It's always people, process, technology. EXPLICITLY IN THAT ORDER!!! To quote @strandjs, "Every time you try to press 'the easy button' God deploys another botnet in your network"

New Robinhood phishing chain that's kinda beautiful: 1. Attacker creates an RH account using the Gmail dot trick of your email (same inbox, different address) 2. Sets device name to HTML 3. RH's "unrecognized activity" email renders the device name unsanitized (html injection) The result is a real email from noreply@robinhood.com, DKIM pass, SPF pass, DMARC pass, with a phishing CTA Just because it's real, doesn't mean it's safe... $HOOD

I know this isn't new but can we talk about the MS threat actor naming scheme again? It's not just that the scheme itself is ridiculous. Someone consciously chose the most stripper-coded fruit and gems for each one. On purpose.

Technical intelligence never displaces the need for good human intelligence collection. A tale as old as metis.

CrowdStrike Falcon agents are imploding right now and causing a Blue Screen of Death boot loop on every endpoint. Reports of massive outages globally. teddit.net/r/crowdstrike/com…

A colleagues shared this with me: roadmap.sh/roadmaps What a cool resource for guided learning - both role based and specific skill based ⭐️

“Wanted to let you know that she’s just a little dirty today…” - dog daycare desk lady 😬❤️🐺

Oh hi North Carolina 🌲🌲

I am one again reminding people that if you are creating a Windows 11 installer, use Rufus - You can bypass the RAM, Secure Boot and TPM requirements - You can remove the requirement for a Microsoft account - Disable automatic encryption - Auto-create account and more

Happy to introduce "Pivot Atlas", a digital pivoting handbook for cyber threat intel analysts. I've been working on this as a personal project with the goal of graphing the "pivotability" of threat intel artifacts and providing real-world examples and reference material. (1/2)🧵

Being Busy isn't the same thing as Being Productive

next time your friend goes to the bathroom, grab their phone and use the new memory feature to add some stochastic whimsy and delight to their chatgpt experience

Sleep is but a Time Machine to more food…you know what they say - New Day, New Macros 🤤

If you know a woman in infosec who is looking to learn more, please tell them to subscribe to THE Microsoft threat intelligence podcast. We have a fantastic slate of women talking on subjects like mobile malware RE, Incident Response, data science, and more!

MITRE ATT&CK is astrology for security nerds.

Just when I didn’t think @CISAJen could get any cooler 😎🤩 #wicys2024 #womenincyber @WiCySorg

It’s a whole mood… ☁️🎡

Today is National K9 Veterans Day. This is one of our favorite pics of Denis. #warrior

Spending some time learning C and…dare I say, I’m actually enjoying it🤓👩🏻‍💻

It’s fall y’all 🍁#seattle