Tom

Story listener. Story teller.

[The OSINT Newsletter @osintnewsletter]

🕵️ New OSINT CTF challenge is live.

Trace a single street-level photograph all the way to its specific location - and then the nearest campsite 🏕️

Win a full year subscription to The OSINT Newsletter 🏆
Play here 👇
https://t.co/2eiJmAKneW

[urlscan.io @urlscanio]

Happy New Year 2026 from us at urlscan! We don't arrive empty-handed, there were two neat additions to urlscan Pro over the holidays: HTTP request details & filters and the ability to change the visibility of your own scans retroactively.

[BleepingComputer @BleepinComputer]

No, the 16 billion credentials leak is not a new data breach - @LawrenceAbrams
https://t.co/dPZBAhdO1s

https://t.co/dPZBAhdO1s

[Tom @human_decoded]

@vxunderground

[Tom @human_decoded]

@tony_hunt @gabsmashh This.

[Nicole Beckwith @NicoleBeckwith]

Super excited to announce I’ll be speaking at @BSidesLV this year in the Hire Ground village! Come hear from me and one of my favorite people, CISO Jake Lorz of Cintas, on our best tips and advice for getting ahead in this field. You’ll hear a fun juxtaposition on viewpoints from middle manager vs. executive. It’s sure to be packed full of amazing tips and pure comedy gold. Get your badges soon!! Time is ticking.

[Tom @human_decoded]

@Layer8Con @AletheDenis

[Tom @human_decoded]

@AletheDenis @Layer8Con

[Tom @human_decoded]

@sinwindie @Zewensec

[Tom @human_decoded]

@AletheDenis @Layer8Con

[Tom @human_decoded]

@vxunderground Sorry about that.

[Tom @human_decoded]

Another @SLEUTHCON in the books. What if the real mission wasn’t ransomware but the friends we made along the way?

Was great seeing you all!

#cti
#sharingIsScaring

[Tom @human_decoded]

What happens when your leaders get asymmetrically attacked in a ransomware event? @SLEUTHCON lighting talk from Allie Bohan has me thinking about ransomware beyond just encryption.

[Tom @human_decoded]

Had a @Layer8Con sighting at @SLEUTHCON ! In the words of Mr. Peanut Butter “what is this? A crossover episode?!”

#osint

[Tom @human_decoded]

Great talk! My takeaway:

Ransomware isn’t always about the money. If a ransomware actor isn’t good at extracting money from victims….maybe their goals are more State aligned?

[SLEUTHCON @SLEUTHCON]

You know him from MSTIC and KC7!

Catch @simandsec at #SLEUTHCON 2025 this June!

🎟️ Grab your tix today! >>> https://t.co/ZeHwv2ymoV

#CyberThreatIntel #InfosecEvents

[Tom @human_decoded]

Another @SLEUTHCON nugget from Eric Loui. My takeaway:

Attribution doesn’t need to be a single definitive data point. It can be a series of low confidence data points that all support each other, especially in the absence of intel that contradicts your attribution

#CTI

[Tom @human_decoded]

@SLEUTHCON off to a great start.
My lesson learned from @pmelson is:

make friends, they probably know something you don’t, and the Intel space is all about not not knowing things

#sharingIsScaring
#CTI

[Tom @human_decoded]

The best part about @SLEUTHCON is the socks! When I get back home I shove all my cryptocurrency in them and hide them in my drawer.

#sharingIsScaring
#CTI

[Tom @human_decoded]

@BSides_NoVA @SLEUTHCON There!