I’m in Vegas for #BSidesLV and #DEFCON most of the people I usually hang out with aren’t making it this year. If anyone wants to hangout, hit me up.

TFW you are sitting on a "Insider Threat" tool demo, and they log in to the environment and Firefox warns them they are using a compromised password... and the auth page is publicly reachable.

What happened to the satire?

Perhaps the biggest actionable takeaway here is that federal workers in general should not forward emails from their work accounts to journalists, and instead take a picture with their personal phone. And fellow reporters, tell that to sources! This story is just CISA but risk is any agency.

Just because it's apparently effective, doesn't mean it's sophisticated 😂

LGBTQI people aren’t DEI, we are people

Whole ass human beings

'Sophisticated' cyberattack downs systems at Virginia attorney general's office | StateScoop The Virginia attorney general's office suffered a cyberattack, prompting officials to shut down computer systems and direct employees to file paper documents.

Can we just stop with all this "sophisticated" nonsense as if that gives you a free pass on your deficient cybersecurity?
statescoop.com/cyberattack-...

Right, I remember years ago, responding to an incident where employee W2s were leaked because someone got an email asking for them and the messaging was "sophisticated" cyber attack. Dude, someone said "I'm the CEO, send me the W2s" and someone said "sure, here you go".

John McAfee with a shoe on his head

Throw back to 2016 when I got John McAfee to send me a picture of him with a shoe on his head. I didn't realize at the time, that it was going to be my peak 😂 #McAfee #JohnMcAfee #shoeonhead

Overall I've taken a step back from social media, decided to fully deactivate my X accounts. I'm going to try to be more active here, but we'll see how that goes. My motivation has really suffered over the last few years. Hoping connecting with other #infosec, #cyber, #cybersecurity folks will help.

Who are some highly security focused accounts? I followed a bunch of infosec starter packs but seeing mostly politics on my following feed. I plan to use this account only for security so would like to keep it curated.

Nostarch press sale

A little self-promotion and holiday cheer!

Get that special someone nostarch.com/devops-despe...

or any of the great books at @nostarch.bsky.social

Use the code BLACKHATFRIDAY