Sign in

Gerald Benischke

@beny23.github.io
3K followers 898 following 1.2K posts

Maker, breaker and fixer of software. Adventures in #appsec and #agile: beny23.github.io he/him

PostsRepliesMedia
Reposted by Gerald Benischke
Ciaran Martin @ciaranm.bsky.social · 28/09/2026
“Losing the data on 20 million federal employees to the Chinese was bad. But you knew the Chinese weren’t going to sell or publish it.” Me in The New York Times ($, £) on why the hack of the FBI could, if confirmed, be one of the worst data breaches of all time. www.nytimes.com/2026/09/28/u...
nytimes.com
Embarrassing Breach at F.B.I. Fuels Fears of Harm to Its Employees
In an internal memo, the F.B.I. said it believed the hackers may have stolen sensitive information on all of its employees.
02517
Reposted by Gerald Benischke
Tommy Siegel @tommysiegel.bsky.social · 27/09/2026
Star Wars vs Star Trek: a guide
663780647
Reposted by Gerald Benischke
David Ho @davidho.bsky.social · 27/09/2026
The techbros don't want you to see this trailer. Pass it on.
3149352700
Reposted by Gerald Benischke
Carl T. Bergstrom @carlbergstrom.com · 26/09/2026
Does my Speak-n-Spell feel pain when I type O-U-C-H? The jury is out. Philosophers and neuroscientists say that's fucking stupid, but I called a guy from the Center for Pretending that Household Electronics Are Sentient and he said there's no way to know for sure.
5843181182
Reposted by Gerald Benischke
Goodnews @goodnews.computer · 04/09/2026
Take a break from being depressed that everything you love is being destroyed by slop for a moment and let me tell you about the beautiful symbiotic relationship between graffiti writers, train yard workers, and model train enthusiasts.
A hand holding a model train with a replica of the same graffiti on the full scale train car behind it.A model train with two graffiti pieces on opposite sides.
895483548
Reposted by Gerald Benischke
Chris Rand @chrisrand.com · 06/09/2026
One of those pieces where you think: "it's surely not going to get any worse, is it?" ...but it does. doctorow.medium.com/https-pluralist…
063
Reposted by Gerald Benischke
Emma Monk @monkemma.bsky.social · 22/08/2026
One of the first "outrageous" claims I saw as Jason Arday's media hounding unfolded was that he ran 30 marathons in 35 days! Wow! What a thing to claim! And the newspapers all suggested there was no evidence he actually did it. Well, they clearly didn't look very hard 🙄 🧵 1/26
Photo after Jason's final marathon taken from his archived blog showing Jason surrounded by supporters in orange charity t-shirts
10628191393
Reposted by Gerald Benischke
Deb Chachra @debcha.bsky.social · 23/08/2026
This explainer out of Australia is genuinely useful background and analysis of what happened with the Canada-US trade deal last night. Note that it is extremely and delightfully sweary. Also there’s an appended glossary of Australian slang. ifloz.substack.com/p/king-carne...
ifloz.substack.com
KING CARNEY ACTIVATES KONG MODE WITH ZERO FUCKS
Carney Reads the Clock Like a Pro Wrestler
1002005767
Gerald Benischke @beny23.github.io · 17/08/2026
Software engineering is 80% social and 20% technical.
000
Gerald Benischke @beny23.github.io · 16/08/2026
Oh good, the sandworm is back and abusing Claude code. Just not in the way you think… (medium.com/governed-at-...
medium.com
The ChainDrop npm Worm (August 2026): How 444 Packages Were Compromised Without a Single npm…
The attacker skipped the step everyone spent three years watching.
030
Reposted by Gerald Benischke
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 15/08/2026
Terabytes of credentials leaked in massive supply-chain attack
arstechnica.com
Terabytes of credentials leaked in massive supply-chain attack
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
062
Gerald Benischke @beny23.github.io · 13/08/2026
Partial eclipse of the lens flare.
