Rory McCune

Yesterday I filmed several baby birds walking across a street directly at my camera and asked Bluesky to suggest music

Several dozen folks did

Some even dubbed music over the original clip.

I haven't been able to get this out of my head.

So I give you

A Bluesky exclusive:

Reservoir Ducks

🐣 🪶

Indeed my talk *should* have been recorded, so hopefully will be available soon :)

If you want to get your company shouted out on our socials, get an advert in our brochure, and get mentioned in both the opening and closing talks, please get in touch, we are always looking for more sponsors.

Obsidian 1.12 is now available to everyone!

- Obsidian CLI
- Bases search
- Image resizing
- Automatically clean up unused images
- Better copy/paste into rich text apps like Google Docs
- Native iOS share sheet

Picture of a shop front sign Couper Carpets of Cuper

@ministraitor.bsky.social not sure if you're coming across to Dundee for Securi-Tay but if so, you should see if you can get here, so we can have Cooper at Couper Carpets of Cuper!

Really looking forward to Securi-Tay from the Abertay Ethical Hacking Society tomorrow.

If you're there and interested in hearing what 20 years of speaking experience has taught me and how you can hopefully improve your next talk, I'm on at 11:30am in track 3!

securi-tay.co.uk/schedule

Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co. Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.

If you're using GCP and have enabled Gemini on any of your projects, this one is worth reading, as you may have some checking to do. trufflesecurity.com/blog/google-...

I see they're still using the Jags for this, I wonder what proportion of their sales Waymo's make up!

I had the chance to try these out in San Francisco last year, pleasantly surprised by how easy it was and also how well they handled chaotic traffic situations.

As the hardware price hikes start impacting server hosting costs, could be a good time to look out those old laptops and desktop you're hoarding (or that could just be me) and see if you can self-host!

A Look Ahead: Producer’s Letter from Tolero  Read more about the year ahead in Dungeons & Dragons Online in a new Producer’s Letter!

If you are returning to Dungeons & Dragons Online for our anniversary, make sure to read up on our plans for the year in our recently released Producer's Letter on DDO.com: https://www.ddo.com/news/ddo-producer-letter-feb-2026 #DDO

Looking forward to the conf. BTW the date on the sessionize page is right, but on that one (kcd.ist/cfp/) it's got the CFP close as Feb 16.

Cloud Native Rejekts Europe 2026 Sat, March 21, 2026

🚨 This is not a drill!!! 🚨

The tickets for Cloud Native Rejekts are available NOW! 😮

We can't wait to see you all in Amsterdam! 🇳🇱

pretix.eu/rejekts/reje...

There's definitely a lot of new tooling options coming along, although for me a standard dedicated VM for the agent and possibly a scratch VM for doing testing work cover a lot of what's needed and are pretty well understood options from a threat mode/isolation perspective.

I've not written it up yet (I probably should) but yeah for running on hosts, I'd be carefully watching it, definitely no YOLO mode.

For agentic development where I'm letting it do the work I use a dedicated agent VM which only has the code + access to a blank VM for testing.

@averagemarcus.bsky.social getting started on his talk at @containerdays.bsky.social

Tech impersonators: ClickFix and MacOS infostealers | Datadog Security Labs Datadog identified an active campaign employing fake GitHub repositories impersonating software companies and leveraging the ClickFix initial access technique to deliver macOS infostealers.

Tech impersonators: ClickFix and MacOS infostealers

securitylabs.datadoghq.com/articles/tec...

Voucher redemption :: ContainerDays & MCPconference London 2026

ContainerDays London is THIS WEEK! 🎉 And I have a ✨ free ✨ ticket code to give away!

If you can make it, but don't have a ticket, grab one for FREE with the following link: pretix.eu/docklandmedi...

wow didn't expect something like this for heroku!

If Bilbo had Chat GPT

OpenSSL January 2026 Security Update: CMS and PKCS#12 Buffer Overflows | Datadog Security Labs A deep dive into OpenSSL’s January 2026 CMS and PKCS#12 vulnerabilities, including a pre-auth stack overflow and a PKCS#12 parsing bug.

Want a clear analysis of the latest OpenSSL CMS/PKCS#12 vulnerabilities and their real-world impact? Our post explains the conditions required for exploitation and how to evaluate practical risk in your environment.
securitylabs.datadoghq.com/articles/ope...

Introducing IDE-SHEPHERD: Your shield against threat actors lurking in your IDE | Datadog Security Labs IDE-SHEPHERD is an open-source IDE security extension that provides real-time monitoring and protection for VS Code and Cursor. It intercepts malicious process executions, monitors network activity, a...

IDEs are the new browser: massive attack surface, privileged access to various things, and lots of “just trust it.” Today the Security Research Team at Datadog dropped IDE-SHEPHERD: a tool that watches extensions at runtime and blocks dangerous behavior.

securitylabs.datadoghq.com/articles/ide...

THE WAIT IS OVER!

CFP is finally live 💣 💥

Lessons learned, things that broke, things that worked.... Bring'em all to the stage.

Here is the link:

sessionize.com/kcd-istanbul...

#cfp #community #event #kubernetes #cncf

Yes, I was replying to Jarno and agreeing with you... not sure why you would read that differently :)

I'd say it somewhat depends on your route into the field. My degree is accountancy, but I went to IT first then to security . The Big-4 in the early 2000's hired a load of non IT grads and trained them up, many of those people are now senior in Infosec/cyber roles.

Do you have a KubeCon proposal that didn't get accepted? The CFP for Cloud Native Rejekts Amsterdam is still open, until January 17!

Submit!!! ᕕ(ᐛ)ᕗ

sessionize.com/cloud-native...

Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8554 | Datadog Security Labs A look at how Kubernetes CVE-2020-8554 works

I've been meaning to write more about "the unpatchable 4", which are a set of Kubernetes CVEs for which there are no patches, you need to mitigate them with configuration or architecture choices.

First up is CVE-2020-8554.

securitylabs.datadoghq.com/articles/unp...

Security BSides Dublin : #BSidesDUB #BSidesDublin Security BSides Dublin is an Information Security conference, by the community, for the community. Follow: @BSidesDublin

📢#BsidesDublin2026 - 23/05/26📢

Mark those calendars. We are back with #BsidesDublin2026 on the 23 May 2026 in Trinity Business School, Trinity College, Dublin 2.

#earlyBird tickets on sale 10am 13th January 🥳
www.bsidesdub.ie/tickets.php

Merry Christmas and Happy New Venue! Santa has been very kind to us and we're genuinely stoked to announce that Hack Glasgow 2026 will be hosted on Saturday 15th August at the Citizens Theatre!

You’ll hear more from us in the new year but for now, go tan that last mince pie.

Here we, here we…
HG x

Klustered '26 - Live Kubernetes Debugging Competition Where Kubernetes clusters meet their ultimate challenge. Watch experts debug sabotaged clusters live, with real chaos and no safety nets. Sign up to compete or spectate.

Can I temp anyone to a new season of Klustered?