Sign in

Greg Otto

@gregotto.bsky.social
5.6K followers 501 following 1K posts

@gregotto from twitter, now on bluesky. Editor-in-Chief at CyberScoop. Host of Safe Mode. Better with words than I am with code.

PostsRepliesMedia
Greg Otto @gregotto.bsky.social · 13/10/2026
cant imagine why this company is filing for bankruptcy protection!!!!!!
a search for laptop farms on Getty Images gives me farmers holding a laptop on actual farmland
150
Greg Otto @gregotto.bsky.social · 13/10/2026
A representative of CYPFER, the company that Ed Dubrovsky (guy arrested allegedly in connection with ShinyHunters) worked for from 2022-2025, emailed to dispute the role he had listed on his LinkedIn page in connection with the company
"In response to recent reports associating Edward Dubrovsky with CYPFER, the company clarifies that Mr. Dubrovsky served as a Managing Director from May 2022 through December 2025, at which time he left the firm. Mr. Dubrovsky has had no affiliation, operational role or relationship with CYPFER since that time, and contrary to certain reporting, was never a founder or co-founder of the company.

CYPFER remains steadfastly committed to the highest standards of integrity, ethical business practices and federal-grade governance across all global operations, continuing our mission to protect and defend our clients worldwide."
143
Greg Otto @gregotto.bsky.social · 29/09/2026
cursory prompt check on america dot gov
Questions i asked america dot gov hoping it would tell me what the model is. Prompted like i was writing an academic paper, and just throwing out stuff to see if i could test the model.Questions i asked america dot gov hoping it would tell me what the model is. Prompted like i was writing an academic paper, and just throwing out stuff to see if i could test the model.Questions i asked america dot gov hoping it would tell me what the model is. Prompted like i was writing an academic paper, and just throwing out stuff to see if i could test the model.
030
Greg Otto @gregotto.bsky.social · 26/09/2026
You argue about alignment. I fix mine. We are not the same.
120
Greg Otto @gregotto.bsky.social · 24/09/2026
This is symphonic
033
Greg Otto @gregotto.bsky.social · 17/09/2026
The fact I got this as a push alert could explain a lot imo
A LinkedIn push alert that says I would be a top applicant for Anthropic’s head of vulnerability disclosure and security community position (I am not qualified for this)
050
Greg Otto @gregotto.bsky.social · 10/09/2026
Lmao @hultquist.bsky.social did it again folks
Terminator coming out of the computer
040
Greg Otto @gregotto.bsky.social · 10/09/2026
Breathtaking stupidity wrapped in hubris
031
Greg Otto @gregotto.bsky.social · 31/08/2026
Highlighting this part of @timstarks.bsky.social's article because its worth calling out
The pilot program, featuring collaboration between federal and state governments, stands in contrast to how the Biden administration tried to tackle the issue, with audit requirements that some GOP states challenged in court, forcing Biden’s Environmental Protection Agency to withdraw its rule.

“For too long, at least on the federal level, the government has admired the problem of cybersecurity in water systems,” Cairncross said. “We are going to find out what works. We’re going to target that, and we are going to scale off of this and learn lessons.”
010
Greg Otto @gregotto.bsky.social · 26/08/2026
ITS 2026!!!!!!!!!!
131
Greg Otto @gregotto.bsky.social · 26/08/2026
Rockstar finally acknowledges the leaks in a post on the other site
000
Greg Otto @gregotto.bsky.social · 20/08/2026
That's right
120
Greg Otto @gregotto.bsky.social · 24/07/2026
010
Greg Otto @gregotto.bsky.social · 05/07/2026
Just started this book and the intro is one of the best pieces of investigative journalism I’ve read. I won’t spoil it beyond it being the real-life story of one of his most notable songs. It hit me like a freight train. Kudos @jeffpearlman.bsky.social
Jeff Perlman’s Only God Can Judge Me, biography of Tupac Shakur
010
Greg Otto @gregotto.bsky.social · 22/06/2026
oprah-see-i-told-you dot gif