Photo of the eclipse where the eclipse is visible mainly in the lens flare
000
Reposted by Gerald Benischke
Rachel Tobac @racheltobac.bsky.social · 30/07/2026
The new “⚠️Seems like AI slop” button on LinkedIn is sending me into orbit lmao
1419735
Reposted by Gerald Benischke
AnguaSec @anguasec.bsky.social · 28/07/2026
Help save Jodrell Bank. c.org/KN6ypPFCRv
c.org
Sign the Petition
Help Save Jodrell Bank
011
Reposted by Gerald Benischke
Pete Fraser @petefrasermusic.bsky.social · 26/07/2026
I’m just a simple Internet user, but it seems to me that the UK government shouldn’t use this man’s website for official communications, I dunno.
339993
Gerald Benischke @beny23.github.io · 23/07/2026
I’m glad I don’t live in Penis Lancs. I mean Pennine Lancs. 🤦 www.bbc.co.uk/news/article...
bbc.co.uk
Potential names of Lancashire's four new councils revealed
The county's existing 15 councils will be replaced by four unitary authorities in 2028.
000
Gerald Benischke @beny23.github.io · 19/07/2026
My proposed minister for AI
Cover of robots of dawn by Asimov
020
Reposted by Gerald Benischke
Gingerspiced @gingerspiced.bsky.social · 18/07/2026
Pete Hegseth: "We need our warriors to embrace the Spartan mindset" U.S. Military: *suffers crushing defeat to the Persians*
317255046965
Gerald Benischke @beny23.github.io · 05/07/2026
I loved @witchofthetest.bsky.social ‘s keynote at Agile on the Beach it had everything. Humour, a serious topic, no AI, Dutch Viking ax fighting arias. beny23.github.io/posts/aotb_2... #AgileOnTheBeach2026
beny23.github.io
Agile on the Beach 2026: Field of princes
This is a post about my travel to Cornwall for Agile on the Beach, a fantastic conference. So why do I talk about fields of princes? You’re going to have to bear with me. But this will involve big que...
0130
Gerald Benischke @beny23.github.io · 03/07/2026
@witchofthetest.bsky.social doesn’t want to talk about AI for her closing keynote of #AgileOnTheBeach2026 1/n
Veerle doesn't want
to talk about Al
110
Gerald Benischke @beny23.github.io · 03/07/2026
Olly from Collecting Cars is doing the AI AMA at #AgileOnTheBeach2026 1/n
Ferrari dino slide
100
Gerald Benischke @beny23.github.io · 03/07/2026
Francesca starts off with a truth bomb about AI in product at the #AgileOnTheBeach2026 Friday opening keynote 1/n
Francesca doesn’t know slide
100
Gerald Benischke @beny23.github.io · 02/07/2026
@nativewired.com are doing the last teams track talk is talking about the F word: feelings! Fucking feelings… 1/n
F word. Feelings. Slide.
143
Gerald Benischke @beny23.github.io · 02/07/2026
@tdpauw.bsky.social is next up at #AgileOnTheBeach2026 talking about non blocking code reviews. Why are we doing it anyway? 1/n
Code reviews why slide?Good reasons slide
182
Gerald Benischke @beny23.github.io · 02/07/2026
Chris is giving an AI-less (bravo) security talk at #AgileOnTheBeach2026 - telling us about how to improve a slow security process in a bank. 1/n
Old process is slow slideSecurity capabilities slide
100
Gerald Benischke @beny23.github.io · 02/07/2026
Brigitte from @thoughtworks.com keynotes about the state of AI at #AgileOnTheBeach2026 1/n
Brigitte in front of a slide showing ancient history of AI coding (past 2 years)Context engineering slideSlide difference between supervised and unsupervised
131
Gerald Benischke @beny23.github.io · 02/07/2026
Brigitte from @thoughtworks.com keynotes about the state of AI at #AgileOnTheBeach2026 1/n
Brigitte in front of a slide showing ancient history of AI coding (past 2 years)Context engineering slideSlide difference between supervised and unsupervised
142
Gerald Benischke @beny23.github.io · 02/07/2026
Agile on the beach is kicking off by Steve giving us the annual reminder he’s not allowed to talk to the WiFi team. #AgileOnTheBeach2026
Steve and Kayley opening agile on the beach.
