ICS/SCADA Security | Industrial Automation | Security by Design | Opinions are my own.
Twitter: @_Khalid_Ansari
#RaptorsForLife #WeTheNorth 🇨🇦
Now that we have physical copies in hand, it finally seems real!
You can get your own copies at https://informit.com/cybermyths.
Cybersecurity money machine getting ready to really kick into high gear:
"the [Biden administration] has proposed to shift liability for insecure software products and services to “those entities that fail to take reasonable precautions to secure their software.”
PS His new book comes out Feb 7
https://threatsbook.com/
Jen Easterly, director of CISA, in an interview at CES 2023 urges software and product developers to build "secure-by-design" and "secure-by-default" products--because, among other things, "it's the right thing to do," as ultimately safety of the users is at stake. She explains how the current cybersecurity situation is not sustainable.
"Leaders need to look at cyber risk as core business risk and their own responsibility."
She also asks end users to "demand radical transparency" and "ask hard questions" of product developers.
Excellent advice, which if followed, will have a long lasting impact on cybersecurity.
https://www.bloomberg.com/news/videos/2023-01-05/us-cyber-official-pushes-for-transparency
Asking for help from the #OSINT community here on #Mastodon!
We in #Brazil need urgently to gather all the #tweets being posted by the #terrorists attacking our #democracy, particularly those containing #geotag.
Relevant coordinates: -15.8005489,-47.8618812
A friend of mine got laid off yesterday. Two days before Christmas. Nice job, jerks.
Well, if your new year plans involve hiring a remote team member or contractor to work with Azure, SharePoint, Office 365, Dotnet or related DevOps work, hit me up. UK based but they're happy to work international hours, esp east coast
Boosts appreciated!
Hey if you need somone on the #CTI #threatintel or #threathunting and #detectionengineering front, I'm VERY MUCH listening right now. You can find my CV here (https://pylos.co/wp-content/uploads/2022/12/slowik-resume_long.pdf) and some of my past public presentations (https://pylos.co/presentations/) and written items (https://pylos.co/papers-publications-and-external-postings/).
I'm especially partial to roles in #ICS / #OT and critical infrastructure!
Researchers from Stanford University have found that programmers who accept help from AI tools like Github Copilot produce less secure code than those who fly solo.
I’m sure you’d find the same thing of developers who blindly cut & paste from Stack Overflow.
The root issue is the same, people who don’t understand the code they got from someone else write less secure code. Doesn’t matter if it was an AI or Stack Overflow poster.
https://www.theregister.com/2022/12/21/ai_assistants_bad_code/
Smitho.graphics℠
Lesley Carhart 
spaf
Andy
Tanya Janca | SheHacksPurple 
Gabriel H. Nunes
M1ke
Joe Słowik
Dare Obasanjo