Infosec starts here. README is a new publication covering the issues, ideas and people shaping the future of cybersecurity. Published by @synack.
Washington, D.C.
Joined May 2021
- Tweets1.7K
- Following409
- Followers798
- Likes166
README_ retweeted
Super psyched to welcome Aeva Black, disruptive innovator & open source software security guru, to Team CISA! @aevavoom joins us as @CISAgov’s Open Source Security Lead. Learn more at: go.dhs.gov/oZf.
README_ retweeted
Sen. Mark Warner (D-Va.), chairman of the Senate Select Committee on Intelligence, weighs in on renewing Section 702 surveillance authority at #IntelSummit23: "The 702 of July of 2023 is very different from the 702 that we reauthorized in 2018."
README_ retweeted
As #APIs dominate internet traffic, they're under siege more than ever! Our expert, Jason Kent, sheds light on the rise of #CredentialStuffing attacks in a recent @README_Security article.
Stay #CyberSecure. Check the full piece here. 👉 bit.ly/3Jf7YBZ #APISecurity #API
README_ retweeted
A multi-stage AiTM phishing and BEC activity spanning multiple banking & financial services orgs uncovered by Microsoft Defender Experts shows the complexity of these threats that abuse trusted relationships between orgs with the intent of financial fraud: msft.it/6015gc3QV
README_ retweeted
The RaidForums database has been leaked online. It has information on 478,000+ users.
It was leaked on Exposed - an up-and-coming forum wanting to fill the void Breached left.
The administrative staff of Exposed would not tell us the source of the RaidForums database leak.
README_ retweeted
With #Finland set to become a full member of NATO tomorrow, I'm reupping this @README_Security story on the country's unique approach to hardening vital industries against cyberattacks: readme.security/why-finland-…
README_ retweeted
5 days until Twitter auto unenrolls users who haven’t paid from the SMS 2FA that they enabled on their account. Yes, SMS 2FA users could switch to app-based MFA (or security key), but many won’t because they don’t care to, aren’t aware, or aren’t sure what this is all about.
ALT Twitter’s blog post about requiring payment for SMS 2FA is highlighted where it says “after March 20, 2023 accounts with text message 2FA still enabled will have it disabled”.
This Twitter 2FA change is nerve-racking because:
1. Only ~2.6% of Twitter users have 2FA on at all (it’s essential for preventing easy account takeover)
Of those 2.6%, 74% use text message based 2FA (transparency.twitter.com/en/…)
If they don’t pay for Blue they auto lose 2FA on 3/20.
README_ retweeted
Thanks to @nathanielmott for speaking with RSA #CISO Rob Hughes about #AI powered #phishing scams 🎣
Evolutionary threat? Revolutionary threat? Don't wait to find out: use #ML in #cybersecurity ⬇️
rsa.com/products-and-solutio…
📰 @README_Security ⬇️
readme.security/ai-powered-p…
README_ retweeted
My latest piece for @README_Security delves into the challenges and opportunities of securing ICS systems discussed at this year's S4 conference. Additional insight provided by @patrickcmiller @Ron_Fab @hacks4pancakes Munish Walther-Puri of @ExigerLLC
readme.security/new-strategi…
README_ retweeted
In case you missed it – last night we published a script to help organizations impacted by ESXiArgs ransomware to attempt recovering access to their files. View the script: github.com/cisagov/ESXiArgs-…
🚨We released an ESXiArgs ransomware recovery script on GitHub to allow organizations to attempt recovery of virtual machines affected by the ESXiArgs ransomware attacks: github.com/cisagov/ESXiArgs-… #StopRansomware
README_ retweeted
Changelog 🗞️ is back after a holiday hiatus! Catch up on the "Cold River" hacking crew's exploits, new #ransomware threats and @vxunderground's throwback to a can't-be-unseen Fortinet marketing video: readme.security/cold-river-h…
README_ retweeted
I wrote a piece on ransomware attacks on small nations for @README_Security, which has a few scooplets on what's happened in Vanuatu. Thanks to @FlatleyAdam @C_Painter @tiskimber @BrettCallow @lukOlejnik @[email protected] @glencraig, others
readme.security/2022-was-the…
README_ retweeted
🎂🥳🎉Happy 4th Birthday to @CISAgov! I couldn’t be more proud to be part of such an amazing team of dedicated professionals working with equally amazing partners across our nation to protect the infrastructure Americans rely on every day. #BestJobEver #AmericasCyberDefenseAgency
README_ retweeted
Surprise bonus talk!!! @cglyer and @sixdub from @msftsecintel will share a recent case study of Prestige ransomware. #CYBERWARCON
README_ retweeted
Great @README_Security primer on the OpenSSL vulnerabilities revealed yesterday: readme.security/openssl-vuln… #Heartbleed @nathanielmott
README_ retweeted
India's new cyber incident reporting guidelines have tech companies and privacy watchdogs alike concerned about potential abuse. Though ostensibly for a "safe&trusted internet", in reality it compromises user privacy.
Reporting for @README_Security:
readme.security/indias-new-c…
README_ retweeted
The latest edition of my weekly Changelog #cybersecurity newsletter is out! With help from @nathanielmott: readme.security/microsoft-ex…
README_ retweeted
Hey Twitterz, please join me in giving a big cyber-welcome to @nathanielmott who starts today as a senior editor at @README_Security working with @BlakeSobczak who is gradually building his Changelog newsletter into a #cybersecurity must read
xitter.gq/BlakeSobczak/status/15…
I'm thrilled to announce @nathanielmott will be joining @README_Security as senior editor, as I revealed in the latest edition of my Changelog newsletter ⤵️ Welcome, Nate!⚡️ readme.security/echoes-of-co…
README_ retweeted
I'm thrilled to announce @nathanielmott will be joining @README_Security as senior editor, as I revealed in the latest edition of my Changelog newsletter ⤵️ Welcome, Nate!⚡️ readme.security/echoes-of-co…
README_ retweeted
This explosive @dotMudge whistleblower account of Twitter's lax security practices will reverberate through Congress, the @FTC, and the court system (via Elon Musk's countersuit vs. @Twitter): washingtonpost.com/technolog…