020
Reposted by Gerald Benischke
Dare Obasanjo @carnage4life.bsky.social · 18/06/2026
I used to think number of app downloads was the most useless vanity metric until token maxxing.
519431
Gerald Benischke @beny23.github.io · 18/06/2026
Turns out FIFA is as good at security as they are at peace prizes… bobdahacker.com/blog/fifa-hack
bobdahacker.com
I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.
How I found that anyone could register on FIFA's public Agent Platform, gain access to the Football Data Platform's Streaming Management panel, and get RTMP ingest URLs and stream keys for every live ...
010
Gerald Benischke @beny23.github.io · 16/06/2026
Creating policies on tech to be banned for politicians from the spring. Details below. Policy being described as “Reality -“ and will also include a curfew for MPs from talking to the press after their first drink.
000
Reposted by Gerald Benischke
Andy Gill @zephrfish.yxz.red · 13/06/2026
It’s @bsidesleeds.bsky.social today and ZephrSec sponsoring. Come along to my talk talk at 11.40 in Track 1 all about blending into environments using defensive tools and understanding. Our 10% off coupon is also still live: LTR101-10Y lms.zsec.red
lms.zsec.red
Red Team Training: MAE — Malwareless Adversary Emulation
Advanced red team training — 13 modules on adversary emulation without traditional malware. Learn the techniques that bypass modern defences.
021
Gerald Benischke @beny23.github.io · 13/06/2026
Wearing 2 T-shirts at @bsidesleeds.bsky.social today. Pink one for being a first time goon and a blue one for being a last minute speaker. #BSidesLeeds2026
Me in pink crew T-shirt in front of bsides Leeds signPhoto of the BSides Leeds speaker T-shirt saying “Speaker 2026”
010
Gerald Benischke @beny23.github.io · 13/06/2026
Fabled model stays mythical as Uncle Sam pulls the plug. I thought short selling only works after a company goes public… www.anthropic.com/news/fable-m...
anthropic.com
Statement on the US government directive to suspend access to Fable 5 and Mythos 5
The US government has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States.
000
Gerald Benischke @beny23.github.io · 09/06/2026
I had some fun linking together Meta's support AI fail, Microsoft's criminalisation fail, Google's account disablement fail and Zuck's being a human being fail. #WeaklyLink beny23.github.io/posts/weakly...
beny23.github.io
Weakly Link 26/21: Control Failures
Apologies for the tardiness, when I started this set of posts, I squarely aimed to do this once a week. Of course, I never fully committed to that, it was more of a weakly held belief that I would hol...
000
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 04/06/2026
Please welcome onboard @tracebit.bsky.social as a sponsor for BSides Leeds! 🎉 Tracebit specialises in deception technology, deploying canaries across your environment and helping you proactively detect intrusions.
Sponsor announcement with Tracebit logo
142
Reposted by Gerald Benischke
Kevin Beaumont @doublepulsar.com · 01/06/2026
A reminder for anybody surprised Meta's AI allowed anybody to change anybody else's Instagram account login of this headline a few months ago:
511935
Reposted by Gerald Benischke
Joseph Cox @josephcox.bsky.social · 01/06/2026
This is absolutely nuts: hackers are hijacking high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email on the account. Meta's AI does it, hacker gets password reset code, they're in. A staggering security issue www.404media.co/hackers-simp...
404media.co
Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked
The exploit shows the extreme risk of offloading technical support to AI.
27197665108
Reposted by Gerald Benischke
Kevin Beaumont @doublepulsar.com · 28/05/2026
I've written something about Microsoft's apparent stance that not following made up responsible disclosure frameworks is criminal activity. doublepulsar.com/microsofts-s...
doublepulsar.com
Microsoft’s stance on zero day exploits is a dumpster fire of their own making
Nightmare Eclipse vs Microsoft risks turning into a wildfire of corporate protect over cyber defence.
