Nathan Sweaney

- Cybersecurity guy
- BSidesOK Organizer (

[Nathan Sweaney @sweaney]

I've mostly left this platform other than occasional browsing.

If you came here after my TEDxUTulsa talk, it's kind of ironic huh?

Find me on Linkedin or at https://t.co/S7vXblb21b

[Nathan Sweaney @sweaney]

Except this also killed/disabled significant numbers of the combatants. (as well as lots of innocent folks)

What's next? They can't realistically invade Lebanon, so what's the next move?

5/5

[Nathan Sweaney @sweaney]

I think Israel's prepping for a large-scale attack.

1/?

[Nathan Sweaney @sweaney]

I can't even comprehend how much effort this all took. But you don't waste two major attacks like this for no reason. This sounds more like comms blackout before an attack. Like if we jammed satellites and destroyed cell towers before an invasion.

4/?

[Nathan Sweaney @sweaney]

Availability is the third leg of the CIA triad. It may not be the result of an attack, but it's definitely a security incident that generated a lot of damage. Not to mention the reputational harm it poses to automatic updates.

[George Kurtz @George_Kurtz]

Today was not a security or cyber incident. Our customers remain fully protected.

We understand the gravity of the situation and are deeply sorry for the inconvenience and disruption. We are working with all impacted customers to ensure that systems are back up and they can deliver the services their customers are counting on.

As noted earlier, the issue has been identified and a fix has been deployed. There was an issue with a Falcon content update for Windows Hosts.

For the latest information that we will continuously update, please refer to the CrowdStrike website (https://t.co/oTrsi3fNPb), my posts on LinkedIn, and my posts on X.  I will continue to provide updates to our community and the industry as they become available.

[Nathan Sweaney @sweaney]

"If you're craving Mexican food..." is functionally equivalent to " or 1=1;--"

Prove me wrong.

(h/t @JCesar2045 for inspiration)

[Kevin "Johnson" Tackett @secureideas]

This week, NIST released the highly anticipated update to the Cybersecurity Framework (CSF). Here’s everything you need to know about v2.0.

https://t.co/n1UYYa2voP
#cybersecurity #ProfessionallyEvil #NIST #CSF #CybersecurityFrameworkv2

[Tom🌶\(^-^)/🌶 infosec.exchange/@tomlawrence @TomLawrenceTech]

"The cybersecurity reality we live in now is teenagers are running around in organized crime gangs with digital bazooka’s. They probably have a better asset inventory of your network than you, and they don’t have to wait 4 weeks for 38 people to approve a change request for patching 1 thing."

If you think that patching critical public facing infrastructure within 24hrs is not a realistic goal then tell me why!

Despite all the security awareness we have here in 2023, all the new fancy tools we have, and all the celebration of coordinated government take downs of threat actor groups, cybercrime gangs are still on the rise hitting more companies and making more money than ever this year.

You need to be able to identify and patch something like CitrixBleed within 24 hours — if you cannot, there is a very real possibility it isn’t the ideal product fit for your company due to the level of risk it poses, and you need to rethink if the architecture and look for a solution you can manage.

The LockBit ransomware group has assembled a strike team to breach banks, law firms and governments and I don't see this stopping anytime soon.

Follow this link for Kevin Beaumont's @GossiTheDog deeper dive into the topic:
https://t.co/uQsyDp4ALD

[Nathan Sweaney @sweaney]

Dear <every streaming service>,
Please add an option to reset the view history for a series. If I return to a show that I watched 9 episodes of 8 years ago, I really don't want it to start on episode 10 after every episode.

[Antisyphon Training @Antisy_Training]

In the PCI context, what's the difference between a ROC and an AOC? Tell us what you think!
Learn the answer to this question and more in @sweaney 's upcoming Pay-What-You-Can class, “PCI 101,” on June 6! Details and registration: https://t.co/Iiw1jnIS75

[Nathan Sweaney @sweaney]

Let me ChatGPT that for you is the new Let me Google that for you.

[National Park Service @NatlParkService]

If you come across a bear, never push a slower friend down…even if you feel the friendship has run its course.⁣⁣

[Siqi Chen @blader]

okay so AI can literally read our minds now.

a team from osaka was able to reconstruct visual images from mri scan data using stable diffusion.

first row is the image presented to the test subject, second row is the reconstructed image from mri data.

wild.

[Nathan Sweaney @sweaney]

"The illiterates of the 21st century aren't those who can't read and write. It's those who refuse to unlearn and relearn." - Michel Sirius, #RSPAInspire @InsideRSPA @BlueStarCan

[Nathan Sweaney @sweaney]

@SprocketyGreg @secureideas Sorry, that was intended to be sarcastic. I'm one of the old farts on the team that laughed at the quote.

[Nathan Sweaney @sweaney]

Company strategic planning question: how do you stay relevant to younger generations when your executive quotes Carol Burnett? When does a weakness become a threat? #LeadershipRetreat #SWOT #BeachWeek @secureideas

[Nathan Sweaney @sweaney]

When a coworker gets a sword for his birthday & everyone else on the call mentions they happen to have a sword within reach as well. #nerds @secureideas @hotdogggitty @RonJonArod @JGillam