I’m in Vegas for #BSidesLV and #DEFCON most of the people I usually hang out with aren’t making it this year. If anyone wants to hangout, hit me up.

TFW you are sitting on a "Insider Threat" tool demo, and they log in to the environment and Firefox warns them they are using a compromised password... and the auth page is publicly reachable.

Perhaps the biggest actionable takeaway here is that federal workers in general should not forward emails from their work accounts to journalists, and instead take a picture with their personal phone. And fellow reporters, tell that to sources! This story is just CISA but risk is any agency.

LGBTQI people aren’t DEI, we are people

Whole ass human beings

Can we just stop with all this "sophisticated" nonsense as if that gives you a free pass on your deficient cybersecurity?
statescoop.com/cyberattack-...

Throw back to 2016 when I got John McAfee to send me a picture of him with a shoe on his head. I didn't realize at the time, that it was going to be my peak 😂 #McAfee #JohnMcAfee #shoeonhead

Overall I've taken a step back from social media, decided to fully deactivate my X accounts. I'm going to try to be more active here, but we'll see how that goes. My motivation has really suffered over the last few years. Hoping connecting with other #infosec, #cyber, #cybersecurity folks will help.

Who are some highly security focused accounts? I followed a bunch of infosec starter packs but seeing mostly politics on my following feed. I plan to use this account only for security so would like to keep it curated.

A little self-promotion and holiday cheer!

Get that special someone nostarch.com/devops-despe...

or any of the great books at @nostarch.bsky.social

Use the code BLACKHATFRIDAY