Patrick C Miller

@patrickcmiller@infosec.exchange

Critical Infrastructure & Industrial Security Advisor. Recovering regulator. Airport dweller. #PDX-based. @ampyxcyber President and CEO. CCI US Coordinator. @beerisac coin 001. #ICS #OT #NERCCIP #NIST #TSASD #DHSCPG #IEC62443

Website: https://www.patrickcmiller.com/
Company: https://www.ampyxcyber.com/
LinkedIn: https://www.linkedin.com/in/millerpatrickc/
Podcast: https://rss.com/podcasts/amperesec/

64Posts

0Following 0Followers

Patrick C Miller

@patrickcmiller@infosec.exchange

ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365 https://blog.talosintelligence.com/artoken-inside-an-eviltokens-affiliate-panel-targeting-microsoft-365/

Cisco Talos BlogARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365Talos has identified "ARToken," a phishing-as-a-service platform that targets Microsoft 365. The ARToken panel exposes 80+ API endpoints for device code phishing, Primary Refresh Token persistence, email access, BEC operations, and SharePoint exfiltration.

Patrick C Miller

@patrickcmiller@infosec.exchange

From mythos to reality: Why the 2026 state of pentesting report proves the need for programmatic defenses https://www.cybersecuritydive.com/spons/from-mythos-to-reality-why-the-2026-state-of-pentesting-report-proves-the/823726/

Patrick C Miller

@patrickcmiller@infosec.exchange

Over 300 UK Firms Hit by Ransomware in a Year https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/

Infosecurity MagazineOver 300 UK Firms Hit by Ransomware in a YearReport Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs

Patrick C Miller

@patrickcmiller@infosec.exchange

Your Talent Strategy Has to Keep Up with Your AI Transformation https://hbr.org/2026/06/your-talent-strategy-has-to-keep-up-with-your-ai-transformation

Harvard Business ReviewYour Talent Strategy Has to Keep Up with Your AI TransformationThe entry-level job pipeline is thinning globally, and the consequences of eliminating these types of roles in favor of AI are compounding. Eliminate entry-level roles, and you reduce the headcount that justifies mid-level managers. Reduce mid-level managers, and you shrink the pool feeding director and VP pipelines. What looks like a staffing efficiency decision is actually a leadership supply decision whose full cost won’t appear for years. The leaders who navigate this well don’t abandon their automation strategies; they build the talent infrastructure that those strategies require by doing three things: 1) Redesigning entry-level roles as capability-building cohorts; 2) building a distributed apprenticeship pipeline; and 3) auditing and repaying the organization’s capability debt.

Patrick C Miller

@patrickcmiller@infosec.exchange

It’s Linux, on a Sega Megadrive https://hackaday.com/2026/06/29/its-linux-on-a-sega-megadrive/

HackadayIt’s Linux, On A Sega MegadriveIf you were in the market for a games console in 1990, the chances are that the object of your desire was either a Super Nintendo with its 16-bit 6502 derivative, or the Sega Megadrive, sold as the…

Patrick C Miller

@patrickcmiller@infosec.exchange

Utah has a new largest solar + storage facility with 400 MW/1,600 MWh project online https://www.power-eng.com/renewables/utah-has-a-new-largest-solar-storage-facility-with-400-mw-1600-mwh-project-online/

Power EngineeringUtah has a new largest solar + storage facility with 400 MW/1,600 MWh project onlinerPlus Energies announced the start of operations for the Green River Energy Center, a 400 MW solar and 1,600 MWh battery project in Emery County, Utah.

Patrick C Miller

@patrickcmiller@infosec.exchange

FortiBleed credential-theft campaign linked to Lynx ransomware https://www.bleepingcomputer.com/news/security/fortibleed-credential-theft-campaign-linked-to-lynx-ransomware/

Patrick C Miller

@patrickcmiller@infosec.exchange

Kubota says hackers had month-long access to network systems https://www.bleepingcomputer.com/news/security/kubota-says-hackers-had-month-long-access-to-network-systems/

Patrick C Miller

@patrickcmiller@infosec.exchange

Where Did All These Passports Come From? Russia’s Manipulation of Citizenship as Hybrid Warfare in Ukraine https://www.justsecurity.org/139482/russia-ukraine-passports-hybrid-warfare/?utm_source=feedly&utm_medium=rss&utm_campaign=russia-ukraine-passports-hybrid-warfare

Just SecurityRussia's Abuse of Passports as Hybrid Warfare in UkraineRussia’s "passportization" campaign in Ukraine demonstrates how citizenship policy can function as a modern instrument of hybrid warfare.

