Dan Goodin
Dominic White“Learning creates more competence but first, it amplifies our feelings of incompetence.”
| Website | https://cloudcurio.us |
| Blog | https://amitaico.substack.com |
| GitHub | https://github.com/korniko98 |
| https://twitter.com/AmitaiCo |
Amitai Cohen
- 145 Followers
- 211 Following
- 94 Posts
✦ researching threats @wiz 🐞 maintaining vulns @cloudvulndb 🎙️ casting pods @ http://cryingoutcloud.io/
The plot in this tj-actions supply-chain attack thickens. Another widely used Github Actions, reviewdog/action-setup, was also tampered with, using similar but not identical methodology. From @wiz
Wiz 
🎧 Listen to #IBM's 'Chief Llama Officer' 🦙, @jerry about his journey from crashing computers at 10 to leading cloud security, and hear his journey & insights on #AI, acquisitions, and more.
Tune in to our new episode:
🎧 Spotify: https://open.spotify.com/episode/2DwPFc7pfb5cOWpnffmDu7?si=n-kVjFtkQdGlx2I3osKGdQ
🍏 Apple Podcasts: https://podcasts.apple.com/il/podcast/crying-out-cloud/id1675289400?i=1000658039999
📺 YouTube: https://www.youtube.com/watch?v=Zvi71YLSnfc
CROC Talks: Chief Llama Officer and IBM CISO - Jerry Bell
danielleaminovI've been looking into how the xz backdoor works and drew this sketch to make it easier to understand.
I'll update it as new information comes to light ✨
I'll update it as new information comes to light ✨
Sharon GoldbergFinal projects for my infosec course at BU are in - students are asked to create a podcast about a security incident that was in the news in the past year. These are too good not to share, so posting a few here! 🧵
PS - If you're looking for new grads for your infosec roles, DM me. I have tens of qualified candidates :)
Jeffrey YasskinThem: Please review this documentation.
Me: Question?
Them: Answer. <No change to the documentation>
Me: Please put that in the documentation.
Me: Question?
Them: Answer. <No change to the documentation>
Me: Please put that in the documentation.
@GossiTheDog hi Kevin, what's the best way to reach you? any chance you could DM me?
Possible CVEsEnterprise class starships allow physically proximate subspace rifts to cause a denial of service if broadcasting a resonant-frequency audio signal. This can be mitigated by an uplifting musical ensemble performance which collapses the quantum probability field.
Alex StamosSenator Wyden seems to be the only member of Congress really paying attention to one of the most important enterprise cloud hacks in history.
https://www.wyden.senate.gov/imo/media/doc/wyden_letter_to_cisa_doj_ftc_re_2023_microsoft_breach.pdf
@GossiTheDog might interest you