nubesque

Securing the cyber. Self-proclaimed infosec addict and matchmaker. Also analysis and strategery.

[nubesque @nubesque]

@renewabelle @news6wkmg @WESH anything?

[nubesque @nubesque]

@HackingDave 5. Cheered when it hit the corner

[nubesque @nubesque]

@threathuntergrl Can’t imagine the brands want to encourage customers to eat their kitty litter or dish soap. How completely hair-brained of @UberEats

[nubesque @nubesque]

@kylieengineer Disagree. If anything, cyber security education needs more focus on effective communication. The quality of writing and presenting I see from IT people, developers, technology leadership, and, yes, infosec people, is embarrassing.

[nubesque @nubesque]

@j_opdenakker A reliable and robust asset management program #caasm

[nubesque @nubesque]

@c0dehard Black Window

[nubesque @nubesque]

@ccieby30 Experience yields wisdom and knowledge.
Certificates yield knowledge not wisdom.
Problems require a mix of knowledge + wisdom.
The mix varies per profession, industry, specific problem.
It's possible for 1 person to have the wrong mix for one problem/job, but right for another.

[nubesque @nubesque]

Some red flags:
1. No security “portal” eg public visibility into SOC 2, public statements, etc.
2. No obvious way to report bugs or vulns, and/or no bug bounty
3. Offices in “at risk” geos
#cybersecurity

[David Spark @dspark]

Security peeps did you ever stop doing business with a company, as a consumer, when you realized what a disastrous security program they had?

[nubesque @nubesque]

@dspark I have disqualified vendors because of their security program, or lack thereof.

[nubesque @nubesque]

@Sophos Sophos On Computer

[nubesque @nubesque]

@vickieli7 I’m friends with the CEO - a vendor

[Matt Swider (The Shortcut) @mattswider]

🎁🎁🎁 1M Mega-Giveaway: @mattswider will reach 1 million followers soon. Matt + @techradar are giving away consoles + accessories to celebrate🥳

👉How to enter: https://t.co/p3b8CeFTtr

♻️♻️RT this

✅ PS5 bundle
✅ Xbox Series X
✅ Zelda JoyCons

Ends when Matt Swider hits 1M

[nubesque @nubesque]

@kwestin ELF stack

[nubesque @nubesque]

@sawaba @DougDeMuro They used the wrong font.

[nubesque @nubesque]

What if when @Microsoft estimates time to read an article on their docs site, it's based on Cortana's eye tracking + Edge telemetry + some AI to give you a personalized estimate of how long it takes YOU to read the document? #privacy #dystopia

[nubesque @nubesque]

Will @PaloAltoNtwks buy @Tanium or @vicariusltd or @Automox to round out their portfolio? #infosec #platform

[nubesque @nubesque]

@bit4bitnz IDK if VT provides a timeline (if you have a paid account?) but that would be a great research project!

[nubesque @nubesque]

If it matters, 7/2/2021 9:10 GMT detections for #kaseya binaries
https://t.co/mecNrnQ6Vy and https://t.co/4tBuWGkojo

CrowdStrike: yes
PaloAlto: yes
SentinelOne: no
BlackBerry/(Cylance): yes
elastic (Endgame): yes
MSFT: yes
Mcafee: yes
Sophos: yes
Symantec: yes
Webroot: yes

[nubesque @nubesque]

The "fix" is to change the default factor to "google authenticator" (TOPT). Other providers can support changing factors on the fly, but that's not possible here.

[nubesque @nubesque]

After the latest @lastpass update, the lastpass app needs the authenticator app in order to do mfa, but the authenticator app needs lastpass to restore the settings, creating a circular dependency. This can't be their intent.