joelsierra

#sase #ztna #cybersecurity #infosec #security. #Smart Simple Effective. Opinions & Views are my own.

[Andrew D. Huberman, Ph.D. @hubermanlab]

It’s amazing how much more accessible our motivation to exercise, do focused work, and generally feeling good, is, when we get our sleep-wake rhythms even mostly right. Viewing morning sunlight is a powerful lever to organize all that. It sets the foundation.

For specific protocols at zero cost, go to https://t.co/GYeOKlrJTD and put any combination of items into the search function and it will take you to the exact time stamps —meaning you don’t have to listen to entire episodes. It will also take you to our zero cost newsletter on this topic. Thank you for your interest in science!

[Andrew D. Huberman, Ph.D. @hubermanlab]

Take care of yourself and take care of others. Daily investment in the 6 pillars is the way: morning sunlight, daily movement, quality nutrition, stress control, healthy relationships, deep sleep. Re-up every 24hrs so you can contribute and support others consistently too.

[joelsierra @joelsierra]

. #infosecurity and #IT professionals, join us tomorrow for a sneak peek into the future of cybersecurity with Nikesh Arora, Nir Zuk, and other exciting speakers on why ZTNA 2.0 is the best way to secure your organization moving forward. Register here! https://t.co/AzZq7u8Jd6

[Palo Alto Networks @PaloAltoNtwks]

Wherever work happens, cyber threats are always nearby. Legacy cybersecurity can’t stop them. We need Zero Trust with Zero Exceptions. Industry-leading protection for all users, applications and data. https://t.co/O1uqF50u4m

#SecuredByPANW #WeveGotNext

[Andrew Morris (afk) @Andrew___Morris]

Widespread Atlassian Confluence CVE-2022-26134 exploitation, specifically that is *confirmed functional*, has just started. 23 unique IPs so far.

-Tags available to all @GreyNoiseIO users now
- Create an account to deploy a dynamic block list to block it

https://t.co/dbXTw2LWY6

[Volexity @Volexity]

.@Volexity discovers zero-day exploit impacting all current versions of Atlassian Confluence Server and Data Center. Attackers deploy in-memory Java implant to evade detection. Read more in our latest blog post: https://t.co/aCSwnSUfj8 #DFIR #ThreatIntel #InfoSec

[joelsierra @joelsierra]

As a #Floridian who grew up in #Miami and as big fan of @redbullracing #F1 @SChecoPerez I am looking forward to the Miami Grand Prix https://t.co/ZDLc8piWCa

[joelsierra @joelsierra]

@JasonFord You'd think we'd "evolve" by now.....

[Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid]

Unable to extract credentials via DPAPI or Mimikatz? Don't worry. Microsoft got your back. Just use 'rundll32 keymgr.dll, KRShowKeyMgr' to extract all the stored passwords on the host, be it a target server, FTP or chrome's HTTP creds, microsoft has you covered. #redteam

[joelsierra @joelsierra]

@sherrod_im We have a problem with cars speeding down our residential street....maybe Saber & Ahsoka can "slow" them down!

[Justin Elze @HackingLZ]

High gas prices and people are taking gas tank security more seriously 😂 **stolen picture

[joelsierra @joelsierra]

For those of us who could use a smile, the newest member(s) of our Family, Sable German Shepherds, Saber & Ahsoka, 4months old

[joelsierra @joelsierra]

@sherrod_im Sage Advise @sherrod_im

[Andrew Morris (afk) @Andrew___Morris]

In light of the Russian ground invasion of Ukraine, we (@GreyNoise) are doing a few things to be as helpful as possible for network defenders in Ukraine. I understand that the impact will be small all things considered, but this is just where we are:

[joelsierra @joelsierra]

Solid advice!

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

I've had 3 calls so far today (it's not even 10) about defending against Russian cyber ops

I'm tired of having the same call... so... here's what I've told everyone. This is the playbook you need... but it's not going to be what you think it will be.

Ready? Lets go!
1

[💻 Sherrod @sherrod_im]

I want to talk a little bit about Emerging Threats IDS open and pro. First the pro set is a set of curated custom made detection rules you put in your suricata or snort instance.
🔜 🧵

[joelsierra @joelsierra]

@YoFrankieB

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

Just got off phone with a client. Log4j is in their network. Vendor claims patch will be available next release... which is multiple months from now.

Here's what you do if you're in this situation.

1. Keep calm. There's no need to panic.
2. Carefully read this thread.

1/?

[Lane Roush @laneroush]

This isn’t possible without our amazing customers and partners! Thank you! The journey is just getting started.