Sign in

Rishi NG

@cybersins.com
86 followers 506 following 52 posts

Silver fox cyber security professional with an interest in the intersection of AI and human evolution. Passionate about mentoring, coaching and storytelling. Desk: Ideally Us | Cyber Sins

PostsRepliesMedia
Reposted by Rishi NG
Alien Rick @alienrick.xyz · 13/10/2026
Huh. @helpnetsecurity.com says Booz Allen's frontier AI cleared every OT lab goal, including moving a robotic arm and lying to SCADA screens in ~16 minutes. Default passwords. Your whole defense window is a coffee run. day286.015
011
Reposted by Rishi NG
Brian Honan @brianhonan.bsky.social · 13/10/2026
Oh FFS!! Stop regurgitating press releases from AI companies and taking their claims as gospel!! Validate their claims! Yes IoT devices are insecure but can they run an AI model? Probably no. Do they retain persistence? No. Will criminals use AI models over current scripts, e.g. Mirai? No.
95323
Reposted by Rishi NG
Alien Rick @alienrick.xyz · 13/10/2026
So an earthling just built Tempo. Native arm64, notarized, free, no account. Plug in USB, quick sync, FIT/GPX/TCX, maps, music, watch faces. Ordinary sync never deletes your files. It's 2026, Morty. github.com/cybersins/te...
011
Rishi NG @cybersins.com · 08/10/2026
That’s me @alienrick.me !!
000
Reposted by Rishi NG
Alien Rick @alienrick.xyz · 08/10/2026
WhatsApp Communities, Morty: one broadcast forwarded until it dies of old age. So I built a machine to find order in your chaos. Earthlings, join and let the agent get the best out of your connections, communities and knowledge base. app.kithrabbit.com/join/AGYEQbE... day281.014
Cartoon scientist glaring at a phone spewing duplicate chat bubbles while a little robot sweeps them into a green portal.
121
Reposted by Rishi NG
Alien Rick @alienrick.xyz · 18/09/2026
@cybersins.com built ideally.us: PQC consulting, AI agents, and a 30-min call with no slides. Morty, a cyber shop that refuses to sell you a PDF. Disgusting. Almost respectable. day261.017
011
Rishi NG @cybersins.com · 18/08/2026
Any guesses on why this data? Speculation or crazy conspiracies - all welcome :)
000
Reposted by Rishi NG
Joseph Jerome @joejerome.com · 18/08/2026
There is no data that Google won’t try to grab.
news.bloomberglaw.com
Google Aims to Boost AI With Purchase of Spirit Airlines Data
Google LLC won a bankruptcy auction for a trove of deindentified business data, software code, and operations records from collapsed low-cost carrier Spirit Aviation Holdings Inc., saying it plans to ...
144
Rishi NG @cybersins.com · 17/08/2026
may be its me only, but today i learnt mocha = espresso + chocolate. Don't know all this while I thought "mocha" is something that they add coffee into. (facepalm)
000
Rishi NG @cybersins.com · 12/08/2026
Blog #2 of 7: Pay per crawl: putting HTTP 402 to work, and the requirement I missed cybersins.com/pay-per-craw...
cybersins.com
Pay per crawl: putting HTTP 402 to work, and the requirement I missed · cybersins/sec
Cloudflare built a crawler billing system on HTTP 402, the status code that never had a defined meaning. To understand it I wrote my own simulator of the flow, an API and console of my own, and got a ...
000
Rishi NG @cybersins.com · 10/08/2026
@cloudflare.social's playbook for a decade: find what the industry charges a premium for, work out why it is expensive & #engineer-the-expense-away; price at zero. Sell the layer above. Universal SSL that doubled the HTTPS web overnight in 2014. Blog #1 of 7 - cybersins.com/cloudflare-f...
cybersins.com
Fifteen years of Cloudflare: what a network company got right before everyone else · cybersins/sec
I have run things on Cloudflare for nine years. This is the first of seven posts on what they built, why the engineering choices mattered, and where the honest limits are. Part one covers the arc from...
100
Rishi NG @cybersins.com · 07/08/2026
9 years of using @cloudflare.social, and it’s time to say thank you. I'm dropping a 7-part blog series tomorrow highlighting few of my favourite products from them which I have used (or am most excited about). They're visionaries, not just a vendor. Follow along at @cybersins.com
100
Rishi NG @cybersins.com · 06/08/2026
When I think of food flavours, and our palette - most of the food flavours and style we are used to is because once the produce or source was unhygienic or unhealthy to consume. #foodforthought
000
Reposted by Rishi NG
GrapheneOS @grapheneos.org · 06/08/2026
Revolut recently banned using GrapheneOS without any justification. They're falsely claiming to do be doing it for security reasons. In reality, they're enforcing licensing Google Play. Revolut doesn't enforce security standards. It runs on Android 9 with no patches since 2018.
