Cyber threat vibe-checker.
All publications here are of my own volition and my opinion, and do not represent the views, opinions, or expressions of my employer.
Things I am: Light-hearted, sarcastic, inoffensive-ish, objective, a volunteer, kinda vulgar-ish.
Things I am not: a bot, a liar.
Hashtags of interest:
#CTI #threatintelligence
#threatintel #infosec #cybersecurity
| Raíces Cyber | https://www.raicescyber.org/ |
| Military Cyber Professionals Association | https://public.milcyber.org/ |
| PhantomGraph | https://www.linkedin.com/company/phantomgraph/ |
Have jobs stopped requiring Microsoft Office/Office365 KSAs for minimum qualifications?
I’ve been running into an entire swath of “cyber professionals” who don’t know how to use Teams, Excel, OneDrive, or god forbid, New Outlook.
Basic computer literacy is going down the drain in this field.
I just found out today by the VA pharmacist that my MH records are not on file,
nor did my PHP notify me,
nor did the VA notify me that my PHP no longer works there,
nor did they assign me a new one,
nor did my PHP obviously didn’t do some kind of handoff.
I was completely off the records until I had to call for a refill. Then I became the bad guy for not calling for a refill sooner… apparently when I transferred from one VA network to another, my records just didn’t make it. Now I have to start all over.
Meanwhile, $200bn in funding is about to be pumped into Iran, along with about 5,000 Marines and Sailors right now. Nobody wanted for that to happen and they, along with countless others that will follow them, will end up in the same position as me, getting fucked and forgotten by the same government system that pulled you out of your normal-as-can-be activity duty life on a U.S. base.
What kind of irony is this?
Seriously, #PhantomGraph is a legit thing you don’t want to miss.
To the software developers, coders, programmers, scripters, etc. is it normal to be spending more time Googling things than actually coding? Is this normal for development?
I’ve been developing a working email security product and seems like I’m spending more time Googling coding shit and reading stack overflow than anything else.
MS-ISAC claims shipping ports were hit by DDoS on Feb 28 by Iran-nexus actors. They used 3 sources, 2 Telegram posts that don’t exist, and 1 X post from March 2025 made by CyberKnow20. Other security news outlets, security vendors, and security bloggers have been picking up this alleged DDoS and reporting on it just the same.
Stop. The. FUD. Check and validate your sources. Trust but verify. Stick to reputable sources.
https://x.com/cyberknow20/status/1901251281139945558?s=46&t=ZePXqzpf3cfTN4SMSwySrQ
Dienet has targeted the Port of Los Angeles with a DDoS attack. The site is currently not reachable from outside the US. Dienet claimed this attack around 10 minutes before this post, which sits within that area of many DDoS attacks conducted by hacktivist groups that are often
I’m cooking up something that’s going to disrupt the email security game.
RE: https://infosec.exchange/@trojanfoxtrot/115942760461090531
I’m still searching and hoping to find something available with open CFP.
I have a great presentation/hands-on idea for any west coast-based infosec conference CFP, but DEFCON hasn’t opened up CFP for DC33, yet.
This would be my first time doing this, and it’s Applied Cyber Threat Intelligence. Any friends out there?
#infosec
#CTI
#cybersecurity
#threatintel
#cyberthreatintelligence
#DEFCON33
Ozzelot 