DeployTheChaff @deploythechaff

CTI Analyst. Father. Husband. Veteran. United States Joined November 2023

Tweets

25
Followers

134
Following

778
Likes

32

4n6lady @4n6lady

5 months ago

Did you know that most incident responders have a sixth sense. It’s called: “This log looks weird and I don’t know why yet.”🤔

19 59 679 35K 52

INFOSEC F0X 🔥 @infosec_fox

5 months ago

Being the loudest in the room doesn't make you the leader.

0 1 6 577 1

There's no reason to NOT strictly control RMM installation and usage in your environment. There are currently 272 RMMs in the LoLRMM project right now. Most orgs probably use 1 or 2, legitimately. lolrmm.io

6 29 188 20K 133

Daniel Cuthbert @dcuthbert

a year ago

how long have we been shouting about the unregulated pervasive ad networks and the dangers they pose? this this SO MUCH THIS, ADINT is as powerful as a zero-click 0hday

thaddeus e. grugq @thegrugq

a year ago

how long have we been shouting about the unregulated pervasive ad networks and the dangers they pose? this this SO MUCH THIS, ADINT is as powerful as a zero-click 0hday

1 42 131 26K 42

4 23 56 6K 10

Intrusion Truth @intrusion_truth

a year ago

Soon...

3 12 85 18K 6

Download Gif

DeployTheChaff @deploythechaff

a year ago

Impeccable timing.

GCHQ @GCHQ

a year ago

Impeccable timing.

12 19 61 9K 6

Download Image

0 0 0 32 0

Tib3rius @0xTib3rius

2 years ago

Just had the realization that people who don't use military time (24hr clock for non-Americans) are unaware of the mini celebration we have at 1:37 pm if we happen to glance at the time. It's tragic. You poor people. 😩

18 22 318 41K 9

HaxRob @haxrob

2 years ago

The Chinese APT contractor leak contained a few interesting files; namely: - CDRs (Call Detail Records) - LBS (Location Based Services) db records Threat actors compromise telcos with the aim to obtain subscriber metadata to support IC objectives. Some background: (1/5)🧵

10 218 1K 220K 632

Download Image

x0rz @x0rz

2 years ago

Stuxnet was made 15 years ago. I can only wonder what other sophisticated attacks we missed since then 😩

10 33 294 29K 12

Microsoft Threat Intelligence @MsftSecIntel

2 years ago

Microsoft has identified a Russian-based nation-state threat actor tracked as Forest Blizzard (STRONTIUM, APT28, FANCYBEAR) actively exploiting CVE-2023-23397 to provide secret, unauthorized access to email accounts within Exchange servers: msft.it/6018iPOLm

5 295 645 143K 129

Christopher Peacock @SecurePeacock

2 years ago

Making intelligence actionable isn’t piping basic IOCs into your SIEM. It’s testing observed procedures against your tech stack, identifying alerting coverage and gaps, fixing the gaps, or developing courses of action to block said activity.

6 30 103 11K 23

John Hultquist @JohnHultquist

2 years ago

Attacks on the American healthcare system are a national security crisis.

Sean Lyngaas @snlyngaas

2 years ago

Attacks on the American healthcare system are a national security crisis.

0 19 49 64K 2

4 49 203 70K 12

Bryson 🦄 @brysonbort

2 years ago

Education != Intelligence

4 5 37 3K 0

Microsoft Threat Intelligence @MsftSecIntel

2 years ago

Microsoft has uncovered a supply chain attack by North Korean threat actor Diamond Sleet (ZINC) involving the modification of an installer file from software maker CyberLink. The payload calls back to attacker infrastructure for instructions. Learn more: msft.it/6013iHoQF

6 217 407 183K 81

Nick Carr @ItsReallyNick

2 years ago

.@JohnLaTwC on⚡️🌀Volt Typhoon 🇨🇳: "if you want to make a threat intel person put down their coffee and pay attention to you when you're talking about who a threat actor is targeting you just have to say these three words no intelligence value"

Nick Carr @ItsReallyNick

2 years ago

0 7 25 21K 18

Download Image

2 15 49 24K 14

Download Image

ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler

2 years ago

Repeat after me: The value that these types of apps will create will outweigh the risk for most. Expect the worst from a security standpoint when you combine AI Agents and API access. And expect the best when it comes to actual functionality and creativity. It’s both.

Alvaro Cintas @dr_cintas

2 years ago

62 168 1K 561K 2K

Download Image

7 8 52 19K 18

Azim Khodjibaev @AShukuhi

2 years ago

From leaking personal pictures, harassing family to filing SEC complaints. Ransomware groups will do anything and everything for a response. Why? Response = likelihood of payout. While this may be new, I’m surprised this wasn’t done a while ago. I’ve read enough ransomware chat…