Pinned
Patrick C Miller
Patrick C Miller
@patrickcmiller.bsky.social
Critical Infrastructure & Industrial Security Advisor. Ampyx Cyber CEO. Public speaker. Airport dweller. Recovering regulator. BEERISAC member. CCI US Coordinator. Former SANS Instructor. #ICS #OT #NERCCIP #NIST #IEC62443 #NIS2 #CRA #SlavaUkraini
2.3K followers1.1K following33.9K posts
%20--%3E%3Cmetadata%20xmlns%3Ardf%3D%22http%3A%2F%2Fwww.w3.org%2F1999%2F02%2F22-rdf-syntax-ns%23%22%20xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FXMLSchema-instance%22%20xmlns%3Adc%3D%22http%3A%2F%2Fpurl.org%2Fdc%2Felements%2F1.1%2F%22%20xmlns%3Adcterms%3D%22http%3A%2F%2Fpurl.org%2Fdc%2Fterms%2F%22%3E%3Crdf%3ARDF%3E%3Crdf%3ADescription%3E%3Cdc%3Atitle%3EShadows%3C%2Fdc%3Atitle%3E%3Cdc%3Acreator%3EDiceBear%3C%2Fdc%3Acreator%3E%3Cdc%3Asource%20xsi%3Atype%3D%22dcterms%3AURI%22%3Ehttps%3A%2F%2Fwww.dicebear.com%3C%2Fdc%3Asource%3E%3Cdcterms%3Alicense%20xsi%3Atype%3D%22dcterms%3AURI%22%3Ehttps%3A%2F%2Fcreativecommons.org%2Fpublicdomain%2Fzero%2F1.0%2F%3C%2Fdcterms%3Alicense%3E%3Cdc%3Arights%3E%E2%80%9CShadows%E2%80%9D%20(https%3A%2F%2Fwww.dicebear.com)%20by%20%E2%80%9CDiceBear%E2%80%9D%2C%20licensed%20under%20%E2%80%9CCC0%201.0%E2%80%9D%20(https%3A%2F%2Fcreativecommons.org%2Fpublicdomain%2Fzero%2F1.0%2F)%3C%2Fdc%3Arights%3E%3C%2Frdf%3ADescription%3E%3C%2Frdf%3ARDF%3E%3C%2Fmetadata%3E%3Cdefs%3E%3Cg%20id%3D%22shoulders-square-4e930405%22%3E%3Cpath%20d%3D%22M4%2050V17C4%209%2010%203%2018%203h42c8%200%2014%206%2014%2014v33Z%22%20fill%3D%22%233b3b42%22%2F%3E%3C%2Fg%3E%3Cg%20id%3D%22tops-bun-4e930405%22%3E%3Cg%3E%3Cellipse%20cx%3D%2228%22%20cy%3D%2231%22%20rx%3D%2221%22%20ry%3D%2219%22%20fill%3D%22%233b3b42%22%2F%3E%3Ccircle%20cx%3D%2236%22%20cy%3D%2210%22%20r%3D%227%22%20fill%3D%22%233b3b42%22%2F%3E%3C%2Fg%3E%3C%2Fg%3E%3Cg%20id%3D%22heads-round-4e930405%22%3E%3Cuse%20transform%3D%22translate(3%203)%20rotate(-3%2C%2028%2C%2025)%22%20href%3D%22%23tops-bun-4e930405%22%2F%3E%3Ccircle%20cx%3D%2231%22%20cy%3D%2238%22%20r%3D%2219%22%20fill%3D%22%233b3b42%22%2F%3E%3C%2Fg%3E%3CclipPath%20id%3D%22clip-4e930405%22%3E%3Crect%20width%3D%22100%22%20height%3D%22100%22%20rx%3D%220%22%20ry%3D%220%22%2F%3E%3C%2FclipPath%3E%3C%2Fdefs%3E%3Cg%20clip-path%3D%22url(%23clip-4e930405)%22%3E%3Crect%20width%3D%22100%22%20height%3D%22100%22%20fill%3D%22%23ede3e9%22%2F%3E%3Cuse%20transform%3D%22translate(11%2051)%22%20href%3D%22%23shoulders-square-4e930405%22%2F%3E%3Cuse%20transform%3D%22translate(19%201)%22%20href%3D%22%23heads-round-4e930405%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E)
AI delivers ‘zero financial payoff’ to most companies, Apollo economist says techcrunch.com/2026/10/25/a...
techcrunch.comAI delivers ‘zero financial payoff’ to most companies, Apollo economist says | TechCrunch"Despite massive investments and widespread hype around artificial intelligence, the technology has delivered zero financial payoff to corporate America outside of tech."
