@apporima

Automate the pain. Washington, DC infosec and DevOps. Knight of NIST. Master of Risk Management. Metalhead. Public servant @CISA.

 Washington, DC
apporima.com
Joined April 2009
  • Tweets12.9K
  • Following655
  • Followers1.5K
2.3KMedia
I saw this on LinkedIn, and gave the rare literal laugh out loud.
29
461
57
2,017
Trevor Bryant retweeted
vx-underground
@vxundergroundOct 24
Just found a zero day If you right click on an executable on Windows, select run as administrator, it will run as administrator I'm calling it Program2Shell
198
514
47
11,207
210,354
In a new fireside chat, Acting Director Nick Andersen discussed how Super Intelligence is accelerating cyber threats against critical infrastructure and how defenders can adapt through risk-based decision-making, partnership & innovation. 🎥 youtu.be/AzGPyq8P_04

Building Resilience to Cyber Threats Driven by Evolving Technology Fireside Chat

Join CISA’s Acting Director Nick Andersen as he discusses how emerg...

youtube.com
10
36
1
72
8,359
Trevor Bryant retweeted
dylan matthews 🔸@dylanmattOct 19
One of the proudest DC traditions: ads micro-targeted at one procurement guy at the Pentagon
61
304
21
9,059
119,277
📢 Government entities: Get a .gov domain for added security and public trust. Only legitimate government agencies can use a .gov email address. Check your eligibility and learn more: get.gov #CybersecurityAwarenessMonth
Image is split with the left side half showing a gradient of blue and red with digital effects and the right half being white. The "Securing the Next 250" logo is in the bottom right corner. There is one blue and red gradient shield with a checkmark through a period and the word "gov", there is a second blue and red gradient shield with the CISA logo inside. The text reads "More wats to stay secure. Get a .GOV domain if eligible. State, local, tribal and territorial governments can migrate to .gov to increase public trust and reduce the chance of impersonation attacks. Learn more at get.gov. Report cyber incidents to CISA. Report incidents to CISA to help warn others and sign up for alerts to help you stay ahead of threats: cisa.gov/report". The CISA logo is in the bottom left corner with text that reads "Cybersecurity Awareness Month October 2026".

ALT Image is split with the left side half showing a gradient of blue and red with digital effects and the right half being white. The "Securing the Next 250" logo is in the bottom right corner. There is one blue and red gradient shield with a checkmark through a period and the word "gov", there is a second blue and red gradient shield with the CISA logo inside. The text reads "More wats to stay secure. Get a .GOV domain if eligible. State, local, tribal and territorial governments can migrate to .gov to increase public trust and reduce the chance of impersonation attacks. Learn more at get.gov. Report cyber incidents to CISA. Report incidents to CISA to help warn others and sign up for alerts to help you stay ahead of threats: cisa.gov/report". The CISA logo is in the bottom left corner with text that reads "Cybersecurity Awareness Month October 2026".

6
22
63
7,283
It’s Global James Bond Day, marking the 64th anniversary of the world premiere of the first 007 film, “Dr. No,” released on October 5, 1962. Author Ian Fleming’s first James Bond novel, “Casino Royale,” was released nine years earlier, on April 13, 1953. His work was inspired by his own experiences as a British Naval Intelligence officer during WWII. While fictional, James Bond is a cultural icon and a gateway to the top-secret world of real intelligence. Our museum features many 007 artifacts, including the Aston Martin DB5, first driven in the 1964 film “Goldfinger,” Bond’s Omega Seamaster Diver 300M Watch (on loan from Amazon) from “No Time to Die” (2021), and early editions of Ian Fleming’s James Bond novels (on loan from the Michael L. VanBlaricum Collection). #007 #JamesBond #SpyMuseumArtifacts
1
23
3
50
1,746
Trevor Bryant retweeted
USPTO
@usptoOct 5
On this day in 1962, Dr. No—the first James Bond film—premiered. Bond sports a Rolex Submariner wristwatch. The Rolex Submariner is waterproof to 330 feet thanks to inventor Jean Perret who was issued U.S. Patent No. 3,362,154. #AmericasInnovationAgency #Patents #Trademarks
Graphic featuring the character Honey Ryder from Dr. No, a Rolex watch, the Rolex Submariner patent number, and the ocean.

ALT Graphic featuring the character Honey Ryder from Dr. No, a Rolex watch, the Rolex Submariner patent number, and the ocean.

