers face a ban in the U.S. over the company's alleged links to China, but shoddy cybersecurity is the real insider threat to the United States.
this.weekinsecurity.com
November 26, 2025 at 1:57 PM
Congress is broadly refusing to regulate our main communications infrastructure in spite of a long and storied history of being used to engage in massive espionage and cyber crime campaigns, but sure, let’s go after TP Link… based primarily on ✨the vibe ✨.
Karma
"A woman with a family connection to White House Press Secretary Karoline Leavitt has been arrested by Immigration and Customs Enforcement agents in Revere, Massachusetts."
www.wcvb.com/article/karo...
www.wcvb.com/article/karo...
![REVERE, Mass. —
A woman with a family connection to White House Press Secretary Karoline Leavitt has been arrested by Immigration and Customs Enforcement agents in Revere, Massachusetts.
The woman, Bruna Ferreira, has an 11-year-old son with Michael Leavitt, Karoline Leavitt's brother.
Ferreira migrated with her family to the United States from Brazil as a child and is currently in custody at an ICE facility in southern Louisiana.
Michael Leavitt released a statement, saying that his "only concern has always been the safety, well-being, and privacy of [his] son."](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:x4qyokjtdzgl7gmqhsw4ajqj/bafkreiacyzixchgacpjse7wyra342opgjsvdxzqdrkxq55zzqah65zyeae@jpeg)
November 26, 2025 at 1:57 PM
Karma
this.weekinsecurity.com/banning-tp-l...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
Banning TP-Link won't save America from its own terrible cybersecurity
TP-Link routers face a ban in the U.S. over the company's alleged links to China, but shoddy cybersecurity is the real insider threat to the United States.
this.weekinsecurity.com
November 26, 2025 at 1:50 PM
this.weekinsecurity.com/banning-tp-l...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
Reposted by Cynthia Brumfield
A man and a woman get in an elevator, which one is doing risk assessment?
Lifting awareness of male supremacy: an elevator pitch with a twist
The source of much of what is wrong in the world today is male supremacy, awareness of which needs raising. Could one simple question do the trick?
riskopia.substack.com
November 26, 2025 at 1:32 PM
A man and a woman get in an elevator, which one is doing risk assessment?
Reposted by Cynthia Brumfield
Good morning to Brazilian reporter Manuela Borges, who’s been waiting eleven years for this petty moment. ❤️ 🇧🇷
November 26, 2025 at 1:04 PM
Good morning to Brazilian reporter Manuela Borges, who’s been waiting eleven years for this petty moment. ❤️ 🇧🇷
Reposted by Cynthia Brumfield
"Rest assured, though, the remaining files will be released, just with a few minor edits to some unfortunate nomenclature: 'underage girls' will be replaced with 'emerging women' and
'sex trafficking' will be replaced with “study abroad programs.”
'sex trafficking' will be replaced with “study abroad programs.”
I Was Always in Favor of Releasing the Epstein Files, Even as I Was Desperately Trying to Prevent Their Release
“President Donald Trump on Wednesday sought to bring a swift end to perhaps the most damaging saga of his term, signing a measure compelling the re...
buff.ly
November 26, 2025 at 1:11 PM
"Rest assured, though, the remaining files will be released, just with a few minor edits to some unfortunate nomenclature: 'underage girls' will be replaced with 'emerging women' and
'sex trafficking' will be replaced with “study abroad programs.”
'sex trafficking' will be replaced with “study abroad programs.”