Robert A.

25 years Appsec,PurpleTeam,Web Application Security Consortium(WASC) cofounder,Baythreat Organizer,Ex-PayPal/eBay/Box/Workday/Coinbase infosec.

[Robert A. @robertauger]

Announcement for my new side project!
-------------------------------------------------------
https://t.co/Ni5hnCfgpe - Release #1: Security incident response program pack 1.0

Introduction
I've worked in the security industry for over 20 years and, during this time, have built and shaped many security programs. At every company I join, I find myself recreating or developing security programs from scratch. My peers have been in a similar position, and the more people I speak with at smaller companies, the more obvious it becomes that there isn't a single location where people can download ready-to-go security programs entirely for free. There's a lot of content online, but it can be difficult to find and challenging to find something simple to start with. I created SecTemplates as a side project to provide baseline programs for smaller security teams without direct expertise in building such programs.

Security incident response release pack 1.0
I'm pleased to announce our first release, the Incident Response Program Pack. The goal of this release is to provide you with everything you need to establish a functioning security incident response program at your company.

In this pack, we cover

Definitions: This document introduces sample terminology and roles during an incident, the various stakeholders who may need to be involved in supporting an incident, and sample incident severity rankings.
Preparation Checklist: This checklist provides every step required to research, pilot, test, and roll out a functioning incident response program.
Runbook: This runbook outlines the process a security team can use to ensure the right steps are followed during an incident, in a consistent manner.
Process workflow: We provide a diagram outlining the steps to follow during an incident.
Document Templates: Usable templates for tracking an incident and performing postmortems after one has concluded.
Metrics: Starting metrics to measure an incident response program.

Announcement:
https://t.co/7cWV1EaJR8

Download on GitHub:
https://t.co/BGpGMjCa82

About SecTemplates
To provide simplified, free, and usable open-source templates to enable engineering and smaller security teams to bootstrap security capabilities in their organizations.

Upcoming releases - Penetration testing release pack 1.0
Our penetration testing release pack will contain everything you need to scope your first pentest, work with a vendor, execute, and get the types of reports you need from an external tester.

[Polymarket @Polymarket]

JUST IN: Claude Opus 4.8 reportedly found a critical Zcash bug that could have allowed attackers to create unlimited coins.

[Robert A. @robertauger]

@HackingDave What’s cool about you vs him is, you won’t built autonomous killer robots terminator style.

[Robert A. @robertauger]

@Megatron_ron @grok is this true

[Robert A. @robertauger]

@lauriewired

[The Record From Recorded Future News @TheRecord_Media]

Another security researcher, who said they lost patience with Microsoft's vulnerability disclosure process, publicly disclosed a bug without coordinating with the company https://t.co/k7yz0Kj4DC

[Robert A. @robertauger]

@BrandonFugal @Manhattva When do you anticipate seeing weaponized corporate greys with acid for blood?

[Robert A. @robertauger]

@Kobe_for_3 @teoriadacons Another light in the ground? Holy shit!

[Robert A. @robertauger]

@PeterSchiff @grok does Peter have known short positions in Bitcoin or Bitcoin related securities?

[Polymarket @Polymarket]

JUST IN: Scientists say AI has decoded communication patterns in mice, dolphins, apes, birds, whales, & cuttlefish — could eventually lead to humans communicating directly with animals.

[Robert A. @robertauger]

The AI bubble @michaeljburry is hinting at.

[Robert A. @robertauger]

@TheBitcoinConf @grok who is this and why does their opinion matter

[Thariq @trq212]

https://t.co/R6exTuF7P8

[Robert A. @robertauger]

I think Anthropic is at about the peak of it's market cap, at least for awhile. Companies will not be able to sustain these costs and will look towards locally hosted models or small language models once they become available to reduce costs.

[Robert A. @robertauger]

@anton_chuvakin Yes, you knew them BEFORE they went to jail.

[Robert A. @robertauger]

@PeterSchiff Given your role, if you hold shorts against BTC would this be considered market manipulation? Asking for a friend.

[Robert A. @robertauger]

@PeterSchiff Are you shorting Bitcoin? Be honest.

[Dino A. Dai Zovi @dinodaizovi]

This is really good, @AnthropicAI posted a document on how to apply the principles behind Zero Trust to AI Agents:

https://t.co/bli719l9M4

[Robert A. @robertauger]

@coingecko Project US debt.

[Robert A. @robertauger]

@mSanterre They are at the peak of the market and trying to get all the cash while they can before the big drop