Simon J. Bell

Cyber Security Researcher | Engineer | Building @CVEtrends | Runs honeypot @SecureHoney | PhD in CyberSecurity | Alum @RoyalHolloway (@ISGNews) & @SussexUni

[Simon J. Bell @SimonByte]

I wanted a way to monitor trending CVEs on Twitter

So I built https://t.co/YiHEgCQ2y9

- data comes from Twitter + NIST NVD APIs
- back-end: Python, Flask, PostgreSQL, and Redis
- front-end: React + Bootstrap

It's a quick MVP, but let me know your thoughts and feedback...

[Simon J. Bell @SimonByte]

@paquirodeniro2 @CVEtrends I’m exploring a few different options to get a stable feed. Scraping can be a little unreliable

[Simon J. Bell @SimonByte]

The current status of @CVEtrends

[Simon J. Bell @SimonByte]

@WynterErik Thanks Erik 🙏

[Simon J. Bell @SimonByte]

@BoyerTimTweets @CVEtrends Thanks Tim 🙏

[Simon J. Bell @SimonByte]

@KorbenD_Intel @CVEtrends It looks like the “pro” version of Twitter’s API would provide the data needed. Cost: $5k per month

https://t.co/smDgXQsmZT

[Simon J. Bell @SimonByte]

@electriclizzy @CristiVlad25 Thanks for sharing @CVEtrends 🙂

[Simon J. Bell @SimonByte]

@AdrianDittmann Cheers! And thank you for sharing @CVEtrends 🙏

[Simon J. Bell @SimonByte]

@The_Tick Hey, so the vendors and products are shown for each CVE (where published). They come from the NVD API. UI gets a bit messy when showing full CPE strings, hence condensed

[Simon J. Bell @SimonByte]

Blackbird: an OSINT tool to search for accounts by username across 153 sites (including Facebook, YouTube, Twitter, Reddit, GitHub, etc)

https://t.co/lzhe2t7oPN

[Simon J. Bell @SimonByte]

If you’ve ever wondered how cyber insurance works, here’s a great thread from my awesome colleague @balgan (also, big up the honeypots 🍯!)

[Tiago Henriques @Balgan]

A 🧵 about cyber insurance, and some myth-busting on some topics that I read this week. Full disclosure: I work for a cyberinsurance provider and will only talk about how WE are doing things,we too agree the it could be done better and decided to do it.1/N

[Simon J. Bell @SimonByte]

The Workings of Whatsapp's Backups (and why you should enable End-to-End Encrypted Backups)

https://t.co/UGQKQXMQCm

[Simon J. Bell @SimonByte]

CyberOwl: a daily updated summary of the most frequent types of security incidents currently being reported from different sources.

https://t.co/JZl01sqGKM

[Coalition @SolveCyberRisk]

We're not on vacation! It's just that Lagos, Portugal, is so beautiful ☀️ We had a very fun and productive offsite there for our European and Security teams. Big shoutout to @Balgan and #OurCoalition

[Simon J. Bell @SimonByte]

If only there was a way to play Minecraft AND monitor security alerts at the same time…

Ooh 👀

SIEMCraft - Security Information and Event Management in Minecraft

Blog: https://t.co/FJR2lvjVHJ
Demo: https://t.co/dsCYn9Si02
Repo: https://t.co/N6KNYR9Xwy
Credit: @pathtofile

[Simon J. Bell @SimonByte]

@eisler Thank you for sharing 🙏

[Simon J. Bell @SimonByte]

@ciphexe Thank you for sharing 🙂

[Simon J. Bell @SimonByte]

Decrypting your own HTTPS traffic with Wireshark

Useful for reverse engineering APIs, analysing app privacy, vulnerability research, etc

https://t.co/1m2qDBZvMZ

[Simon J. Bell @SimonByte]

@JC_SoCal Thanks for sharing 🙂

[Simon J. Bell @SimonByte]

Top 10 CI/CD Security Risks

Identify focus areas for securing CI/CD ecosystems

Website: https://t.co/0WG0cdAkHt

PDF: https://t.co/DUBsk26ovj

GitHub repo: https://t.co/H0OagHGhPs

Credit: @omer_gil & @Dkrivelev from @cider_sec

[Simon J. Bell @SimonByte]

@SOSIntel 🤣

[Simon J. Bell @SimonByte]

PM shares AWS migration experience: https://t.co/OF7LTZQ1mN