CROSS-INTEL @cross_intel

@FilipiPires @CNCSgovpt @scythe_io See you there guys!

🇵🇹 Excited to be speaking at @CNCSgovpt #CDaysPortugal in Porto on June 17! 🎯 Nation-State TTPs in a Live Lab: APT28 BadPaw/MeowMeow 💳 Cyberattack on Brazil's Payment System Proud to represent @SCYTHE_io and @cross_intel Which session would you attend? 👇🚀 #CyberSecurity #ThreatIntelligence #APT28 @CNCSgovpt

🚨 Volt Typhoon. Emulated LIVE. July 11 - @brysonbort and I are running the OT/ICS Threat Defense Workshop organized by @PacktPublishing . 3.5 hours showing how APTs hit critical infrastructure, and how to validate your defenses without taking the plant down. Limited seats 👇 #OTSecurity #ICS #VoltTyphoon

Great time doing a workshop with my friend @joe_carson about Identity under attack at CYCON 2026 organized by @ccdcoe ..

keyboard_arrow_left Previous keyboard_arrow_right Next

@FilipiPires @ccdcoe @brysonbort @scythe_io @RedTeamVillage_ @RaicesCyberOrg Great @FilipiPires !!

Attackers don't break in. They log in. Valid credentials. Excessive privileges. Forgotten identities. That's all they need. This Thursday at @ccdcoe #CyCon2026, we're running a 90-minute Workshop "Identity Under Attack" that puts security and business leaders inside a real identity breach scenario. Privilege escalation, lateral movement, business impact. No safety net. May 28. 4:00 PM EET. Tallinn. If identity is your blind spot, this is the room to be in. #IdentitySecurity #CyCon2026 #SCYTHE #IncidentResponse #CyberSecurity #RedTeam #ThreatIntelligence #PurpleTeam #ZeroTrust #PrivilegedAccess #PAM #IAM #CloudSecurity #TabletopExercise #Infosec #MITRE #CredentialCompromise #LateralMovement #CyberDefense

@bsidessp it was incredible.. 3000 + people focused on learning about Cybersecurity, Offensive Security..Hacking and much more.. Thank you everyone that participated watching my talk about: APT28 Breach & Attack Emulation - Correlating a live Lab with the BadPaw/MeowMeow Campaign Soon we’ll share the recorded session #SCYTHE #AEV #BAS #redteam #purpleteam #blueteam #socvalidation #bsidessp

keyboard_arrow_left Previous keyboard_arrow_right Next

Talking about APT28 - BadPaw at @bsidessp 🫡🫡 #SCYTHE #RTV #BSidesSP #purpleteam #redteam

keyboard_arrow_left Previous keyboard_arrow_right Next

See you there on @bsidessp .. Let’s goo 🦄🦄🚀🚀

@scythe_io @FilipiPires 👏👏👏

Malware analysis tells you how an attack is built. Threat emulation tells you whether your security controls are actually prepared to face it. SCYTHE Labs walked through a real JScript dropper from MalwareBazaar, decoding the full 5-stage attack chain across 13 MITRE ATT&CK techniques, then translating every finding into a repeatable emulation campaign validated against a live Windows 11 target. Read the full technical breakdown here: hubs.ly/Q04fnYZ-0 By: @FilipiPires #ThreatEmulation #DetectionEngineering #JScriptDropper

CROSS-INTEL 🤝 @segura_security We’re joining forces to bring Zero Trust + Privileged Access Security to the next level. Identity is the new attack surface. we help you control it. 👉 Want to reduce risk and secure what matters? Let’s talk. #CyberSecurity #PAM #InfoSec #Partner

The Second Wave is LIVE. 🚨 Tickets are moving fast and this is your chance to be part of one of the most technical and community-driven security events in Portugal 🇵🇹 . 👉 Grab your ticket : bsidesporto.org Tag your crew. Don’t miss this. #BSidesPorto #Cyber #redteam

@FilipiPires @PacktPublishing Congrats @FilipiPires !!

Attackers don't break in. They log in. My new book is out: "TPRM-driven Supply Chain Cybersecurity" 📚 by @PacktPublishing A threat-informed playbook on how adversaries abuse legitimate access across vendor ecosystems and how to stop it. 📖 Packt: packtpub.com/en-us/product/… 📖 Amazon: amazon.com/TPRM-driven-Su… RTs appreciated 🙏

Purple Team Exercise Framework v4 is here is here, turning exercise findings into production detections instead of reports that go unread. PTEF v4 adds the operational structure purple teams have been building around manually: a detection engineering lifecycle, a hunt-to-detection pipeline, graded outcome scoring on a 0 to 5 scale, gap categorization, a maturity model, and AI/ML attack surface coverage mapped to MITRE ATLAS. Also included: 10 reference guides, 4 exercise templates, and 3 native emulation plans (Volt Typhoon, PsExec, AI Discovery), with no C2 framework or paid tools required. Get the PTEF v4 for Free: hubs.ly/Q04clBPt0 #PurpleTeam #DetectionEngineering #ThreatEmulation

🦄 Meet the minds behind UniCon 2026. On April 9 from 11 AM to 5:30 PM ET, we're going deep on Continuous Validation in the Age of AI, with practitioners and leaders who live and breathe threat emulation, detection engineering, and what AI-driven adversary tradecraft means for your detection logic: Bryson 🦄 Bort (@brysonbort) Caroline Wong (@CarolineWMWong) Jason Christopher (@jdchristopher) Scott H. Alex Waitkus Michael Brunetti Tyler Casey Michael Haag (@M_haggis) Christian Nicholson Join us for a full virtual day of candid conversations, real-world strategies, and actionable takeaways scythe.io/join-unicon-20… #UniCon2026 #ContinuousValidation #ThreatEmulation

Hey everyone. After years contributing to open source projects, I decided it was time to build something of my own for the community. Introducing DrogonSec Security Scanner. DrogonSec is an open-source, modular security framework written in Go, created by me and maintained by @cross_intel . The goal is simple: give security teams a single, unified tool to identify risks across code, dependencies, secrets, and infrastructure. It was built to give security professionals a single, unified tool to detect vulnerabilities across code, dependencies, secrets, and infrastructure with AI-powered remediation on the roadmap. Inspired by Horusec, Drogonsec is its modern, actively maintained successor with enhanced capabilities and alignment to the latest OWASP standards. Enjoy guys -> github.com/filipi86/drogo… #CyberSecurity #AppSec #DevSecOps #OpenSource #GoLang #SAST #SCA #CloudSecurity #OWASP #SecurityTools #RedTeam #BlueTeam #InfoSec #GitHub #SecurityEngineering #ThreatDetection #Startups #BuildInPublic

🦄 UniCon 2026 | April 9 | FREE | Online @scythe_io is bringing together top cyber defense professionals for 6h of real adversarial content. If you defend real systems against real attackers, this thread is for you. 🧵👇 Register now 👇 🔗 scythe.io/join-unicon-20…

A hands-on activity on “APT28 BadPaw/MeowMeow: From Manual Lab to Adversary Emulation” was conducted by @FilipiPires , Head of Technical Advocacy at @scythe_io , and Founder & Investor at CROSS-INTEL at @AdversaryVillag at @OneRSAC 2026. #AdversaryVillage #RSAC2026

keyboard_arrow_left Previous keyboard_arrow_right Next