1
9
2
16
2,054
Trevor Bryant retweeted
Jessica Sidman@jsidmanOct 1
DC Ethiopian restaurant Dukem is closing after nearly 30 years
53
371
262
1,801
320,282
Trevor Bryant retweeted
Emily Kennard
@emilyykennardSep 27
at the pro-data center party (in d.c.)
40
101
84
2,448
399,843
Trevor Bryant retweeted
Cat Tribunal
@cattribunalSep 25
21
532
38
2,759
45,360
35 years ago today…A Tribe Called Quest dropped The Low End Theory….greatest hip hop album of all time!
94
669
73
4,178
165,749
I was the cybersecurity Director at A16Z for years much respect for many ppl there especially @bhorowitz But this is not a cybersecurity evaluation, this is SDLC finally being enforced in the dangerous ship fast culture used for years by the same AI that built the problems
a16z
@a16zSep 14
Greg Brockman says OpenAI pointed Astra at its own systems until it ran out of vulnerabilities to find: "We took 25% of our production engineers and said, 'Sorry, all your projects are on hold. You are now defending. You are now up-leveling our security architecture. You're going to use the models to find all the holes.' And we found a number of serious issues, and we fixed them." "We found some new problems, but eventually it saturated. We basically have found, to our knowledge, all of the P0s, all of the critical problems that Astra is smart enough to find. And of course, there will be a new model, there will be a new round." "You want to be in this tight loop of new cyber capability drops, you deploy it against your systems, you find the new holes, and ideally, you've managed to automate this, what we call defense factory. That's what we're building internally." "There are ideas, for example, formally verifying all of software, that are possible with AI." @gdb @bhorowitz
10
27
2
200
25,258
Trevor Bryant retweeted
Barred in DC@BarredinDCSep 19
Brilliant day for H Street Festival. 7th and H NE has kids corner with DC DPR foam party, bounce house, games, free popcorn/cotton candy/slushies. Kids selling $1 lemonades 2 dads have separately alerted me to the to-go Negronis and other drinks behind it at The Little Grand
2
6
94
11,167
Introducing the VINCE-NT platform, an upgrade to our Coordinated Vulnerability Disclosure operations that modernizes how vulnerability reporters, suppliers, & case managers collaborate with CISA by improving clarity, usability & consistency. Learn more👉 go.dhs.gov/5bW
A digital illustration with a futuristic theme displays various abstract shapes and a globe, symbolizing technology. Text reads: "CISA Launches Vulnerability Incident and Notification Coordination Environment - New Technology (VINCE-NT)." The CISA logo is visible in the top right corner.

ALT A digital illustration with a futuristic theme displays various abstract shapes and a globe, symbolizing technology. Text reads: "CISA Launches Vulnerability Incident and Notification Coordination Environment - New Technology (VINCE-NT)." The CISA logo is visible in the top right corner.

5
12
1
60
9,037
We’re recruiting! Join team CISA and be part of a workforce that tackles evolving risks and threats to the nation’s critical infrastructure. New positions are frequently being added to USAJobs. Don’t wait, apply now: usajobs.gov/Search/Results?a…
A promotional graphic with a blue background on the left side, featuring individuals in various professional settings. The right side has a white background and text that reads “CISA is hiring. We lead the national effort to understand, manage, and reduce risk to our cyber and physical infrastructure. Protect the systems Americans rely on. Do work that matters, every day”. The CISA logo is in the top right corner. The bottom right corner has a search bar that reads “cisa.gov/Careers”.

ALT A promotional graphic with a blue background on the left side, featuring individuals in various professional settings. The right side has a white background and text that reads “CISA is hiring. We lead the national effort to understand, manage, and reduce risk to our cyber and physical infrastructure. Protect the systems Americans rely on. Do work that matters, every day”. The CISA logo is in the top right corner. The bottom right corner has a search bar that reads “cisa.gov/Careers”.

4
10
39
8,733
Trevor Bryant retweeted
Capital Weather
@capitalweatherSep 19
It's DC's last day with an average high of 80 until May! capitalweather.com/its-dcs-l…

It's DC's last day with an average high of 80 until May

DC’s average high drops below 80 on Sunday, marking another step into fall.

capitalweather.com
18
69
34
963
66,400
Trevor Bryant retweeted
djcows
@djcowsSep 18
orgrimmar would be so beautiful if it was a datacenter
26
124
10
2,977
61,760
Trevor Bryant retweeted
Mitchell Hashimoto
@mitchellhSep 16
The "whiteboard defense:" I should be able to pull you aside at any moment and ask you to explain any customer-facing system you've shipped. You should be able to clearly explain how it works and defend the decisions you made. This is my benchmark for responsible AI usage. I don't expect line-level familiarity with the code. I don't care if you remember the exact function name or implementation detail. You may not even know it. I don't care. But if I ask "why did you do X instead of Y?", "what happens if this actor behaves maliciously?", "what data structure did you use here and why?", or "where does this fail?" you should be able to answer confidently. For PoCs, demos, experiments, whatever: I don't care. Generate 100% of it and understand none of it. Speed over quality every time in those specific scenarios. But if you're shipping customer-facing work, you can't be shipping things you don't understand at a high level.
234
1,019
196
9,499
489,347
Join us on Sept. 24 (1–2pm EST) for the September 2026 CISA Tabletop Exercise Package (CTEP) Workshop! This month’s focus: House of Worship Active Shooter. Strengthen your preparedness with practical, actionable insights. go.dhs.gov/5LL
The image is a flyer for a virtual workshop titled "House of Worship Active Shooter" organized by CISA Tabletop Exercise Package. The main graphic features a shield-like shape with candles held by hands. The text includes registration details for the event on September 24, 2026, from 1:00 – 2:00 PM (ET).

ALT The image is a flyer for a virtual workshop titled "House of Worship Active Shooter" organized by CISA Tabletop Exercise Package. The main graphic features a shield-like shape with candles held by hands. The text includes registration details for the event on September 24, 2026, from 1:00 – 2:00 PM (ET).

1
6
1
19
6,384
We’re on the ground at #GSX2026 in Atlanta this week connecting with leaders across the physical security & cybersecurity community to strengthen partnerships and build resilience. If you’re attending, stop by booth B1-B5: 3771and say hello!
The image shows a booth for the Cybersecurity and Infrastructure Security Agency (CISA) at a convention center. Three individuals stand behind the counter, which is adorned with the CISA logo. The space prominently features a large overhead sign with the CISA logo and name. Blue bags are visible along the side of the booth.

ALT The image shows a booth for the Cybersecurity and Infrastructure Security Agency (CISA) at a convention center. Three individuals stand behind the counter, which is adorned with the CISA logo. The space prominently features a large overhead sign with the CISA logo and name. Blue bags are visible along the side of the booth.

6
6
27
6,308
Trevor Bryant retweeted
Cat Tribunal
@cattribunalSep 14
2
170
13
1,753
37,284
Load more