The Rumor is Mythos hacked all systems in the NSA.. ummm I have a few questions.

Last I checked our US government banned the use of Anthropic because of its supply chain risk. Based on the article "Mark Warner, the vice-chair of the Senate Intelligence Committee, said that General Joshua Rudd, who leads the National Security Agency and the Pentagon’s Cyber Command, had told him that Mythos “broke into almost all of our classified systems, not in weeks, but in hours”

So let's look at the facts:

1. The NSA director who was appointed by the president. Decided to go against the ban and do this secretly. Seems like maybe he does not want the job anymore.
2. The last thing they would do is tell the anyone. It admits too many things and would be a risk to national security.
3. If true and I'm highly doubtful it is, this means they went against a direct order then used Mythos in the most reckless way by giving it full access to everything.

Look I'm not saying this is not possible many government systems run on security through obscurity. It's just that it would be a career ending move and would have limited gains.

And that's just what I can think of right now! It's late and I look forward to dealing with this tomorrow lol. Mythos has some great stuff we don't have to spread unvalidated information as facts.

https://archive.ph/dXddV

Stay Safe out there!

#BowTieSecurityGuy #AI #Mythos

As a cyber community we have to do better.. Many of you are using AI to write your content or just posting hype articals trying to grow.

And it's working, your voice of hype and half truths is becoming the majority. So much so it impacts people's work lives who are actually in this field. When tons of "Cyber pros" share articles not validated and with no real research done you are hurting the community.

Because senior leaders see this and our customers see this and want answers! When you could have clicked past the headline and put in the work to see if it's an actual risk and help people instead of just feeding the hype train for another perfect storm vuln that basically requires you to leave your host online in a specific configuration, with no defenses to exploit.

I get the pressure but if your not going to put in the time to actually spend 5min researching just don't post. I get the irony of this post as someone with a social following, but I've done this the hard way. Every post I type, before I share an article I research it a bit and give facts not hype.

I get it's great to take short cuts and have an AI do all the work for you, just know in the long run you lose your voice an to me it's not worth it. I'll get off my soap box now.

Stay safe out there, and happy fathers day to all the Cyber dads still defending against the hype even on the weekends!

#BowTieSecurityGuy #dobetter

Do you need to worry about this massive data leak researchers have found? Answer is not really.

https://cybernews.com/security/24-billion-credentials-data-leak/

The data leak while it sounds very scary is mostly a collection of previously compromise passwords from other breaches this is not new data it's mostly stuff from infostealers and other areas. And things like 2FA will stop them in their tracks.

Stay safe out there!

#BowTieSecurityGuy

Have you felt a bit confused by AI models, they could crush a question a few years ago and now struggle with that same question?

There is something happening with AIs and it's because now that the majority of the internet traffic is done by bots including posts on reddit, Facebook, YouTube, X, and especially here on LinkedIn. People have realized they can automate engagement but this means those huge areas the AIs learn from are now synthetic pretending to be human so it's effectivly losing what humans look like and sound like. There is a great paper on it everyone should take a moment and read.

Researchers at Oxford and Cambridge drastically smarter than me published a paper in Nature proving what is happening. They call it Model Collapse.
https://www.nature.com/articles/s41586-024-07566-y

Its a great read and very interesting, also if your reading this AI post this is your reminder they AI rug pull is going to happen and if your business depends on these models get ready to pay. We are already seeing increases in token prices on frontier models. This compute power does not come for free please protect your business and set model spend limits on everything from chat bots to more complex models.

Stay safe out there!

#BowTieSecurityGuy #AI

If your employed this is all I ask, take 20min every week and check in with your struggling unemployed friends.

Look as a previous job seeker who was laid off I know I was a bummer to be around but I can't express in words how much it meant to me when friends called to check in. June is mens mental health awareness and many men have no one to talk to, no one who understands. They suffer in silence, I lost two Mentees to this loneliness and there are so many people struggling in this job market.

Please take a moment each week to check in with your unemployed friends it's very very lonely and everyone needs a battle buddy. If your reading this and your struggling my PMs are always open and I'll make time for you.

#BowTieSecurityGuy #Mentalhealth

👀 Check out this episode of #BowTieSecurityGuy After Dark! 🌃 In this episode, ℝ𝕠𝕓𝕖𝕣𝕥 𝕎𝕙𝕖𝕥𝕤𝕥𝕚𝕟𝕖 talks with #Graylog's Carla Garcia. Hear about Carla's journey into #cybersecurity, what she's learned along the way, job scams to watch out for, and more.

Listen now! 🎧 👇 https://bowtiesecurityguyafterdark.podbean.com/e/bowtiesecurityguy-after-dark-episode-3-with-special-guest-carla-garcia/