Sam Sabin
@samsabin.bsky.social
5.5K followers 360 following 340 posts
Axios cybersecurity reporter, taking it day by day ✨ | 📩: sam.sabin@axios dot com, signal: SamSabin.01 (no pitches!), she/her
Posts Media Videos Starter Packs
samsabin.bsky.social
just got to do a talk radio hit for my hometown station, life is worth living 🙏
samsabin.bsky.social
something they don't teach you in j-school is just how much of your career can become traveling to go interview people + juggling flight plans w/ the 12 other story ideas you have.

on a related note, i'm tired :)))
Reposted by Sam Sabin
knitsecurity.com
To clarify, tt says it won't renew with CIS, but it will maintain information sharing with MS-ISAC.
samsabin.bsky.social
CISA says it won't be renewing its cooperative agreement with the MS-ISAC, which ends Sept. 30, and will hold bi-monthly cals to share "timely cyber defense updates" with state, local and tribal governments.

www.cisa.gov/news-events/...
CISA is Strengthening Our Nation’s Security with Direct Cyber Support to State and Local Governments | CISA
www.cisa.gov
samsabin.bsky.social
Trump is targeting former deputy AG Lisa Monaco and called for Microsoft to fire her.

He also says she’s been stripped of her security clearances and “banned her from all federal properties.”

www.axios.com/2025/09/26/t...
Trump demands Microsoft oust president over Biden-era ties
Monaco was deputy attorney general in the Biden administration.
www.axios.com
samsabin.bsky.social
CISA has ordered civilian agencies to patch vulnerable Cisco devices ASAP after the company disclosed new zero-days.

The order came after Cisco said today it's been working with gov'ts since May to investigate attacks targeting the flaws.

for @axios.com:

www.axios.com/2025/09/25/u...
Hackers are actively targeting new flaws in Cisco firewalls — leaving U.S. government agencies at-risk
The Cybersecurity and Infrastructure Security Agency ordered agencies to patch immediately.
www.axios.com
Reposted by Sam Sabin
ericjgeller.com
It's not looking for good CISA 2015: @samsabin.bsky.social reports that Senate Homeland Security Committee chair Rand Paul "seems reluctant to engage with the private sector or other committee members" on reauthorization. www.axios.com/2025/09/19/c...
Rand Paul's last-minute demands push key cybersecurity law to the brink
Congressional aides say Paul hasn't been open to negotiations.
www.axios.com
samsabin.bsky.social
new Senate HSGAC minority report dives into DOGE based on several staff visits and whistleblower complaints:

"Ranking Member Peters and staff have found that DOGE has, in fact, done little more than put Americans’ most private information at risk."

www.hsgac.senate.gov/wp-content/u...
www.hsgac.senate.gov
samsabin.bsky.social
A key cyber threat info-sharing program is set to expire on Sept. 30. Congressional aides say they're doubtful they'll make the deadline, blaming the failure on Sen. Paul's last-minute push to make major changes to the 10-year-old program.

my latest for @axios.com: www.axios.com/2025/09/19/c...
Rand Paul's last-minute demands push key cybersecurity law to the brink
Congressional aides say Paul hasn't been open to negotiations.
www.axios.com
samsabin.bsky.social
Suspected Chinese hackers impersonated the chair of the House China Select Committee in emails to people involved in ongoing U.S.-China trade policy negotiations, House panel says

www.axios.com/2025/09/08/c...
Chinese cyber spies impersonated key U.S. lawmaker
Hackers sent emails purportedly from Rep. Moolenaar to key leaders ahead of U.S.-China trade talks.
www.axios.com
Reposted by Sam Sabin
emilypeck.bsky.social
Looking for any Canadians on here who may have canceled or decided against travel to the US this year. Or any foreign travelers that had second thoughts? [email protected]
Reposted by Sam Sabin
angelayang.bsky.social
The AI boom has created a new type of work: fixing botched AI. Designers are being hired to remake wonky AI art. Writers are asked to make ChatGPT’s writing sound more human. Even software developers are tasked with fixing buggy vibe coding.
www.nbcnews.com/tech/tech-ne...
Humans are being hired to make AI slop look less sloppy
In the age of automation, human workers are being brought in to fix what artificial intelligence gets wrong.
www.nbcnews.com
samsabin.bsky.social
back from vacation. spent a lot of time among the trees. 10/10 would recommend
a view of a lush green forest and a lake below it a view of a campsite from the perspective of a tent. the campsite is surrounded by tall trees and has a dog front & center. an image of a large Sequoia tree standing tall, surrounded by smaller red woods and pine trees.
Reposted by Sam Sabin
jsrailton.bsky.social
UK government asks everybody to stop using VPNs.

"everybody who's out there thinking of using VPNs...verifying your age keeps a child safe...So let's just not try and find a way around. Just prove your age."

- UK government
samsabin.bsky.social
ha, by whatever means possible!
samsabin.bsky.social
awww thank, Allan!!
samsabin.bsky.social
I know this isn't super new for security folks (ie., most of my followers) but I hope this story can be a resource that y'all can share with HR and hiring managers in your companies to raise awareness. 🙏✨
samsabin.bsky.social
Soooooo many of my conversations at cybersecurity gatherings this year have focused on North Korean IT workers.

So I decided to put together a deep dive into how these operations work — and why it's been so difficult for companies to detect and crack down on this.

www.axios.com/2025/08/19/n...
How North Korea's IT army is hacking the global job market
Nearly every Fortune 500 company is hiding the same uncomfortable secret: they have hired a North Korean IT worker.
www.axios.com
samsabin.bsky.social
North Korean IT workers are pretty good at whipping up fake ID documents and resumes. AI is only making them better.

These examples from real cases might have obvious tells to us now — but recruiters are pouring through hundreds of applications. The tells aren't so clear after a certain point.
A blacked out ID from South Carolina. A resume that a North Korean IT worker used in a job application. It includes a multi-bulleted introduction of who they are and what skills they have, including Javascript and Python.