OSSTMM

The official account for the Open Source Security Testing Methodology Manual. Pronounced "aw-stem". A tool designed to research how security works.

[pete @peteherzog]

https://t.co/E228wcv4jJ

[pete @peteherzog]

Every profession has its own snobs who laugh at how their colleagues get even basic things wrong. So do we hate them for being so snobby or should we be scared that we might get one of the idiots helping us instead?

[pete @peteherzog]

#Covid_19 #coronavirus #CyberSecurity

[pete @peteherzog]

#coronavirus This is not rocket biology my #cybersecurity friends. You've got this. Create a physical separation between the threat and the asset. Reduce interactions. Apply both ingress and egress filtering. Stay strict with your hygiene. Beware misinformation.
#Covid_19 #OSSTMM

[pete @peteherzog]

#coronavirus Keep calm and react. This is about security not Risk. Reduce your Attack Surface and protect your interactions. Remove unneeded services. Use controls for necessary operations. Remember a compromised host is a danger to other hosts.

#Covid_19 #CyberSecurity #OSSTMM

[BlackBerry Cybersecurity @BlackBerrySpark]

#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog https://t.co/fCUA3rLP2B

[pete @peteherzog]

So I've been busy with a bunch of projects for ISECOM and Hacker Highschool but one of the ones that's most interesting lately is using Social Engineering tricks to teach AI to learn how to understand what it reads. I'm going to see if I can present on it somewhere.

[pete @peteherzog]

Cybersecurity: keeping everything working the same while keeping unknown bad things from happening by using technologies that have unknown supply-chain effects all under time pressure.

[pete @peteherzog]

Training AI through Social Engineering Techniques on Feb. 25th in Cardiff! Just got my invite! Come see the presentation and the demo! Details here: https://t.co/CkKS20wgAX

[pete @peteherzog]

There is something pathetically optimistic about cybersafety.

There is something quietly unsettling about cybersecurity.

There’s something nauseously helpless about being breached.

What to do guidelines for what to do when you're breached: https://t.co/WZSGB7MLti

[pete @peteherzog]

Check out the ISECOM / OSSTMM chapter within! #osstmm @isecom @osstmm #cybersecurity #smartcity

[BlackBerry Cybersecurity @BlackBerrySpark]

#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog https://t.co/fCUA3rLP2B

[pete @peteherzog]

Don't forget! https://t.co/hkKrlaQx0b

[BlackBerry Cybersecurity @BlackBerrySpark]

#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog https://t.co/fCUA3rLP2B

[pete @peteherzog]

Hacking for College Students: Here's an excerpt from my book-in-process- https://t.co/SvDpsF2XPi

#CollegeStudent #college #hacking #privacy #homemadeartwork

[pete @peteherzog]

Check this out! @VereignAG @isecom #edtech #hackerhigh #osstmm

[pete @peteherzog]

Is this more like cyber-deterrence or social engineering? #CyberWarfare #cyberwar
@hackerhigh @osstmm

[Thinkst Canary @ThinkstCanary]

A repeat of our annual Black Friday Offer:

Create as many Canarytokens as you want, completely free¹ at https://t.co/712OurVlda.

At this price, you’d be crazy not to sprinkle some around your network.

__
¹ Tokens only free till heat death of Universe;

[BlackBerry Cybersecurity @BlackBerrySpark]

#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog https://t.co/fCUA3rLP2B

[raptor @0xdea]

I can attest to the fact that defenders prefer to have PoCs to better understand, prioritize, and fix security issues.

As a researcher, it’s your own bug — you can do whatever you want with it.

And please stop saying “responsible” disclosure. No need for moral judgements here.