AI-driven, AI-powered, AI-assisted, AI-enabled attacks What people do with AI so far: - write better phishing mails - create code (like everyone else) - create scam sites - sort and filter scan results So, AI increases their efficiency. It's not a new threat.

A few years ago, I was burned out to the point where I had nothing left for myself or my family. I was forced to make drastic changes in my life. Does that sound like you? I made a series of short videos talking about my experience with burnout and recovering from it. 1/4

Just going to post this here…

Twitter has had the sim swap password reset security flaw since before your new owners, and you can blame your users (or the old owners!) all you want but you still have to fix the problem. So go fix it.

If you work in information security or threat intelligence… *publicly* and *repeatedly* dunking on cyberattack victims isn’t cool. If it’s your role and responsibility to defend people, turning around and making fun of others is not okay. It comes across as malicious, bitter,

I saw a few videos where Americans got pop/soda drinks with their breakfast at different takeout restaurants. Do Americans commonly drink pop/soda drinks in the morning, with breakfast?

If you're heading towards burning out, do whatever it takes to not do that. Even if it means making a lot less money. Do not burn out.

SwiftOnSecurity The more I meet people and the more I look at habits in the industry, the more I find that: The folk who didn't plan to be here, are generally WAAAAY better at what they do than the folks that aspired to be in cyber security. I'm a proud, happy, Cyber Security Accident.

You can build a whole career in the fast lane by literally just finding the shitty but important problems nobody wants to solve and fixing them

"I'm a proud, happy, Cyber Security Accident." — perfectly said.

one of the most valuable things i’ve been taught is to “be acutely aware of the time period you’re living in”

⚠️PSA: Curated Intel DFIR teams noticed a severe uptick in Akira Ransomware cases in Jan 2024. Same repeated TTPs: - Dwell times of < 4 hours on average - Cisco ASA VPN for Access - WinSCP for exfil / WinRAR for compression - AnyDesk RMM for persistence - 'w.exe' Akira payload

Exactly the same as what Curated Intelligence’s DFIR analysts are also seeing ⚠️ In the “eight latest IR missions conducted by Truesec, where Akira ransomware had been deployed, the Cisco Anyconnect SSL VPN was confirmed as the entry point” truesec.com/hub/blog/akira…

New: inside the underground site where "neural networks" churn out fake IDs - I tested, made two IDs in minutes - used one to successfully bypass the identity verification check on a cryptocurrency exchange - massive implications for crime, cybersecurity 404media.co/inside-the-und…

Last week CBC Marketplace published a report and accompanying video of their hidden camera work at the big 5 Canadian banks exposing some of the heinous sales practices they saw. I want to break down another claim made in the piece: ‘the average interest you get is at least 10%’.

SEXi Ransomware Investigation Update YARA Rule for Malware Sandbox Submission Hunting: github.com/BushidoUK/YARA… Ransom Notes & Binaries Collection: virustotal.com/gui/collection… N.b. These are mainly for research rather than for defense

Why should you hate the #UNCybercrimeTreaty? That’s easy–it poses substantial risks to global cybersecurity. It fails to exempt good-faith security research, risking prosecution for security researchers and journalists whose work keeps our digital world safe!