Tabletop Scenarios

THESE 👏 TWEETS 👏 ARE 👏 FICTION👏

This account tweets fictional or headline inspired breach scenarios.

To play: Share opinions on prevention or response steps.

[Tabletop Scenarios @badthingsdaily]

All of the below tweets are fictional conversation starters meant to kick off security tabletop conversations. #DontPanic

[Tabletop Scenarios @badthingsdaily]

That AI agent you deployed that trained on all of your internal corporate documents is now spilling tea to anyone who chats with it.

[Tabletop Scenarios @badthingsdaily]

A sales surge over the last three months is publicly attributed to large purchases by an espionage group

https://t.co/fOLinXJ9z9

[Tabletop Scenarios @badthingsdaily]

A startup has bought a domain associated with your brand without your permission and run your content through an AI engine, linking to their company

[Tabletop Scenarios @badthingsdaily]

Someone just submitted the phrase "bounty plz" to your bug bounty program.

They've also attached a digest of that phrase signed by keys held in one of your HSMs.

[Tabletop Scenarios @badthingsdaily]

Most of your CI/CD pipeline has broken after a dependency was detected as malware.

[0x397==919==0q1627 @jh__1995]

Hey @badthingsdaily, this one could be for you.

"Most of your CI/CD pipelines suddenly break."

[Tabletop Scenarios @badthingsdaily]

Your remote support employees have been successfully bribed.

[Tabletop Scenarios @badthingsdaily]

Billing alerts for outbound data transfer have started going off in object storage where your backup databases are stored.

Happy Thanksgiving

[Tabletop Scenarios @badthingsdaily]

A competitor has submitted a functionally identical proposal to one you’ve submitted that is only dollar under yours.

The potential client, confused, asks if this is some kind of joke. They never shared your proposal, nor have you.

[Tabletop Scenarios @badthingsdaily]

A military has found a way to blow up a product you sell, remotely.

https://t.co/yGYWviJsAg

[Tabletop Scenarios @badthingsdaily]

An executive of yours has suddenly decided to correct people who are wrong on the internet.

The wrong people very quickly start paying attention to your executive, who was not previously in the public eye.

[Tabletop Scenarios @badthingsdaily]

An incident has just been declared after evidence of an intrusion was discovered.

All relevant on-calls have been paged.

Happy Labor Day

[Tabletop Scenarios @badthingsdaily]

An unknown threat actor had gained access to the Company’s Google G-Suite account and changed passwords of all users of the Company’s G-Suite products (GMail, GDrive, G-Suite, etc), thereby denying access to all users.

[Will @BushidoToken]

“An unknown threat actor had gained access to the Company’s Google G-Suite account and changed passwords of all users of the Company’s G-Suite products (GMail, GDrive, G-Suite, etc), thereby denying access to all users having an unicoin email address” 👀

[Tabletop Scenarios @badthingsdaily]

An adversary has sent a specially crafted packet designed to exploit a vulnerable tcp/ip stack in a server you’ve exposed to the internet.

[Tabletop Scenarios @badthingsdaily]

Recovery keys necessary to recover from an outage are inaccessible due to the same outage.

[Tabletop Scenarios @badthingsdaily]

The management control plane you would normally use to respond to an outage is down because of the outage

[Tabletop Scenarios @badthingsdaily]

Nearly all customers are reaching out simultaneously after your product has triggered an outage.

[Tabletop Scenarios @badthingsdaily]

All systems running a particular EDR are crashing.

[Tabletop Scenarios @badthingsdaily]

All of your corporate cellular call and text records are leaked publicly.

[Tabletop Scenarios @badthingsdaily]

Your hosted data warehouse has notified you of a breach.

[Tabletop Scenarios @badthingsdaily]

Your cloud provider has deleted one of your accounts.

[Azathoth @judges119]

new one for @badthingsdaily: one of the top three cloud providers has a misconfiguration and deletes your entire account by accident and can't recover it.