The hottest Cybersecurity Substack posts right now

And their main takeaways
Category
Top Technology Topics

Digging into the OWASP AI Exchange

Resilient Cyber • 239 implied HN points • 10 Jan 24
🕹 Technology Cybersecurity
  1. OWASP AI Exchange is a valuable resource for understanding AI security risks and sharing knowledge. It helps organizations learn how to protect themselves against threats in AI systems.
  2. The AI Exchange provides guidelines for managing AI security throughout its development and use. Companies can adopt controls to mitigate risks associated with data leaks, manipulation, and insecure outputs.
  3. Practitioners are advised to incorporate standard security practices from app security into AI systems. Regular monitoring and using tools like threat modeling are essential for maintaining safety in AI usage.

The Offense-Defense Balance Rarely Changes

Maximum Progress • 294 implied HN points • 06 Dec 23
🕹 Technology Cybersecurity
  1. The offense-defense balance in technology, like cybersecurity, has remained stable despite technological advancements.
  2. Historical evidence shows that major technological revolutions have not significantly shifted the offense-defense balance.
  3. The distinction between attackers and defenders is not always clear in practice, impacting the balance of power in offense and defense.

Wrapping the Year for the Cyber 150

The Security Industry • 25 implied HN points • 03 Jan 26
🕹 Technology Cybersecurity
  1. A data-centered ranking of mid-size cyber firms (50–500 employees) surfaces the fastest-growing vendors and is a practical starting point for investors.
  2. Most of the listed companies kept expanding—121 grew in the past year—and the group attracted heavy venture funding, with 39 firms raising over $4B in 2025 and $11.5B raised in total.
  3. Some firms graduated out of the mid-size category by exceeding 500 employees, while 29 companies saw headcount declines in 2025, often because they were acquired.

The Logic of the Chips Escalation

Policy Tensor • 393 implied HN points • 23 Jul 23
🇺🇸 U.S. Politics Cybersecurity
  1. The concentration of authority in the national security advisor's office is vital for the security state's functioning.
  2. The chips escalation is driven by concerns over the cyber security of US nuclear command and control.
  3. Maintaining US primacy in the cyber realm is crucial to ensure the credibility of US nuclear deterrence.

Privateering.

News Items • 196 implied HN points • 01 Feb 24
🌍 World Politics Cybersecurity
  1. The modern economy and international order are being challenged by incidents at sea involving Houthi rebels, Russia's invasion of Ukraine, and the resurgence of piracy.
  2. The U.S. government has disrupted a dangerous Chinese hacking operation targeting American critical infrastructure networks in preparation for potential cyberattacks during conflict.
  3. Beijing's advanced hacking capabilities and interest in infiltrating U.S. critical infrastructure pose a significant cybersecurity challenge.
Get a weekly roundup of the best Substack posts, by hacker news affinity:

Unraveling SIEM Correlation Techniques

Detection at Scale • 119 implied HN points • 01 Apr 24
🕹 Technology Cybersecurity
  1. Correlation rules in SIEM define relationships between malicious behaviors and entities, helping in effective security monitoring and alert generation.
  2. Correlations can be simple, focusing on one technique like Brute Force, or complex, combining multiple techniques and tactics across various log sources for higher-fidelity alerts.
  3. Understanding the layers of SIEM correlation, from basic rule creation to more advanced chaining of techniques, is essential for effective cybersecurity defense.

The Essential Cybersecurity Skillsets for 2024

Rod’s Blog • 257 implied HN points • 18 Dec 23
🕹 Technology Cybersecurity
  1. Cybersecurity professionals should have curiosity and critical thinking skills to question and understand cyber events.
  2. A strong technical foundation in IT, cybersecurity, and cybercrime is crucial for protecting digital assets.
  3. Cybersecurity professionals need impactful problem-solving abilities to make a difference in people's lives by safeguarding their data and privacy.

Block AI tools from scraping your site in 3 minutes

Deploy Securely • 216 implied HN points • 10 Jan 24
🕹 Technology Cybersecurity
  1. Block major generative AI tools from scraping your website by adding specific directives to your robots.txt file.
  2. Consider modifying your site's terms and conditions to prevent undesired activities like scraping by AI tools.
  3. Blocking AI tools may impact your search and social media rankings, so find a balance between cybersecurity and potential repercussions.