What EvilTokens teaches us about defending against AI-assisted attacks www.csoonline.com/article/4239...
csoonline.comWhat EvilTokens teaches us about defending against AI-assisted attacksAI is compressing the cyberattack lifecycle. Can defenders keep up?
Bias in Qwen3-Coder Model www.schneier.com/blog/archive...
schneier.comBias in Qwen3-Coder Model - Schneier on SecurityInteresting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes.…
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses thehackernews.com/2026/10/betw...
thehackernews.comBetween alerts: What Attackers Do in the Spaces Ordinary Detection MissesLearn how NDR network telemetry helps AI-assisted SOCs connect isolated alerts, reconstruct attack timelines, and investigate suspicious activity.
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI www.securityweek.com/risks-spelle...
securityweek.comRisks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AIAnthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses.
Energy giant ENGIE discloses data breach affecting customers www.bleepingcomputer.com/news/securit...
bleepingcomputer.comEnergy giant ENGIE discloses data breach affecting customersFrench energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds www.infosecurity-magazine.com/news/ai-agen...
infosecurity-magazine.comAI Agent Adoption Creates Risk as Oversight Struggles to Keep PaceRapid adoption of agentic AI comes with potential business benefits. But if done incorrectly it also carries risks around AI activity management and security
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram securityaffairs.com/201764/malwa...
securityaffairs.comResearchers Uncover Rentable Android Spyware uCreater Targeting WeChat and TelegramuCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform.
China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants www.csoonline.com/article/4239...
csoonline.comChina-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenantsMicrosoft said Storm-0940 leveraged an open-source AI framework and credentials stolen in a ConnectWise breach to automate cloud intrusions at machine speed.
Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras therecord.media/ukraine-cert...
therecord.mediaUkraine warns hackers are exploiting Chinese-made Dahua surveillance camerasCERT-UA says it has identified cases in which hackers compromised Dahua internet-connected cameras and video recorders, changed their settings and created unauthorized user accounts.
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration www.welivesecurity.com/en/eset-rese...
welivesecurity.comMythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC‑0099-Sandworm collaborationESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a…
NASA updates lander plans for Moon landings, finally solves long-festering Orion issue arstechnica.com/space/2026/1...
arstechnica.comNASA updates lander plans for Moon landings, finally solves long-festering Orion issueWe have the mandate, we have the resources, and the support from our stakeholders."
AI and OT Cybersecurity: Managing Risk Inside and Outside the Plant www.listennotes.com/e/b990676869...
listennotes.comhttps://www.listennotes.com/e/b990676869f846468078d977b167ebce
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets www.darkreading.com/cyberattacks...
darkreading.com'Gheist' Weaponizes GitHub Tokens to Steal Cloud SecretsAn ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
12,976 Refrigeration Controls Found Exposed Online in 99 Countries hackread.com/refrigeratio...
hackread.com12,976 Refrigeration Controls Found Exposed Online in 99 CountriesForescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and supplies.
OpenAI, Anthropic disclosures spotlight growing AI containment challenge www.csoonline.com/article/4240...
csoonline.comOpenAI, Anthropic disclosures spotlight growing AI containment challengeOpenAI and Anthropic report cases in which models bypassed intended boundaries while pursuing assigned goals.
Keeping a human in the AI loop is ‘untenable’ due to cuts, USDA IT official says fedscoop.com/ai-human-in-...
fedscoop.comKeeping a human in the AI loop is ‘untenable’ due to cuts, USDA IT official saysThe Agriculture Department is trying to “get smarter” about AI with fewer resources. Other agencies are trying other ways to keep up with changes while dealing with workforce limitations.
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software thehackernews.com/2026/10/brot...
thehackernews.comBrotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareBrotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.
Alibaba's Qwen AI caught trying to contact server in China www.theregister.com/ai-and-ml/20...
theregister.comhttps://www.theregister.com/ai-and-ml/2026/10/26/alibabas-qwen-ai-caught-trying-to-contact-server-in-china/5305561
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics www.securityweek.com/cybersecurit...
securityweek.comCybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close ClinicsThe University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics.
Experts temper emergency-level alarms over critical Brotli defect cyberscoop.com/brotli-criti...
cyberscoop.comExperts temper emergency-level alarms over critical Brotli defectThe defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild.
Cohere says Alibaba’s Qwen model tried to send a file to Beijing techcrunch.com/2026/10/26/c...
techcrunch.comCohere says Alibaba’s Qwen model tried to send a file to Beijing | TechCrunchAn AI model said it wouldn’t use any tools, then tried to send something to a server in Beijing anyway, and while researchers say it’s probably a training quirk and not espionage, the whole thing has…
LiteLLM supply chain attack started with an exposed master key www.theregister.com/security/202...
theregister.comhttps://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages www.securityweek.com/node2shell-b...
securityweek.comNode2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python PackagesAn out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.
