Todd P.

Husband \\ Dad \\ Veteran 🇺🇸 \\ Kicking MCAs in the TTPs \\ Assume sarcasm

[Todd P. @toddatlarge]

@cheddar420yolo @ThinkWiselyMatt Sounds like a good plan.

[Todd P. @toddatlarge]

The nerd has made it home safely.

[Todd P. @toddatlarge]

@P4LSEC I probably speak for everyone that was there; we had a great time.

[Todd P. @toddatlarge]

It’s been a long week in Miami and I’m ready to see my wife and kiddos in a few short hours.

Meeting in person and spending time with my coworkers was a lot of fun. I experienced a significant amount of meaningful conversations.

My social battery definitely needs a recharge 😅.

[Todd P. @toddatlarge]

I mentioned my social battery being low. I ended up sitting next to a guy working in cyber and AI governance who is also former Army and we had the same MOS.

We talked the entire flight. 🤣🤣

[Todd P. @toddatlarge]

It’s been a long week in Miami and I’m ready to see my wife and kiddos in a few short hours.

Meeting in person and spending time with my coworkers was a lot of fun. I experienced a significant amount of meaningful conversations.

My social battery definitely needs a recharge 😅.

[Todd P. @toddatlarge]

@P4LSEC Sweet! How was it?

[Todd P. @toddatlarge]

@ImposeCost

[Todd P. @toddatlarge]

I don’t even know if this guy slept last night. 😅

[Andrew Thompson @ImposeCost]

Years ago I challenged our community to do a better job at characterizing exploitation "in the wild." There's lots of reasons for why, but the primary reason at the time is security researchers were using "in the wild" as the signal that it was low to no risk to publish offensive capability. "In the wild exploitation" at one victim in one country is not anywhere near the same "mass exploitation."

PHP2SHELL is a good example of where there are private exploits that are not publicly available, and there are less potent exploits that are, and there's mass exploitation *attempts* using these less potent exploits and they aren't really working in real scenarios relative to the volume of attempts. Does that matter? It does. It's bought a lot of time for down stream would be victims to put durable mitigations in place.

[Todd P. @toddatlarge]

Such a good guy.

[Andrew Thompson @ImposeCost]

An actor is attempting to exploit PHP2SHELL vulnerabilities in order to install patches. Interesting.

[Todd P. @toddatlarge]

Nice sunrise this morning.

[GreyNoise @GreyNoiseIO]

Detection engineering is drowning in manual work. Agentic workflows can change that. In this RSAC webcast, GreyNoise’s Mark Mager walks through how to:

➡️ Identify where agentic workflows remove friction
➡️ Prioritize R&D investment across an agentic analysis pipeline
➡️ Apply frontier LLM outputs to craft more effective detection logic for critical threats

Register here: https://t.co/D57I8OXEwi

[Todd P. @toddatlarge]

Hello….

[Todd P. @toddatlarge]

@Eagles 35 rushing yards? Damn. lol. Can’t win games with a lacking ground game.

Hopefully they can turn it around for people that are emotionally invested.

[Todd P. @toddatlarge]

You can run up a $1k real quick at Men’s Warehouse.

[Todd P. @toddatlarge]

@ZackKorman @cheddar420yolo

[Todd P. @toddatlarge]

@CyberDxme @_Invadergirl https://t.co/nuiIMFpbwE

Do it.

[Todd P. @toddatlarge]

@_Invadergirl everywhere!!

[Justin Elze @HackingLZ]

Office is coming along nicely

[Todd P. @toddatlarge]

@cheddar420yolo @ZackKorman The nerds are gonna wipe us out. It’s the legit revenge of the nerds.

[Todd P. @toddatlarge]

This has evolved. The neighbor below gave my contact info to other neighbors because they’re having tech issues.

Take care of the elders. Also, talk to them and you might learn something about life you’ve never considered.

[Todd P. @toddatlarge]

My 82 year old neighbor downloaded an android app called ‘Secure Cleaner’ that is adware. It was playing video ads every 30 seconds that looked like YT shorts. It scared the shit out of her. 😂😂

Her phone was basically unusable until I nuked the app.

She’s good now though….

[Todd P. @toddatlarge]

@_Invadergirl Hell yeah!!