Sign in

Alex Pinto

@alexcp.bsky.social
719 followers 833 following 138 posts

Cybersecurity data storytelling. DBIR at Verizon Business. Previously serial founder and parallel shitposter. He/him.

PostsRepliesMedia
Alex Pinto @alexcp.bsky.social · 10/10/2026
Understandable. I’ve been having a lot of “if we can do A now, following the trend line B could be right around the corner“ moments lately so I can relate.
020
Alex Pinto @alexcp.bsky.social · 08/10/2026
Oh don’t make me log on X… what is this about?
110
Reposted by Alex Pinto
Kenny Logins @kennylogins.bsky.social · 09/11/2024
Matt
@scriptumsent
Nathan Fielder descending through Dante's inferno going "oh ok" to everyone's stories
10:09 AM • 2022-07-30
11628246
Reposted by Alex Pinto
Shostack + Associates @shostackassociates.bsky.social · 21/08/2026
Adam has announced the second edition of his threat modeling classic! Half of the book is completely new or heavily rewritten to handle a decade of shifts in tech and security. If you want to build safer systems, pre-order today! Adam's written about it on the blog: shostack.org/blog/threat-...
022
Alex Pinto @alexcp.bsky.social · 02/08/2026
Ngl this is driving me insane right now.
130
Alex Pinto @alexcp.bsky.social · 29/07/2026
Exceptional detail. Very much worth the read.
030
Alex Pinto @alexcp.bsky.social · 28/07/2026
Yeah this is a fascinating result that has me scratching my head. The most logical explanation IMO is that the Glasswing/Daybreak projects are really giving the companies a head start in detecting those vulnerabilities before the attackers.
001
Reposted by Alex Pinto
Gadi Evron @gadievron.bsky.social · 27/07/2026
Releasing: Post mortem analysis of the Hugging Face incident was written over the weekend by hundreds of CISOs (and reviewed by Hugging Face). Link: cloudsecurityalliance.org/artifacts/hu... (+free download) From CSA, SANSInstitute, Knostic, [un]prompted, RSAC, FIRST
cloudsecurityalliance.org
Hugging Face Incident Initial Post Mortem I CSA
AI Security Alliance's initial post-mortem on the Hugging Face incident, the first documented autonomous AI attack, with CISO guidance on detecting, responding to, and governing agentic AI risk.
22113
Alex Pinto @alexcp.bsky.social · 24/07/2026
This is 100% the correct take. Moreover, no one will be help responsible and it will be used for marketing by all involved.
031
Alex Pinto @alexcp.bsky.social · 21/07/2026
This reeks of publicity stunt.
020
Alex Pinto @alexcp.bsky.social · 21/07/2026
You almost got me there, sir!
010
Alex Pinto @alexcp.bsky.social · 27/06/2026
Art.
0150
Reposted by Alex Pinto
Dennis @dennisf.bsky.social · 17/06/2026
New podcast is up, a fascinating conversation with @alexcp.bsky.social on the first Breach Impact Study and the 2026 DBIR. open.spotify.com/episode/3F3j...
open.spotify.com
How Much Do Data Breaches Really Cost? | Alex Pinto
Decipher Security Podcast · Episode
011
Alex Pinto @alexcp.bsky.social · 11/06/2026
I’d never. I’m a big fan of em-dashes too!
0160
Reposted by Alex Pinto
mousegAAAHH!rd @mousegard.bsky.social · 10/06/2026
there was a scientific study recently that showed using ai for even as little as 15 minutes reduces your persistence, making you more likely to give up on a task if you can't use ai for it, less likely to acquire new skills, and less able to work independently: arxiv.org/abs/2604.04721
arxiv.org
AI Assistance Reduces Persistence and Hurts Independent Performance
People often optimize for long-term goals in collaboration: A mentor or companion doesn't just answer questions, but also scaffolds learning, tracks progress, and prioritizes the other person's growth...
51290634
Reposted by Alex Pinto
Alex Pinto @alexcp.bsky.social · 19/05/2026
Time to update my pinned skeet because the 2026 #DBIR is out today! This year’s theme is about “keeping a strong foundation in the face of change” and boy have there been changes in the threat landscape last year. Get your report here: Verizon.com/dbir
verizon.com
2026 Data Breach Investigations Report (DBIR)
Read the complete 2026 Data Breach Investigations Report (DBIR) for an in-depth, authoritative analysis of the latest cyber threats, data breaches, and actionable cybersecurity risks.
