Simon Goldsmith (@CyberGoldsmith) header
Simon Goldsmith (@CyberGoldsmith) profile picture

InfoSec for zero carbon living. Back in🇬🇧 after 🇮🇹 🇦🇪 🇪🇸 and 🇨🇳 Former egg-chaser 🏉 Views own.

Various
Joined September 2014
Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)Photo by Simon Goldsmith (@CyberGoldsmith)
The ability to destroy a planet, or even a whole system, is insignificant next to the power of the Force.
62
Move over Crowdstrike, the French are here🇫🇷
1
99
Somebody who works in security should probably have a word with Fortinet’s event marketing team. No irony detected.
74
Thoroughly enjoyable panel at the European CISO Community event in Cascais, Portugal sharing the stage with the ever erudite @philvenables discussing the relationship between org culture and tech (and cyber) industrialisation.
3
316
Such an important concept that a lot of public reporting misses
Replying to @arekfurt
In other words, in the free world the law (and the willingness of entities to follow it) and not technology will likely remain the major guarantor of our privacy from unjust governmental spying for the foreseeable future. Highly imperfect as that is, it's far more realistic.
1
I’m speaking at eCrime tomorrow at 9am. Will be talking about experimenting with user story mapping for security. Where my hecklers at*? *no trolling please
2
Simon Goldsmith retweeted
SaaS vendors: if your core business is not as an identity SaaS SSO provider, but you charge almost twice per seat to enable SSO access to your product, making using your product easier, more secure & offload work/risk from you, you are ripping ppl off. SSO != Enterprise feature.
16
20
6
88
Today is the day! If you're at RSA come check out Simon and I talking about bots, business logic attacks, and how to beat them! We're apeaking at 14.20 local time at the Moscone Centre room 2006! Hope to see you there!
Today is the day! 📢 If you're at @RSAConference this week don't miss @mgm_cybersec and @CyberGoldsmith today at ⏰ 14:20 local time ⏰ at Moscone West 2006, for their talk on the rise of bots and what to do about it. More: netacea.blog/3NQjOC8 #RSAC2022 #CyberSecurity #bots
2
Very best of luck to @mgm_cybersec at #RSAC 2022 tomorrow. COVID has got in the way of me ‘helping’ but attacker automation is a fascinating topic which MGM excels at explaining. Also a shout out for fledgling open-source @BladeFramework community. #botmenace
1
2
4
Simon Goldsmith retweeted
Less than 2 weeks until we land at @RSAConference in San Francisco! #RSAC2022 Don't miss @mgm_cybersec and @CyberGoldsmith @OVOEnergy at their speaker session on the rise of bots and what to do about it. 🤖 Mon 6th June 🤖 2.20PM PDT 🤖 Moscone Center See you there! 👋 – at San Francisco, CA
1
4
More of this please (sharing near misses not the phishing). Less victim blaming, more collective learning on how to trigger the security centre in all our brains. Thank you @kelseyhightower!
This Post is from an account that no longer exists. Learn more
1
1
4
Simon Goldsmith retweeted
What is very clear to me, at least, from this Conti leak is that we need to seriously stop with Active Directory now. We pretend we know how to do it but the fact is, it continues to be that pig with lipstick on that no one can secure and attackers find so easy to own
32
72
14
446
Simon Goldsmith retweeted
If you are in the US/UK/ANZ at a small co-op/muni & need ICS cybersecurity support (Dragos Platform technology, managed service, and incident response) please feel free to message me directly. Dragos is going to make our capabilities free for the smaller members of our community
37
576
68
1,650
Security is *just* an outcome. It’s not your worth. A New Year has arrived, the popular thing to do is to write down what we aim to do, what goals we are going to smash. But the starting point of an information security team should be who we aim to be. linkedin.com/pulse/security-…
1
Given we’re in prediction season, has anyone seen any well explained analysis (@swardley map-esque) on the evolution of criminal value chains from bespoke TTPs to product/service? Also, anyone else had enough black box threat predictions?
1
Dear Twitter, I present to you the perfect Information Security sporting analogy.
I love the passing game more than anything, but I can’t deny that watching teams rip defenses apart from the inside with the run is satisfying. If you know the defense’s gap fits and exploit the voids by calling it correctly, there’s no scheme that can stop the run…only players.