Cynthia Brumfield
@metacurity.com
DC resident and cybersecurity writer, analyst, book author, publisher. https://metacurity.com/ https://cyberriskbook.com/
https://www.csoonline.com/profile/cynthia-brumfield/ https://infosec.exchange/@metacurity
Send tips to Cynthia.507 via Signal.
https://www.csoonline.com/profile/cynthia-brumfield/ https://infosec.exchange/@metacurity
Send tips to Cynthia.507 via Signal.
Pinned
Cyberattack on a critical third-party vendor could expose top banks' customer data
An insider shared internal CrowdStrike screenshots on Telegram, Hackers stole Salesforce-stored data from 200+ companies, DOGE has purportedly disbanded, Harvard is the latest Ivy to get hacked, AI mo...
www.metacurity.com
Check out today's Metacurity for a ton of critical infosec developments you might have missed over the weekend, including
--Cyberattack on a critical third-party vendor could expose top banks' customer data, 1/4
www.metacurity.com/cyberattack-...
--Cyberattack on a critical third-party vendor could expose top banks' customer data, 1/4
www.metacurity.com/cyberattack-...
Reposted by Cynthia Brumfield
What does he do all day?
Speaker 'barely holding it together' and 'crushed by his workload': NYT
Speaker 'barely holding it together' and 'crushed by his workload': NYT
House Speaker Mike Johnson (R-La.) made several revealing admissions about the stressful and chaotic nature of his job, according to a recent New York Times report.The Times' Annie Karni wrote in a Wednesday article that Johnson turned what was meant to be an easy interview with a friendly podcast h...
bit.ly
November 27, 2025 at 12:55 PM
What does he do all day?
Yes indeed. Trump has made them active targets. In my neighborhood, they invoke instant disdain.
"Before the shooting, some officials and National Guard members worried about the safety of troops that the Trump administration had deployed in American cities."
www.nytimes.com/live/2025/11...
"Before the shooting, some officials and National Guard members worried about the safety of troops that the Trump administration had deployed in American cities."
www.nytimes.com/live/2025/11...
Live Updates: D.C. Shooting Suspect Worked With C.I.A.-Backed Units in Afghanistan, Officials Say
www.nytimes.com
November 27, 2025 at 1:48 PM
Yes indeed. Trump has made them active targets. In my neighborhood, they invoke instant disdain.
"Before the shooting, some officials and National Guard members worried about the safety of troops that the Trump administration had deployed in American cities."
www.nytimes.com/live/2025/11...
"Before the shooting, some officials and National Guard members worried about the safety of troops that the Trump administration had deployed in American cities."
www.nytimes.com/live/2025/11...
Reposted by Cynthia Brumfield
publishing this at 8:30pmPST the night before thanksgiving was a choice
openai.com/index/mixpan...
openai.com/index/mixpan...
What to know about a recent Mixpanel security incident
OpenAI shares details about a Mixpanel security incident involving limited API analytics data. No API content, credentials, or payment details were exposed. Learn what happened and how we’re protectin...
openai.com
November 27, 2025 at 5:00 AM
publishing this at 8:30pmPST the night before thanksgiving was a choice
openai.com/index/mixpan...
openai.com/index/mixpan...
Reposted by Cynthia Brumfield
I can’t we’re in like day four of the “was a openly racist sixty year old also a racist when he was younger?” discourse
November 27, 2025 at 9:41 AM
I can’t we’re in like day four of the “was a openly racist sixty year old also a racist when he was younger?” discourse
Reposted by Cynthia Brumfield
Who remembers www.independent.co.uk/news/world/e...
Nigel Farage to address far-right rally in Germany
Former Ukip leader accepts invitation by the granddaughter of Hitler's finance minister, Beatrix von Storch, to speak at Spandau Citadel in Berlin
www.independent.co.uk
November 26, 2025 at 7:44 PM
Who remembers www.independent.co.uk/news/world/e...
Reposted by Cynthia Brumfield
i’m sorry what the fuck are you tryna sell me?
November 26, 2025 at 7:29 PM
i’m sorry what the fuck are you tryna sell me?
