Fred

SecOps, InfoSec, threat intel & trying to manage humans. All tweets are my own.

[Florian Roth ⚡️ @cyb3rops]

A DFIR friend told me that one of his customers, which spent a full week finding & remediating log4j vulnerabilities got ransomed through an unpatched Confluence vulnerability that was published in August

#Log4j #Log4Shell

[Steak-umm @steak_umm]

one day i’m gonna tweet “the steaks are high” and turn off my phone

[x0rz @x0rz]

BlackMatter operators are making good publicity for @coveware tbh

[Florian Roth ⚡️ @cyb3rops]

#ZeroTrust

[Bryson 🦄 @brysonbort]

This turtle would not be qualified for most Jr infosec positions.

[wirefall (AKA Pwn Spice) @DHAhole]

Client: How is the pen test going?
Me: For you or for me?

[thaddeus e. grugq @thegrugq]

Nevermind, we paid the ransom

[thaddeus e. grugq @thegrugq]

All this to build the worst and most hated browser. What a fucking waste

[Fred @Internet_Ronin]

My Team is hiring! These are entry level and remote! Feel free to reach out if you have questions:

https://t.co/hPevvlanTZ

https://t.co/fPqWMblNw9 #CyberSec #hiring

[Fred @Internet_Ronin]

@ItzSpelledGEOFF @AccidentalCISO

[Chris Hanlon @ChrisHanlonCA]

Dear #Technology #Workers:

I am hearing rumors about salary cuts for remote workers. PLEASE SEND me a CONFIDENTIAL DM if your employer is reducing salaries or discriminating against remote workers.

#Infosec #informationsecurity #cybersecurity #Infosecjobs #techjobs #solidarity

[Florian Roth ⚡️ @cyb3rops]

Microsoft’s product strategy in a nutshell
#PrinterNightmare #SeriousSAM #RelayAttacks #NTLM

[Fred @Internet_Ronin]

Looking in on Microsoft security after this week…

[Fred @Internet_Ronin]

@SwiftOnSecurity Excellent choice, love mine

[Florian Roth ⚡️ @cyb3rops]

#PrinterNightmare

[Fred @Internet_Ronin]

Just accept the risk

[Morning Brew ☕️ @MorningBrew]

Write a horror story for your industry using just four words

[Taz Wake @tazwake]

A few days ago, the publicity around a malicious binary apparently signed by Microsoft drew a lot of responses that highlight a "perfection" problem in #infosec.
A ��but it's not really a subtweet so I've blanked out the names on this example. It is just one of many.

[Dr. Anton Chuvakin @anton_chuvakin]

So, it turns out that because somebody coined the acronym "DevSecOps", now there are clowns who assume that "DevSecOps" includes security operations (like SOC, etc), because the silly word DevSecOps includes SecOps. WTH and perhaps even WTAF...