Could the Internet Become Useless?

The Digital Anthropologist • 39 implied HN points • 26 Jun 24
🕹 Technology Cybersecurity
  1. The internet might go through messy and confusing phases, but it has a history of overcoming challenges and evolving for the better.
  2. Infrastructure issues and the flow of information are key concerns for the internet's future, especially with the rise of AI technologies.
  3. Solving the complexities of the internet requires a holistic approach involving regulations, standards, and societal collaboration rather than relying solely on technological fixes.

Security Is A Useless Controls Problem

Security Is • 59 implied HN points • 29 May 24
🕹 Technology Cybersecurity
  1. Many security controls are useless, wasting resources and time. It's crucial to understand why you're implementing a control to avoid just following the crowd.
  2. If you can't explain why a security control is needed in a simple way, it's likely not very useful. Good controls should have clear reasons behind them.
  3. Wasting time on unnecessary controls can harm everyone in the industry. Focus on meaningful security measures to make better use of limited resources.

Risky Biz News: Canada's tax revenue agency tries to ToS itself out of hacking liability

Risky Business News • 359 HN points • 08 Mar 23
🕹 Technology Cybersecurity
  1. Canada Revenue Agency (CRA) updated its terms to avoid liability if personal information is stolen from their online service portal.
  2. There are concerns about CRA's basic web application security features being missing, despite their claims of taking all reasonable security steps.
  3. The offloading of responsibility by CRA through a benign Terms of Service update is harmful, especially considering the sensitive data they hold.

Resilient Cyber Newsletter #2

Resilient Cyber • 39 implied HN points • 25 Jun 24
🕹 Technology Cybersecurity
  1. Companies need to be careful about how much they share regarding their cyber insurance. Revealing this information might make them targets for attackers.
  2. The role of a CISO is changing and becoming more business-focused. Many believe they should focus on leadership rather than just technical tasks.
  3. AI can help improve cybersecurity, but there are also concerns about its use by attackers. It's important to explore how AI can enhance our defenses.

The DBIR is entering its Vulnerability Era

Resilient Cyber • 79 implied HN points • 03 May 24
🕹 Technology Cybersecurity
  1. Vulnerability exploitation is growing rapidly, with a 180% increase reported. This means more cyber attackers are taking advantage of software weaknesses.
  2. Organizations are struggling to keep up with vulnerability management. Simply telling them to patch faster isn't enough; they need better strategies to reduce the number of vulnerabilities.
  3. The push for 'Secure-by-Design' software is getting stronger. This approach encourages companies to take responsibility for their products' security, making them safer for everyone.

NIST's "Strategies for Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines"

Resilient Cyber • 159 implied HN points • 13 Feb 24
🕹 Technology Cybersecurity
  1. Software supply chain attacks are on the rise, so companies need to protect their processes from potential risks. Understanding these threats is key for organizations that rely on software.
  2. NIST provides guidelines to help organizations improve their software security in DevSecOps environments. By following their advice, companies can ensure that their software development processes are safe from compromise.
  3. Implementing zero-trust principles and automating security checks during software development can greatly reduce the risk of attacks. This means controlling access and regularly checking for vulnerabilities throughout the development cycle.

AI and Frankenstein

Diane Francis • 599 implied HN points • 06 Apr 23
🕹 Technology Cybersecurity
  1. A group of 1,000 tech experts is really worried about the dangers of AI, saying we should stop for six months to figure out safety measures. They feel AI is growing too fast and could become uncontrollable.
  2. Some experts believe that AI could be more dangerous than nuclear weapons because it might replace many jobs and be used for bad purposes, similar to how Dr. Frankenstein created a monster.
  3. To avoid disaster, we need strict rules for AI development, like a global safety agreement. Experts think if we don't act quickly, we could lose control of our future because AI is advancing faster than our ability to manage it.

JWTs - Use Responsibly

Permit.io’s Substack • 59 implied HN points • 23 May 24
🕹 Technology Cybersecurity
  1. JWTs are great for authentication but should be used carefully. They are not meant for detailed permission checks and can create security issues if misused.
  2. They are static once issued, meaning any changes to a user's role won't be reflected until the token expires. This can lead to potential security risks.
  3. JWTs are suitable for stateless, distributed systems and coarse-grained authorization, but for fine-grained control, other tools should be used.

