815 Followers
126 Following
234 Posts
I am the man in the lighthouse for my org. Full #DFIR owner - IR, TH, TI, FOR. Alerting. Vuln mgmt. Threat mgmt. Brush up against policy. Teaching governance that Availability is part of security. Finally got my Masters. Sho'nuff. Living that Wisconsin life.
The nightmare of cold call sales people.
Good for the gander, good for the goose.
"Watching the same people make the exact same cyberscurity mistakes over and over again" in a nutshell
also infosec shitposting in a nutshell
More tornados. Yay.

I could be playing #enshrouded right now, but I’m sitting in a meeting falling asleep instead.

This is a game that brings me joy. Not a lot of that currently.

#rpg
#arpg
#gaming

⚠️ Heads up #infosec community
Found a malicious GitHub repo posing as a curated list of cybersecurity Telegram channels.
Every link in the README points to the same ZIP payload containing luad.exe (malware family: Alevaul). Detected by Microsoft Defender before execution.
VT 0/91 on URL but MDE flagged it as True Positive. Classic evasion.
🔗 https://github.com/simplefastfunnels254/tg-cybersec
Reported to GitHub under Active Malware / DSA Article 16.
#CyberSecurity #ThreatIntel #MDE #Malware #GitHub #OSINT

I've read the (early) text of HR 8250, the "Parents Decide Act." It is nearly structurally identical to California's law. Actually, it is less rigorous, as the legal obligation is entirely on OS creators, not app developers.

Again, now is the time to contact reps to oppose this legislation. The term definitions are wacky and unworkable, for one thing. But also, it just is silly and unenforceable in general. Watch for amendments, but don't accept this as a done deal.

https://www.congress.gov/bill/119th-congress/house-bill/8250/text

Rice and lentils. Fiber and protein. Basics to settle my guts. Lots of fluids. My health is collapsing, and corrective actions aren’t helping.

Not staring down fatal, just a decrease in standard quality of life. Rapidly.

Choices and habits from 40 years ago are crippling me today. How did we ever get this far as a species?

Reminder that we have a list of TLDs that we have seen good results in blocking. Obviously you need to evaluate for your environment, but you can cut out a lot of malicious content and noise at the TLD level without having to worry about keeping up with all the apex domains.

https://blog.gayint.org/intel/easyBlockTlds.txt

RE: https://mathstodon.xyz/@Paul_Taylor/116393432979937863

Google and Microsoft - the global email service duopoly - block other services in the name of "fighting spam".

I get it. Spam is a perpetual arms race. But the opaqueness of Google and Microsoft's practices and decades-long predatory self-dealing mean no one trusts them to apply even their own rules.

Email still works interoperably. Just about. Getting off US duopolies and monopolies is vital for the future of the internet. So in that way, digital sovereignty is vital to save the internet.