58627
Gerald Benischke @beny23.github.io · 02/06/2026
It's a day ending in y, so must be time for another npm supply chain attack: www.stepsecurity.io/blog/multipl...
stepsecurity.io
Multiple redhat-cloud-services npm Packages compromised - StepSecurity
Several packages in the @redhat-cloud-services npm scope were found to carry malicious payloads that fire via a preinstall hook on every npm install. The affected versions span multiple packages acros...
000
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 31/05/2026
Please welcome onboard th4ts3cur1ty.company as a sponsor for BSides Leeds! 🎉 th4ts3cur1ty.company offer everything from 24/7 SOC & SIEM to vulnerability management to consultancy, all with their business-centric "no nonsense, just defence" approach.
Sponsor announcement with logo for th4ts3cur1ty.company
122
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 28/05/2026
🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're excited to have Kinga Kaiserin presenting their talk 'Is It Safe? Misinformation, Terrorism and the Quest for Safe Chatbots'. Catch Kinga's talk on Track 2, and keep an eye on our website and socials for the full schedule release! #BSidesLeeds #SpeakerAnnouncement
Speaker card with photo of Kinga Kaiserin and the text 'I'm speaking on Track 2, Sat 13th June'
075
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 27/05/2026
🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're delighted to have James Bore presenting his talk 'The Dungeon Master's Guide to Crisis Management'. Catch James's talk on Track 1, and keep an eye on our website and socials for the full schedule release! #BSidesLeeds #SpeakerAnnouncement
Speaker card with photo of James Bore and the text 'I'm speaking on Track 1, Sat 13th June'
153
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 27/05/2026
🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're excited to have Dr Z. Cliffe Schreuders presenting his talk 'Hacking Games: From Cyber-Themed Magic to Real Hacking That Moves the Plot'. Catch Cliffe's talk on Track 2, and keep an eye out for the full schedule release! #BSidesLeeds #SpeakerAnnouncement
Speaker card with photo of Dr Z Cliffe Schreuders and the text 'I'm speaking on Track 2, Sat 13th June'
044
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 27/05/2026
🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're delighted to have Ken Munro, Founder and Partner at Pen Test Partners, presenting his talk 'Mapping the aviation attack surface: plain text rules the skies'. Catch Ken's talk on Track 1, and keep an eye out for the full schedule release! #BSidesLeeds
Speaker card with photo of Ken Munro and the text 'I'm speaking on Track 1, Sat 13th June'
044
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 26/05/2026
Please welcome onboard @semgrep.com as a sponsor for BSides Leeds! 🎉 Semgrep specialises in code security, supporting you to catch, flag, and fix vulnerabilities and bugs as you work. We're absolutely delighted they're involved with this year's event — thank you so much for your support!
Sponsor announcement with logo for Semgrep
063
Reposted by Gerald Benischke
Alex Partridge @alexpartridge87.bsky.social · 25/05/2026
Anakin and Padme. Top left corner “British houses are poorly insulated and cold in winter” top right “so they’re cool in the summer right?”
381994346
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 25/05/2026
🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're delighted to have Georgia Weidman presenting her talk 'Shattering The Perimeter: Exploiting the Modern Mobile Ecosystem'. Catch Georgia's talk on Track 2, and keep an eye on our website and socials for the full schedule release! #BSidesLeeds #SpeakerAnnouncement
Speaker card with photo of Georgia Weidman and text 'I'm speaking on Track 2, Sat 13th June'
054
Reposted by Gerald Benischke
BSides Leeds @bsidesleeds.bsky.social · 25/05/2026
🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're excited to have Tom Harrison presenting his talk 'Standing On The Shoulders of Robots - AI for Attackers; Where the **** are we?'. Catch Tom's talk on Track 2, and keep an eye on our website and socials for the full schedule release! #BSidesLeeds
Speaker card with photo of Tom Harrison and the text 'I'm speaking on Track 2, Sat 13th June'
033