Adrian Sanabria

Welcome to week 2 of PHP2Shell-mania! I wrote up a quick summary of what we know and what to prioritize: substack.com/@adriansanab...

This is private equity, this is what it does. Buy up businesses, run them into the ground, and rip them apart for short-term profit. www.pcgamer.com/gaming-indus...

If you wait for KEV on this one, you're not patching - you're doing an incident response.

Patch PHP now embedded in everything good luck with tech debt #CyberHaikus

If we analyzed Microsoft Patch Tuesday using the same assumptions industry analysts use with market growth

Arya Satheesh, an 18-year-old student from Letterkenny in County Donegal, Invented a Plant-Based Plastic That Removes Microplastics From the Environment as It Biodegrades www.smithsonianmag.com/innovation/t...

My thoughts on CISA’s future of CVE white paper along with @sawaba.bsky.social Let’s hope Congress backs enough budget at CISA to hire the human expert resources to guide what will also require heavy automation investment. Thanks @shaunwaterman.bsky.social www.bankinfosecurity.com/cisa-lays-ou...

Looking to get stickers made, suggestions that aren't StickerMule?

Booz Allen is the latest to get into AI cybersecurity benchmarks. I checked them out and share my thoughts. Sanity check: benchmarks != real world capabilities, but they do give us a data point we can use to measure AI model changes over time. defendersinitiative.substack.com/p/theres-now...

The latest in our breach studies is the Capital One breach. I know, everyone knows it and I don't think there are any big surprises here, but the next few studies coming up are definitely going to be spicy! www.defendersinitiative.com/p/breach-les...

Super excited I get to interview @joemenn.bsky.social about Cult of the Dead Cow this week at the Open Source Security Summit! It's a virtual event and free to attend, so come check it out Thursday morning! #opensourcesecuritysummit opensourcesecuritysummit.com

A zero-day root RCE in Cisco Secure Email Gateway is being actively exploited. SQL injection appears to be the entry point, which is grim given the appliance's job is parsing untrusted mail all day. No patch details yet.

Thanks to a lighter workload in August, I've been able to spend more time on breach analysis! The latest writeup is the British Library breach. What this breach lacks in technical details, it makes up for in details on process, priorities, and culture! www.defendersinitiative.com/p/breach-les...

Two things at play - ClickFix (website asks user to press Windows key + R, run a command) is *incredibly successful*, and just phoning the helpdesk and asking for password reset. The GenAI research stuff being pushed out by security and AI vendors is completely absent in the real world trenches.

My thoughts on 1Password’s first research publication from their brand new Off-by-1 Labs! www.defendersinitiative.com/p/reviewing-...

IMO, the most interesting thing to come out of #HackerSummerCamp is that no one should be using AI to patch vulns 1password.com/blog/why-ai-...

Windows Mobile is still alive and well at DFW

Behold my restraint All these gadgets could have come with me to #hackersummercamp but I left them home because I have so much restraint

Oh lawd he coming

We are on break for lunch, but rewind to see my opener… and stay tumed for 2hrs on water next. Quite timely.

Normalize making fun of people when they’re all proud of having used generative AI to do some trvial task. Yesterday’s example: A colleague made a sign that said ‘USE THIS DOOR, OTHER DOOR IS BROKEN.’ Yup. AI for that. 1/?

This voiceover artist nails one of the most annoying trends in cybersecurity right now www.instagram.com/reel/Da_K-z8...

Happy to share that I will be speaking at BSides Las Vegas this year! My talk is "Destroyed by Breach: Corporate casualties of cybersecurity failures" Common Ground, Tuesday 10:00-11:00, Florentine F I'll be at Black Hat and DEF CON as well. Let me know if you want to meet up!

This week on ESW: 1. O'Shea Bowens - network security for MCP 2. Jeremiah Grossman - there is no vulnpocalypse 3. Finally, we discuss the future of AI model use and the HuggingFace breach We went a little long on this one, but I think it was well worth it. www.youtube.com/watch?v=Em3F...

Spotted an interesting comment on LinkedIn this morning.

In my latest post, I ponder whether Project Glasswing is just a private freemium tier, designed to hook the world’s largest software makers into fueling an endless token bonfire. open.substack.com/pub/defender...

TL;DR - Reddit posts are now SEO/AEO, which means Reddit has become a battleground trying to fight off corporate marketing posts

For anyone interested, I've shared the slides from my @bsidesknoxville talk hosted-files.sched.co/bsidesknoxvi...

Happy DBIR day everyone! It's really good, as always. I wrote up some thoughts: www.defendersinitiative.com/p/verizons-1...

You've probably heard about Anthropic's Mythos, but did you know open-source AI tools have been doing the same thing for the past year? I wrote about these bug-finding systems and why they might be better than Mythos for critical infrastructure firms. www.cybersecuritydive.com/news/ai-vuln...

April 2026: LOL, enterprises would have to be mad to consider using OpenClaw internally May 2026: Oh, a client has a question about some OpenClaw vulns that affect them, this is normal

Is NPM the new DNS? As in, "it's always NPM"

Defense is Offense’s child, but Offense has traumatized its children #randomthoughts

You know, for an OS that sets the standard for vulnerable implementations, at least the default lock screen image is nice to look at, right?

This isn't an AI problem. In any context, if the reporter didn't observe the quote, they needed to cite their source. And that's more than just the wording of the quote. The reporter is responsible for the inferred meaning matching the actual context of a statement.

Potential hot take: vulnerabilities are sparse if a vulnerability is required to have value to an attacker.

It's ticket time! bsides-knoxville-2026.eventbrite.com

Hey Claude, is it possible that threat actors make more money off hacking firewalls/VPNs than companies make selling them #AIQuestions

So yesterday: This vuln is being exploited in the wild Today: To date, threat actors have earned $247M from this vuln

Copy Fail? Also looks like memory safety, but is actually complexity. xint.io/blog/copy-fa... I am going to link to this while rejecting changes to Go crypto for years. Anyway, feeling pretty validated in my "ssh in as root, only gVisor or Firecracker are an actual security boundary" approach.

I'm putting together a webinar on modern vulnerability management and I'm REALLY trying to drive a point home So naturally, I bought 3 old Sonicwall firewalls

yeah sure, okay

Starting to get some coverage from the media on the Destroyed by Breach site! www.cybrsecmedia.com/breaches-don...

This is _the_ most underrated cybersecurity project. Awesome to have a website instead of the spreadsheet 🥳

We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted.