spencer @techspence

🛠️ Former Sysadmin, now Pentester | Microsoft MVP | Helping IT teams make their environment harder to attack | @SecurIT360 & @CyberThreatPOV spenceralessi.com/adsecuritykit 🏰AD Security Resource Kit ⬇️ Joined November 2010

Tweets

52K
Followers

16K
Following

3K
Likes

129K

spencer @techspence

2 hours ago

@clintgibler @OpenAI @michaelaiello Wicked! Make Active Directory great again!

0 0 4 93 0

View Details

spencer @techspence

2 hours ago

@awscloud Masterclass in twitter viral marketing

0 0 2 110 0

View Details

0xdf @0xdf_

a day ago

I think this N-day research is potentially the biggest story of AI, vulnerability finding, and exploit development. red.anthropic.com/2026/n-days/ 1/6

8 80 491 36K 409

View Details

spencer @techspence

2 hours ago

@IAMERICAbooted

0 0 0 25 0

View Details

spencer @techspence

2 hours ago

@sec_hub93028 You don’t

0 0 3 109 0

View Details

spencer @techspence

2 hours ago

@Kipnis_a @anton_chuvakin Totally, this one has sound! 😜

0 0 1 12 0

View Details

spencer @techspence

2 hours ago

@m19o__ Unfortunately many tasks require elevation

1 0 0 35 0

View Details

spencer @techspence

14 hours ago

Hardening Active Directory is, forgive me, hard. But it doesn’t make it unnecessary.

7 3 55 3K 4

View Details

spencer @techspence

2 hours ago

@AndyMicone For sure. AD in its default form it’s not desirable

0 0 0 7 0

View Details

spencer @techspence

2 hours ago

@CreativeWolf @PyroTek3 Some folks believe there will be a resurgence of on-prem. Who knows

0 0 1 11 0

View Details

spencer @techspence

a day ago

How dead is Active Directory? According to NAIC census data as of December 2024, there were about 1.5 million businesses in the US with 10+ employees. Even with conservative estimates, the amount of businesses that STILL have AD is not insignificant. Active Directory is alive and well and continues to be a major infrastructure component for many, many organizations. That means that Active Directory will continue to be attacked. That also means that learning to defend Active Directory will continue to be important.

12 20 130 14K 43

View Details

spencer @techspence

2 hours ago

@AndyMicone Might as well be forever!

0 0 0 7 0

View Details

Jose Enrique Hernandez @_josehelps

11 hours ago

One of the many reasons to use @magicswordio is to avoid this trade off: “ransomware actors can defeat core components of their defenses without warning and shut down their networks, but preemptively blocking these vulnerable drivers could also cause significant disruptions.”

MagicSword @magicswordio

12 hours ago

Our co-founder @M_haggis was quoted in Dark Reading's piece on the BYOVD ecosystem. 430 vulnerable drivers can bypass HVCI. That's 21% of everything LOLDrivers tracks. Most organizations don't block them because they don't understand the risk, and because they fear that blocking

0 3 13 3K 2

0 2 6 2K 0

View Details

Clint Gibler @clintgibler

7 hours ago

Career update: I’ve joined @OpenAI to lead Cyber with @michaelaiello. Why I joined, and what we’ll be building: It’s clear that AI is fundamentally changing how software is being written and secured. Coding agents are writing the majority of code for many developers, software is getting shipped more quickly, and vulnerabilities that were latent for 20 years are being discovered at a rapid pace. The time to bug discovery, and exploitation once discovered, are trending down (H/T @EppSecurity and @gadievron). I believe we have an unparalleled opportunity to fundamentally 𝘪𝘮𝘱𝘳𝘰𝘷𝘦 cybersecurity in ways that were previously impossible. (H/T @bubblewire’ BSidesSF keynote on reasons for optimism) Over 6 years at @Semgrep, I had the privilege of working with an amazing team building what has become the most popular open source security code scanning tool in the world, that many companies have built their application security program around. Now, at @OpenAI, I’m thrilled to be a part of a company helping shape how software is written, and how security work gets done. It is a massive opportunity, and responsibility, and I don’t take that lightly. Here are my current thoughts about where things are headed: 𝐑𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐭 𝐛𝐲 𝐝𝐞𝐬𝐢𝐠𝐧. Defenders are not going to win playing bug whack-a-mole. We need to systematically eliminate classes of vulnerabilities, via generating secure code and streamlining the detect → validate → fix process. 𝐀𝐮𝐠𝐦𝐞𝐧𝐭 𝐚𝐧𝐝 𝐞𝐦𝐩𝐨𝐰𝐞𝐫 𝐩𝐞𝐨𝐩𝐥𝐞. We should build models and tools that give defenders “superpowers,” enabling them to be more ambitious in the scope they tackle, shift from being reactive to proactive, and allow them to automate the drudgery so they can focus on the highest leverage work. 𝐒𝐞𝐜𝐮𝐫𝐞 𝐭𝐡𝐞 𝐜𝐨𝐦𝐦𝐨𝐧𝐬. The world runs on open source software. OpenAI has already spent $Ms finding and patching vulnerabilities in the most popular and widely run software, including browsers, operating systems, and core libraries. More on this soon. We’re also working on helping secure critical infrastructure. 𝐂𝐨𝐦𝐦𝐮𝐧𝐢𝐭𝐲 𝐚𝐧𝐝 𝐩𝐚𝐫𝐭𝐧𝐞𝐫𝐬. Securing the world is a community effort. I’m looking forward to partnering with cybersecurity vendors, researchers, practitioners, governments, and more to do together what we can’t do alone. 𝐓𝐢𝐦𝐞 𝐭𝐨 𝐛𝐮𝐢𝐥𝐝. Tactically, here are some domains I’m excited about: - Finding, validating, and reliably patching software vulnerabilities at scale. - Eliminating classes of vulnerabilities and making software resilient by design. - Giving broad access to the best cyber models to empower defenders, not just to a select few. - Creating and sharing Skills and playbooks that help in many security domains. - Building platforms that enable defenders to easily orchestrate security work. - Making enterprise agents safe and reliable. Time to build 😎 — What would help you most? What should we build? Let me know.

63 31 565 123K 96

View Details

spencer @techspence

5 hours ago

@Kipnis_a @anton_chuvakin Haha nice!! Not bad

1 0 1 22 0

View Details

spencer @techspence

5 hours ago

@Mitchell90 There is that for sure. also many orgs would do well to just clean up some obviously stale or dormant accounts and permissions. It would go a long way