Eric Geller @ericjgeller.com · 2hGAO says OMB isn't doing enough to oversee agencies' IoT device inventorying and security control monitoring. Per the report, OMB didn't respond to GAO's requests for information or its recommendations. www.gao.gov/assets/gao-2... 121
Eric Geller @ericjgeller.com · 4hThe Alliance for Critical Infrastructure — which I profiled in May www.cybersecuritydive.com/news/critica... — is expanding with dozens of new members, including from three new sectors. It started as comms, energy, & finance; now also IT, transportation, & water. www.businesswire.com/news/home/20... 051
Eric Geller @ericjgeller.com · 29/09/2026Amazing: "When asked about Paul's work on immigration and cybersecurity, Johnson said only that 'the good news is we have a president who's secured the border.'" www.politico.com/news/2026/09... 272
Eric Geller @ericjgeller.com · 29/09/2026The part I don't get is excitedly making your neat "CORRUPTION EXHIBIT A" poster board and then only flashing it in front of the witness for like two seconds. Be proud of your work! 0290
Eric Geller @ericjgeller.com · 29/09/2026"Two OpenAI employees said workers had raised concerns for months about potential safety issues with testing A.I. models, including not enough monitoring." www.nytimes.com/2026/09/29/t...nytimes.comOpenAI Ignored Employees’ Warnings About Safely Testing A.I. ModelsEmployees and security researchers said they had cautioned the company on safely testing its A.I. models and strengthening its corporate infrastructure, but OpenAI did not listen. 197
Eric Geller @ericjgeller.com · 29/09/2026Some of these guys like to travel, which is often when they get nabbed. I think the goal here is to get them to leave the game with the carrot before they slip up and get the stick. 000
Eric Geller @ericjgeller.com · 29/09/2026GAO has a new report about how agencies gave DOGE staffers vast access to sensitive data and largely refused to verify to GAO that proper security controls were in place. The most remarkable part is the agencies' displays of pique & rancor toward GAO for asking questions. www.gao.gov/assets/gao-2... 17536
Eric Geller @ericjgeller.com · 29/09/2026Not if they're in countries that refuse to cooperate with Western law enforcement. That's a big problem in this space. Not saying that's the case here — I don't know — but it often is. 110
Eric Geller @ericjgeller.com · 29/09/2026I can't remember the FBI ever issuing a video statement to a cybercrime gang before. Officials have delivered the same message (turn yourselves in before we find you ourselves) at press conferences, but this feels different. Maybe because it's personal. 1133
Eric Geller @ericjgeller.com · 29/09/2026"Other groups believed anonymity or their friends would protect them, and they were wrong," Brett Leatherman says. "Arrests have a way of changing who is willing to talk, and seized infrastructure has a way of showing us who’s left. The longer you stay in this, the more we learn about you." 142
Eric Geller @ericjgeller.com · 29/09/2026FBI publishes video addressed to the ShinyHunters gang that hacked it. Announcing recent arrest of alleged SH leader, FBI cyber division chief says, "You know how to find us, and we know how to find you. I suggest you reach out first while the choice is still yours." www.youtube.com/watch?v=bxLN...youtube.comFBI Announces ShinyHunters ArrestYouTube video by FBI – Federal Bureau of Investigation 93016
Eric Geller @ericjgeller.com · 29/09/2026"The memo ... instructed employees to remain vigilant at home and at work, report any unsolicited contacts or threats, avoid answering calls from unknown numbers and set up voice mail accounts with A.I.-generated voices." www.nytimes.com/2026/09/28/u... 081
Eric Geller @ericjgeller.com · 29/09/2026OpenAI has apologized to Australia over the autonomous hacks, saying it "should have shared preliminary findings sooner and kept Australian agencies updated as more facts emerged." It's promising to do better. "We intend to make this right." openai.com/index/how-we... 161
Eric Geller @ericjgeller.com · 29/09/2026I can see that. Thank you for maintaining high editorial standards for the crab corner. 010
Eric Geller @ericjgeller.com · 29/09/2026@rusty.todayintabs.com today in crabs submission www.yahoo.com/lifestyle/ar...yahoo.comFlorida Dog Comes Face-to-Face With a Crab Wielding a KnifeThis is 'peak Florida' energy. 140
Eric Geller @ericjgeller.com · 28/09/2026"[F]or many in China, those doomsday warnings feel remote and distinctly Western. The idea that the ruling Communist Party could lose control over a technology is almost unfathomable." www.nytimes.com/2026/09/27/w... 031
Eric Geller @ericjgeller.com · 28/09/2026TrendAI put out an interesting report recently about how super-niche AI tools in critical infrastructure are a security risk because they're not getting vetted with the level of scrutiny that major AI products receive. www.cybersecuritydive.com/news/ai-apps... 052
Eric Geller @ericjgeller.com · 28/09/2026Heads up for Citrix customers: CISA is amplifying the vendor's urgent warnings about a series of vulnerabilities in NetScaler security products. www.cisa.gov/news-events/... CISA says it has intelligence showing that "threat actors are actively exploiting these vulnerabilities globally."cisa.govCritical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway | CISA 084
Eric Geller @ericjgeller.com · 28/09/2026"The sheer number of incidents, which occurred in recent months in internal testing and the real world, indicates that the problem is orders of magnitude more complex than what is publicly known." www.axios.com/2026/09/26/o...axios.comScoop: Top AI companies probing tens of thousands of security incidentsThe massive scale of security incidents points to control problems for AI companies. 13014
