Cristin Flynn Goodwin

Founder, Advanced Cyber Law & Advancing Cyber, former Assoc. GC & GM, Cybersecurity @ MSFT. I ❤️ incident response, threat intel, & skiing. @Cristin.bsky.social

[Cristin Flynn Goodwin @CristinGoodwin]

While the implementation road is unclear, the new Cyber Strategy and EO on cybercrime are here to shake things up. I share some thoughts below. ⬇️

[Claroty @Claroty]

💡 On Nexus, @CristinGoodwin writes about the release of President Trump’s Cyber Strategy for America and a new Exec Order on Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens mark a shift in tone and intent. https://t.co/i34X1Hu7ds

[Cristin Flynn Goodwin @CristinGoodwin]

This was a really fun conversation and if you haven’t given it a listen yet, I highly recommend it! Thanks @ShaneTews and @AEItech for the discussion!

[AEI Tech Policy @AEItech]

“Speed is everything in cyber defense. You might not catch the attacker but sharing how they did it helps everyone.”

@CristinGoodwin on #ExplainToShane, discussing why fast information sharing through CISA makes the ecosystem stronger.

Listen to the full #ExplaintoShane episode here: https://t.co/GqYECDYgI6

[Cristin Flynn Goodwin @CristinGoodwin]

@shehackspurple That’s wonderful, congratulations!! Hard to do these days!!

[Cristin Flynn Goodwin @CristinGoodwin]

@v3rtig0 It’s… not nice, I can attest to that!!! 🤢🤢🤢

[Cristin Flynn Goodwin @CristinGoodwin]

Whenever I head down the escalators to the N gates in the south side of SEA, the escalator zone always smells like my son’s soccer cleats. 🤢It’s the only place in the airport like this. Anyone else notice this?

[Mandiant (part of Google Cloud) @Mandiant]

New GTIG analysis reveals spyware vendor Intellexa is still going strong, responsible for 15 unique zero-days since 2021.

We discuss their exploit chain deploying sophisticated PREYHUNTER malware, plus a new delivery tactic: malicious ads.

Full report: https://t.co/fXY3zx7oAi

[Cristin Flynn Goodwin @CristinGoodwin]

This was a really active discussion and @ShaneTews did a terrific job moderating - check it out on AEI’s website.

[AEI Tech Policy @AEItech]

Today at 10am ET: Join @ShaneTews, Caitlin Clarke, @james_a_lewis, and @CristinGoodwin to go over the specifics of CISA 2015 and CISA the agency.

Watch the @AEI webinar here: https://t.co/GNcvHD6TI5

[Cristin Flynn Goodwin @CristinGoodwin]

I always love listening to @shehackspurple and secure coding is even more important as we move into the AI code era.

[Tanya Janca | Shehackspurple @shehackspurple]

My talk from @defcon is finally out! Watch 'Secure Code Is Critical Infrastructure: Hacking Policy for Public Good' here:
https://t.co/hYAVWEKvIe

If you like it, please give it a thumbs up. 👍

[Cristin Flynn Goodwin @CristinGoodwin]

Literally just starting to hang some bannister lights and immediately said out loud to no one “I’ll have to fix that cord violation before this can be finished.” 😂 Thanks to @ratemyskyperoom I know the rules!!

[Cristin Flynn Goodwin @CristinGoodwin]

@dog_rates How is Brent doing?

[Cristin Flynn Goodwin @CristinGoodwin]

As CISA 2015 has sunset, here’s a quick video of 7 ideas for TI and IR teams (and ISACs) to consider until the rules are re-established: https://t.co/nwK1Dy1xhS

[Cristin Flynn Goodwin @CristinGoodwin]

@OrinKerr It’s perfect. And also prompted me to literally shred my home office wondering where my copy was, along with an autographed moot court brief from Antonin Scalia.

[Cristin Flynn Goodwin @CristinGoodwin]

@shehackspurple Love this so much! 🐾

[Cristin Flynn Goodwin @CristinGoodwin]

This will be one to watch when it’s available online!

[Tanya Janca | Shehackspurple @shehackspurple]

I was on a panel at SecTor @BlackHatevents in Toronto alongside Chad Breslin, Brett Grady, and Ian Hassard. We tore apart Vibe Coding! What it is, the risks it introduces, and how to use AI to write more secure code. #SecTor2025 #SecTorCA
https://t.co/qIqEtkDBF7

[Cristin Flynn Goodwin @CristinGoodwin]

Manhattan was looking extra bright tonight as I flew from @BlackHatEvents #sector2025 to LGA and then on to DC for meetings Thurs and Fri on #cybersecurity future planning. W/ the sunset of #CISA2015 it should make for an interesting few days ahead. @AdvanceCyberLaw working hard!

[Cristin Flynn Goodwin @CristinGoodwin]

@CyberFavourite @BlackHatEvents Thank you so much! These issues will persist for a long time, so there’s a lot ahead to work on!

[Cristin Flynn Goodwin @CristinGoodwin]

Agentic AI is the future, and identity is at the center of that future. Security teams, corp leaders, and governments have a lot of work ahead to create the future we want. #SecTorCA #sector2025 @BlackHatEvents 🙏

[Cristin Flynn Goodwin @CristinGoodwin]

What a rush to be @BlackHatEvents talking about Agentic AI and Identity. So glad to be here on this important topic!

[Tanya Janca | Shehackspurple @shehackspurple]

Christin Goodwin Flynn at #sectorca! Opening keynote. @blackhatevents

[Cristin Flynn Goodwin @CristinGoodwin]

Had two flights today to get to Toronto and didn’t have wifi on either flight. It’s like I left Seattle and it turned into 2004. So happy to turn off Airplane Mode! 🛫😱🛬😂

[Cristin Flynn Goodwin @CristinGoodwin]

@MarkSimos Security-adjacent role that’s coming due to all the outage reporting obligations - Chief Availability Officer. That’s an area that has to grow in technical tracking and customer mapping over the next 2-5 years. Regulation is the tail wagging that dog!