Joe Garcia

Started in Enterprise InfoSec. Now Automation & DevOps Security for @CyberArk. Gopher. (All views & opinions are my own.)

[International Cyber Digest @IntCyberDigest]

The bug is like a joke.

On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀

[Joe Garcia @InfamousJoeG]

@stevefloyd @J4ck3LSyN This.

[Joe Garcia @InfamousJoeG]

@J4ck3LSyN @Janomine @wescopeland_ No, it makes you a liar. Everyone knows why you did it. Justify it however you want.

[Joe Garcia @InfamousJoeG]

I claimed the "infamousjoeg" handle on @ThePirateFace 🏴‍☠️

Where Hugging Face AI models never die, and are immortalized as torrents.

Claim yours 👇
https://t.co/wvGDCX4sMN

[Jessica Tarlov @JessicaTarlov]

Socialism! Communism!

[Brendan Falk @BrendanFalk]

To check if your Google Workspace has been compromised by the same tool that compromised Vercel:

1. Go to https://t.co/TpuIOW5Fwg
- This is Google Admin Console > Security > Access and Data Control > API Controls > Manage app access > Accessed Apps
2. Filter by ID = https://t.co/uqJnCqp5Ah
- This is the ID of the compromised OAuth app

If you see an app after filtering, you have potentially been compromised

[Vercel @vercel]

We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin:
https://t.co/0S939n3qHC

[Damian Player @damianplayer]

this is the MOST important 4 minutes you’ll watch on AI this year.

anthropic built a model so good at finding vulnerabilities they didn’t release it to the public.

>CLAUDE MYTHOS PREVIEW

it’s unreleased to the public and here’s what it did in a few weeks:

>found a 27-year-old vulnerability in OpenBSD

>caught a 16-year-old flaw in FFmpeg that automated tools missed after 5 million tests

>chained together multiple linux kernel exploits autonomously. no human steering.

AWS, google, microsoft, apple, nvidia, crowdstrike, JPMorgan. all got access.

Anthropic committed $100M in credits to let these companies hunt vulnerabilities in their own systems before attackers do.

>93.9% on SWE-bench verified. >77.8% on SWE-bench pro.

nothing else is comes remotely close. Anthropic just pulled away in this AI race…

[Dave LaGreca @davidlagreca1]

I think @Skyebyee is my new favorite wrestler #AEWDynamite

[Joe Garcia @InfamousJoeG]

@ewarren Don’t let your weak leader cave

[CyberArk Labs @CyberarkLabs]

“This attack methodology, which abuses legitimate tools, sites, and services, is becoming increasingly common in supply chain attacks aimed at poisoning development environments or stealing credentials for malicious purposes,”

https://t.co/HrS3pvIfcA

[Joe Garcia @InfamousJoeG]

@atrupar BUT WHAT DO THE BAILEYS THINK?! /s

[Redd Legend @ReddLegend]

: The brilliance of Chris Hedges...

[Zohran Kwame Mamdani @ZohranKMamdani]

WU-TANG FOREVER 👐🏽

[Gavin Newsom @GavinNewsom]

If they can handcuff a U.S. Senator for asking a question, imagine what they will do to you.

[Tom Morello @tmorello]

Hope that helps.

[CyberArk @CyberArk]

From CyberArk’s @InfamousJoeG's session on Ansible’s single machine credential problem to meeting with customers and prospects, this year’s @RedHatSecurity Summit was amazing! Here are some highlights of our team at the show!

#IdentitySecurity #RedHatSummit #cybersecurity

[Joe Garcia @InfamousJoeG]

In the Expo Hall at the AnsibleFest Theater!

[CyberArk @CyberArk]

Heading to @RedHat Summit tomorrow? Don’t miss CyberArk’s @InfamousJoeG as he tackles Ansible’s single machine credential problem—live in session.

#IdentitySecurity #RedHatSummit #cybersecurity

[CyberArk @CyberArk]

Headed to #RedHatSummit on May 20th? Make sure to stop @InfamousJoeG's session and he'll show you how to solve Ansible's single machine credential problem.

[Tampa International Airport ✈️ @FlyTPA]

A very good morning to everyone except the Florida Panthers