Chris King (@[email protected])

Recovering security researcher, vul disclosure nerd, DFIR, CTI, manager, loves hacking all the things. [email protected]

[Chester Le Bron @123Le_Bron]

I am back with a new blog mini series. This is for any of my Incident Response folks or people who need to secure their AWS environment but are still mostly new to it. Or anyone who believes investigating on-premises is the same as the cloud. #AWS #TDR

https://t.co/1u4mdY9VnG

[Florian Roth ⚡️ @cyb3rops]

Ah 👀
https://t.co/KfrjaVEkWO

[Andrew Morris (afk) @Andrew___Morris]

Today we're releasing details of how our AI, Sift, stole a 0day in an IP Camera and we reported it and got it fixed.

To reiterate- we did not develop the vuln.

1st blood is overrated. I'm all about 2nd blood.

Marketing blog here: https://t.co/MRDJaNNi7n

Grimoire blog below:

[CYBERWARCON @CYBERWARCON]

We're excited to introduce Kyle O'Meara, a cybersecurity veteran with 18+ years in threat hunting & adversary tracking. 👏🏻

From the NSA to Dragos, Kyle has been at the forefront of critical cybersecurity efforts. 🙌🏻

See y’all soon at #CYBERWARCON!
https://t.co/12b29mb4fu

[Chris King (@[email protected]) @armengar]

@FrankMcG I’ve seen this in academic circles such as https://t.co/mErX3IefPR

[Steve Christey Coley, BS 🐀 @SushiDude]

25 years ago on Sep 29, 1999, MITRE announced the CVE Initiative. There's too much to say, so I'll be brief. CVE was not possible without a concerted, mostly-voluntary, community-wide effort. It's accomplished a lot, but it's daunting to see how much still needs to be done...

[Chris King (@[email protected]) @armengar]

@Andrew___Morris Ah well…worth a guess. I’ve been to probably every Irish pub in the DMV and it looked familiar

[Chester Le Bron @123Le_Bron]

Finally got around to finishing my first blog post. If you are doing AWS detection engineering, you may find this useful.

https://t.co/n71KcbDgXT

[Chris King (@[email protected]) @armengar]

@NicoleBeckwith @c_APT_ure This has been sorely needed!

[Chris King (@[email protected]) @armengar]

If you are at BH on Thursday - be sure to watch my amazing teammates Rushank and Ryan present on how they broke Immutable Backups: https://t.co/6Pk0HOa8UC

[Chris King (@[email protected]) @armengar]

https://t.co/0bAMn7nDgj
🤔
@GuyDealership

[Chris King (@[email protected]) @armengar]

@SwiftOnSecurity Look at https://t.co/Ma1DHKot6h they have an excellent dataset.

[GreyNoise @GreyNoiseIO]

🚨 We're tracking new 0-day RCE CVE-2024-3400 in Palo Alto Networks PAN-OS 10.2-11.1 allowing unauthenticated root access in certain configs, check out the blog for more details. https://t.co/o9FV8HGah3

[Chris King (@[email protected]) @armengar]

@GergelyOrosz @_ontologic It’s closer to 10 years old, started at Google as their BeyondCorp model before getting generalized.

paper on it: https://t.co/t4iiosVH3O

[SpecterOps @SpecterOps]

In his latest blog, @harmj0y unpacks one specific use case for large language models in the security domain & announces RAGnarok, a proof-of-concept local chatbot frontend, for Nemesis.

Check out the post to learn more! https://t.co/NH2BJbt5IC

[Chris King (@[email protected]) @armengar]

@ImposeCost This is something we talked about at CERT/CC a few years ago. We had the benefit of being a non-profit and the thought was the donation of a vulnerability would be tax deductible based off the value. Lawyers didn’t think it would past muster in current law

[Chris King (@[email protected]) @armengar]

@nas_bench Continuous testing of every rule where possible, with adversarial test cases, based off threat intel

[Chris King (@[email protected]) @armengar]

@Andrew___Morris @GreyNoiseIO Welcome to the great game.
Paging @zmanion