Shashank Joshi -- 
An update. A US official tells me that Sen. Warner misunderstood the NSA director Gen. Rudd in this case. Rudd did use the 'hours, not weeks' wording, but the use of Mythos in this context was—as widely assumed—part of a red-teaming effort, i.e. testing the security of internal networks. The official also told me that the agency's red-teams no longer have access to Mythos, because their authority for accessing it was under Project Glasswing.
021
Greg Otto @gregotto.bsky.social · 21/06/2026
Case in point to my personal opinion quip: this is blowhard behavior. Won’t totally name-and-shame (not like it’s hard to search it out) but this is a person who has no idea what they are talking about
2121
Greg Otto @gregotto.bsky.social · 21/06/2026
The author gets it
1101
Greg Otto @gregotto.bsky.social · 21/06/2026
Seeing a lot of people freak out about the Warner-Rudd exchange in The Economist. Someone on the other app explained it well.
1235
Greg Otto @gregotto.bsky.social · 11/06/2026
The list is incredible if you can find it. I won’t spoil it all
Yep that’s a trading card with Anthony hopkins and Richard Nixon
110
Greg Otto @gregotto.bsky.social · 09/06/2026
Adaptive Security is behind this. The intro video is pitch perfect
2105
Greg Otto @gregotto.bsky.social · 09/06/2026
I swear on my life i just got this in my inbox, it is real
A marketing still featuring Conan O'Brien teaching cybersecurity
5184
Greg Otto @gregotto.bsky.social · 08/06/2026
Tag yourself I’m the two-lane grass-road bridge over what I’m assuming the tidal basin
Ai slop
110
Greg Otto @gregotto.bsky.social · 29/05/2026
🤬🤬🤬🤬🤬🤬🤬🤬🤬🤬 CC @brianphillips.lol
An absolutely ridiculous AI slop CAPTCHA i just got on ebay
030
Greg Otto @gregotto.bsky.social · 20/05/2026
120
Greg Otto @gregotto.bsky.social · 19/05/2026
Team PCP is Wemby, Open Source Maintainers are Chet, and they are getting dunked on with Mini Shai-Hulud
010
Greg Otto @gregotto.bsky.social · 22/03/2026
Dead serious: If anyone out there witnessed this, slide into my DMs
A Reddit post that says a talk at BSides SF was wildly misogynistic.
2135
Greg Otto @gregotto.bsky.social · 19/03/2026
Finally, a City partner that can encrypt the financial data faster than the Prem auditors can read it
An announcement that N-able has partnered with Man City. Manchester is red, btw.
010
Greg Otto @gregotto.bsky.social · 12/03/2026
Trying to gather string for Stryker coverage and was talking to a non-cybersecurity source
Got called a nerd using a uncle baby Billy pic
170
Greg Otto @gregotto.bsky.social · 09/03/2026
I get emails
A subject line that reads: AI Is Fuelling A Surge In UK Reports of Witchcraft And Satanic Rituals
091
Greg Otto @gregotto.bsky.social · 11/02/2026
This is/was a great one
cover of Funk Flex/Big Kap The Tunnel CD
010
Greg Otto @gregotto.bsky.social · 03/02/2026
Lord bring your bounty
Temps for Feb 10, 11, 12 above 40, 12th showing 57 degrees
031
Greg Otto @gregotto.bsky.social · 02/02/2026
looking for a photo for an election security today and, uh, i guess @patrick.risky.biz is running for office in germany???????????????
A guy who looks like Patrick Gray
120
Greg Otto @gregotto.bsky.social · 14/01/2026
This paragraph gets to the particular matter of what i'm talking about. The reporter's tradecraft is put on display here. If those devices on which she conducted the work is seized, and at the disposal of the federal goverment's digital forensics capabilities, sources can be 100% be discovered.
220
Greg Otto @gregotto.bsky.social · 26/12/2025
Another Vince Gilligan season finale
010
Greg Otto @gregotto.bsky.social · 10/12/2025
020
Greg Otto @gregotto.bsky.social · 10/12/2025
Thinkin bout a homemade hot chicken pop tart
0110
Greg Otto @gregotto.bsky.social · 03/12/2025
I am just doing the dumbest stuff on the internet
100
Greg Otto @gregotto.bsky.social · 02/12/2025
GO AWAY
This dumb block on Google Chrome that wants to you prompt its AI for a sloptastic answer about the website you are reading
040
Greg Otto @gregotto.bsky.social · 19/11/2025
Ah @cyberwarcon.bsky.social the only conference for intel ops research authored by the terminally online
37313
Greg Otto @gregotto.bsky.social · 14/11/2025
NEW: @derekbjohnson.bsky.social spoke with @anthropic.com's threat intel team about Thursday's report. Lots in there, but one key takeaway: Despite being labeled as 'autonomous,' there was a tremendous amount of human effort needed to pull off the attacks. cyberscoop.com/anthropic-ai...
However, Klein also made it clear that “most autonomous” is a relative term. There is plenty of evidence to indicate this hacking group devoted significant human and technical resources into the way it used Claude.

Namely, the automation detailed in Anthropic’s report performed by Claude was made possible through a frontend framework designed to orchestrate and support its operations. The framework handled tasks such as scripting, provisioning related servers, and significant backend development to ensure every step was followed correctly. Klein noted this development process was the most difficult — and, importantly, human-led — step in the operation.  

“The first part that is not autonomous is building the framework, so you needed a human being to put this all together,” Klein said. “You had a human operator that would put in a target, they would click a button and then use this framework that was created [ahead of time]. The hardest part of this entire system was building this framework, that’s what was human intensive.”
0197
Greg Otto @gregotto.bsky.social · 28/10/2025
Guess we are asking too much of DHS to have contractors refer to its subagencies by their correct title
Cybersecurity and Information Security Agency is listed, which is the wrong title
260
Greg Otto @gregotto.bsky.social · 06/10/2025
041
Greg Otto @gregotto.bsky.social · 06/10/2025
I get that enterprise patch/vuln management is more than just clicking "update now" but 2010???? Do better, everyone
List of CVEs from CISA KEV list, starting with two from 2010, two from 2011, and one from 2013
030
Greg Otto @gregotto.bsky.social · 03/10/2025
The cyber girlies are fighting in the chats
010
Greg Otto @gregotto.bsky.social · 02/10/2025
🤔🤔🤔
CISA KEV email that has CVEs from 2015 and 2017.
000
Greg Otto @gregotto.bsky.social · 16/09/2025
Meanwhile, i will be having several conversations with several people about that insignia on that tie
Kash Patel wearing a tie with the Liverpool FC logo on it
210
Greg Otto @gregotto.bsky.social · 15/09/2025
All the fun spots in NoVa are built exactly like this
110
Greg Otto @gregotto.bsky.social · 22/08/2025
Hell yeah
152
Greg Otto @gregotto.bsky.social · 20/08/2025
Gotta give it to this PR flack who was so excited to talk trash to me that he forgot to address the email to me by first name 😂
An email to me where a PR flack says Philly sports suck but Jalen Hurts is good
120
Greg Otto @gregotto.bsky.social · 07/08/2025
My four-year-old self is losing my mind
050