A Technology Journalist and cybersecurity professional. I have a mission to remove the marketing-speak from the information people receive in their news.
Joined July 2010
- Tweets40.2K
- Following621
- Followers2K
- Likes98.4K
Pinned Tweet
Shape the battlefield with what you have.
Cybersecurity is (almost) always a logistical conversation first, followed by tactical and strategic decisions based on that.
Most people would probably be shocked at how well a small team can shape the battlefield to devastating effect against an opponent.
> You don't need a lot, you just need folks who care, constantly learning, and want to do the right thing who aren't prevented from doing so.
This!
1
17
4,307
On this Veteran's Day...
I salute you all </tongue-in-cheek>
(Me, on my way to the 1st Gulf War.)
Happy Veteran's day.
2
8
241
Hello Dario our old friend,
You've come to preach at us again
Cause the funds you have been raising
Are slowly failing while you are raving
And the systems that you claim are like a human brain...
But math remains to expose the sounds, of bullsh*t...
Bits, Bytes, and Bourbon retweeted
Field Report # 1337: First year of the Cyber War. I am Private BRS, Humanity's-Last-Stand-Division, reporting.
Captain @UK_Daniel_Card , Lieutenants @ZackKorman , and @IceSolst , Sergeants @shotgunner101 (a.k.a. DTS) and @LisaForteUK and I are dug deep in a hole in the middle of a gas-powered data center, waiting out the AI Swarms which are building our human replacements, AT MACHINE SPEED.
They look like Mark Zuckerberg because he is the closest thing to a robot ever born from a human womb.
Zack tells us to stay strong. We have defenses against this. THIS IS WHAT WE TRAINED FOR. He cracked a small smile but then it turns out, he was just trying not to sneeze.
Dan, wearing a druid costume, tells us that giving up is NOT AN OPTION, that he brought his wireless toothbrush, WE GOT THIS.
Sol says that the number 4 is a government psyop and the machines will only use it with MALLACE.
DTS has been raging about how the government limiting access to open-source models prior to The Fall was what caused all of this.
Lisa has just been teaching us all how to breathe in this confined space we're packed in like sardines because she used to be a skilled spelunker as well as diver. She knows claustrophia, well, and can handle the stress of all that.
Me? I write our memoirs. I take the notes. I don't know if we're ever going to get out of this ditch.
I don't know what Hell waits for us topside but I will tell you this.
I'd follow them into any Hell.
They are some of the best friends I've ever had and I'm mighty glad to know them.
-Private BRS, out.
Bits, Bytes, and Bourbon retweeted
Special thanks to @techspence for teaching TISU cohort 9, educating us all on assume breach penetration testing, enumeration, hacking of active directory, and privilege escalation. It was one of our most iconic sessions of all time. The best part was that Spencer loaded a demo with extreme practical relevance, before I even did the intro. Instant Threat Intelligence Support Unit/TISU MVP status. 🤘
My only regret is that I could not have sent this session back to 5/10/15 years ago me - wish I knew some of this sooner. 🫶🤷♂️
@UK_Daniel_Card @IceSolst @Shammahwoods @DecryptedTech @christian_tail @whereduck @mrurbz
Bits, Bytes, and Bourbon retweeted
"Agentic pentesting" is the GLP1 of cybersecurity.
It will rapidly melt away a bunch of low-hanging findings and make your dashboard look great for a quarter.
Then the moment you stop the subscription (or the agent gets bored, hallucinates, or gets prompt-injected), the risk comes right back because nobody fixed the underlying misconfigs, weak passwords, missing defensive controls, risky user/admin behaviors, and general lack of hygiene that allowed it work in the first place.
You still need the diet and exercise. The shot just makes the progress photo look better.
There's no easy button. Shortcuts get you hacked.
Bits, Bytes, and Bourbon retweeted
Whoa... If you (like me) have been using New-Guid to set passwords, you should probably change that with PowerShell 7.7
Instead, we have to move to [guid]::NewGuid()
PowerShell 7.7 has been released on the *same* day as the .NET 11 runtime - it feels nice to see the feedback has been heard loud and clear! This is the way to go! github.com/PowerShell/PowerS…
Bits, Bytes, and Bourbon retweeted
I’ve begun a deep dive into Microsoft 365 token theft and SSO application session theft.
I’m horrified and feel for defenders so much.
Microsoft relies on the saas vendor to do their part. And the saas vendor is relying on Microsoft to do their part.
And neither is doing a good enough job quite honestly.
Bits, Bytes, and Bourbon retweeted
Quick, add a new tabletop: my CEO slept with a Chinese spy and is now making decisions ;-)