Eric Geller @ericjgeller.com · 27/09/2026I don't know that we need another Skywalker Saga trilogy, but if Daisy Ridley's involved, I'm interested. www.hollywoodreporter.com/news/general...hollywoodreporter.com‘Star Wars’: Jon Watts to Direct Next Movie for LucasfilmSimon Kinberg is writing the new trilogy that is said to be next episodes of the Skywalker Saga. 11573
Eric Geller @ericjgeller.com · 26/09/2026OpenAI models reportedly tried to hack the Education Department's website and collected publicly available information from the Census Bureau and SEC websites. www.nytimes.com/2026/09/25/t...nytimes.comOpenAI’s A.I. Went Rogue and Meddled With U.S. Government WebsitesThe company did not learn until recently that its technology had meddled with websites for the Education and Commerce Departments and the Securities and Exchange Commission. 489
Eric Geller @ericjgeller.com · 25/09/2026"In the latest sign that artificial intelligence is fueling higher health care costs, a group of insurers released a report Thursday claiming that hospitals’ use of A.I. was responsible for nearly $1 billion in additional expenses over two years." www.nytimes.com/2026/09/24/b...nytimes.comBattle of Hospital A.I. vs. Insurer A.I. Is Pushing Medical Costs HigherThe use of artificial intelligence by hospitals and health insurers is escalating their longstanding feud over paying for medical care. 0166
Eric Geller @ericjgeller.com · 25/09/2026Andor at #32 on the NYT's list of the 100 best TV shows of the 21st century. I'll take it. www.nytimes.com/shared/v1/cl... 4402
Eric Geller @ericjgeller.com · 24/09/2026"[A]t a moment when the cost of living is rising faster than wages, many say the law has plunged Americans into financial uncertainty with the law’s cuts to programs that helped put food on the table and provide affordable health care." www.nytimes.com/2026/09/23/u... 096
Eric Geller @ericjgeller.com · 24/09/2026Now that's what I call a special relationship! www.politico.com/news/2026/09...politico.comWhite House asks OpenAI and Anthropic to hold new models from UK testers until US reviewU.K. leaders are calling for a shared set of global principles, even as the White House seeks first access to new models for testing. 061
Eric Geller @ericjgeller.com · 24/09/2026The FBI sure picked a great week to announce this. www.fbi.gov/news/press-r...fbi.govFBI Partners with Everfox to Deploy Advanced Insider Threat Protection Across FBI | Federal Bureau of InvestigationOn September 23, the FBI and Everfox, the global defense technology company delivering high-assurance cybersecurity solutions for mission-critical environments, announced the successful… 1130
Eric Geller @ericjgeller.com · 24/09/2026There's global interest in regulating AI to prevent models from wreaking havoc, but the U.S. and China aren't interested. Good story from @maggiemiller.bsky.social on what's happening at the U.N. this week: www.politico.com/news/2026/09...politico.comThe world wants to secure AI. It may have to try without the US.Proposals for global AI protections and guardrails abound this week at the U.N. General Assembly, but they can’t do much without the U.S. on board. 242
Eric Geller @ericjgeller.com · 24/09/2026In a report released this week, GAO said the FAA isn't doing enough to prevent hackers from interfering with aviation communications channels: www.gao.gov/assets/gao-2... 064
Eric Geller @ericjgeller.com · 24/09/2026Sens. Mark Warner and Ted Cruz have introduced a bill that would task agencies with creating voluntary cybersecurity best practices for the telecom sector. (It's unclear how voluntary recommendations would actually affect telecoms' behavior.) www.warner.senate.gov/wp-content/u... 131
Eric Geller @ericjgeller.com · 24/09/2026The plan and the DHS press release both emphasize the Trump administration's talking point that CISA strayed from its mission under the previous administration. There's also a line about DHS "consistently support[ing]" CISA's election security work, which feels ... pointed. 052
Eric Geller @ericjgeller.com · 24/09/2026CISA has released its election security plan for the midterms. It's nothing exciting: summaries of how election infrastructure works, what cyber/physical vulnerabilities exist, and what services CISA offers, plus a push for information sharing. www.cisa.gov/sites/defaul... 294
Eric Geller @ericjgeller.com · 24/09/2026More details on the FBI hack, as data samples confirm that the breach exposed employees working on electronic surveillance and hacking. www.nextgov.com/cybersecurit...nextgov.comStolen FBI data reveals employees’ roles in intelligence and surveillanceExposed analysts work on areas including China, Russia and electronic surveillance. ShinyHunters claimed responsibility for the breach this week. The FBI said it’s investigating. 063
Eric Geller @ericjgeller.com · 24/09/2026More incidents of OpenAI models autonomously hacking outside organizations, including a university in New Mexico, a data visualization website, and yet another Australian government agency: transluce.org/agent-activity (h/t NYT www.nytimes.com/2026/09/23/t... )transluce.orgEarly rogue AI agent activity and attempts to hack found on urlquery.netWe found evidence on urlquery that AI agents were active earlier than previously reported and attempted hacks against public data providers. 041
Eric Geller @ericjgeller.com · 24/09/2026Another day, another autonomous AI hack. This time, an OpenAI agent breached an Australian government website. Australia is disappointed and investigating. www.theguardian.com/australia-ne...theguardian.comAustralia launches investigation after OpenAI agent hacked healthcare databasePrime minister says he told Sam Altman he was disappointed it had taken OpenAI ‘way too long’ to disclose breach 063
Eric Geller @ericjgeller.com · 24/09/2026Wiz today announced a "Scan for Good" initiative to use AI to scan under-resourced critical infrastructure for vulnerabilities. It's already found problems in rail systems, hospitals, and vital online tech. www.wiz.io/blog/scan-fo... 071