John Z Black

Tycoon2FA Is Back. It Never Really Left.

John Z Black Mar 24, 2026

Ransomware & Cybercrime #Tycoon2FA #phishing-as-a-service #PhaaS #MFA bypass #Europol #CrowdStrike

Europol disrupted Tycoon2FA on March 4. Recovery started the same day. No arrests. By March 23 it was fully operational again. Here's why infrastructure-only takedowns keep failing.

Read More

RSAC 2026 Day One: Every Vendor Went Agentic, the Government Went Missing

John Z Black Mar 24, 2026

Policy, Law & Governance #RSAC 2026 #AI Security #agentic AI #CISA #government cybersecurity #Google Cloud #Microsoft #CrowdStrike #Wiz

RSAC 2026 opened with a wave of autonomous AI security launches from Google, Microsoft, CrowdStrike, and Wiz. Reportedly absent from the program: CISA, the FBI, and the NSA.

Read More