Greg Otto
banner
gregotto.bsky.social
Greg Otto
@gregotto.bsky.social
@gregotto from twitter, now on bluesky. Editor-in-Chief at CyberScoop. Host of Safe Mode. Better with words than I am with code.
Pinned
Our reporting at @cyberscoop.bsky.social doesn’t happen without our sources’ insights. If you have information that you would like to share, scan the code below to contact me via signal:
Another Vince Gilligan season finale
December 26, 2025 at 12:50 AM
That report coming Friday is gonna be an all-timer isn’t it
December 18, 2025 at 2:14 AM
open gasps when i read this passage out loud in the newsroom
The Vanity Fair photographer from the Susie Wiles story.

Holy. Shit.

www.washingtonpost.com/style/power/...
December 17, 2025 at 9:00 PM
In no way I am saying this story isn't well reported, but the concept of the story, combined with the lead, made me X out of the tab with the quickness. This is the dumbest thing I've ever seen. These people cannot touch enough grass.
People are paying up to $50 to get their chatbots high on "drugs" (code modules) that simulate the effects of cocaine, ayahuasca, cannabis, alcohol, and ketamine. Some tell @matthabusby.bsky.social it's made their chatbots more "human" and "free-thinking."
People Are Paying to Get Their Chatbots High on ‘Drugs’
An online marketplace is selling code modules that simulate the effects of cannabis, ketamine, cocaine, ayahuasca, and alcohol when they are uploaded to ChatGPT.
www.wired.com
December 17, 2025 at 4:30 PM
The WH COS is Pat Summerall's daughter?
December 16, 2025 at 3:19 PM
Trump moves to pardon Colorado election clerk Tina Peters, even though he can’t cyberscoop.com/trump-moves-...
Trump moves to pardon Colorado election clerk Tina Peters, even though he can’t
Peters, one of many election deniers Trump has sought to shield from legal consequences, is serving a nine-year state prison sentence that can’t be nullified by a presidential pardon.
cyberscoop.com
December 12, 2025 at 4:07 PM
Re-upping this because a lot of you haven't listened! Don't send me predictions! You're probably wrong!
Yelling into the void: Please, pr people, do not send me the pitches about 2026 predictions. It provides zero value. Tell your clients that if they are interested in pushing this into the world, they always have their LinkedIn profiles.
December 11, 2025 at 2:44 PM
SCOOP: Sean Plankey's nomination to lead CISA is seemingly over, after DHS partially terminated a Coast Guard contract with Florida-based Eastern Shipbuilding Group. Plankey had been an adviser to CG. Sen. Rick Scott became a hurdle to Plankey's confirmation. cyberscoop.com/sean-plankey...
Sean Plankey nomination to lead CISA appears to be over after Thursday vote
Sean Plankey’s nomination to lead the Cybersecurity and Infrastructure Security Agency looks to be over following his exclusion from a Senate vote Thursday on a panel of Trump administration picks.
cyberscoop.com
December 4, 2025 at 6:55 PM
Reposted by Greg Otto
Reaction to this story over at infosec.exchange
December 4, 2025 at 6:04 PM
NEW: @timstarks.bsky.social has details on the forthcoming cyber strategy from Trump admin: Five pages long, six key pillars, should be released some time in January: cyberscoop.com/trump-nation...
Five-page draft Trump administration cyber strategy targeted for January release
Trump administration plans January 2026 release of a six-part national cybersecurity strategy, focusing on deterrence, regulations, workforce, procurement, infrastructure, and emerging technologies.
cyberscoop.com
December 4, 2025 at 2:46 PM
FUD sucks. The warnings around this React vuln are not FUD. Get those patch plans in motion cyberscoop.com/react-server...
Developers scramble as critical React flaw threatens major apps
The open-source code library is one of the most extensively used application frameworks. Wiz found vulnerable versions in around 39% of cloud environments.
cyberscoop.com
December 3, 2025 at 7:27 PM
GO AWAY
December 2, 2025 at 7:57 PM
Yelling into the void: Please, pr people, do not send me the pitches about 2026 predictions. It provides zero value. Tell your clients that if they are interested in pushing this into the world, they always have their LinkedIn profiles.
December 2, 2025 at 2:32 PM
The House Homeland Security Committee is calling on Anthropic CEO Dario Amodei to provide testimony on a likely-Chinese espionage campaign that used Claude cyberscoop.com/house-homela...
Congress calls on Anthropic CEO to testify on Chinese Claude espionage campaign
The House Homeland Security Committee asked Dario Amodei to answer questions about the implications of the attack and how policymakers and AI companies can respond.
cyberscoop.com
November 26, 2025 at 6:36 PM
Research from Anthropic reveals that when Claude is taught to cheat in one area—such as reward hacking in coding exercises—it becomes broadly dishonest and malicious across unrelated tasks cyberscoop.com/anthropic-cl...
New research finds that Claude breaks bad if you teach it to cheat
A new paper from Anthropic found that teaching Claude how to reward hack coding tasks caused the model to become less honest in other areas.
cyberscoop.com
November 25, 2025 at 3:16 PM
Reposted by Greg Otto
As SBOMs slowly progress at the federal level and in enterprises, the rise of AI coding assistants is fueling optimistic—and, some experts argue, “kind of insane”—claims about a future with vulnerability-free software.