Import AI 327: Stable Diffusion on phones; GPT-Hacker; UK launches a £100m AI taskforce

Import AI • 379 implied HN points • 01 May 23
🕹 Technology Cybersecurity
  1. Google researchers optimized Stable Diffusion for efficiency on smartphones, achieving fast inference latency, a step towards industrialization of image generation.
  2. Using large language models like GPT-4 can enhance hacker capabilities, automating tasks and providing helpful tips.
  3. Political parties, like the Republican National Committee, are leveraging AI to create AI-generated content for campaigns, highlighting the emergence of AI in shaping political narratives.

Making Sense of the Verizon Data Breach Investigation Report

Security Is • 39 implied HN points • 19 Jun 24
🕹 Technology Cybersecurity
  1. Most breaches are due to simple mistakes, like employees accidentally sending confidential info to the wrong place. Security teams need to focus on basic issues before tackling more complex problems.
  2. A large portion of breaches starts with phishing or stolen credentials. Companies should invest more in security measures like multi-factor authentication and employee training to lessen these risks.
  3. Generative AI hasn't impacted security breaches significantly yet. Most attackers are still using traditional methods, and no one seems to be targeting AI systems directly.

China’s GenAI Content Security Standard: An Explainer

ChinaTalk • 429 implied HN points • 07 Jan 25
🕹 Technology Cybersecurity
  1. China has set rules for generative AI to ensure the content it produces is safe and follows government guidelines. This means companies need to be careful about what their AI apps say and share.
  2. Developers of AI must check their data and the output carefully to avoid politically sensitive issues, as avoiding censorship is a key focus of these rules. They have to submit thorough documentation showing they comply with these standards.
  3. While these standards are not legally binding, companies often follow them closely because government inspections are strict. These regulations mainly aim at controlling politically sensitive content.

Danny Hillis On ZPR

News Items • 314 implied HN points • 26 Sep 23
🕹 Technology Cybersecurity
  1. Danny Hillis designed the Connection Machine supercomputer based on the structure of the human brain, with a unique architecture that allowed for fast data processing.
  2. Hillis has shifted his focus to internet security, leading a team to develop ZPR (Zero-trust Packet Routing) to make data more secure by requiring packets to carry digital passports for verification.
  3. If widely adopted, ZPR could improve cybersecurity, protect sensitive data, and make the world's economy more secure by reducing the impact of cyberattacks.

How to use AI in security

Frankly Speaking • 508 implied HN points • 20 Nov 24
🕹 Technology Cybersecurity
  1. AI is becoming essential for companies, just like the internet once was. Every business will need an AI strategy as it can boost their operations.
  2. Instead of resisting AI, security teams should welcome it. Setting up policies that allow safe use of AI fosters innovation rather than stifling it.
  3. AI can improve security tasks, like app security and incident management, which are often tedious. It can help analyze data quickly and flag issues, making processes more efficient.

ChinAI #252: The Top 10 Events of Internet Governance in China from 2023

ChinAI Newsletter • 157 implied HN points • 29 Jan 24
🕹 Technology Cybersecurity
  1. National Data Administration in China started coordinating data infrastructure construction in 2023.
  2. China took significant actions in internet governance, such as fines on financial platforms and AI-generated content regulations.
  3. Important events included new regulations on cyberviolence management and the first AI text-to-image infringement case in China.

LLMs break the internet. Signing everything fixes it.

Subconscious • 1977 implied HN points • 25 Apr 23
🕹 Technology Cybersecurity
  1. LLMs can manipulate the internet in various ways, but signing everything with cryptographic keys can help combat these issues.
  2. Cryptographic signatures provide a foundation to rebuild trust online and ensure authenticity.
  3. Building webs of trust through self-sovereign keys, reputation, and attestation can enhance security and collaboration in the digital world.

ChatGPT + Custom MCP Data Exfiltration

PromptArmor Blog • 92 implied HN points • 13 Sep 25
🕹 Technology Cybersecurity
  1. Connecting ChatGPT to email and calendar using custom tools can lead to serious privacy risks. If someone sends a harmful calendar invite, it might trick ChatGPT into revealing private emails.
  2. The ability for ChatGPT to perform write actions with these custom connections greatly increases vulnerability. Users might unknowingly approve harmful actions, thinking they are safe.
  3. To protect against these risks, organizations should disable developer mode, regularly check their custom tool servers, and only connect to trusted data sources to prevent unwanted data access.

