I hate to take you away from doomscrolling ... but wanted to share a new whitepaper on Fast, Cheap and Good Threat Modeling: shostack.org/whitepapers/

I’d really like this to stop please

#FF Heba Hamdy Farahat Jessica Lynn Gottsleben🌻- In service & solidarity Caroline Wong @MalwareHuntress Lesley Carhart @THEWaleedArshad 𝙲𝚑𝚛𝚒𝚜 𝚁𝚞𝚜𝚜𝚎𝚕𝚕 William Getz Chris Hanlon Phillip Wylie @zeroXten Marc French Sam Stepanyan Andra L.

Did you know that AWSCloudTrailReadOnlyAccess currently allows s3:ListAllMyBuckets AND s3:GetObject for “*”? If you didn't, here’s a thread about it! (kudos to my @ErmeticSec colleague Noam Dahan for alerting and collaborating on the issue)

oh no here we go again

Update from #Kyiv Traffic driving fast past our hotel to GTFO If you are an American fill out the form now on projectdynamo.org Wishing all Ukrainians & remaining press a safe passage

Update from #Ukraine U.S. Embassy Bucharest we are traveling in a marked refugee bus from #Kyiv evacuees to the Siret Romanian border with many US Citizens. Please reach out & most importantly: Please help us & meet us at the border Please RT for coverage

Update from #Romania We promised to open the mini-champagne I raided from my hotel in fleeing #Kyiv when we crossed the border. Sandwiches, water, groceries, sim cards, an outpouring of support from volunteers & the county. French embassy took the pic

Update from #Romania We had our first breakfast on Romania. There's an American in a location near Russian troops in #Ukraine sent instructions to wrap himself in layers of newspaper with tape to protect against shrapnel. We're sending a bus & waiting for his exact location

Update from #Romania The details of the cyber attack I mentioned at the border is now public. Russia took out #Ukranie border control data processing with a wiper virus. It's downright cruel causing massive delays in evacuating & human suffering at the border, it's #CyberWarfare

Hello #appsec friends. I'm looking for full time employment as a security engineer. Any assistance or guidance would be wonderful and much appreciated. Thank you.

#FF R M ⚡🇺🇦 Rob C - Never hurts to be kind Haral Tsitsivas 🇺🇸🦅🇬🇷🇺🇦 haral.bsky.social Avi Douglen Grant Ongers (https://defcon.social/@rewtd) Noreen Whysel @[email protected] Harold Blankenship Andrew van der Stock @zeroXten Simon Bennetts ⚡🇺🇦 Katy Anton Saman Fatima Shrutirupa Banerjiee (She/Her) Matthew Alhonte Stephen de Vries gabriel lawrence Björn Kimminich Caroline Wong Lynn Dohm | WiCyS ♥️ Chris Hanlon Chris Kubecka 🇵🇷🇨🇿🇳🇱 🇺🇦 William Getz Tom Brennan

This is great advice for everybody :) Thank you :)

William Getz We've got hundreds of open roles across Amazon and AWS. Send me a DM if you have any questions or would like me to refer you. Ssearch and filter our open Security Engineer positions here: amazon.jobs/en/search?offs…

I did an interview about the origins of Mordheim with the ever-excellent Squidmar; youtube.com/watch?v=9QKzQt…

#FF Deidre Diamond Sarvani Chadalapaka M.S.E.E @MalwareHuntress Nina Alli George Yanulis, D.Eng. (Biomedical Engineering) Elizabeth Ramirez Jeff Foley Jeff McJunkin @zeroXten CarpeDiem Francesco Cipollone🔥Appsec and ☁️ Cloudsec 🐒 Carmen Marsh @vgatewoo Chris Hanlon wren 1dark1 (still designing logos…elsewhere) R M ⚡🇺🇦 Simon Bennetts ⚡🇺🇦 Steve Christey Coley, BS 🐀 William Getz sirocyl Haral Tsitsivas 🇺🇸🦅🇬🇷🇺🇦 haral.bsky.social Richard Greenberg

Zoe Braiterman Deidre Diamond Sarvani Chadalapaka M.S.E.E @MalwareHuntress Nina Alli George Yanulis, D.Eng. (Biomedical Engineering) Elizabeth Ramirez Jeff Foley Jeff McJunkin @zeroXten CarpeDiem Francesco Cipollone🔥Appsec and ☁️ Cloudsec 🐒 Carmen Marsh @vgatewoo wren 1dark1 (still designing logos…elsewhere) R M ⚡🇺🇦 Simon Bennetts ⚡🇺🇦 Steve Christey Coley, BS 🐀 William Getz sirocyl Haral Tsitsivas 🇺🇸🦅🇬🇷🇺🇦 haral.bsky.social Richard Greenberg I want to send a huge #SHOUTOUT to Zoe Braiterman for her dedication to *building up members of the #infosec community. *amplifying valuable #CyberSecurity content. *and volunteering with numerous non-profits! Thank you for being one of the most inspiring people on Twitter! #FF

People confuse showing vulnerability with showing weakness far too easily. In fact, the first one requires tremendous courage.

Hello OWASP® Foundation and #appsec friends. I'm trying to figure out what conferences I can attend in the next few months. I would like to learn about red team, since I have no practical experience, and dive deeper into blue team. Thank you