Reposted by Cynthia Brumfield
I concur.
very odd that the Post would write up someone’s speciation as if it’s news. What are we doing here
November 26, 2025 at 11:39 PM
I concur.
www.tiktok.com/t/ZTrj43PQ6/
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
I’m never not thinking about @Julie Benko in funny girl. #masterit #broadwaymusicals #actorslife #musicaltheatre #theatrekid
TikTok video by Douglas Goodhart
www.tiktok.com
November 26, 2025 at 10:21 PM
www.tiktok.com/t/ZTrj43PQ6/
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
At one point I got to know musical theater nerds in the making.
If you have too, this is very funny.
Reposted by Cynthia Brumfield
No matter how long I live after we get through this dark chapter, I will never get over the immorality, the amorality, the corruption, the criminality and the cruelty in service to one of the worst humans to ever walk the earth.
November 26, 2025 at 1:13 AM
No matter how long I live after we get through this dark chapter, I will never get over the immorality, the amorality, the corruption, the criminality and the cruelty in service to one of the worst humans to ever walk the earth.
Reposted by Cynthia Brumfield
If the devil picked up a pen to design a “peace plan” that guarantees 🇷🇺’s appetite for war grows from large to unquenchable, step 1 would be: force 🇺🇦 to cede territory before a ceasefire.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
November 26, 2025 at 7:35 PM
If the devil picked up a pen to design a “peace plan” that guarantees 🇷🇺’s appetite for war grows from large to unquenchable, step 1 would be: force 🇺🇦 to cede territory before a ceasefire.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
Everyone with a brain knows preemptive concessions don’t end aggression, they expand it.
Reposted by Cynthia Brumfield
Update: West Virginia Gov. Patrick Morrisey initially announced on X that both Guard members had died.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
Two National Guard members injured in shooting near White House
Police said a suspect is in custody and the investigation is ongoing.
www.axios.com
November 26, 2025 at 9:33 PM
Update: West Virginia Gov. Patrick Morrisey initially announced on X that both Guard members had died.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
But 20 minutes later he said he was receiving "conflicting reports" about the Guard members' condition.
Reposted by Cynthia Brumfield
Look kids! It’s Ask Jeeves! Over here Jeeves!
November 26, 2025 at 8:26 PM
Look kids! It’s Ask Jeeves! Over here Jeeves!
Reposted by Cynthia Brumfield
man this just fucking sucks
this never should have happened, they never should have been there
this never should have happened, they never should have been there
NEW: The governor of West Virginia says that two members of the state National Guard shot today in DC have died.
November 26, 2025 at 8:57 PM
man this just fucking sucks
this never should have happened, they never should have been there
this never should have happened, they never should have been there
Reposted by Cynthia Brumfield
2 kids who should never have been sent to DC and who likely did not want to be there are dead bc of a political stunt. Regardless of the proximate reasons these deaths happened, the ultimate outcome will be days of right wing rage followed by worse decisions that put more people at risk.
NEW: The governor of West Virginia says that two members of the state National Guard shot today in DC have died.
November 26, 2025 at 8:55 PM
2 kids who should never have been sent to DC and who likely did not want to be there are dead bc of a political stunt. Regardless of the proximate reasons these deaths happened, the ultimate outcome will be days of right wing rage followed by worse decisions that put more people at risk.
Reposted by Cynthia Brumfield
I think that it is bad that the National Guard is deployed in a city for absolutely no reason and today's tragedy could be easily avoided by not deploying the guard for made-up reasons.
November 26, 2025 at 8:56 PM
I think that it is bad that the National Guard is deployed in a city for absolutely no reason and today's tragedy could be easily avoided by not deploying the guard for made-up reasons.
Reposted by Cynthia Brumfield
“They should do it the right way”
November 26, 2025 at 8:18 PM
“They should do it the right way”
Reposted by Cynthia Brumfield
Almost certainly a targeted attack at two people who had basically nothing to do with the moment and would have preferred to be home with their families. Compounded tragedy.
NEW: The governor of West Virginia says that two members of the state National Guard shot today in DC have died.
November 26, 2025 at 8:52 PM
Almost certainly a targeted attack at two people who had basically nothing to do with the moment and would have preferred to be home with their families. Compounded tragedy.
Here’s the latest.
www.nytimes.com
November 26, 2025 at 7:59 PM
Reposted by Cynthia Brumfield
Microsoft announced to all its FTEs this same lie that they should buy a different router than tp-link.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
this.weekinsecurity.com/banning-tp-l...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
While @zackwhittaker.com notes that the WSJ covered this story as far back as December 2024, I covered it three months earlier in September 2024 when the rumblings of a ban began, based on zero evidence.
www.csoonline.com/article/3504...