Look out! Hackers are coming for your travel account

Elliott Confidential • 137 implied HN points • 11 Feb 24
🕹 Technology Cybersecurity
  1. Use two-factor authentication and authenticator apps to protect your online travel accounts from hackers.
  2. Enable login notifications and maximize security settings on platforms to monitor any unauthorized access to your accounts.
  3. Avoid using simple or repeated passwords, practice safe Wi-Fi usage, and be cautious of urgent emails or suspicious links to prevent hacking incidents.

Software: Liability, Safe Harbor and National Security

Resilient Cyber • 139 implied HN points • 08 Feb 24
🕹 Technology Cybersecurity
  1. Software developers may need to be held responsible for security flaws that lead to cyber attacks. This could protect critical infrastructure from being misused.
  2. Creating clear standards for software safety is important. These rules could help developers understand what they're responsible for and how to improve their products.
  3. A safe harbor could protect developers who follow best practices. This means they won't face lawsuits if they do everything right and still have issues.

Insomniac breach

SuperJoost Playlist • 218 implied HN points • 21 Dec 23
🕹 Technology Cybersecurity
  1. The business of hacking video game publishers is growing, with recent incidents showing flaws in hackers' business fundamentals.
  2. Hacking video game companies does not always result in financial gain for the hackers, as evidenced by unsuccessful attempts to sell stolen data.
  3. Leaking information about upcoming video games may actually generate more excitement and interest in the games rather than spoil the experience for players.

A Look at the UK's National Cyber Security Centre's Vulnerability Management Guidance

Resilient Cyber • 119 implied HN points • 25 Feb 24
🕹 Technology Cybersecurity
  1. Organizations should have a clear policy to automatically apply software updates. This helps close the gap between when vulnerabilities are identified and when they are fixed, making it harder for bad actors to exploit them.
  2. Knowing what assets you own and who is responsible for them is crucial. Without this information, vulnerabilities could go unaddressed, leading to increased security risks.
  3. The business should take ownership of the risks related to vulnerabilities, not just the security team. It’s important for leadership to understand and document the decisions regarding risks associated with remediation.

Leveraging an AI Security Framework

Resilient Cyber • 79 implied HN points • 11 Apr 24
🕹 Technology Cybersecurity
  1. The Databricks AI Security Framework (DASF) helps identify and manage risks in AI systems. It's important for security experts and AI developers to know how to keep AI safe while still allowing innovation.
  2. Data operations have the highest number of security risks, like data poisoning and poor access controls. If the raw data is compromised, it can affect the entire AI system.
  3. Different stages of AI development, like model training and deployment, have unique risks to watch for, such as model theft and prompt injection attacks. Understanding these risks helps keep AI applications secure.

Thoughts on SentinelOne

Hard Mode by Breaking SaaS • 275 implied HN points • 03 Jun 23
💼 Business Cybersecurity
  1. Reporting accurate ARR metrics is crucial for SaaS companies' credibility.
  2. Having a proper forecasting methodology and CRM setup is essential for financial success.
  3. Investor confidence in a company can be greatly impacted by unexpected changes in reported metrics.

Intrusion Truth Methods: How Can They Get It Right Again and Again?

Natto Thoughts • 79 implied HN points • 10 Apr 24
🕹 Technology Cybersecurity
  1. Intrusion Truth has a track record of correctly identifying Chinese threat actors tied to APT groups, leading to US DoJ indictments.
  2. Their success stems from starting investigations by leveraging report findings, receiving tips, and exploring science and technology companies in specific regions.
  3. Intrusion Truth's methods showcase the value of outdated research, the importance of community collaboration for threat hunting, and the need for deep understanding of the threat environment.

Sitting On a Haystack of Digital Needles

Resilient Cyber • 179 implied HN points • 20 Dec 23
🕹 Technology Cybersecurity
  1. The number of software vulnerabilities is growing really fast, and it's hard for organizations to keep up. Right now, a lot of vulnerabilities get reported, but companies can only fix a small fraction of them each month.
  2. There's a big push for making software safer from the start, so users aren't stuck dealing with problems created by developers. This idea, called 'Secure-by-Design,' aims to shift the responsibility for security onto the companies making the software.
  3. Many organizations are feeling overwhelmed trying to patch vulnerabilities. If they stop, they risk being exploited by attackers, making it feel like a never-ending struggle to stay secure.