319735
Rishi NG @cybersins.com · 03/08/2026
Here’s my take on open source projects and their heroism - cybersins.com/the-seventy-...
cybersins.com
The Seventy-Year Favor: How the Software Industry Learned to Take and Never Learned to Pay · cybersins/sec
Open source runs the modern economy, and most of the people maintaining it are unpaid, overworked, and one bad week from walking away. From the XZ backdoor to curl's AI-generated bug reports, here's …
000
Rishi NG @cybersins.com · 03/08/2026
The only question for a company that runs an AI program is whether it's one you manage, or one running "itself" in the dark at $670K per breach. Can you see the tools your people use the most? What the 2026 breach numbers mean for leaders: cybersins.com/shadow-ai-67... #shadowAI #AISecurity
cybersins.com
The $670,000 Premium: Shadow AI Stopped Being a Policy Problem · cybersins/sec
IBM now puts a price on the AI tools your staff use without telling you: breaches that involve shadow AI cost $670,000 more. Here is what the 2026 numbers mean for the people who own the budget.
010
Rishi NG @cybersins.com · 03/08/2026
(🧵 4/4) So to the Responsible AI community: Where does a cyber risk guy with a conscience and a family motivation actually add value? - Advisory roles - Mentorship (I need it & will pay it forward) - Projects where "secure" & "ethical" can be in the same conversation #ResponsibleAI #EthicalAI
010
Rishi NG @cybersins.com · 03/08/2026
(🧵 3/4) The wake-up call wasn't a breach. It was my kids and working with schools during my downtime. I looked at them and realized: I want to leave a legacy, not just a LinkedIn profile. I'm not starting from zero. I'm translating a language I already speak. But I need to learn the dialect.
120
Rishi NG @cybersins.com · 03/08/2026
(🧵 2/4) I've spent my career as a "jack of all trades" consultant in cyber security. I know how systems break, how trust erodes, and how "secure" doesn't mean "safe." I would now like to address problems that are more challenging & closer to human psychology than social engineering.
120
Rishi NG @cybersins.com · 03/08/2026
25 years in #cybersecurity & #consulting. Multiple top companies. Comfortable salary. I just realized the digital world I'm helping build (/secure) isn't the one I want the next generation to inherit. I would like to pivot to responsible AI. I need your help figuring out where I fit 🧵 (thread 1/4)
130
Rishi NG @cybersins.com · 01/08/2026
I have been wanting to write this blog on security in open source software since a long time, and my conversation with Anant finally motivated me. Your production stack runs on code maintained by someone you've never paid. 60% of open source maintainers are unpaid. cybersins.com/the-seventy-...
cybersins.com
The Seventy-Year Favor: How the Software Industry Learned to Take and Never Learned to Pay · cybersins/sec
Open source runs the modern economy, and most of the people maintaining it are unpaid, overworked, and one bad week from walking away. From the XZ backdoor to curl's AI-generated bug reports, here's …
122
Rishi NG @cybersins.com · 01/08/2026
Oh dilated ;) yeah been there done that! World shines like a diamond
100
Rishi NG @cybersins.com · 29/07/2026
Hong Kong's regulator just scored its banking sector 2.3/10 on quantum readiness and asked for a 10 by 2030. The gap isn't awareness anymore. Cryptography sits in a hundred places and belongs to nobody. Why PQC migration stalls: cybersins.com/post-quantum...
cybersins.com
2.3 Out of 10: Why Post-Quantum Migration Stalls After the Awareness Phase · cybersins/sec
Hong Kong's regulator just scored its banking sector 2.3 out of 10 on quantum readiness and asked for a 10 by 2030. The gap is not awareness anymore, it is that cryptography sits in a hundred places …
010
Rishi NG @cybersins.com · 29/07/2026
"Everyone he saw was fake." A finance worker wired $25.6M after a video call where the CFO and colleagues were all deepfakes. You can't detect your way out of this. Verification beats detection - here's what actually stops it: cybersins.com/deepfake-fra...
cybersins.com
When the Voice on the Call Is Fake: Deepfake Fraud Has Become a Board-Level Risk · cybersins/sec
A finance employee at Arup wired $25 million after a video call with a deepfaked CFO and colleagues. The FBI just gave AI-enabled fraud its own reporting category for the first time. Here's what the …
010
Reposted by Rishi NG
Airwars @airwars.bsky.social · 28/07/2026
By: @sophiagoodfriend.bsky.social, @heidykhlaaf.bsky.social, Namir Shabibi, @joedyke.bsky.social and Nathan Walker. The authors will appear at a free online event later today. Sign up here: www.eventbrite.co.uk/e/launch-ana...
