Kevin Holvoet

Cyber Threat Research Lead @CCB_Belgium/@CCBalert | #FOR578: #CTI @SANSInstitute instructor | @CuratedIntel | loves to try new things: food, beer whisky, etc.

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Mathy Vanhoef @vanhoefm]

We found that Wi-Fi client isolation can often be bypassed. This allows an attacker who can connect to a network, either as a malicious insider or by connecting to a co-located open network, to attack others.

NDSS'26 paper: https://t.co/MI567gb2Jr
GitHub: https://t.co/Ns9nn9JEZM

[Kevin Holvoet @digihash]

@craiu Merry Christmas my friend 🎄🎁

[JPCERT/CC @jpcert_en]

New Blog Post: YAMAGoya: A Real-time Client Monitoring Tool Using Sigma and YARA Rules
https://t.co/gstGFRdDVV

[Kevin Holvoet @digihash]

It will be awesome. If you don't know what @MISPProject is yet or you want to see how you can give more context to events, join this session 😉.

For anyone in Riyadh, I'll be there from 11 to 16 October. So if you want to meet up, ping me.

[SANS Institute, EMEA @SANSEMEA]

🌍 Join the final nights of Cyber Safari 2025 — in Riyadh or online.

📅 13 Oct | From Intel to Action with MISP & AI | @digihash
📅 20 Oct | Modern Search Techniques | @markjx01

👉 Secure your spot: https://t.co/iJEX7kEc43

#SANSCommunityNight #Riyadh

[SANS Institute, EMEA @SANSEMEA]

🌍 Join the final nights of Cyber Safari 2025 — in Riyadh or online.

📅 13 Oct | From Intel to Action with MISP & AI | @digihash
📅 20 Oct | Modern Search Techniques | @markjx01

👉 Secure your spot: https://t.co/iJEX7kEc43

#SANSCommunityNight #Riyadh

[International Cyber Digest @IntCyberDigest]

‼️🚨 Red Hat breached: Crimson Collective stole 28k private repositories, including credentials, CI/CD secrets, pipeline configs, VPN profiles, and infrastructure blueprints.

Our analysis of obtained data: 👇

[Kevin Holvoet @digihash]

@IntCyberDigest https://t.co/fJGhE3J0Fl unroll

[CTI-CMM @CTIcmm]

🚨 Big News! Version 1.2 of the CTI-CMM framework is here! 🚨

We’re proud to officially debut this release at the FIRST CTI Conference during the talk: 🎤 "Immaturity Can Be Fun: Just Not in a CTI Program" 🎤
by @gertjanbruggink

What’s new in v. 1.2?
✨ A brand-new CTI-specific metrics section
📚 An expansive intel data source library
🛠️ An updated CTI program assessment tool

You can download v. 1.2's PDF at https://t.co/cSWsnj3ZaQ and a standalone spreadsheet of the metrics and the CTI program assessment tool on our Github page: https://t.co/HYgjb8LcRp

This update wouldn't have been possible without the incredible team of volunteers who poured their time and expertise into making it happen. A huge thank you as well to @Intel471Inc for their invaluable behind-the-scenes support and to our advisors and the wider community—your feedback and insight continues to push the CTI-CMM forward. 🙌

Let’s keep raising the bar for Cyber Threat Intelligence.

#CTICMM #CTI #ThreatIntel #FIRSTCTI2025 #CyberSecurity #Intel471 #CommunityDriven #BetterTogether

[Kevin Holvoet @digihash]

After two years, the @CCBbelgium is thrilled to invite you to the highly anticipated return of the Quarterly Cyber Threat Report (QCTR) event on Friday 25 April 2025, from 14h00 to 16h00 (CET/UTC+2).

