Dylan @InsecureNature

Security researcher, public speaker and founder. Forbes 30 Under 30 Truffle Security @trufflesec https://t.co/vxEH7Cftbg Prev @Netflix TruffleSecurity.com US Joined July 2020

Tweets

1K
Followers

3K
Following

238
Likes

506

Dylan @InsecureNature

2 weeks ago

TruffleHog isn't malware, in case anyone's wondering.

10 23 247 25K 27

Download Image

Dylan @InsecureNature

2 weeks ago

We should hear the s1ngularity folks out... I kinda like their idea for us to scan our environments with TruffleHog.... They may be onto something. Be more like s1ngularity.

0 0 3 465 0

Hackers reportedly used something called "TruffleHog" during their attack. They also used "child_process", and something called HTTP, something called TLS, and something called TCP. Please be on the lookout for any of these hacking tools being used in your environment.

60 57 883 48K 121

Dylan @InsecureNature

4 weeks ago

TruffleHog is simultaneously being recommended by @Mandiant for Salesloft cleanup, while also being pushed by @Cloudflare as an IoC.... 🤦🤦‍♂️🤦‍♀️ @GrantBourzikas @jarbiebeep can y'all update the blog so people don't alert on the people doing remediation?

3 25 165 25K 67

Download Image

Dylan @InsecureNature

2 months ago

Blackhat has our back.

1 0 8 664 0

Download Video

Dylan @InsecureNature

2 months ago

I have never filed for a CVE.. Yet, somehow, my name still landed in the CVE database nvd.nist.gov/vuln/detail/CV…

0 0 3 502 0

Dylan @InsecureNature

2 months ago

Great seeing @Jhaddix at Blackhat!!

0 2 30 3K 0

Download Image

Dylan @InsecureNature

2 months ago

Congrats Jack! @CorridorSecure is worth a follow

Jack Cable @jackhcable

2 months ago

Congrats Jack! @CorridorSecure is worth a follow

39 82 576 112K 312

Download Video

0 0 2 438 0

Dylan @InsecureNature

3 months ago

Agents can now do things with sensitive systems, even though we know prompt injection and context hijacking with any of the data it ingests, is a thing. Cool cool cool cool....

0 1 3 570 0

Download Image

Truffle Security @trufflesec

3 months ago

🔍Accessing 15 million "Permanently deleted" commits at scale across GitHub. 🔗A guest post by Sharon Brizinov: trufflesecurity.com/blog/guest-pos…

1 19 60 8K 38

Download Image

Dylan @InsecureNature

4 months ago

Google's least viewed YouTube video is about a cybersecurity feature.

1 0 6 428 2

Download Image

Dylan @InsecureNature

4 months ago

This is WILD. When you opt out of ad tracking this website makes you check a box saying: "I acknowledge cookies need to be deleted from my browser to remove tracking." Ad tracker opt-out is a GDPR requirement. Forcing the user to delete their cookies is...

2 0 14 6K 3

Download Image

Dylan @InsecureNature

4 months ago

If only they had done it back and forth fast enough, they could have doubled the money.

Steven Tey @steventey

4 months ago

If only they had done it back and forth fast enough, they could have doubled the money.

129 614 10K 1.2M 1K

Download Image

0 0 3 497 0

Dylan @InsecureNature

4 months ago

The fall of the empire did NOT depend on the rebellion. Obi-Wan used Luke to turn Vader against the Emperor. The death star didn't need to explode. Luke didn't need to meet the rebellion.

2 0 0 458 0

Dylan @InsecureNature

5 months ago

I asked @MayaKaczorowski (former Senior Director @github) about her thoughts about GitHub's identity system. Personally I think managing identity in GitHub is clear as mud.