Mastodawn

March had 90 publicly disclosed #ransomware attacks, 2nd month this year incidents exceeded 90. Orgs in US accounted for 60% of all reported attacks. Ransomware groups like #DragonForce & #Anubis still making a massive amount of $$. HT @blackfogprivacy. https://api.cyfluencer.com/s/the-state-of-ransomware-march-2026-26729

The State of Ransomware: March 2026

BlackFog's state of ransomware March 2026 report measures publicly disclosed and non-disclosed attacks globally.

BlackFog

Ben Rothke 1d ago

CyberCanon 1d ago

🔓 Review Drop: Hacks, Leaks, and Revelations

This week, be sure to read Meghan Jacquot's CyberCanon Review of Micah Lee's 𝙃𝙖𝙘𝙠𝙨, 𝙇𝙚𝙖𝙠𝙨, 𝙖𝙣𝙙 𝙍𝙚𝙫𝙚𝙡𝙖𝙩𝙞𝙤𝙣𝙨 👇

https://cybercanon.org/hacks-leaks-and-revelations-the-art-of-analyzing-hacked-and-leaked-data/

#CybersecurityBooks #Databreach | @micahflee

Ben Rothke 2d ago

#CamoLeak is a high-severity #vuln in #GitHub #Copilot Chat (CVE-2025-59145, CVSS 9.6) that gives attackers ability to silently steal source code, API keys & secrets from private repos w/o executing any malicious code. Good overview from @blackfogprivacy. https://api.cyfluencer.com/s/camoleak-how-github-copilot-became-an-exfiltration-channel-26669

CamoLeak: How GitHub Copilot Became An Exfiltration Channel

CamoLeak turned GitHub Copilot into a silent data exfiltration channel via prompt injection and GitHub's own image proxy. CVSS 9.6.

BlackFog

Ben Rothke 5d ago

My @OneRSAC information security book of the month review: Speak Security With A Business Accent: How to Communicate Cybersecurity Concepts Clearly, Ease Friction with Stakeholders & Influence Decision’ by Joshua Mason. Sage advice for #infosec pros. #RSAC https://www.rsaconference.com/library/blog/bens-book-of-the-month-speak-security

Ben's Book of The Month: Speak Security With A Business Accent: How to communicate Cybersecurity Concepts Clearly, Ease Friction with Stakeholders, and Influence Decisions

RSAC Conference

Ben Rothke 5d ago

Built by a veteran #cybersecurity team & led by former @google and @Mandiant execs, Mallory AI is a new #AI intelligence platform & now in GA. It’s built for exposure investigation & intel workflows. Important for #infosec.
https://api.cyfluencer.com/s/mallory-goes-ga-introducing-our-ai-native-threat-intelligence-platform-26608 #MalloryAI #Mallory

Mallory goes GA: Introducing our AI-Native Threat Intelligence Platform

Today, we're launching Mallory, our AI-Native Threat Intelligence Platform built for exposure investigation. Here's why we built it, what it does, and what's ne

Ben Rothke 5d ago

CyberCanon Apr 7

𝗔𝗜 𝘄𝗶𝘁𝗵𝗼𝘂𝘁 𝘁𝗵𝗲 𝗛𝘆𝗽𝗲 (𝗼𝗿 𝗕𝗹𝗶𝗻𝗱 𝗦𝗽𝗼𝘁𝘀) 🦾⚖️

For this week's review, Yisehak Lemma examines 𝙏𝙝𝙚 𝘼𝙄 𝘾𝙤𝙣𝙪𝙣𝙙𝙧𝙪𝙢, written by the father-son duo of Caleb and Rex Briggs.

🔎 Full review: https://cybercanon.org/the-ai-conundrum/

#CybersecurityBooks #AISecurity #AIGovernance

Ben Rothke Mar 31

CyberCanon Mar 31

🏛️ 𝗛𝗮𝗹𝗹 𝗼𝗳 𝗙𝗮𝗺𝗲 𝗥𝗲𝗰𝗼 𝗜𝗻𝗰𝗼𝗺𝗶𝗻𝗴!

Jack Freund, a man who knows a thing or two about cyber risk (author of the FAIR HoF book), provides a Hall of Fame nomination for 𝙎𝙩𝙚𝙥𝙥𝙞𝙣𝙜 𝙏𝙝𝙧𝙤𝙪𝙜𝙝 𝘾𝙮𝙗𝙚𝙧𝙨𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙍𝙞𝙨𝙠 𝙈𝙖𝙣𝙖𝙜𝙚𝙢𝙚𝙣𝙩 by Jennifer Bayuk.

📝 Read Jack's thorough assessment: https://cybercanon.org/stepping-through-cybersecurity-risk-management-a-systems-thinking-approach/

#CybersecurityBooks #CyberCanonReview #CyberCanonHallofFameCandidate #CyberRisk

Ben Rothke Mar 31

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. https://api.cyfluencer.com/s/rsac-2026-what-ai-agent-security-looks-like-now-26300 #RSAC

Ben Rothke Mar 24

Last week, @realDonaldTrump established a task force to eliminate fraud via executive order. However, like information risk, fraud can’t be eliminated. What the Trump order doesn’t deal with is clueless users vulnerable to financial fraudsters & scammers.
https://brothke.medium.com/scammers-reply-to-president-trumps-cyber-strategy-for-america-bring-it-on-5f1da8f668fb