Cyber threats never rest—and neither do we. Join us https://t.co/RCLijmEt4M

[CTIDAO @ctidao]

👀 Probably nothing

[Kevin Holvoet @digihash]

Our next @CCBbelgium #CyberTips session on Ransomware will start in 30 minutes. Be there or be square! Register here: https://t.co/cpV4mts6Wp

[AzAl Security @azalsecurity]

https://t.co/Ic5iuQbJ9b
The Russian State Duma is discussing tougher legislation to combat cybercrime. Proposed measures include increasing prison sentences for hacking, data theft, and attacks on critical infrastructure to between five and fifteen years, depending on the severity of the offense. Penalties for large-scale cyber fraud would also become harsher, carrying sentences of up to twelve years. In addition, the proposals call for the confiscation of all assets obtained illegally, including cryptocurrency, and grant banks the right to freeze suspected illicit funds.

Convicted hackers would be prohibited from working in IT, finance, and government roles for up to ten years following their release. Plans also include bolstering international collaboration to extradite offenders who have fled abroad, as well as the possibility of holding public trials for cybercriminals. All of these initiatives remain under discussion.

[Kevin Holvoet @digihash]

If you took a year off #cybersecurity this is a great overview of the biggest or coolest stories of 2024.
Kudos to @craiu, @juanandres_gs, and @ryanaraine on the Three Buddy Problem podcast. It's great to hear your raw opinions on different topics every week. Keep going in 2025💯

[Costin Raiu @craiu]

The Best Cybersecurity Stories of 2024 you might have missed: https://t.co/LlVkpSmBvK featuring @ryanaraine and @juanandres_gs

[Ryan Naraine @ryanaraine]

The full problem is upon YouTube @craiu @juanandres_gs
https://t.co/8vVDNQXfeC

[CTI-CMM @CTIcmm]

Today, we'd like to introduce a new monthly spotlight initiative where we highlight one member of the #CTICMM team, provide a brief snapshot of who they are, what their role is on CTI-CMM, and showcase some of their contributions to the #CTI community writ large.

We’re thrilled to feature Colin Connor today, one of the CTI-CMM project's founding members and overall project leads. Colin currently leads the CTI Services team at @IBM where he works with clients to build, assess, enhance, and integrate the #cyberthreatintelligence function into their organizations. Colin previously served as the director of Cyber Intelligence and Forensics at @ATT, where he built the CTI program from scratch and provided enablement training on its role to over 2,000 employees. Colin started his career as a network architect for next generation weather satellites.

Colin hails from #Colorado where he and his wife enjoy going to concerts, rooting the local Colorado sports teams with his kids, and enjoying the Colorado outdoors life via hiking, rafting, and snowboarding.

For those of you who didn't catch it, Colin and Mike DeBolt were recently featured on the @sansforensics STAR webinar where they provided an overview of CTI CMM, its origin story, and spoke about some of its design decisions. The archived recording is available here: https://t.co/l6XUQVh7ab

[Kevin Holvoet @digihash]

The global #operationmagnus took down servers of #RedLine and #META infostealers and disrupted the operations of the criminal groups. Two people were also arrested in #Belgium :). See https://t.co/tQ6OTDVxDO. Cudos to all law enforcement involved including @federalepolitie! 👏💪

[CTI-CMM @CTIcmm]

Its been about two months since we released the Cyber Threat Intelligence Capability Maturity Model #CTICMM version 1.0 publicly and we'd like to ask you all for feedback on it as we are just starting the planning cycle for updates to incorporate in version 1.1. Particularly, we'd love to hear how you are using the framework, what you've liked about it, and what didn't quite feel right.

To facilitate a structured feedback capture, we've created this short survey: https://t.co/AD7xthpxQF

Also, @AugustVansickl2, our Domain lead for the Assets section is actively looking for feedback on some future changes. Help a brother out! https://t.co/p4oe8nbDVn

Curious to find out more about CTI-CMM? Visit our website at https://t.co/cSWsnj3ZaQ #CTI #cybersecurity

[Kevin Holvoet @digihash]

@4enzikat0r @CertifyGIAC Great achievement, congratz!

[Mullvad.net @mullvadnet]

A reminder sent to the European Parliament and the European Council: this is what Chat Control and the Going Dark initiative will result in – total surveillance and the end of secure and private communication. You can read the articles at https://t.co/xQcxLUt4YA