← Feed

Posts

• Post #4501093

  Critical infrastructure security: filled with unpatched vulns, default passwords, and adversaries happy to take advantage of these in increasingly concerning ways. OT thought leaders: “that’s not new or novel, have you thought about how to build your brand?”

• Post #4399406

  @Viss@mastodon.social At this point cuz the violators are rich

• Post #4210883

  Rare ITW Energetic|BerserkBear (Dragonfly/CrouchingYeti/Iron Liberty/Ghost Blizzard/Bromine) sighting

• Post #4172451

  RE: https://infosec.exchange/@jfslowik/116994081734569429 Relevant: https://www.fox9.com/news/30-minnesota-water-systems-targeted-cyber-attack

• Post #4147633

  CISA: IR-linked TA's are uploading malicious project files to PLCs! Industry & media: zzzzzzzzz Me: https://www.dataminr.com/resources/blog/implications-of-recent-cisa-disclosures-on-iranian-ot-targeting/

• Post #4070332

  Google/TAG/Mandoogle/Googliant:

• Post #4049070

  So the solar failed after 𝙘𝙝𝙚𝙘𝙠𝙨 𝙣𝙤𝙩𝙚𝙨 the sun set? Some big brains occupying Forrestal these days.

• Post #4042702

  RE: https://infosec.exchange/@jfslowik/116964921675243942 We have learned that the bear has sadly passed (electrocuted). 𝙃𝙞𝙨 𝙣𝙖𝙢𝙚 𝙬𝙖𝙨 𝙍𝙤𝙗𝙚𝙧𝙩 𝙋𝙖𝙪𝙡𝙨𝙤𝙣.

• Post #3990081

  All the intelligence wonks in the DMV today:

• Post #3971813

  T1078.001 @mitreattack@infosec.exchange https://www.denverpost.com/2026/07/18/coinstar-thefts-richard-pena-colorado/

• Post #3965100

  All of the cyber vendors releasing Big Expensive Important Report on day one of Black Hat USA

• Post #3899205

  Pre-auth RCE in base Wordpress released on a Friday afternoon/evening? Well, we shall beat to quarters https://youtu.be/Ht2qKvQRLBU?is=S4Kti1rcas1qTTyz

• Post #3812215

• Post #3787259

  *Cuba's rickety-ass electric system under huge stress collapses, again* Thought leaders: "BUT WHERE IS THE PROOF THIS 𝗪𝗔𝗦𝗡'𝗧 CYBER???"

• Post #3699310

  Me when I find someone unexpected has placed me on a block list: "What is it with this man? Did I kill a relative of his in battle, perhaps?"

• Post #3590912

  Happy 4th of July https://www.youtube.com/watch?v=WM8bTdBs-cw

• Post #3579560

  Happy July 4th https://youtu.be/9t1IK_9apWs?is=U-UkGS4BYtGXr8L4

• Post #3452406

  SIGH

• Post #1849973

  We're getting into "silly season" at the end of the year. With that in mind, I've thought about the things I did in 2022 that I found most interesting, helpful, or potentially impactful. First, there's the paper on #CTI-driven #ThreatHunting I wrote and presented on at several events: https://www.gigamon.com/content/dam/resource-library/english/white-paper/wp-intelligence-driven-threat-hunting-methodology.pdf Then, there was my @VirusBulletin paper on...

• Post #1761529

  If you missed my #FIRSTCTI26 presentation on evaluating #CTI & threat intel at speed, a related blog is now available for review of the same concepts and argument: https://www.dataminr.com/resources/blog/orienting-intelligence-for-real-time-alerting-response/

• Post #1678690

  Ref: https://www.dragos.com/blog/zionsiphon-ot-malware-analysis & https://www.nozominetworks.com/blog/zionsiphon-why-ot-threat-claims-need-technical-and-operational-scrutiny

• Post #1386292

• Post #1086666

  Thoughts on the meaning and implications of Mythos and Project Glasswing, what these mean for #informationsecurity, where these items are "right," and where they need to be pushed further for purposes of both security and safety: https://pylos.co/2026/04/11/myth-mythos-where-do-we-go-from-here/

• Post #917247

  I FOUND WHERE THEY KEEP THE FURSONAS!!!

• Post #338272

  Me, an American, looking at events in Brazil, South Korea, Norway, and now UK: