Maya @IRMeetsSecurity

CTI Analyst | Threat Intel Analyst @KC7Cyber | Interested in Geopolitics, Influence Operations and Cybercrime. #DigitalSherlock #BlacksInCybersecurity Joined September 2022

Tweets

342
Followers

127
Following

718
Likes

2K

Lina Khan @linamkhan

2 months ago

To recap: Firms have been making people jump through endless hoops just to cancel a subscription, trapping Americans in needless bureaucracy and wasting their time & money. @FTC began writing a “click-to-cancel” rule promoting efficient cancellation, a rulemaking process that…

143 2K 11K 759K 572

Sekoia.io @sekoia_io

3 months ago

We hope SOC, CERT and CTI teams find our global analysis of AitM phishing threats both insightful and actionable. Dive in here ⬇️ blog.sekoia.io/global-analysi…

1 4 10 807 5

Maya @IRMeetsSecurity

3 months ago

J⩜⃝mie Williams @jamieantisocial

3 months ago

https://t.co/TYRahulWpD

1 5 51 3K 21

Download Image

1 0 1 213 0

Download Image

Who said what? @g0njxa

3 months ago

Read about an ongoing malware campaign delivering "PayDay Loader" to Windows users and Poseidon Stealer to MacOS individuals on fake AI and software websites A bit of malware analysis and threat hunting, thanks to @anyrun_app @urlscanio 🤠👇👇 g0njxa.medium.com/dark-partners-…

5 16 63 8K 13

The DFIR Report @TheDFIRReport

4 months ago

🔥 DFIR Labs is Evolving! Have You Seen What's New? 🔥 Big things are happening at DFIR Labs! We've been hard at work implementing a wave of exciting changes and improvements, all designed to enhance your experience! ➡️ Check it out now! dfirlabs.thedfirreport.com

0 5 38 4K 9

Download Image

Fox_threatintel @banthisguy9349

4 months ago

#Triagescraper Triage is configured in a way that allows me to scrape off IOCs from malware samples that are send. To make it even better. There is no account authentication required. Below you will see the steps that I take

6 22 184 23K 131

Download Image

Chi-en (Ashley) Shen (@ashl3y-shen.bsky.social) @ashl3y_shen

4 months ago

📡New blogs out: Compartmentalized attacks are no longer limited to financially motivated actors, state-sponsored groups are adopting them too. We propose a new taxonomy for initial access groups to reflect broader motivations and affiliations. blog.talosintelligence.com/redefining-ini…

1 20 46 9K 13

Virus Bulletin @virusbtn

4 months ago

Morphisec's Shmuel Uzan reveals how attackers exploit AI hype to spread malware. Victims expecting custom AI videos instead get Noodlophile Stealer, a new infostealer targeting browser credentials, crypto wallets, and sensitive data. morphisec.com/blog/new-noodl…

2 32 62 4K 20

Download Image

ghostlulz @ghostlulz1337

4 months ago

🏴 API Hacking - Cracking JWT Tokens 🏴 Most modern day APIs use JWT token for authentication instead of cookies. If you can crack the key used to sign these tokens then its instant game over. ghostlulz.com/blog/api-hacki… #bugbountytip #bugbountytips #redteam #infosec #hashcat

5 96 406 20K 371

Seongsu Park @unpacker

4 months ago

The AI industry is buzzing again with MCP(Model Context Protocol). I’d been putting off testing MCP for IDA Pro, but recently started applying it to real tasks. The result: MIND-BLOWING! 😱 ✅ What’s great: - It automates tedious, repetitive parts of malware analysis, saving a…

6 38 133 13K 72

Download Image

4n6lady @4n6lady

4 months ago

I’m an Incident Responder on the AWS Customer Incident Response Team (CIRT). And I get asked a lot of questions, like: “Where do I even start with incident response in the cloud?” Here’s a beginner-friendly thread on AWS IR tips — with a few lessons I learned 🧵👇

34 342 2K 146K 2K

Thomas Roccia 🤘 @fr0gger_

4 months ago

🤓 Last week, Anthropic released a report on malicious uses of Claude. The report is very interesting, but I think it is missing critical actionable insights to make it useful for threat analysts. I broke down my POV in a blog, quick thread 👇🧵 blog.securitybreak.io/why-prompts-ar…

2 33 102 27K 68

The Citizen Lab @citizenlab

4 months ago

NEW REPORT: Our investigation of a spearphishing campaign targeting members of @UyghurCongress reveals a highly-customized attack. Its aim: to deliver Windows-based malware capable of conducting remote surveillance against its targets. Read it here: citizenlab.ca/2025/04/uyghur…

6 54 98 24K 22

Download Image

ADHD Memes @ADHDForReal

4 months ago

36 17K 78K 2.1M 5K

Download Image

Mehmet Ergene @Cyb3rMonk

4 months ago

You don't need SOC Agents or Copilots for automated/autonomous triage in most cases. This is pure #KQL in Workbooks. 40.000+ endpoints, just a few items to investigate. #ThreatHunting #DetectionEngineering

3 7 115 8K 54

Download Image

Thomas Roccia 🤘 @fr0gger_

5 months ago

I found an old doodle in my archive that never made the cut for my book. I just updated it with my new design and thought I should share it. :)

3 27 93 8K 37

Download Image

abuse.ch @abuse_ch

5 months ago

🦊 NEW on ThreatFox: ASN information and statistics! Now when you browse a network IOC (IP, domain, or URL), you’ll get details on the associated ASN, including: 👉 ASN number 👉 ASN name 👉 Country 👉 No. of observed IOC 👉 Malware families …and even more…

3 41 115 8K 38

Download Image

Aura @SecurityAura

5 months ago

Whenever I see these now

ThreatMon @MonThreat

5 months ago

Whenever I see these now https://t.co/kPo6gpzxnp

2 9 42 27K 16

Download Image

2 28 216 25K 42

Download Image

Will @BushidoToken

5 months ago

So far, most defenders are only aware of AI being used by attackers in the context of T1588.007 (attack.mitre.org/techniques/T15…). This PoC shows moving adversary use of AI into dynamic Execution and C2. Worth thinking about during detection rule writing or incident response 🧐

1 11 70 12K 27

Chris Duggan @TLP_R3D

5 months ago

🕵️‍♂️Interesting AsyncRAT 🔥firevpn[.]xyz (0/94 on VT) on 5.196.189.67 gives a pivot 🔥ssh.firevpn[.]xyz (0/94 on VT) on IP 94.141.96.90 🔥communicating file: bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067