142
Reposted by Alex Pinto
Katie Moussouris (she/her/she-hulk/she-ra)🌻 @k8em0.bsky.social · 26/05/2026
New @lutasecurity.bsky.social blog: AI Vulnerability Coordination at Vulnapalooza — 1st #Mythos Encore @anthropic.com 1st Glasswing update surfaces bottlenecks in patch creation & deployment. Read about a systemic maturity approach to vulnerability coordination www.lutasecurity.com/post/vulnapa...
lutasecurity.com
AI Vulnerability Coordination at Vulnapalooza: Mythos Encore Insights
Anthropic published its first Glasswing update and the bottlenecks in patch creation and deployment need a systemic maturity approach.
1225
Alex Pinto @alexcp.bsky.social · 22/05/2026
Folks, you should become contributors to the DBIR! Reach out to us at dbir@verizon.com and we can make it happen.
010
Alex Pinto @alexcp.bsky.social · 19/05/2026
Thanks for sharing to your audience, Cynthia!
110
Alex Pinto @alexcp.bsky.social · 19/05/2026
Thanks for this. The footnotes were a nice touch.
010
Reposted by Alex Pinto
Adrian Sanabria @sawaba.bsky.social · 19/05/2026
Happy DBIR day everyone! It's really good, as always. I wrote up some thoughts: www.defendersinitiative.com/p/verizons-1...
defendersinitiative.com
Verizon's 19th edition of the DBIR confirms the vulnpocalypse***
But with many asterisks! Read on to find out why 😅
131
Alex Pinto @alexcp.bsky.social · 19/05/2026
That is technically true, I will give you that.
000
Alex Pinto @alexcp.bsky.social · 19/05/2026
Time to update my pinned skeet because the 2026 #DBIR is out today! This year’s theme is about “keeping a strong foundation in the face of change” and boy have there been changes in the threat landscape last year. Get your report here: Verizon.com/dbir
verizon.com
2026 Data Breach Investigations Report (DBIR)
Read the complete 2026 Data Breach Investigations Report (DBIR) for an in-depth, authoritative analysis of the latest cyber threats, data breaches, and actionable cybersecurity risks.
142
Reposted by Alex Pinto
Mathew J Schwartz @mathewjschwartz.bsky.social · 19/05/2026
Verizon's latest Data Breach Investigations Breach Report finds vulnerability exploitation surging, patch rollout slowing and ransomware incidents rising. www.databreachtoday.com/verizon-brea...
databreachtoday.com
Verizon Breach Report: Vulnerability Exploitation Surges
The frequency of hackers exploiting vulnerabilities in hardware and software to gain initial access to a victim's environment continues to surge, and half of all
163
Alex Pinto @alexcp.bsky.social · 19/05/2026
Sorry, not sorry.
000
Alex Pinto @alexcp.bsky.social · 19/05/2026
You sure did! Thanks a lot for that!
010
Reposted by Alex Pinto
Censys @censys.bsky.social · 19/05/2026
4 straight years powering the Verizon #DBIR w/ Censys Internet intelligence. The 2026 report reinforces a growing reality: Internet visibility has become foundational for defenders amid vulnerability exploitation, AI-enabled attacks & rapidly shifting infrastructure. bit.ly/4uYZPXD #DBIR
011
Reposted by Alex Pinto
Brian Honan @brianhonan.bsky.social · 19/05/2026
One of my must reads each year is the @verizonofficial.bsky.social #DBIR report. @irisscert.bsky.social is one of the contributors so I'm always interested to see what #cybersecurity trends are relative to Ireland, and indeed businesses elsewhere. bhconsulting.ie/lessons-for-...
bhconsulting.ie
Lessons for Irish Organisations from the Verizon 2026 Data Breach Investigations Report (DBIR)
Our CEO, Brian Honan, discusses his views and opinions on the Verizon DBIR 2026 and why the report is always a must read.
044
Reposted by Alex Pinto
Fellow Traveller @fellowtraveller.games · 01/05/2026
Forbidden Solitaire AND Titanium Court in ONE BUNDLE? (is that allowed?) That's two games that shouldn't exist at a very real discount of 15%! They forbade us, but we didn't listen! 💎 🏰 store.steampowered.com/bundle/72486...
215152
Alex Pinto @alexcp.bsky.social · 16/04/2026
Iguanodon is the correct answer.
210
Reposted by Alex Pinto
sephirAmy @sephiramy.bsky.social · 11/04/2026
🌕 ✨️ ✨️ 🌟 ✨️ ✨️ 🌟 🌟 🪂 🚀💦 🌊🌊🌊🌊🌊🌊🌊🌊🌊🌊🌊🌊
82055544
Alex Pinto @alexcp.bsky.social · 10/04/2026
Didn’t have “front seat to the vulnpocalypse” in my 2026 bingo card.
