Entrepreneur | Autodidact | Inventor | InfoSec | Technologist
405
Joined August 2008
- Tweets1.6K
- Following988
- Followers531
- Likes522
Grayson Estes retweeted
Hey @elonmusk we could use some Starlink units to provide connectivity to the affected communities and relief work volunteers in Texas! Can you help?
#Texasflood #commisaid #weloveElon #Starlink
Hey Oklahoma!!! VOTE @madisonhornok in TODAY!
#CybersecurityNews
Today is the day! Remember, even if you voted in the primaries… your vote still needs to be heard in the runoff happening today! Comment below to let us know you voted. #electionday #VoteMadisonHorn
Can’t wait to see you guys soon!
Schedule posted for @DEFCON! Catch awesome talks, an ICS escape room by @CISAgov, our CTF, and more!
icsvillage.com/schedule-def-…
Grayson Estes retweeted
OT administrators may not realize the significants of MS Service Accounts. I feel this is one of the more important ICS Concept videos and I'm glad I could get @TimMedin to help outline the risks and solutions.
MS Service Accounts: the next edition of @cutaway 's SANS ICS Concept series is up. He is joined by @TimMedin of @RedSiege. They discuss the security of these L3 accounts that are often insecurely configured and can lead to lose of view and control.
youtube.com/watch?v=cRRxkAND…
Come as you are and where you feel comfortable, virtual or in person, the talks this year should be top notch! – at Houston, TX
Schedule @defcon published. More to be added including details for limited space TTX and workshop signups!
icsvillage.com/schedule-def-…
WHO needs a tractor, when you have a #SUBARU ??? Thanks @subaru_usa @subarums_usa @SubaruCustCare for making such great products! #love #farmlife #subielove #subiedaily #subarunatio – at Houston, TX
Grayson Estes retweeted
I also clarify in story how FireEye first discovered breach. It occurred when the hackers, who already had an employee's credentials, used those to register their own device to FireEye's multi-factor authentication system so they could receive the employee's unique access codes.
Grayson Estes retweeted
Investigators have so far found no evidence the attackers did anything to infected machines once the malicious Oct 2019 SolarWinds software was installed; suggests this was just a dry-run to test that their malicious files would deliver to customer machines and not be detected.
Grayson Estes retweeted
“the NSA adds that neither of the two techniques exploits vulnerabilities in federated authentication products, but they rather abuse legitimate functions after a local network or admin account compromise.” It is all about the TTPs!
zdnet.com/article/nsa-warns-…
Grayson Estes retweeted
I'd also be paying very close attention to what @CISAgov does next. They have authority to issue directives to Fed agencies to take cybersecurity steps. While those directives only apply to Feds, everyone else should follow suit.
Grayson Estes retweeted
As a part of ATT&CK v8, we also released ATT&CK for ICS in STIX (github.com/mitre/cti/tree/ma…), and a new version of the ATT&CK Navigator where you can pick your domain (including ICS) and version of ATT&CK (mitre-attack.github.io/attac…)! TAXII support for ICS is coming soon.
Grayson Estes retweeted
Twitter hires influential hacker Peiter "Mudge" Zatko as security boss hubs.ly/H0B3bVt0 by @snlyngaas
Grayson Estes retweeted
That press conference was the most dangerous 1hr 45 minutes of television in American history. And possibly the craziest. If you don’t know what I’m talking about, you’re lucky.
This is a FANTASTIC Class @strandjs @BanjoCrashland and all the other @BHinfoSecurity family have thrown together for the community... It's a deep dive into some great tools!
John @strandjs is teaching a new "pay what you can" training course on -- SOC Core Skills w/ John Strand (16 Hours)
It's the skills all SOC analyst should have to get started.
@WWHackinFest is running the training course on Dec 14-17.
Learn more: wildwesthackinfest.com/onlin…
Excited for the #PurpleTeamSummit today with @brysonbort and @jorgeorchilles !!! scythe.io/purple-team-summit
Grayson Estes retweeted
I've released NAT Slipstreaming, a spooky new technique that allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website. samy.pl/slipstream/ Happy Halloween!