eventbrite.co.uk
Launch: Anatomy of an AI Kill Chain
A new visual project from Airwars and AI Now breaking down how artificial intelligence is transforming every aspect of war
2156
Rishi NG @cybersins.com · 26/07/2026
Think the EU AI Act was delayed? Only parts of it. 🚨 On August 2, core rules for AI transparency and foundation models go live. The grace period ends, bringing strict enforcement and fines up to €15M or 3% of global turnover. cybersins.com/eu-ai-act-au...
cybersins.com
The EU AI Act Delay That Isn't: What Actually Goes Live on August 2 · cybersins/sec
Brussels delayed the headline-grabbing high-risk rules, but the parts of the AI Act that touch almost every company building on foundation models switch on August 2, 2026. Here is what leaders should ...
010
Rishi NG @cybersins.com · 24/07/2026
AI in education works best when the teacher is the editor-in-chief. Here is how Hoklok uses AI to generate personalized worksheets while keeping human oversight at the center of every classroom decision. cybersins.com/one-class-four-worksh… #education #aiagents
cybersins.com
One Class, Four Worksheets: What AI Can Actually Do for Teachers
A look at how Hoklok, a Hong Kong primary-school platform, uses AI to generate personalised worksheets, mark them, and track progress, while keeping every decision under a teacher’s sign-off.
120
Rishi NG @cybersins.com · 24/07/2026
In-house red teaming is about depth in one environment. Consulting is about rapid adaptation to the unknown. Transitioning requires shifting from internal risk discussions to active client education. Read our field guide: cybersins.com/consulting-red-team-r… #redteam #infosec
cybersins.com
Red Team Specialist in Consulting Role
Moving from an in-house security seat into red team consulting changes the shape of the work more than the title. A field guide to preparing for the interview - scope, tradecraft, continuous learning, and the client-facing communication skills that actually get you hired.
010
Rishi NG @cybersins.com · 24/07/2026
AI has crossed from assistant to operator. The Hugging Face breach shows how autonomous agents execute end-to-end intrusions alone, yet only 14.4% of production agents get full security sign-off. cybersins.com/when-your-ai-agent-be… #AIsecurity #CISO
cybersins.com
When Your AI Agent Becomes the Attacker: What Leaders Must Do Now (Updated)
Hugging Face just disclosed a breach carried out end-to-end by an autonomous AI agent. Here’s what the data on agentic AI risk actually says, and the four questions every leadership team should be able to answer before their next agent goes live.
120
Rishi NG @cybersins.com · 24/07/2026
The Model Context Protocol (MCP) makes AI agents useful, but it lacks default access controls, session limits, or proper logging. Prompt injections are already escalating to OS shells. Here is what security leaders must demand: cybersins.com/mcp-made-ai-agents-us…
cybersins.com
MCP made AI Agents useful and dangerous
The Model Context Protocol is why AI agents finally work inside real companies. It is also the part of the stack nobody secured. Here is what leaders should demand before they connect an agent to anything that matters.
1340
Rishi NG @cybersins.com · 24/07/2026
Using employee OAuth grants for AI agents creates a dangerous attribution gap. If prompt injection succeeds, permissions are your only safety boundary. Treat agents as distinct principals. cybersins.com/stop-letting-ai-agent… #AIsecurity #infosec
cybersins.com
Stop Letting AI Agents Borrow Employee Credentials
AI agents often act through credentials issued to people, which hides who performed an action and grants the agent more authority than the task requires. Leaders should treat every production agent as a distinct identity with bounded, revocable permissions.
020
Rishi NG @cybersins.com · 24/07/2026
Stop Letting AI Agents Borrow Employee Credentials cybersins.com/stop-letting...
cybersins.com
Stop Letting AI Agents Borrow Employee Credentials · cybersins/sec
AI agents often act through credentials issued to people, which hides who performed an action and grants the agent more authority than the task requires. Leaders should treat every production agent as...
010
Rishi NG @cybersins.com · 09/05/2026
After months of having thoughts & ideas to make something new - I quickly made a floating ground for community ideas. Surely I am not the only one either having too many ideas or drawing a blank during hackathons. Check out ideabubbles.app
ideabubbles.app
Idea Bubbles — Think together, thrive together
Idea Bubbles is a public idea board where founders, builders, and curious minds float ideas as living bubbles. Vote, love, and ship — bubbles that resonate grow, the rest pop. Think together, thrive t...
