Melapress's WordPress security survey of 319 pros finds 67.7% have had an incident, yet fewer than three in ten have a breach recovery plan.

We only post blogs to Twitter anymore to support our current followers. Musk wants you to upload your content to Twitter so that he controls it and you never leave the platform. If you include a link in a post, it will be deprioritized. BlueSky, a Twitter offshoot is gaining about a million users a week. Credit: CyberNews

Some of you are probably old enough to remember Art Linkletter’s “Kids Say The Darnedest Things”. Grok is like that, apparently. Responding to a prompt from a journalist, Grok, the Maximally Truth Seeking AI, according to Musk, says that there is a 75% to 85% chance that Trump is a Russian asset. Someone is getting fired today. Besides the humor in that, it points to the fact that it is really hard to reign in an AI once you have launched it. I guess this is a case of be careful what you wish for, Elon. Credit: Futurism

Unmanaged devices are devices that are neither owned by your company nor have your company’s security and management software on it. This includes personal phones and home computers used for work.

Apple has been forced to allow users to specify non-Safari browsers as their default.

You hear about these stories over and over again – because they work.

Work | DOGE: Department of Government Efficiency.

Since Apple is usually very mild in its reports, to call this an extremely sophisticated attack that may be targeting iThings is pretty unusual.

Google researchers have figured out how to break AMD’s processor security allowing them to load any processor microcode of their choosing.

It will be interesting to see if this holds up under appeal. A court in NY ruled that the Foreign Intelligence Surveillance Act (FISA) is not a free pass when it comes to surveilling US residents. If this holds, this is a huge win to reduce government surveillance. Credit: The Register

New reports are coming out about how to jailbreak Microsoft’s GitHub AI assistant to get it to do, well, bad things. Not a big surprise, of course.

AMD partner Asus disclosed a microcode bug before AMD has a patch developed. They posted a beta BIOS update that has since been removed.

A week after Fortinet announced a patch for a zero-day, there are still thousands of systems worldwide vulnerable. A week ago Shadowserver identified 52,000 networks at risk. Now that is down to 48,000 and change.

Mark Cuban says the number being floated around is more than $300 billion. It is unclear if this is for TikTok US or TikTok worldwide. And maybe Musk might buy it. Given how well he did with his purchase of Twitter, if he does buy it for $300 billion, Cuban might be able to take it off his hands in a year for $30 billion. Credit: Mark Cuban on Blue Sky.

It is interesting how “productive” the folks in DC can be when they want to.

A very large percentage of breaches we hear about involve vendors. For example:

The National Defense Authorization Act is, every year, a must-pass bill that, for the last several years, has been a vehicle to pass important cybersecurity provisions. This year is no exception.

Important notes:

You have probably heard of AI hallucinations – when the AI makes things up. Sometimes the risk is low, but other times, not so much.