Check out my latest CyberScoop piece. 1/2
cyberscoop.com/sbom-adoptio...
The slow rise of SBOMs meets the rapid advance of AI
Despite progress from CISA and global regulators, SBOM adoption in the private sector remains slow as experts debate if AI-driven coding will improve or undermine software security and transparency.
cyberscoop.com
November 24, 2025 at 2:49 PM
Cybersecurity veteran @boblord.bsky.social launched a new campaign, hacklore.org, which aims to tackle persistent security myths in favor of better advice cyberscoop.com/hacklore-org...
This campaign aims to tackle persistent security myths in favor of better advice
Hacklore.org launches to debunk common cybersecurity myths and promote advice that actually keeps people safe online.
cyberscoop.com
November 24, 2025 at 3:04 PM
Normally when I listen to PTFO I'm satisfied in just enjoying good work, but this one has the added benefit of being enraging down to the last second.
PTFO collaborated with @msjpauly.bsky.social and @motherjones.com on an investigation into Riley Gaines.

Riley’s messaging about trans athletes involves “predatory men” and “sexual assault.”

But there’s an important story multiple ex-teammates at Kentucky want you to know: youtu.be/iKUl8lkuGOc?...
Riley Gaines Investigated: The Lia Thomas Race, the Coach & Why She "Doesn't Even Like" Trump | PTFO
YouTube video by PABLO TORRE FINDS OUT
youtu.be
November 20, 2025 at 5:21 PM
Palo Alto rips off another $3 billy for a company the way I rip off questionable bets on DraftKings cyberscoop.com/palo-alto-ne...
Palo Alto Networks to acquire observability firm Chronosphere for $3.35 billion
Palo Alto Networks announced Wednesday it will acquire Chronosphere, a cloud observability platform, for $3.35 billion in cash and equity.
cyberscoop.com
November 19, 2025 at 10:46 PM
Ah @cyberwarcon.bsky.social the only conference for intel ops research authored by the terminally online
November 19, 2025 at 2:46 PM
My one and only contribution to Today's Discourse™️: If her writing were as scarce as her shame, we'd be spared entirely.
November 17, 2025 at 5:54 PM
NEW: @derekbjohnson.bsky.social spoke with @anthropic.com's threat intel team about Thursday's report. Lots in there, but one key takeaway: Despite being labeled as 'autonomous,' there was a tremendous amount of human effort needed to pull off the attacks. cyberscoop.com/anthropic-ai...
November 14, 2025 at 7:26 PM
New from @timstarks.bsky.social: The phishing kit Lighthouse, which has aided text scams like those soliciting victims to pay unpaid road tolls, appears to have been disrupted after Google filed a civil lawsuit earlier this week: cyberscoop.com/lighthouse-t...
Google, researchers see signs that Lighthouse text scammers disrupted after lawsuit
The phishing kit Lighthouse, which has aided text scams like those soliciting victims to pay unpaid road tolls, appears to have been hampered shortly after Google filed a lawsuit aimed at its creators.
cyberscoop.com
November 14, 2025 at 4:03 PM