Cl0uddStrife 🛰️👾

A jack of all trades is a master of none, but oftentimes better than a master of one. ✌🏽🛰️🚀

[John Hammond @_JohnHammond]

hey PSA, @HuntressLabs has been chasing a pretty gnarly new incident of a ScreenConnect worm, hitting hundreds of hosts downstream during the holiday today -- genuinely please do read up on this one if you've got ye' ol RMM running ↙️
https://t.co/jGmm8FbmkW

[Cl0uddStrife 🛰️👾 @Cl0uddStrife]

@Alph4betSoup @PrivSecPodcast @RiversidedotFM Nice! Definitely can’t wait

[Alphabet Soup 👑 @Alph4betSoup]

You can just do things

https://t.co/LIus6dzz2b
@PrivSecPodcast

First live stream/episode/chat tomorrow!

[Kim Zetter @KimZetter]

Every time someone tells me they work in "offense" I have to ask -- do you mean defense-offense (offense done only for defensive purposes) or do you mean actual offensive operations?

[Graham Helton (too much for zblock) @GrahamHelton3]

My moat is putting a moat around people who talk about moats so I dont have to talk to them

[Cl0uddStrife 🛰️👾 @Cl0uddStrife]

@MeredithLoftus

[Lupin @0xLupin]

We managed to find a way to backdoor the next release of OpenAI Codex 🔥

This is the best exploit chain I’ve ever witnessed

https://t.co/SlH6bG2tud

[Cl0uddStrife 🛰️👾 @Cl0uddStrife]

@_rybaz

[HackingHub @hackinghub_io]

LIMITED TIME: Grab the Caido for Hackers Course and get the Hacking APIs Course absolutely FREE!

Just want the API course? Snag it for $9.99 (50% off the usual $19.99).

Grab it before it's gone!

Links in the first reply. 🤓

[rekdt @rekdt]

These 2 were with me all night handing out hot meals to homeless people

[Graham Helton (too much for zblock) @GrahamHelton3]

Tomorrow I'll be walking through the Kubernetes nodes/proxy permission attack path on stage at @KubeCon_ .

Here is the tool I created during the disclosure process as my POC || GTFO.

It allows you to spread through an entire cluster using the techniques I'm discussing.

[Aaron Grattafiori @dyn___]

A friend and ex coworker @martin_vigo 's DEFCON talk on hacking Amazon lockers is finally on YouTube. It's such a fun, excellent, pure hacker ethos talk... I highly recommend it, and definitely watch to the end... https://t.co/4tOJ844gns

[4 of mallace @IceSolst]

IoC || GTFO

[Cl0uddStrife 🛰️👾 @Cl0uddStrife]

@_rybaz @ZackKorman

[Cl0uddStrife 🛰️👾 @Cl0uddStrife]

@apiratemoo Take your time AND get that bag!

[Mike Manrod @CroodSolutions]

@techspence posted something on another platform that hit home:

For every unimportant thing that is fixed or made a priority, something truly critical gets moved down the list.

Sometimes people have asked me “what’s the harm when media frenzy, marketing buzz, or knee-jerk reactions cause a topic that is not really a thing to take center stage (think agent swarms in toasters).

The harm is that all of those conversations, thoughts, and actions were about something unimportant, and were not about Winter2026! as a password, unmanaged devices, misconfigurations, users running as local admin, password stored in the clear, and so on…

Every time we make something unimportant take center stage, what should be center stage does not, and the attacker gains an advantage. It is like skipping a turn in a card game. Make a habit of skipping turns, and you will lose.

This has also been pointed out repeatedly by @ZackKorman, @UK_Daniel_Card, @Shammahwoods, @IceSolst, @christian_tail, and so many others here.

[Cl0uddStrife 🛰️👾 @Cl0uddStrife]

@ZackKorman @cheddar420yolo 😮‍💨📠

[Cl0uddStrife 🛰️👾 @Cl0uddStrife]

@madelinelawren Convenient? Uhhh…. 0:00 UTC on Monday?