Patrick C Miller

@patrickcmiller@infosec.exchange

The Realities of AI Video Surveillance https://www.schneier.com/blog/archives/2026/06/the-realities-of-ai-video-surveillance.html

Schneier on SecurityThe Realities of AI Video Surveillance - Schneier on SecurityThe Financial Times has a good article on how AI is changing the capabilities of video surveillance, with information from both Israel/Iran and Russia. I wrote about this sort of thing a few years ago, how AI enables mass spying in the way that computers and networks enabled mass surveillance. The interesting development in the article is that AI allows people to ask natural language questions about video footage to AIs—and AIs can answer them. In contrast with older tools restricted to a few dozen preset searches, these new tools allow an almost unlimited range of enquiries by enabling language-based searches on video...

Patrick C Miller

@patrickcmiller@infosec.exchange

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices https://thehackernews.com/2026/07/unpatched-flaws-disclosed-in-filesystem.html

The Hacker NewsUnpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded DevicesrunZero says six FatFs bugs lack upstream fixes; PoC disk images are public, but no attacks have been reported since July 1.

Patrick C Miller

@patrickcmiller@infosec.exchange

Hackers exploit critical PTC Windchill PLM software flaw https://www.csoonline.com/article/4190154/hackers-exploit-critical-ptc-windchill-plm-software-flaw.html

CSO OnlineHackers exploit critical PTC Windchill PLM software flawThe popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put intellectual property in jeopardy.

Patrick C Miller

@patrickcmiller@infosec.exchange

Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/

Infosecurity MagazineVeil#Drop Uses Google Blogspot to Deploy PureLog StealerSecuronix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory

Patrick C Miller

@patrickcmiller@infosec.exchange

This phishing kit looks more like BEC-as-a-service https://cyberscoop.com/artoken-bec-platform-cisco-talos/

CyberScoopThis phishing kit looks more like BEC-as-a-serviceCisco Talos has uncovered ARToken, a full-fledged "BEC-as-a-service" platform linked to EvilTokens that uses sophisticated AI lures to hijack corporate accounts.

Patrick C Miller

@patrickcmiller@infosec.exchange

Hacking Routers Like It’s 2008 https://hackaday.com/2026/06/27/hacking-routers-like-its-2008/

HackadayHacking Routers Like It’s 2008How long have we been hacking routers? To some of you who’ve been in the Hackaday audience for a while, the answer is “nearly forever”. In the early 2000s, they were one of the few consumer gadgets…

Patrick C Miller

@patrickcmiller@infosec.exchange

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/

Infosecurity MagazineResearcher Explains Release of Undisclosed Zero-Day ExploitsInfosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first

Patrick C Miller

@patrickcmiller@infosec.exchange

RF Hacking A Ceiling Fan Via The Remote https://hackaday.com/2026/06/28/rf-hacking-a-ceiling-fan-via-the-remote/

HackadayRF Hacking A Ceiling Fan Via The Remote[Sam Wilkinson] recently installed a Dreo CLF513S ceiling fan in his place — it’s cheap, well-sized, and blows air around as you’d expect it to. The only problem is that it only w…

Patrick C Miller

@patrickcmiller@infosec.exchange

New Avalon Malware Framework Packs CrownX Ransomware Capabilities https://thehackernews.com/2026/07/new-avalon-malware-framework-packs.html

The Hacker NewsNew Avalon Malware Framework Packs CrownX Ransomware CapabilitiesBlackpoint says Avalon uses Proton Drive, ISO images, LNK files, and MSBuild to disable ETW, steal credentials, and deploy CrownX ransomware.

Patrick C Miller

@patrickcmiller@infosec.exchange

New ChocoPoC malware targets researchers via trojanized PoC exploits https://www.bleepingcomputer.com/news/security/new-chocopoc-malware-targets-researchers-via-trojanized-poc-exploits/

Patrick C Miller

@patrickcmiller@infosec.exchange

Teaching AI to run with the turbines https://www.technologyreview.com/2026/07/02/1138433/teaching-ai-to-run-with-the-turbines/

MIT Technology ReviewTeaching AI to run with the turbinesAs energy companies push AI deeper into industrial operations, success increasingly depends on governance, trusted data, and systems designed to augment human expertise, says Andrew Melouney, vice president for digital at Woodside Energy.