Learn who you align with
Know who has your back
Know your self
This is how you know where to plant your feet.
If I hit 1,000 follower
I will take this to the next level, some actions are restricted on Twitter : )
Who is in for Security Fight Club?
Some of the best security hands on skills, I will line up some strong killerz : )
Would you join a security fight club Twitter Space?
44%Yes
11%No
33%What is that
11%Already do
9 votes โข Final resultsDo you meet weekly?
Do you learn from others?
Do you jump in the ring with professionals?
This is how you level up
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
Repeat after me: most individuals do not need a VPN to "protect against eavesdropping from your ISP" or to "maximize your privacy." Using a consumer grade VPN may result in less privacy.
ISPs/LE/etc know VPN exit nodes and they're likely under near perpetual surveillance.
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
I came across this bit my @psiinon in my bookmarks so I thought I'd send people after it again because it's a good read.
#juiceshop #zaproxy #owasp #mozilla
hacks.mozilla.org/2018/03/haโฆ
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
Do you have these dangerous HTTP methods enabled on your server? link.medium.com/tl1pjkVuImb
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
We just made 24 new @kiva micro-loans for the new year using paybacks from earlier loans. Please join us! KIVA is awesome. bit.ly/cigitalgem-kiva
I am a AppSec Engineer
We don't fail, We iterate : )
Hi @KellySantalucia
@snyksec expressed interest in supporting our @owasp diversity scholarship program, with placement of their donation at @DefConOwasp table.
#letsDoThis
@vanderaj @InfosecVandana @Kerberosmansour @knoblochmartin @rewtd @pendo19 @haral @0xfde
@zbraiterman
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
I've prepared a @tryhackme room to demonstrate #log4j #log4shell CVE-2021-44228, explaining the vulnerability, attack vector, and more importantly, detection, mitigations and patching. Working with THM staff to get this in your hands -- it should be available soon.
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
Nothing says "brace for impact" on a vulnerability like coin miners being deployed. This is bottom feeder activity, consider it like a low water mark.
This Post is from an account that no longer exists. Learn more
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
The Log4j defect is a FLAW (not a bug) that is now deeply impacting everyone. ARA. @IriusRisk
"Lack of strict separation between data and control instructions, and as a result processing control instructions received from an untrusted source."
bit.ly/ieee-CSD-gem
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
The entire cybersecurity community reading about Log4Shell.
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
The patched version of log4j 2.15.0 requires a minimum of Java 8. If you are on Java 7 you will need to upgrade to Java8
When there is active exploitation and you need to patch fast it is beneficial if you have been updating your other dependencies over time.
๐๐๐๐๐๐๐๐ฉ๐พ๐ก๐ช๐ retweeted
Looking for a new job? Consider applying to Kellogg's using the name ${jndi:ldap://127.0.0.1:1389/a}















