Richard Rushing

Long Time Security Guru, CISO, Watching the same problems. same issues. Wireless, Network, Mobile, Exploits, and Malware. So many ways, just so little time :)

[DirectoryRanger @DirectoryRanger]

Active Directory Hardening Series (II)
Part 5 Enforcing LDAP Channel Binding https://t.co/4q3AMehJFZ
Part 6 Enforcing SMB Signing https://t.co/VaUcNV0EUI
Part 7 Implementing Least Privilege https://t.co/mdjenywkVQ

[DirectoryRanger @DirectoryRanger]

Active Directory Hardening Series
Part 1 Disabling NTLMv1 https://t.co/9gla1vtQ18
Part 2 Removing SMBv1 https://t.co/KOqpamarcW
Part 3 Enforcing LDAP Signing https://t.co/oW2Ymvu1ZW
Part 4 Enforcing AES for Kerberos https://t.co/iENjEPBOFD

[Speaker 25 @rodtrent]

I Built an AI SOC Analyst for Microsoft Sentinel and Defender XDR and Open-Sourced It https://t.co/uR9gvUE1LV

#Security #Cybersecurity #AI #ResponsibleAI

[AISecHub @AISecHub]

Mapping NIST AI RMF + Forrester RACI → Microsoft security stack
https://t.co/Z7AWJs5z3I

[Costin Raiu @craiu]

New: The Three Buddy Problem - Episode 97: We discuss the disappearing art of Windows APT paleontology, the absence of complex malware documentation, and why so much threat-intel research has slipped behind paywalls and into private rooms.

Plus, a surge in AI-discovered bugs in Firefox and Chrome, a rough week for Linux security flaw disclosures, and the usual Ivanti and Palo Alto zero-day bulletins that ship without a single IOC.

- Spotify https://t.co/0NCe7WBZNx

- Apple https://t.co/Wsicv7wL3x

- Find a podcast platform https://t.co/2MSOlXhOAy

- Transcript https://t.co/Js1NT4RMP3

[Anastasis Vasileiadis @Anastasis_King]

🗺️Active Directory Pentesting Mind Map:

V1: https://t.co/5c19Lve5TA

V2: https://t.co/soB8aMqdSC

🔖#infosec #cybersecurity #hacking #pentesting #security

[spencer @techspence]

Finding misconfigs in Active Directory is free…outside of your time.

Here are 9 of my favorite tools (all free):

Overall - PingCastle/PurpleKnight
Permissions - ADeleg/ADeleginator*
Attack paths - BloodHound
Applocker - Applocker Inspector*
ADCS - Locksmith
Logon scripts - ScriptSentry*
GPO - GPOZaurr

* = utterly biased, tools I made

[Panos Gkatziroulis 🦄 @ipurple]

Fraud Tools, Tactics, and Techniques (FT3) is Stripe's adaptation of ATT&CK-style security frameworks, specifically designed to enhance our understanding of the tactics, techniques, and procedures (TTPs) used by actors in fraudulent activities https://t.co/O2EwDArVOy

[Darren Kitchen @hak5darren]

🍍📟

[Florian Roth ⚡️ @cyb3rops]

I see Fortinet is firing back.
Apparently my GitHub profile now qualifies as a malicious website in their web filtering appliances.

(Okay, probably just an automated trigger on APTSimulator or the ransomware simulator repo. But maybe … )

[Richard Rushing @SecRich]

@cyb3rops You know you are making a difference, when you get banned.
You have #Arrived😁.

[rootsecdev @rootsecdev]

Hold my beer?

[Richard Rushing @SecRich]

@Jr0dR87 Well AI says This image shows a street scene in New York City, likely 55 Central Park West, known as Spuyten Duyvil Apartments. This building is famous for being Dana Barrett's apartment building in the movie Ghostbusters.

[Florian Roth ⚡️ @cyb3rops]

I used to be very frustrated when security researchers published detailed vulnerability reports - meticulously describing every step of the discovery process but failing to include indicators of compromise or exploitation.

It’s not about writing detection rules for us. Just sharing a log snippet, suspicious process behavior, or anything else observed during successful exploitation would be incredibly valuable.

Better handover between researchers and defenders means faster, more effective responses.

[Thomas Roccia 🤘 @fr0gger_]

🤓 Reverse Engineering and LLMs, 2 years ago when I created my first agent for RE, it was already pretty impressive.

Fast forward to today, more people are using LLMs for reverse engineering.

So here are a few tools for RE you might want to check out:

➡️ Radare AI: https://t.co/drL2iIZxjk

➡️ IDA Pro MCP: https://t.co/93VQQMG7Vd

➡️ MCP for Ghidra: https://t.co/kByeUK9WmY

And this is just the beginning. What comes next is building smarter RE agents by connecting them with external tools, plugins, and knowledge sources 😉

**The screenshot below is a MCP connected to a flare-on challenge.**

[OccupytheWeb @three_cube]

Installing Your Own Command and Control Server on Kali Linux

https://t.co/n7cmQZkIEM

[mRr3b00t @UK_Daniel_Card]

Taken from a secure chat 🤣

[Security Trybe @SecurityTrybe]

9 Platforms to Get FREE Cybersecurity E-Books

1. PDF Drive
2. Heimdal Security
3. CollegeLearners
4. Endureka
5. Freetechbooks
6. Free Computer PDF
7. Online Programming Books
8. Infobooks
9. Simplilearn