Bits, Bytes, and Bourbon

A Technology Journalist and cybersecurity professional. I have a mission to remove the marketing-speak from the information people receive in their news.

[Bits, Bytes, and Bourbon @DecryptedTech]

Shape the battlefield with what you have.
Cybersecurity is (almost) always a logistical conversation first, followed by tactical and strategic decisions based on that.
Most people would probably be shocked at how well a small team can shape the battlefield to devastating effect against an opponent.

[spencer @techspence]

> You don't need a lot, you just need folks who care, constantly learning, and want to do the right thing who aren't prevented from doing so.

This!

[Bits, Bytes, and Bourbon @DecryptedTech]

@rekdt @SteveJabs Did someone say Bar??

[Bits, Bytes, and Bourbon @DecryptedTech]

@OptiRefine It is baked into the marketing for sure.

[Bits, Bytes, and Bourbon @DecryptedTech]

No need to worry!!
Copilot for DNS is sure to be coming and will fix this!! Please go back to your regularly scheduled OpenClaw vulnerability...
</sarcasm>
https://t.co/gZwa0U70XC

[Two Seven One Three @TwoSevenOneT]

https://t.co/t1C6qMHBc1

[Bits, Bytes, and Bourbon @DecryptedTech]

@cheddar420yolo @randomrecruiter Never mind 10 months, 10 weeks.

[Bits, Bytes, and Bourbon @DecryptedTech]

@kmcnam1

[Bits, Bytes, and Bourbon @DecryptedTech]

And the MSRC hits just keep coming.

[Matt Johansen @mattjay]

MSRC couldn’t possibly do anything worse this week… oh. Oh ok.

[Bits, Bytes, and Bourbon @DecryptedTech]

@kmcnam1 Someone needs to have a talk that just reads off MSRC case numbers, submissions, vuln-IDs and CVEs...

[Bits, Bytes, and Bourbon @DecryptedTech]

@HackingLZ @0xTib3rius 5

[Bits, Bytes, and Bourbon @DecryptedTech]

@0xTib3rius I had to submitt an MSRC case before I replied so I could include it here...
;-)

[Bits, Bytes, and Bourbon @DecryptedTech]

@twisted_twins Scary Movie... maybe Interview.
:-)

[Bits, Bytes, and Bourbon @DecryptedTech]

Not to worry!!
You can use OpenClaw in Windows now, with your Frontier E-7 license while you let Copilot edit your art work in paint!!!
</good lord yes, sarcasm>

[The Hacker News @TheHackersNews]

🚨 New unpatched Windows flaw lets attackers steal your NTLMv2 hash.

The issue lives in the built-in search: URI handler. A simple malicious link can force your system to leak your hash to an attacker-controlled server.

Captured hashes could be used in relay attacks for deeper network access.

Details here: https://t.co/umigYNnYxO

[Bits, Bytes, and Bourbon @DecryptedTech]

@IceSolst Trusted Linux Support?
;-)

[Bits, Bytes, and Bourbon @DecryptedTech]

@CorpseKings

[Bits, Bytes, and Bourbon @DecryptedTech]

@ZackKorman Exactly.

[Bits, Bytes, and Bourbon @DecryptedTech]

Yup.
That's it.. Just Yup.

[Zack Korman @ZackKorman]

Cybersecurity is a broken industry. We rely on products that were designed to be sold, not used. And the incentives are completely screwed up.

I made this video about all of the ways things are bad, how we accidentally make it worse, and why new technology won't fix it.

[Bits, Bytes, and Bourbon @DecryptedTech]

Honestly, it really has to do with the "Original" D&D being the original game and then "Basic" D&D and "Advanced" D&D being marketed separately as different games. Next came Advanced D&D 2nd Edition which now feels like it was more about being the 2nd version of the Advanced line (regardless of the marketing and/or personal/business reasons.

[Bits, Bytes, and Bourbon @DecryptedTech]

Microsoft (and other big companies) talk of responsible disclosure as a shared responsibility to protect consumers/customers...
How about responsible marketing as a shared responsibility to protect consumers/customers?

[Bits, Bytes, and Bourbon @DecryptedTech]

It never was, but the marketing at the time (and even today) leaves this part out so people buy into it...
FUD and FOMO are powerful drugs to the "$C-Suite" when the actual costs are left out or obfuscated...

[Dave Kennedy @HackingDave]

The promise of cutting headcount for efficiencies with high subsidies of token usage no longer a reality.

[Bits, Bytes, and Bourbon @DecryptedTech]

@WahlenPMattias True Story.

[Bits, Bytes, and Bourbon @DecryptedTech]

The reality of Modern Cybersecurity and IT Operations is that you can run almost anything you want in your environment with the proper (and correctly configured) controls, guardrails, and restrictions.
The problem is that no one really wants to spend the time, money or staff on doing the latter... they only want to do the former.