Tom🌶\(^-^)/🌶 infosec.exchange/@tomlawrence

⚠Tech Enthusiast, Open Source Advocate, Content Creator, DM's are not for tech support but forums are. ⚠

[Tom🌶\(^-^)/🌶 infosec.exchange/@tomlawrence @TomLawrenceTech]

in addition to Twitter here are all the places to connect or follow me:

Sites:
https://t.co/DGdL9UMOJj
https://t.co/BqjZ3onj4a
Socials:
https://t.co/hY399qe5H9
https://t.co/HMEJ7d0Of3
https://t.co/4y279YBMRv

[Florian Roth ⚡️ @cyb3rops]

This is what they consider a fix
#MetaAIFail #MetaAIFixFail

[Huntress @HuntressLabs]

Huntress has been named to @Inc's 2026 Best Workplaces list for the third year in a row! 🙌

We love the flowers, but here's what the recognition really means:

We're creating an environment that attracts and develops the best people to do what THEY do best.

#IncBestWorkplaces

[Florian Roth ⚡️ @cyb3rops]

When people see Microsoft spending billions on AI while researchers keep sharing stories about rejected reports, bounty disputes and bugs that somehow don’t qualify, this is the kind of meme you get

[Tom🌶\(^-^)/🌶 infosec.exchange/@tomlawrence @TomLawrenceTech]

@AccidentalCISO Yup, nice to get that feature

[45Drives @45Drives]

For organizations managing mission-critical data, ransomware is more than a cybersecurity threat it's a business continuity risk.

Traditional defenses like firewalls, endpoint protection, network monitoring, and backups are essential. But if ransomware bypasses those layers, the impact can spread quickly.

In this clip, @TomLawrenceTech explain why stopping ransomware quickly can be just as important as recovering from it.

SnapShield acts like a ransomware-activated fuse, using real-time behavioral analysis to detect ransomware activity and isolate the affected client before the threat can spread across storage infrastructure.

Learn how SnapShield helps identify and contain ransomware activity in real time: https://t.co/km4FC7NJsk

#Ransomware #DataProtection #CyberSecurity #BusinessContinuity #DataSecurity #StorageInfrastructure #45Drives

[Florian Roth ⚡️ @cyb3rops]

#Meta #MetaAIFail

[Doug Burks @dougburks]

🚀 OhMyPCAP 4.0.0 is HERE!

The ultimate FOSS PCAP analyzer just got a massive upgrade for deeper file intelligence.

New in v4.0:
• Upgraded to YARA Forge Full ruleset — more comprehensive malware & threat detection
• Exiftool + rich file metadata analysis — get more file information even if there are no YARA matches

All the power you love is still here:
Suricata alerts, file alerts, Sankey diagrams, full-text search, ASCII transcripts, hexdumps, stream carving + single Docker/Podman container (perfect for air-gapped or quick spins).

Ideal for malware analysis, incident response, threat hunting, forensics & teaching.

Who’s pulling this version right now? Drop a ❤️+ reply with your main use case (malware samples? CTFs? real-world incidents? teaching?)

#PCAP #DFIR #Cybersecurity #Infosec #BlueTeam #ThreatHunting #Suricata #YARA #MalwareAnalysis

@Suricata_IDS @lennyzeltser @chrissanders88 @sansforensics @TomLawrenceTech

[NetBird @netbird]

IT'S FINALLY HERE - if you're self-hosting NetBird you can now enable MFA for your local users. An extra security step for those who don't use an embedded IdP.

[Huntress @HuntressLabs]

Following @greynoiseio's post regarding broad SonicWall scanning, Huntress has observed a sharp increase in compromise of SonicWall SSLVPN devices from IP addresses 173.208.148[.]250 (WholeSale Internet) and 45.86.230[.]72 (Clouvider) 🧵

[Justin Elze @HackingLZ]

👀

[NetBird @netbird]

@GLiNetWiFi Comet Pro (GL-RM10) now ships native NetBird in firmware 1.9. Remote KVM access with no exposed ports.

[vx-underground @vxunderground]

🚨BRAKING 🚨: ANTHROOPK CEO SAYS 90% OF CODE WILL BE WRITTEN BY AI IN 3 TO 6 MONTHS

[Tom🌶\(^-^)/🌶 infosec.exchange/@tomlawrence @TomLawrenceTech]

@Cr3vs @IntCyberDigest McDonalds sells the most burgers, does not make them the best burgers. Also, I truly doubt your claim "There are more FortiGates deployed in the world than all other firewall vendors combined."

[vx-underground @vxunderground]

Another Windows zero day released by Nightmare Eclipse (sort of)

It turns out Microsoft just straight up didn't patch an old CVE from 2020 correctly.

https://t.co/sNWBtTo4at

[Huntress @HuntressLabs]

Our CEO @KyleHanslovan took Center Stage at #WebSummitVancouver with @Hiive_HQ CEO @SimDesai to share what founders think about liquidity in the age of AI.

Kyle's take is simple: giving employees access to liquidity isn't a distraction from building, it's part of it.

[impulsive @weezerOSINT]

I just reverse engineered the YellowKey BitLocker bypass

Microsoft shipped code that checks for a flag called "FailRelock" in every Windows 11 recovery image. When it's set to 1, after recovery unlocks your BitLocker drive, it never relocks it. All you need is a USB stick.

This code only exists in the recovery environment. Not in normal Windows. They left an entire debug testing framework in production.

[45Drives @45Drives]

One ransomware attack can shut down an entire business in minutes.

No files. No access. No time to react.

That’s why we built SnapShield a ransomware-activated fuse for your storage environment. ⚡🔒

Using real-time behavioral analysis, SnapShield detects ransomware activity and instantly isolates the infected client before the attack can spread.

The infected system gets cut off. Everyone else keeps working.

No unnecessary downtime. No full-environment shutdown.

Just smarter ransomware protection built the 45Drives way.

🎥 Watch the full video to see SnapShield in action: https://t.co/Y4YDLrpKbw

#45Drives #SnapShield #Ransomware #CyberSecurity #DataProtection #Infosec #Storage #Tech

[Secure ICS OT @Secure_ICS_OT]

Tom Lawrence (LinkedIn):