Eric Vollbrecht

[Meredith Whittaker @mer__edith]

📣Official statement: the new EU chat controls proposal for mass scanning is the same old surveillance with new branding.

Whether you call it a backdoor, a front door, or “upload moderation” it undermines encryption & creates significant vulnerabilities

https://t.co/g0xNNKqquA

[Max Rogers @MaxRogers5]

Please turn off all internet in your organization until Monday. Thank you!

🦃🙏

[Matt Johansen @mattjay]

Here is an interesting bit about the stolen MSA signing key from the China/Microsoft Incident this week:

MS doesn't know how the hackers stole it.

[strandjs - [email protected] @strandjs]

Attackers will be exactly as advanced as they need to be. No more.

[Eric Vollbrecht @ericvollbrecht]

@strandjs "We use Macs so we are secure"
"Budget? We don't budget"

[Dejan Kosutic @Dejan_Kosutic]

__________________
“The question to ask when you look at security is not whether this makes us safer, but whether it’s worth the trade-off.”

- Bruce Schneier

[SUCCESS Computer Consulting @SCCTeam]

Season's greetings from SUCCESS Computer Consulting! We hope you have a wonderful holiday season.

#HappyHolidays #SeasonsGreetings #TeamSUCCESS

[TechMasters-TC @TechMasters]

It's Holiday Story Time! On Tuesday, 12/20, we'll be having a special holiday meeting: we'll be telling holiday stories! Bring your own: impromptu, prepared, real, invented... all are welcome. It's hybrid, so enjoy online or in person - with treats!

https://t.co/57rmteSJF6

[Eric Vollbrecht @ericvollbrecht]

#GLOAT

[Andy Greenberg (@agreenberg at the other places) @a_greenberg]

The logical conclusion of the endless cycle of security vulnerabilities, active exploitation, and bypassed mitigations in Microsoft Exchange? “You need to move off of on-premise Exchange forever. That’s the bottom line." https://t.co/qvKUs1OBeD Even Microsoft seems to agree.

[Antisyphon Training @Antisy_Training]

Trying to make that jump in security and don't know where to start? Wellll, start with "Getting Started in Security with BHIS and MITRE ATT&CK" with @strandjs!

Next run is Oct. 24-27: https://t.co/1Hzjjj9MMk

Check out what this class is all about: https://t.co/W61qx1mnhn

[Shodan @shodanhq]

The Membership sale will be live for 8 more hours. This is the only sale we'll be doing this year: https://t.co/0iqiq2vlzP

[Kyle Hanslovan @KyleHanslovan]

This default disabling of macros pipe-dream was us geeks forgetting that productivity comes first (especially when it is today’s productivity vs tomorrow’s theoretical downtime from a security incident).

[Jake Williams @MalwareJake]

Good morning. Today is a great day to review your DNS logs. You might find:
* Malware C2
* Automatic update checks for unauthorized software
* Use of unapproved SaaS (go shadow IT!)
* Website access patterns consistent with insider threats
Go get it folks!

[TechMasters-TC @TechMasters]

Announcing Speechcraft, by TechMasters! 4 Tuesdays in a row starting May 31st, from 8-9 am. Both in person - 3600 American Blvd W #115, Bloomington (https://t.co/HyTmXTMoiM) - or via Zoom at https://t.co/4HC5PtjQI2 Sign up here: https://t.co/BtnkRQCaUP

[Shodan @shodanhq]

Historical IP information in Shodan is available via the API, command-line and main website. We've made a few improvements so it's easier to pivot on it from the website: https://t.co/mrEycOf46T

[strandjs - [email protected] @strandjs]

Can I get some RT love? Below is a Ukrainian charity brought to my attention by our own Lisa Woody. It is based in her home town in Ukraine. Please donate if you can.

This is close to home for all of us.

Amazing story.

https://t.co/iattTiqTfm

[Eric Vollbrecht @ericvollbrecht]

@sec_r0 @0x1shu All of them! Nice work!

[Read Raising Expectations (and Raising Hell) @JPHilllllll]

“Why don’t you send social workers instead of the police” is looking wildly successful