220
Reposted by Alex Pinto
cje @cje.io · 10/04/2026
Wrote about the attacker-defender asymmetry and why AI made it worse -- "AI for defense" is stuck polishing the top five turtles while adversaries live in the bottom ten. cje.io/2026/04/08/offense-scales-wi…
1126
Alex Pinto @alexcp.bsky.social · 10/04/2026
Good stuff.
110
Alex Pinto @alexcp.bsky.social · 02/04/2026
I know this was written from the perspective of cybersecurity detection workloads but it applies to absolutely everywhere where AI is being forced into the workplace without any forethought. www.sentinelone.com/blog/the-imp...
sentinelone.com
The Implementation Blind Spot | Why Organizations Are Confusing Temporary Friction with Permanent Safety
Our new blog post explores the ‘cognitive rust belt’ — how AI friction masks skill loss and why organizations must act now.
010
Reposted by Alex Pinto
Rob Sheridan @rob-sheridan.com · 25/03/2026
Nothing but respect for MY formative young adult fantasy novel series
Dragon Lance Chronicles Vol 1: Dragons of Autumn Twilight by Margaret Weis and Tracy Hickman
2827536
Alex Pinto @alexcp.bsky.social · 13/03/2026
Don’t underestimate the power of unsubstantiated opinions.
020
Reposted by Alex Pinto
Pat Thomson @patthomson.bsky.social · 08/03/2026
Academic writers often feel uncomfortable but that’s often OK Here’s why patthomson.net/2026/03/08/g...
patthomson.net
getting comfortable with being uncomfortable
Good academic writing means sitting with a discomfort that never entirely goes away. It’s not a discomfort that comes from having nothing to say. Most of us have more than enough ideas crowding the…
76425
Reposted by Alex Pinto
Joseph Menn @joemenn.bsky.social · 24/02/2026
Here we go. Free, no-reg versions of favorite stories from my four years at the Washington Post. First, three pieces from our Pulitzer-finalist series on how India's ruling party coerced U.S. tech giants into violating their own policies. www.washingtonpost.com/world/2023/0...
washingtonpost.com
Under India’s pressure, Facebook let propaganda and hate speech thrive
Facebook has retreated from its professed ideals in India under pressure from Prime Minister Narendra Modi’s Bharatiya Janata Party.
615966
Alex Pinto @alexcp.bsky.social · 12/02/2026
Best of luck, brother! See you in RSAC!
012
Reposted by Alex Pinto
Brandon Friedman @brandonfriedman.bsky.social · 09/02/2026
The nice commercial about helping kids find their lost pets was the scariest thing I've seen in my life
331589278
Alex Pinto @alexcp.bsky.social · 05/02/2026
media.tenor.com
a close up of a chicken 's mouth with a light coming out of it 's beak .
Alt: Animated gif of a quill on paper creating fire as the writer writes
010
Alex Pinto @alexcp.bsky.social · 31/01/2026
It’s wild. Guns everywhere. I had watched “Cars” with my 3yo the week before, and decided to check out the next one. We changed over to something else pretty quickly.
000
Reposted by Alex Pinto
SentinelOne @sentinelone.com · 29/01/2026
🧵 175,000+ exposed AI hosts. Zero guardrails. New research from @sentinellabs.bsky.social and @censys.bsky.social reveals a massive, unmanaged layer of open-source AI infrastructure operating in the shadows. s1.ai/si-llama Here is what you need to know about the "silent" AI network. ⤵️
142
Reposted by Alex Pinto
Anil Dash @anildash.com · 28/12/2025
By any reasonable historical standard — including that of the technology industry! — ChatGPT should be pulled from the market and its product managers and executives held accountable for creating a product that ROUTINELY tells teens to kill themselves. This is a basic, common sense standard.
202295499
Alex Pinto @alexcp.bsky.social · 12/12/2025
Been waiting for this one!
001
Alex Pinto @alexcp.bsky.social · 09/12/2025
How long did it take for Anthropic’s findings from March 2025 and August 2025 become widespread and commonplace in their systems? If the Nov 2025 finding is the tip of the pyramid of operational capability, what does the base looks like today?
011
Alex Pinto @alexcp.bsky.social · 09/12/2025
From here: www.sentinelone.com/blog/cyberse...
sentinelone.com
Cybersecurity 2026 | The Year Ahead in AI, Adversaries, and Global Change
Explore SentinelLABS' take on what 2026 may bring for cybersecurity, including emerging trends and actionable insights.
100
Alex Pinto @alexcp.bsky.social · 09/12/2025
I have been thinking a lot about this too @jags.bsky.social
Excerpt from SentinelOne article about cybersecurity predictions: “The value
generated in 2026 and beyond is entirely
concentrated in filling that gap between
frontier capability and operational deployment.”
140