Banning TP-Link won't save America from its own terrible cybersecurity
TP-Link routers face a ban in the U.S. over the company's alleged links to China, but shoddy cybersecurity is the real insider threat to the United States.
this.weekinsecurity.com
November 26, 2025 at 5:39 PM
Microsoft announced to all its FTEs this same lie that they should buy a different router than tp-link.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
When I asked them what they recommended instead?
They said Asus.
For the record: Asus routers have had more reported vulns than tplink in the last decade.
Put that in you pipe and smoke it.
Reposted by Cynthia Brumfield
NEW: Myanmar has made a big show of destroying the notorious KK Park scam compound—even publishing a video of a steamroller driving over thousands of phones
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
The Destruction of a Notorious Myanmar Scam Compound Appears to Have Been ‘Performative’
Myanmar’s military has been blowing up parts of the KK Park scam compound. Experts say the actions are likely for show.
www.wired.com
November 26, 2025 at 5:11 PM
NEW: Myanmar has made a big show of destroying the notorious KK Park scam compound—even publishing a video of a steamroller driving over thousands of phones
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda
Reposted by Cynthia Brumfield
NEW: A trivial-to-exploit bug in jury systems used across the United States exposed jurors' sensitive personal data, such as full names, date of birth, emails, cell phone numbers, and home addresses — and potentially health data.
The bug allowed anyone to brute-force and access jurors' accounts.
The bug allowed anyone to brute-force and access jurors' accounts.
Bug in jury systems used by several US states exposed sensitive personal data | TechCrunch
An easy-to-exploit vulnerability in a jury system made by Tyler Technologies exposed the personally identifiable data of jurors, including names, home addresses, emails, and phone numbers.
techcrunch.com
November 26, 2025 at 4:18 PM
NEW: A trivial-to-exploit bug in jury systems used across the United States exposed jurors' sensitive personal data, such as full names, date of birth, emails, cell phone numbers, and home addresses — and potentially health data.
The bug allowed anyone to brute-force and access jurors' accounts.
The bug allowed anyone to brute-force and access jurors' accounts.
Reposted by Cynthia Brumfield
New from me: House lawmakers have called on Anthropic CEO Dario Amodei to testify next month on how Chinese hackers used Claude Code to automate most of a wide-reaching cyberespionage campaign.
More on @axios.com: www.axios.com/2025/11/26/a...
More on @axios.com: www.axios.com/2025/11/26/a...
Exclusive: Anthropic CEO called to testify before Congress about Chinese AI cyberattack
The request comes weeks after Anthropic said China used Claude Code in an espionage campaign.
www.axios.com
November 26, 2025 at 4:47 PM
New from me: House lawmakers have called on Anthropic CEO Dario Amodei to testify next month on how Chinese hackers used Claude Code to automate most of a wide-reaching cyberespionage campaign.
More on @axios.com: www.axios.com/2025/11/26/a...
More on @axios.com: www.axios.com/2025/11/26/a...
Reposted by Cynthia Brumfield
Pretty ominous: the brilliant @hopeseck.bsky.social reports in @militarytimes.bsky.social on the counterintelligence challenges posed by the government shutdown — particularly opportunistic overtures issued by foreign intelligence services to U.S. Army soldiers. www.militarytimes.com/news/your-mi...
Foreign agents preying on disgruntled soldiers, Army intel chief warns
The 43-day government shutdown has presented a particular opportunity for enemies to influence frustrated and disaffected Army personnel.
www.militarytimes.com
November 26, 2025 at 2:48 PM
Pretty ominous: the brilliant @hopeseck.bsky.social reports in @militarytimes.bsky.social on the counterintelligence challenges posed by the government shutdown — particularly opportunistic overtures issued by foreign intelligence services to U.S. Army soldiers. www.militarytimes.com/news/your-mi...
Reposted by Cynthia Brumfield
the utter moral rot of these people compared to the maternal fear of this woman trying to protect her son from the brutal conditions she’s facing.
November 26, 2025 at 2:33 PM
the utter moral rot of these people compared to the maternal fear of this woman trying to protect her son from the brutal conditions she’s facing.
Reposted by Cynthia Brumfield
how does a bubble work
November 26, 2025 at 10:38 AM
how does a bubble work