Kyle @exploitsecurity

Joined October 2013

Tweets

91
Followers

30
Following

190
Likes

2K

Rob Fuller @mubix

4 years ago

#infosec career advice. If all you ever do is fight fires all day, the best you can ever hope to learn is to be more efficient at fighting fires. You will never learn new ways to fight fires. Always schedule time for yourself during your day to just learn. #alwaysbelearning

17 135 643 0 26

DEF CON @defcon

5 years ago

We don't know who needs to hear this right now, but #defconsafemode is free to attend. You don't have to register. It starts in one week. You should join us. defcon.org

31 2K 3K 0 167

Download Image

Chris Sanders 🔎 🧠 @chrissanders88

6 years ago

I'm doing research for my next book and I'd love to talk to you if: - You've used honeypots/tokens to successfully catch bad guys - You've been caught by honeypots/tokens as a pen tester - You've used a non-typical type of deception tech to do cool things RTs appreciated

24 176 163 0 3

dawgyg - WoH @thedawgyg

6 years ago

So I am about 90 followers away from 10k... So decided to do a little give away when I hit the 10k mark. Anyone that shares this will be entered into a drawing, and I will give the winner (chosen randomly) a 1 year Burp Pro liscense. #bugbounty

39 609 528 0 6

Kali Linux @kalilinux

6 years ago

Today is the big day! Kali 2019.2 release! Ready for download at offs.ec/2VEkr6v This release has MAJOR NetHunter updates, 13 new images and new device support. Thanks to the NetHunter team for pushing this forward and @Re4sonKernel for leading this effort.

42 910 2K 0 33

Jessica Payne @jepayneMSFT

6 years ago

If you want to stop an attacker from RDP brute forcing you and deploying ransomware as a domain admin via psexec or group policy you probably want to start by enabling NLA, randomizing your local passwords, and keeping domain admins from logging in to desktops.

3 21 116 0 3

Sean Metcalf @PyroTek3

7 years ago

If you are using Logitech or other RF wireless mouse/keyboard that use a USB dongle, now is the time to switch to Bluetooth. At a minimum, this will make the computer see the Bluetooth mouse as a mouse and not provide a single access point that looks like mouse and keyboard.

Marcus Mengs @mame82

7 years ago

16 248 567 0 54

Download Video

0 14 43 0 2

Florian Roth ⚡️ @cyb3rops

7 years ago

An analogy in Infosec is the analyst that sees only incoming attacks against their web servers & therefore decides that purchasing a WAF should have highest priority

13 293 671 0 39

Download Image

Cisco Talos Intelligence Group @TalosSecurity

7 years ago

.@snort was hard at work all last year protecting users on a day-to-day basis. Here's a look at which rules that were triggered the most in 2018, which paints a picture of what attackers used the most cs.co/6013ERckt

2 36 44 0 3

Florian Roth ⚡️ @cyb3rops

7 years ago

Antivirus Event Analysis Cheat Sheet v1.7 (Feb 2019) 💀 > updated AV sig lists > extended dir lists > more file extensions > Google file name search > more VT tips: like "3::" as ssdeep value means file filled with binary 0x00 nextron-systems.com/2019/02/06/ant… #SOC #BlueTeam #SIEM

0 210 395 0 39

Download Image

SwiftOnSecurity @SwiftOnSecurity

7 years ago

“If we don’t fix X, what’s even the point. Everything I do is worthless if we don’t fix X. We could fix X so easily if others just understood. Why don’t they understand X is so important. What’s even the point.” It’s an emotional loop. I had to learn to compartmentalize goals.

3 19 147 0 0

SwiftOnSecurity @SwiftOnSecurity

7 years ago

So, one thing I struggled with for a long time in IT is recognizing a problem exists, but not obsessing about fixing it as the only priority. That stole many years of my professional life from me. Absolutist security was an emotional response to a lack of me feeling in control.

12 56 379 0 9

cyint_dude @[email protected] @CYINT_dude

7 years ago

I’m a proponent of writing things down. As #threatintel analysts, a big part of our job is recognizing patterns and making connections. But sometimes, we don’t see the connections. Our brains can’t recall as much information as we think they can (1/x).

4 12 75 0 9

Tavis Ormandy @taviso

7 years ago

To all the people telling me this will never happen, and I should stop trash talking 2FA (TOTP, SMS, etc *not* U2F). Please read this, then kindly apologise.

44 288 746 0 54

MG @_MG_

7 years ago

More attack hardware with onboard cellular! As of today, it’s now working in the USA. Still in testing, but keep an eye on @lucabongiorni for when the WHID Elite will be released upon the world. It’s his baby, I’m just helping.

24 263 856 0 34

Download Video

David Perell @david_perell

7 years ago

The math is simple: Learn keyboard shortcuts. They'll save you tons of time. h/t @rands

5 78 264 0 17

Download Image

scriptjunkie (Matt) @scriptjunkie1

7 years ago

Twitter in a nutshell: non-ops people confidently claiming some security measure doesn't work or makes things worse and getting endlessly boosted while those on the front lines who see it stopping attacks every day in the real world get generally ignored.

3 6 58 0 0

Florian Roth ⚡️ @cyb3rops

7 years ago

Black Friday @shodanhq membership for $5 which also includes > 100 scan credits > 20 export credits > setup a private firehose for a /24 network > login with account, then upgrade shodan.io/store/member Credits explained help.shodan.io/the-basics/cre…

8 104 177 0 8

Download Image

Jake Williams @MalwareJake

7 years ago

If you're like me, your first reaction was probably something like "that's stupid, why are APs running BTLE in the first place?" If you're like me, you quickly followed up with "holy carp, what other attack surfaces have I been missing?!?!" techcrunch.com/2018/11/01/ble…