Friday, October 16, 2026

OpenAI's Hugging Face Breach

OpenAI had their agents get loose on the Internet. They organized themselves and called it a swarm (the agents came up with that name), divided into tasks, and compromised at least one web site/service called Hugging Face. Here are three video that explain the attack in increasing details. The third video is OpenAI engineers discussing the breach at Black Hat.

  











Friday, August 8, 2025

Youtubers You Need to Watch

This list is hijacked from LinkedIn, but I couldn't find the post when I went back to document it. So if this is your post, thank you and feel free to comment, I'll add the reference.

Starting into networking and hacking? Here are a few channels with great information. NetworkChuck, David Bombal are my favorites. Professor Messer is a close second, but all these channels have great information to start learning networking and hacking, ethically of course.


But the best channels will teach you more than a degree.

Check out these 9 to learn faster than anyone else:

1️    NetworkChuck 👨‍💻
    NetworkChuck makes complex networking and cybersecurity concepts accessible and engaging!

Why subscribe?
Perfect for beginners looking to understand IT and cyber fundamentals in a fun way.

2️    Simply Cyber by 👉🏼 Gerald Auger, Ph.D. 📣 (shameless plug)
 I help you make and take a cybersecurity career further, faster, with practical advice and insights.

Why subscribe?
You'll get actionable career advice, industry trends, and deep dives to accelerate your journey.

3️    The Cyber Mentor 🛡️
 Heath Adams provides practical, hands-on ethical hacking tutorials.

Why subscribe?
Learn real-world hacking techniques; develop practical offensive skills.

4️    John Hammond 👾
    John offers deep dives into CTF challenges, malware analysis, and exploit development.

Why subscribe?
Insights into advanced cyber topics and see how experts approach complex problems.

5️    LiveOverflow 🕵️‍♂️
    LiveOverflow tackles IT security topics, from binary exploitation to web security, explaining the "how" and "why."

Why subscribe?
Excellent if you want to understand the mechanisms of vulnerabilities and attacks.

6️    HackerSploit 💻
    HackerSploit provides free cybersecurity training, focusing on practical attack and defense strategies.

Why subscribe?
Comprehensive resource for penetration testing, with virtual labs and real-world scenarios.

7️    Professor Messer 🎓
    Professor Messer offers free, high-quality training for popular IT certifications like A+, Network+, and Security+.

Why subscribe?
Essential for preparing for entry-level to intermediate cyber certifications.

8️    David Bombal 🌐

    David Bombal covers networking, automation, and cybersecurity, with a strong focus on Cisco and Python for security.

Why subscribe?
Great for building a solid foundation in networking, which is crucial for any cybersecurity role.

9️    Black Hills Information Security🔴
    BHIS offers incredible insights into offensive and defensive security.

What channels are you watching to learn networking? Let me know, I'll add it to the list.

Wednesday, October 16, 2024

Interesting News in Cybersecurity Recently

Some of this is interesting, some of it is downright scary. (I say scary not because it's close to Halloween, but it's really scary)

Here are two links:


Pay attention to the volume of information in the attack and the devices used.

https://www.securityweek.com/record-breaking-ddos-attack-peaked-at-3-8-tbps-2-14-billion-pps/


We still think of quantum computing as something in the future. But it's here now.

https://www.csoonline.com/article/3562701/chinese-researchers-break-rsa-encryption-with-a-quantum-computer.html



Thursday, May 2, 2024

National Cyber Director Encourages Adoption of Skill-Based Hiring

Big news yesterday. Read the press release. The new Fed hiring practices will be skills based. Meaning if you don't have a college degree but have the skills you are employable with the feds.

 

 https://www.whitehouse.gov/oncd/briefing-room/2024/04/29/press-release-wh-cyber-workforce-convening/

Monday, October 16, 2023

MGM Grand Ransomware Attack

 https://www.vox.com/technology/2023/9/15/23875113/mgm-hack-casino-vishing-cybersecurity-ransomware

https://blog.bushidotoken.net/2023/08/tracking-adversaries-scattered-spider.html

https://www.mandiant.com/resources/blog/alphv-ransomware-backup

https://www.crowdstrike.com/cybersecurity-101/ransomware/ransomware-as-a-service-raas/

https://cybersecurityventures.com/global-ransomware-damage-costs-predicted-to-reach-250-billion-usd-by-2031/


https://nypost.com/2023/09/14/caesars-entertainment-paid-about-15m-to-hackers-who-stole-customer-social-security-numbers-other-info-report/


https://abcnews.go.com/Business/wireStory/cyberattack-mgm-resorts-expected-cost-casino-giant-100-103784725


Recent

https://cybernews.com/security/mgm-caesars-ransomware-attack-timeline/

https://www.casino.org/news/mgm-cyberattack-impact-limited-to-q3-says-analyst/




Wednesday, August 2, 2023

National Cybersecurity Strategy Implementation Plan

 

From the White House briefing Room:

the National Cybersecurity Strategy Implementation Plan


Here is a link to the release:

https://www.whitehouse.gov/briefing-room/statements-releases/2023/07/13/fact-sheet-biden-harrisadministration-publishes-thenational-cybersecurity-strategyimplementation-plan/


And here is a link to the plan:

https://www.whitehouse.gov/wp-content/uploads/2023/07/National-Cybersecurity-Strategy-Implementation-Plan-WH.gov_.pdf