Remember, the human is not the weakest link, the human is the primary attack vector. Weakest link implies it's their fault, primary attack vector demonstrates it's security's fault, we have made security too hard for people. Keep security simple. youtube.com/watch?v=FxOIeb…

My newest book, Intrusion Detection Honeypots: Detection through Deception, is out today. 🍯 You can read about it here: chrissanders.org/2020/09/idh-re… You can buy it here: smile.amazon.com/dp/1735188301/… #idhbook

*taps mic* Ready for our next announcement? Introducing individual labs for Proving Grounds, our virtual pentesting training network. Try Play for free, or upgrade to Practice for unlimited time. Learn more: offs.ec/2DmQJQq

BREAKING: A federal appeals court just ruled that the NSA’s bulk collection of Americans’ phone records was illegal. This ruling, which confirms what we have always known, is a victory for our privacy rights.

Pls RT. We’ve got 4 Steam keys to giveaway for a USB #DFIR #forensics game that’s set to release early 2021. Comment below if interested in testing it out. The only catch is to provide feedback. #infosec store.steampowered.com/app/1379550/Th…

2020 introduced a first for a lot of things. Despite its challenges, the combat vehicles and weapon systems teams at BAE Systems brought some positive firsts of our own this year. Check them out!

How do we impeach the USB 3 naming committee?

Pro tip: Got 15 minutes to spare? Read a random Ganesh Hacktivity report. It's an incredible learning opportunity with lots of amazing write-ups on real bugs. ex. hackerone.com/reports/867513 (Congrats to Francis Beaudoin on the Shopify report!)

Attacker encounters a honeypot...

Hey guys make sure to give Xtrades a LIKE + a FOLLOW on our public social media platforms. Xtrades Youtube: youtube.com/channel/UCeBZO… XTrades TikTok: tiktok.com/@xtradesoffici… Xtrades Twitter: x.com/XtradesOfficial Xtrades Instagram: instagram.com/xtradesofficia…

TrustedSec is hiring application testers apply.workable.com/trustedsec/j/1…

Did you miss the #Log4J #webcast last week with our sister company TrustedSec? Watch it on demand to hear from experts on both of our teams: Dave Kennedy, [email protected], Tyler Hudak, & Justin Elze. bit.ly/3yXEHp7

Anyone want an early copy of my book “Getting Acquired”? This is just my candid story bootstrapping a SaaS startup at 21 with literally zero experience and getting Formerly MicroAcquire (now acquire.com)’d at age 29. It was a wild ride. Retweet and I’ll ship to the first 100 people completely free. 🤘

Chris went hard on this one.

Everyone has their hot take on Okta and what is going on. I usually don't comment on these things, but why not. Here is my take on it based on similar IRs I have worked. THIS IS ALL CONJECTURE AND I HAVE NO INTERNAL KNOWLEDGE!

For every new follower we get by closing remarks of #DEFCON30, we’ll donate $0.25 to nspfoundation is now inithackers! For every T.J. Null photo taken at Defcon that’s tweeted tagging/mentioning this account by closing remarks of #Defcon2022, we’ll donate $0.50 to Hackers For Charity.org! LFG hackers!!

The worst thing these days about breaches these days is all the hot Twitter takes from people that have 0 clue. <person> would have done XYZ even though they have never once came close to having that level of responsibility and work at Game Stop

This is the "first PC" moment for Personal AI and with it will be limitations just like when the first Apple 1 was produced in a garage. You are a pioneer. Today private and Personal AI is available to anyone. Download it for free and join the revolution. readmultiplex.com/2023/04/11/how…

Check out my new blog on effectively enforcing security controls and policies!

We're hiring! 📣 TrustedSec is currently seeking a passionate information security professional to join our Software Security Team. Read more about the position Security Consultant - Application Security and our amazing benefits on our website. Apply now! hubs.la/Q01Z82rJ0