CIA Realizes It’s Been Using Black Highlighters All These Year
theonion.com/cia-realizes...

when I open my text editor and they've added another new panel to tell me to use their AI agent

we just finished a huge project: all of the paid zines at wizardzines.com now have a transcript for screen reader users!!!

If you bought a previous version of the zines and don't have the transcript, you can email us at [email protected] to get it. More here: wizardzines.com/accessibility/

China Agrees To Purchase 11 U.S. Soybeans

A very offline cousin sent this to fam group chat. This story is breaking containment.

There’s tons of research out there for all elements of ransomware incidents - eg Mandiant, Sophos etc publish yearly IR reports from real incidents.

Generative AI and AI malware don’t feature on any of them.

Initial access barely uses phishing nowadays.

Smells like Baturday

Financial Advisors Recommend Throwing Away Unopened Bills https://theonion.com/financial-advisors-recommend-throwing-away-unopened-bills/

ICYMI: “And now, a response from the leader of the frog resistance...” 🐸 🎵 #Colbert

Via Ryan Castellucci (@[email protected])

"In honor of the late Robert Redford, "Sneakers", in high def ANSI with full subtitles:"

```
ssh [email protected]
```

(needs a terminal with 24 bit color support)

New by me - although Citrix say there is no evidence of exploitation of CitrixBleed 2 vulnerability, they are wrong - it has been under active exploitation since mid June by an IP associated to a ransomware group, with multiple IP addresses now involved.

doublepulsar.com/citrixbleed-...

here's the final version of the "redirects cheat sheet" draft I posted a while back!

("The Secret Rules of the Terminal" is finished! 95 beta readers have read it! the copy editor is done! technical review is done! the illustrator has made the cover! It's going to be out on **Tuesday June 24**"!)

What working in Cyber looks like protecting the business

Another work-related note- some top tactics currently being used by cybercriminals in the first three months of the year:
•Teams “vishing” and email bombing, carrying over from last year
•MFA phishing to steal time-based one time passwords is still hot
•Fake job applicant lures
•The ClickFix shit.

Upcoming Windows 11 builds won't have the ability to to install without internet connectivity and a Microsoft Account.
https://blogs.windows.com/windows-insider/2025/03/28/announcing-windows-11-insider-preview-build-26200-5516-dev-channel/