"Attackers send these sorts of emails, so why can’t we?" In phishing, the threat actor is in a race, ending when employees raise the alarm. Lancelot4 has run >1,000 campaigns: "If employees do not trust the security department... there is no motivation to sound the alarm."

Trying to recall any historical example where the people who ban, censor or burn books were the good guys.

The autistic experience of stating a neutral fact and being responded to as if there is an underlying, unspoken antagonism in your statement.

Tomorrow, don't miss Brian Halbach Brian Halbach ☕️ presentations at Secure360 Conference conference! 🗓️ 11:15 AM CDT -"Post-COVID Physical Penetration Testing Threats" 🗓️ 1:15 PM CDT - "Advice for IoT Use in a Post-Pandemic World" secure360.org/secure360-twin…

If your entire enterprise security model crumbles because a user fell for a phish, that's not the user's fault.

Never used a #Kubernetes cluster? Want to change that? I'm teaching a free workshop Thurs, 12pm-1:30pm: Kubernetes for Newbies, Hands-On! We’ll first introduce Kubernetes, then give you a cluster and help you try out what you’ve learned. Sign up here: inguardians.com/kubernetes/

Justice Thomas concurs, saying overruling Roe isn't enough. "For that reason, in future cases, we should reconsider all of this Court’s substantive due process precedents, including Griswold, Lawrence, and Obergefell." That's right to privacy, contraception, marriage equality,etc

Digital surveillance is going to make the overturning of Roe v Wade interesting. And by interesting, I mean it’s going to be bad. I’ve said this before, I’ll say it again: delete your period tracking apps. Now.

Please don’t cut trans men and nonbinary people out of the conversation today. This is not just a women’s rights issue, anyone who can get pregnant is affected.

Too completely fucking angry to think strait or to be in the company of anyone processing. I’m gonna go log off and break shit in private until I’m calm enough to google the most constructive outlet for this feeling.

Also, advice to my fellow testosterone flesh sacks: Rage is volatile & does not bottle well. Go blow it off safely & privately. You are not helping your loved ones by forcing them to navigate your big boy anger. Find your chill and then listen to what they’re asking for.

For a long time, I thought the only way to run a successful pentesting practice was to have access to expensive tooling and software. This is completely untrue. Here's what we use internally at risk3sixty LLC to run pentesting engagements (for little to no cost whatsoever):🧵

My friend and colleague Brian Halbach ☕️ has been working real hard trying to stop the government from polluting his neighborhood with arsenic. If you can spare a little support, through a donation or sharing, please do. gofund.me/4402214e

Let the fun begin! Celebrating our 20y anniversary in great company ShmooCon! Stop by our booth, say hi, get some stickers & other things! Wanna get a special prize? We’ll be posting a question at 2pm EST. First 10 ppl to give the right answer @ our booth will get the 🎁

Special Prize Question: What generic feature in popular post exploitation frameworks allow you to route traffic inside your target’s network? First 10 people with the right answer will get a limited edition prize. In-person only:)

This is not an email I ever expected to receive or send.