Kristen!

Bears. Beets. Battlestar Galactica. Cyber Threat Intel. Eater of snacks. 🐼 @[email protected]

[Kristen! @SecPanda_]

@_subTee @SwiftOnSecurity But hey, maybe with all the increased speed and whatnot we’ll have time to do other cool things or I’ll get to chill more with my dog 🤞🐺 I can admit it does some pretty cool things but i definitely can’t say I’m working less 🫠

[Kristen! @SecPanda_]

@_subTee @SwiftOnSecurity I watched Alpha Go and had really mixed feelings but a predominant one was sadness. The same sentiment was expressed by an exploit dev I spoke with at a conference earlier this year…that AI had stolen to joy out of their work because they no longer “got to feel smart anymore” 😔

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

It's always people, process, technology.

EXPLICITLY IN THAT ORDER!!!

To quote @strandjs, "Every time you try to press 'the easy button' God deploys another botnet in your network"

[Kristen! @SecPanda_]

@0xTib3rius @IceSolst I went to ShmooCon and stopped by their table one year and their marketing person asked me if I was attending the conference. Then he asked if I was there with a boyfriend. Nope…I just happen to be a woman who is interested in and working in security who paid to attend. WTF.

[Abdel @rockkdev]

New Robinhood phishing chain that's kinda beautiful:

1. Attacker creates an RH account using the Gmail dot trick of your email (same inbox, different address)
2. Sets device name to HTML
3. RH's "unrecognized activity" email renders the device name unsanitized (html injection)

The result is a real email from [email protected], DKIM pass, SPF pass, DMARC pass, with a phishing CTA

Just because it's real, doesn't mean it's safe... $HOOD

[Kristen! @SecPanda_]

@vxunderground @AlteredSecurity Yes please! ❤️

[Yarden Shafir @yarden_shafir]

I know this isn't new but can we talk about the MS threat actor naming scheme again?

It's not just that the scheme itself is ridiculous. Someone consciously chose the most stripper-coded fruit and gems for each one. On purpose.

[Kristen! @SecPanda_]

@WWHackinFest @MalwareJake @sibertor Congratulations!! ❤️

[Kristen! @SecPanda_]

@ElsecallerLiz @realcyberpanda I need this!

[JD Work @HostileSpectrum]

@alex_lanstein Technical intelligence never displaces the need for good human intelligence collection. A tale as old as metis.

[John Hammond @_JohnHammond]

CrowdStrike Falcon agents are imploding right now and causing a Blue Screen of Death boot loop on every endpoint. Reports of massive outages globally.
https://t.co/cS9Zt4SagH

[Kristen! @SecPanda_]

@FknBrie @gabsmashh +1 this is the way!!

[Kristen! @SecPanda_]

A colleagues shared this with me: https://t.co/SslDarFNfe
What a cool resource for guided learning - both role based and specific skill based ⭐️

[Kristen! @SecPanda_]

“Wanted to let you know that she’s just a little dirty today…” - dog daycare desk lady
😬❤️🐺

[Kristen! @SecPanda_]

Oh hi North Carolina 🌲🌲

[Charlie @ghost_motley]

I am one again reminding people that if you are creating a Windows 11 installer, use Rufus

- You can bypass the RAM, Secure Boot and TPM requirements

- You can remove the requirement for a Microsoft account

- Disable automatic encryption

- Auto-create account and more

[Amitai Cohen @AmitaiCo]

Happy to introduce "Pivot Atlas", a digital pivoting handbook for cyber threat intel analysts. I've been working on this as a personal project with the goal of graphing the "pivotability" of threat intel artifacts and providing real-world examples and reference material. (1/2)🧵

[Bryson 🦄 @brysonbort]

Being Busy
isn't the same thing as
Being Productive

[thebes @voooooogel]

next time your friend goes to the bathroom, grab their phone and use the new memory feature to add some stochastic whimsy and delight to their chatgpt experience

[Kristen! @SecPanda_]

@nixcraft Doors