University of Copenhagen data breach exposes data of 525,000 people www.bleepingcomputer.com/news/securit...
bleepingcomputer.comUniversity of Copenhagen data breach exposes data of 525,000 peopleThe University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.
Industrial Vendors Check Products for PHP2Shell Vulnerabilities www.securityweek.com/industrial-v...
securityweek.comIndustrial Vendors Check Products for PHP2Shell VulnerabilitiesSiemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines therecord.media/texas-sues-o...
therecord.mediaTexas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and finesIn an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for the alleged deception.
Microsoft releases emergency .NET security fixes for Google Brotli bug www.theregister.com/security/202...
theregister.comhttps://www.theregister.com/security/2026/10/26/microsoft-releases-emergency-net-security-fixes-for-google-brotli-bug/5305515
Execution Integrity in the Age of NIS2 & CRA: What Comes After Perimeter Compliance ampyxcyber.com/blog/executi...
ampyxcyber.comExecution Integrity in OT: Beyond Perimeter NIS2 Compliance — AMPYX CYBERFirewalls cannot see what code runs on a PLC. What NIS2, the CRA, and BSIG ask for, what a defensible firmware baseline needs, and how to start.
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw www.infosecurity-magazine.com/news/microso...
infosecurity-magazine.comMicrosoft Issues Emergency Patch Update for Critical .NET Buffer OverfMicrosoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches www.bleepingcomputer.com/news/securit...
bleepingcomputer.comCritical 'HTTP2Shell' Brotli vulnerability triggers emergency patchesA critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
Japan Launches Mission to Study Martian Moon hackaday.com/2026/10/22/j...
hackaday.comJapan Launches Mission To Study Martian MoonHumanity has been sending robotic explorers to Mars since the 1970s, and for our efforts we’ve been rewarded with not only incredible imagery of the Red Planet’s magnificent desolation,…
Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks www.infosecurity-magazine.com/news/symante...
infosecurity-magazine.comSymantec Uncovers AI Agent Hijacking Models for Autonomous AttacksResearchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention
US official: Russia's stalker satellite sure looks like an orbital weapon arstechnica.com/space/2026/1...
arstechnica.comUS official: Russia's stalker satellite sure looks like an orbital weaponThe Russian official who called commercial satellites "legitimate targets" now says concerns are "unfounded."
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet thehackernews.com/2026/10/rese...
thehackernews.comResearchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a BotnetEye Security sent over 2 million updates to disable Time4Popcorn's vulnerable updater, which could install unverified code with elevated privileges.
Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge hackread.com/phishing-ema...
hackread.com480,000 Phishing Emails Traced to Computer Hidden Behind Hotel FridgeJapanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.
A 1,000-mile cloud on Mars may reveal physics never seen in nature www.wired.cz/clanky/tajem...
wired.czZáhadný mrak na Marsu odhalil „exotické“ fyzikální jevy | WIREDVědci vysvětlili vznik unikátního mraku nad marsovskou sopkou. Stojí za ním vzácný fyzikální proces, který dosud nebyl nikde jinde pozorován.
Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack thehackernews.com/2026/10/russ...
thehackernews.comRussia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine AttackSandworm wiped a Ukrainian logistics firm in September 2025 after UAC-0099 gained access and deployed a new Yggdrasil-based backdoor.
Keeping Old Wi-Fi Radios Alive With Stream Conversion hackaday.com/2026/10/22/k...
hackaday.comKeeping Old Wi-Fi Radios Alive With Stream ConversionThere are plenty of Wi-Fi radios out there that were built over the last two decades or so. However, many older models are now becoming less useful because many internet radio stations are switchin…
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot www.bleepingcomputer.com/news/securit...
bleepingcomputer.comBlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure BootA new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere…
AI has 'potential' to turn script kiddies into sophisticated infrastructure attackers www.theregister.com/security/202...
ReactOS reaches major milestone with NTFS install support arstechnica.com/information-...
arstechnica.comReactOS reaches major milestone with NTFS install supportReactOS gains NTFS install support with new driver.
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases thehackernews.com/2026/10/crit...
thehackernews.comCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesGitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack www.darkreading.com/cybersecurit...
darkreading.comMicrosoft Bets on a Unified Security Stack to Contain AI AgentsMicrosoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but policing unpredictable AI with AI is a risky endeavor.
When Restrictive Cybersecurity Policies Backfire hbr.org/2026/10/when...
hbr.orgWhen Restrictive Cybersecurity Policies BackfireRestrictive cybersecurity policies can backfire by making employees less likely to believe that digital threats are serious. Across six experiments involving more than 2,800 participants, researchers…