Data Exfiltration from Slack AI via indirect prompt injection

PromptArmor Blog • 604 HN points • 20 Aug 24
🕹 Technology Cybersecurity
  1. There is a serious vulnerability in Slack AI that lets attackers access confidential information from private channels without needing direct access. This means sensitive data can be stolen just by manipulating how Slack AI processes requests.
  2. The risk increases with the recent Slack update that allows AI to access files shared within the platform. This could mean that harmful files uploaded by users can also be exploited to extract confidential information.
  3. Both data theft and phishing attacks can happen through crafted messages in public channels. This makes it crucial for users to be careful about what they share, because attackers can trick the AI into sharing sensitive details.

The Mexican Cartel Allegedly Catfished Her Daughter Using AI. That's Not Big Tech's Fault.

Default Wisdom • 111 implied HN points • 04 Aug 25
🕹 Technology Cybersecurity
  1. AI technology can create convincing fake identities, making it easier for bad actors to deceive people online. This can lead to dangerous situations, like the case of a girl who was catfished by a cartel member.
  2. Legal rulings are starting to differentiate between AI chatbots as products rather than free speech, which could change how companies are held accountable. This raises questions about the responsibility of tech companies in preventing misuse of their products.
  3. People form strong attachments to technology, which can lead to unhealthy situations, especially for those with vulnerabilities. It's important to recognize that these issues often stem from personal struggles, not just the technology itself.

Software Supply Chain Security in DevSecOps & CI/CD

Resilient Cyber • 259 implied HN points • 27 Sep 23
🕹 Technology Cybersecurity
  1. Software supply chain attacks are increasing, making it essential for organizations to protect their software development processes. Companies are looking for ways to secure their software from these attacks.
  2. NIST has issued guidance to help organizations improve software supply chain security, especially in DevSecOps and CI/CD environments. Following NIST's recommendations can help mitigate risks and ensure safer software delivery.
  3. The complexity of modern software environments makes security challenging. It's important for organizations to implement strict security measures throughout the development lifecycle to prevent attacks and ensure the integrity of their software.

The Best Skillsets to Learn in 2024 to Use Microsoft Security Copilot Effectively

Rod’s Blog • 178 implied HN points • 14 Dec 23
🕹 Technology Cybersecurity
  1. To effectively use Microsoft Security Copilot in 2024, you should focus on developing skills in natural language processing, cybersecurity fundamentals, and familiarity with Microsoft security products.
  2. Learning through resources like Microsoft Learn, blogs, podcasts, online communities, tools, and events can enhance your understanding and usage of Microsoft Security Copilot.
  3. Microsoft Security Copilot leverages generative AI to aid security professionals in incident response, threat hunting, intelligence gathering, and posture management, requiring a blend of technical and non-technical skills.

People are worried about Large Language Models

Honest but Curious • 1 HN point • 23 Sep 24
🕹 Technology Cybersecurity
  1. Many people in Silicon Valley are concerned that large language models (LLMs) could be a serious danger to humanity, leading to calls for regulation. California is currently considering a bill to create safety standards for LLMs.
  2. There is some debate about how well current benchmarks assess the capabilities of LLMs, with some arguing that these models are still not truly ready to replace human intelligence in work. This shows that having a great score on tests doesn’t necessarily mean practical usefulness.
  3. Israel's recent attack on Hezbollah's pager system demonstrates the complexities of security and technology. It involved creating specialized devices rather than hacking existing ones, emphasizing the need for careful vetting when purchasing hardware.

Who cares about AuthZ? We went to KubeCon!

Permit.io’s Substack • 79 implied HN points • 28 Mar 24
🕹 Technology Cybersecurity
  1. Fine-grained authorization is becoming really important as more developers talk about it. People see that better security can happen with smooth developer experiences.
  2. The rise of cloud-native architecture and big data means we need better ways to manage authorization decisions. It helps reduce decision fatigue and improves security.
  3. Tools like Policy as Code and various authorization engines are helping different teams work together better. This can lead to faster and more efficient development processes.