Sav @InfoSecSav

Intelligence Capability Development consultant @Mandiant, studying the intersection of intelligence, risk, and business operations. Virginia, USA Joined November 2020

Tweets

4K
Followers

565
Following

833
Likes

762

Sav @InfoSecSav

3 days ago

@greglesnewich I had strep and flu at the same time and the doc looked at me with a level of pity I will never forget. Good luck, Greg.

1 0 1 67 0

View Details

Sav @InfoSecSav

5 days ago

So…anyone seen details on this?

On Mythos, from @MarkWarner in this morning's Senate Banking hearing: "the head of the NSA and Cyber Command came and said this tool broke into almost all of our classified systems, not in weeks, but in hours"; I had not seen that mentioned elsewhere?

9 24 118 82K 66

0 1 0 231 0

View Details

Andy Piazza @klrgrz

2 weeks ago

I’m hiring a sr principal threat researcher. When big things happen on the internet, you’ll lead the threat research to hunt across our vast telemetry & write the threat briefs. Senior role w/ strong comms & collab experience. jobs.paloaltonetworks.com/en/job/santa-c…

6 18 50 10K 9

View Details

Sav @InfoSecSav

2 months ago

Sometimes I put this on the projector and just shout “QUADBOX” at my wife until she is forced to acknowledge.

Neal Mohan @nealmohan

2 months ago

Today, we’re officially launching fully customizable multiview on @YouTubeTV. Our @YouTube teams made one of our most popular features even better. The new multiview builder gives you full control to mix and match live streams (including add-ons like @NFL Sunday Ticket), and

1K 456 7K 2.6M 691

0 0 0 55 0

View Details

Sav @InfoSecSav

2 months ago

Packers fans are everywhere

Clash Report @clashreport

2 months ago

A 77-year-old Ukrainian grandmother fleeing the war was spotted by a drone while walking alone under fire. They sent a UGV to rescue her. To avoid frightening her, the ground robot was covered with a blanket bearing the message: "Grandma, get on."

198 2K 22K 1.3M 2K

0 0 0 62 0

View Details

Sav @InfoSecSav

2 months ago

@ImposeCost Generally I advocate for yes, but the reality is some degree of collaboration varying with consumer maturity/familiarity. CTI is accountable for collections IRL, so no buck passing. Only wholly applies if the consumer is providing consistent feedback, though. Generally speaking.

1 0 1 22 0

View Details

Sav @InfoSecSav

2 months ago

@ImposeCost Every end consumer has two very robust requirements: “tell me everything I need to know for my job” and “tell me everything I don’t need to know but could get me fired anyways.” Everything else is on us.

1 0 1 14 0

View Details

U.S. Attorney DC @USAO_DC

2 months ago

The Department of Justice, through U.S. Attorney Jeanine Ferris Pirro and Assistant Attorney General A. Tysen Duva of the Criminal Division, together with its partners, today announced a series of coordinated actions by the Scam Center Strike Force against Southeast Asian criminal organizations operating scam centers that have defrauded Americans of billions of dollars. Read More Here: justice.gov/usao-dc/pr/sca… @USAttyPirro @FBI @SecretService @USTreasury @StateDept

43 272 918 201K 34

View Details

Adib Hanna @adibhanna

2 months ago

Had an interview with a “crypto” recruiter. We talked for about 40 minutes, and then they asked me to look at some code. Their first instruction was to clone the repo. I didn’t. They seemed surprised, so I told them I wanted a moment to check whether it was safe first. I ran a quick analysis with Claude. Turns out the code had a backdoor. It would copy my environment variables and send them to a remote server. The recruiter went speechless and ended the call pretty quickly. Be careful who you talk to. Scammers are real.

181 1K 13K 951K 1K

View Details

Sav @InfoSecSav

2 months ago

A special place in hell for the people indicted here.

Christopher Glyer @cglyer

2 months ago

Seeing western-based ransomware negotiators & incident responders deploying ransomware at victims & playing both sides of negotiation is sickening 🤮 21st century version of the 1990’s movie Backdraft justice.gov/opa/pr/florida…

1 2 10 3K 3

0 0 0 127 0

View Details

John Hultquist @JohnHultquist

2 months ago

The @SLEUTHCON CFP closes next week. Don’t waste valuable time doing your taxes. Submit! Submit! Submit!

SLEUTHCON @SLEUTHCON

3 months ago

We want to hear from YOU 🫵 Got something you think would make a great talk at SLEUTHCON this year? Full-talk speakers get a $500 honorarium, ALL speakers get the best swag! Don't wait - submissions close April 17th at 11:59 (ET)! Learn more about our CFP and submit yours today

0 8 17 15K 5

0 8 10 4K 0

View Details

Sav @InfoSecSav

2 months ago

It’s nice to fantasize about a comprehensive integration into CI/CD pipelines to the point where we all get to hold hands and sip daiquiris on the beach, but you are still a river of fire and brimstone away from that level of tool and patch adoption.

Sean Heelan @seanhn

2 months ago

If your response to a highly competent, but imperfect and resource sensitive, vulnerability hunting tool is to conclude this favours *defence*, you and your networks are ngmi. One does not bug hunt their way to a defendable network. AI does not change that.

2 14 64 13K 11

0 0 0 61 1

View Details

Sav @InfoSecSav

2 months ago

@ZackKorman Bold leadership in these trying times. Not good leadership, but bold.

0 0 2 44 0

View Details

Sav @InfoSecSav

2 months ago

If there are any Delve customers left on @ZackKorman’s list, this should be some sort of blunt force instrument. A brand new “How cooked are we?” metric.

Elizabeth Holmes @ElizabethHolmes

2 months ago

I'll refrain from commenting. But if the founders would like to talk... I've seen this show before.

131 41 2K 525K 382

1 0 3 764 0

View Details

Sav @InfoSecSav

3 months ago

Really can’t believe @smithsonian took Hail Mary off the IMAX for Super Mario.

0 0 0 66 0

View Details

Moritz @m_r_tz

3 months ago

The FLARE team now freely distributes its quality reverse engineering and malware analysis educational content at github.com/mandiant/flare…. Launched with: - Malware Analysis Crash Course - Go Reversing Reference - Intro to TTD

6 401 1K 65K 1K

View Details

John Hultquist @JohnHultquist

3 months ago

Our blog on the Axios NPM supply chain attacks. We are attributing the incident to a suspected North Korean threat actor we track as UNC1069. That actor is financially motivated and DPRK historically leveraged supply chain attacks to target crypto. cloud.google.com/blog/topics/th…

1 23 61 5K 18

View Details

John Hultquist @JohnHultquist

3 months ago

We are still looking at the axios supply chain compromise, but we’ve attributed it to UNC1069, a suspected DPRK actor, who we covered in a blog this February. They are financially-motivated and historically DPRK uses these incidents to target crypto. cloud.google.com/blog/topics/th…