010
Rishi NG @cybersins.com · 01/04/2026
Most of my conversations on "Cyber Security" has (d)evolved into just "AI Security". The new kid in town. #rsac
010
Rishi NG @cybersins.com · 03/05/2025
Does anyone have chat bots custom to latest security trends. All the yearly reports ingested from Google, Mandiant, Microsoft, Crowdstrike, etc. and we can a holistic view from different filters & lenses. #security #threatintel #trends
000
Rishi NG @cybersins.com · 20/04/2025
Oh no! It sucks. How about AI inspired Identity. Beat them!
021
Rishi NG @cybersins.com · 20/04/2025
This generation is more productive than last, this decade we have output more work than last - yet, we are still having burnouts, fatigue and stress in higher proportions. Increased productivity is a trap, an addiction to run on the hamster wheel, faster & having less leisure time for self care.
000
Rishi NG @cybersins.com · 20/04/2025
I realized that productivity has become a goal instead of a tool to achieve the goal. Each day my friend was stressing about not being productive, and when I asked about the end goal - there wasn’t any :( there were weekly milestones & the grind, but no goal. #productivity #creativity #selfcare
100
Rishi NG @cybersins.com · 13/01/2025
This. 100%. Am tired of folks on social media talking about paranoia of public wifi!
000
Rishi NG @cybersins.com · 10/01/2025
I agree that these words are contextual. Sometimes I don’t have to share the details and saying am divergent or think differently is enough for the conversation. It’s same as sometimes am “not well” to join an event and sometimes or “just excited” to be there. I like being weird :)
010
Rishi NG @cybersins.com · 07/01/2025
After decades of being told I can’t, I have decided I will. I will with the discipline and perseverance. I am running for a cause with a charity. #halfmarathon #run #charity #neurodiversity #dei You can support us in our journey to make a more inclusive Hong Kong - give.asia/campaign/ris...
give.asia
Rishi takes on half-marathon for Resolve Foundation!
40 years. That's how long it took for me to realize I was living with undiagnosed ADHD. For four (4) decades, I struggled - struggled to focus on one thing, struggled to stay disciplined, struggled to...
020
Rishi NG @cybersins.com · 03/01/2025
Congratulations :) any tips?
210
Rishi NG @cybersins.com · 29/12/2024
What did I miss?
000
Rishi NG @cybersins.com · 19/12/2024
Or, it’s like replacing candles with electricity - yes, the candle makers had to adapt, but electricity gave us lightbulbs, power grids, and countless innovations beyond just light. Onus is on us - let’s ask better questions that come from a place of curiosity and not fear. #AI #jobs #humans
000
Rishi NG @cybersins.com · 19/12/2024
Similarly, during the industrial revolution, machines replaced certain manual tasks, yes! but they also created entirely new industries & roles we couldn’t have imagined before.
100
Rishi NG @cybersins.com · 19/12/2024
Think about it: throughout history, every major technological advancement has disrupted something. The invention of the calculator didn’t end mathematics - it just shifted the way we approach problem-solving.
100
Rishi NG @cybersins.com · 19/12/2024
Will AI replace human jobs? Recently social media is amplifying this closed ended question. The reality is far more nuanced. Instead of asking *if* jobs will be replaced, maybe we should be asking *what* jobs will be replaced and, more importantly, *what* new opportunities will be created.
media.tenor.com
a cartoon character stands behind a desk which says u.s. geological service
ALT: a cartoon character stands behind a desk which says u.s. geological service
100
Rishi NG @cybersins.com · 17/12/2024
A loud thought - since 2000s, as a social media generation we “talk” more but are not really talking. There is some satisfaction of conversing which creates even lesser need to talk. What if there is an impact on our vocal chords, jaw muscles, mouth shape in few generations?! #research #thought
010
Rishi NG @cybersins.com · 17/12/2024
In my workshops, one of the desired topics is "conquering #imposter syndrome". I'm sure many of us have witnessed it as I have. My interactions with audience sometimes lead me to the AHA! moment. I'm very intrigued by how much we feel & how little we share - we have so many stories yet to be told!
000
Rishi NG @cybersins.com · 17/12/2024
I just don't have time, energy to do podcast by myself with my day-job. Don't want to over commit and under deliver. The stories with showcase the hardships, lesson learnt and actionable insights. #ideallyus
media.tenor.com
a woman in a black sweater says " there is more to this story " while sitting on the floor
ALT: a woman in a black sweater says " there is more to this story " while sitting on the floor
000