Mark @sneakymonk3y

uber geek blue team cyber commando bad guy annihilator @CrowdStrike OSCP GREM GC|FA/FE/IH #DFIR https://t.co/hyhoN9n1lu you.sneakymonkey.net Worcester, UK 🇬🇧 Joined May 2008

Tweets

5K
Followers

2K
Following

956
Likes

12K

Nick VanGilder @nickvangilder

3 weeks ago

Hit ‘em with that red team rizz

1 5 54 3K 6

Download Image

Our Call for Workshops are still open! Got a skill or some knowledge you want to pass on, get it in! We are looking for workshops to help spread the knowledge! cfp.bsides.london/bsides-london-… #Security #BSides #London #BSidesLDN.2025

0 7 6 774 1

The Hacker News @TheHackersNews

5 days ago

🚨 UPDATE - Palo Alto Networks confirms it was hit in the Salesloft Drift breach. Attackers accessed Salesforce CRM data — mostly contacts, sales info & case records. Products/services not impacted. Other victims: Zscaler, PagerDuty, SpyCloud, Tanium. Details →…

1 101 260 34K 89

Download Image

Florian Roth ⚡️ @cyb3rops

5 days ago

Palo Alto reports being affected by SalesLoft supply chain breach "Salesforce-Connected Third-Party Drift Application Incident Response" paloaltonetworks.com/blog/2025/09/s… Unit42 report: unit42.paloaltonetworks.com/threat-brief-c… Salesloft IOCs: trust.salesloft.com/?uid=Drift%2FS…

6 68 180 19K 68

Download Image

BSides London @BSidesLondon

6 days ago

So who wants a ticket for #BSidesLDN2025? bsides.london/event-informat…

9 14 40 5K 2

Download Image

Mark @sneakymonk3y

a week ago

What in the organised crime is this?

International Cyber Digest @IntCyberDigest

a week ago

What in the organised crime is this?

24 108 861 178K 367

Download Image

0 0 1 167 0

John Hultquist @JohnHultquist

a week ago

Major Update: We now believe this incident impacts other Salesloft Drift integrations, not just Salesforce. We’re advising Salesloft Drift customers to treat any and all authentication tokens stored in or connected to the Drift platform as potentially compromised.

John Hultquist @JohnHultquist

2 weeks ago

1 35 94 26K 27

0 43 84 19K 22

@mikko @mikko

a week ago

In security, when you do your job perfectly, nothing happens. And people don't see when nothing happens.

36 217 1K 69K 310

Download Video

Mark @sneakymonk3y

a week ago

Malware weaponizes AI coding agents to exfiltrate data. “Treat local AI coding agents like any other privileged automation: restrict file and network access, review often, and don’t blindly run AI coding agents' CLIs in YOLO modes” Early warning ⚠️ snyk.io/blog/weaponizi…

0 0 1 128 0

Nx @NxDevTools

2 weeks ago

🚨 Nx experienced a supply-chain attack: - Attackers released compromised versions of Nx packages. - These weren't from our CI (lacked npm provenance signatures). - Nx Cloud is not affected We are actively investigating. All details 👇 github.com/nrwl/nx/securi…

13 74 250 170K 84

NCSC UK @NCSC

2 weeks ago

Attackers have had considerable success taking advantage of known common vulnerabilities rather than relying on bespoke malware or zero-day vulnerabilities to carry out their activities, meaning attacks via these vectors could have been avoided with timely patching.

2 3 11 2K 0

LuemmelSec @theluemmel

2 weeks ago

Not again... Citrix, the company that keeps on giving. cyberplace.social/@GossiTheDog/1… If you want to check your systems: github.com/fox-it/citrix-…

1 46 142 16K 81

The Shadowserver Foundation @Shadowserver

2 weeks ago

ALERT: On 2025-08-26 over 28.2K Citrix instances were unpatched to CVE-2025-7775 RCE. There is exploitation in the wild confirmed by @CISACyber KEV. Patch info from Citrix: support.citrix.com/support-home/k… Top affected: US, Germany Dashboard geo breakdown: dashboard.shadowserver.org/statistics/com…