Craig (@security_craig) header
Craig (@security_craig) profile picture

Head of Threat Intelligence Engineering @ Amazon | Former Director Talos | Distinguished Speaker Hall of Fame | Reformed Podcaster | Bug Hunter | My Opinions

ヽ(`Д´)ノ
Joined April 2013
Amazon Cyber Threat Intelligence is hiring a Sr. Technical Program Manager. Help us scale threat intel, drive cross-team coordination, and keep Amazon's customers safe. US Citizen req'd. Austin, Arlington, Seattle, NYC, Annapolis Junction, Herndon. amazon.jobs/en/jobs/10505017…
1
308
We're hiring a Software Development Engineer II for ACTI Engineering! Build mission-critical distributed systems that power Amazon's threat intelligence. Design scalable solutions to detect & respond to threats at scale. amazon.jobs/en/jobs/10495807
1
1
1
1,004
Someone is excited to hear about the latest email bugs @CYBERWARCON 🦎
4
9
1,498
Getting the team ready for @SLEUTHCON again!
1
2
7
1,126
Now Hiring: Senior SDE (Level 5) in Austin! Join Amazon's Cyber Threat Intelligence team building mission-critical systems to protect Amazon's global infrastructure & customers. Scale, architecture, security - all the good stuff Apply: amazon.jobs/jobs/2897028
1
4
415
Join the Amazon Threat Intelligence Team. We are hiring a Software Development Engineer (SDE) to support our engineering platforms. We build threat intelligence tools for all of Amazon. Made a difference at scale. Details - amazon.jobs/en/jobs/2879444/…
1
4
388
🎄🤖🥳
Christmas Robot was easily the favorite song in our holiday light show this year. It's an earworm!
410
Always interesting to see old techniques cross streams with modern technology
Unusual Android malware distribution vector - physical analog letter ✉️ Fake letters were sent to people at their home addresses to download "Severe Weather Warning App" via the attached QR code. #Coper AKA #Octo2 banking malware is downloaded instead ncsc.admin.ch/ncsc/en/home/a…
442
Join Amazon's Threat Intelligence Team as an SDE. Build platforms using diverse tech to support security missions. Work with analysts, understand customer needs, and contribute to Amazon's security culture. Help protect our customers. amazon.jobs/en/jobs/2698129/…
1
1
295
My personal view is that it depends. If the machines are broadly vulnerable they are already targeted. The trick is most of the time in order to be effective across a baddie campaign this must be done @ scale. That's really where gov assistance and industry partnerships can shine
I hear hack back as a solution to intrusions, and disagree. Compromised machines in friendly/ neutral countries will be targeted, risking harm to innocents. The diplomatic implications are already severe. Hack back is inherently a governmental function. Cyber doesn’t stop cyber.
376
Katie's 3rd bug - If you set an apple device's date into the future or past (ancient 1980s) screen time breaks and they can play roblox until their eyes bleed. Apple assures me this isn't a security issue since screen time is not intended to protect against device manipulation.
1
4
1
22
5,665
There is no fix or parental control to stop this at this point. I just have to remove it from their device or take it. Seems like it should be a pretty easy fix ¯\_(ツ)_/¯
5
583
Join Amazon's Threat Intelligence team! We're hiring an SDE to build platforms that power security missions, understand customer needs, and enhance Amazon's security culture. Leverage open-source, AWS, and vendor tech to protect customers. Apply now! amazon.jobs/en/jobs/2698129/…
1
2
436
Is there a god of uptime?
1
391
I use a computer to control my smoker when I sleep, somehow the memory got fairly corrupted. Alarms went off saying my cook hit 200k f. Is it weird I wonder if someone's heap spray broke before it occurred to me my ram is going bad.
3
11
2,203
My precious wagyu was never at risk, temp was actually in the zone
2
315
Join the Amazon threat intelligence team. Help us build epic automation and data pipelines to make our tools more effective in hunting threats and adversaries. amazon.jobs/en/jobs/2698129/…
3
6
670
Spoiler - screen time is not intended to protect against device manipulation and thus this isn’t a security issue
My 11 year old found yet another full screen time bypass. I submitted it for her. Anyone know if they give a bounty or a shout out for these? The previous one was known by the time I submitted it for her.
506