Co-founder of Tidal Cyber; Former GM ATT&CK Evaluations. Opinions are my own

Maryland, USA
Joined March 2009
Frank Duff retweeted
New from Trellix's SecondSight Threat Hunting Report: 5 campaigns from H1 2026 — APT28, Bitter APT, DarkSword, JSCeal, and the Axios npm attack — show how adversaries are hijacking trusted infrastructure to evade detection. Read the breakdown: bit.ly/4ryaEPM
2
1,786
Frank Duff retweeted
I am curious on the community's thoughts. 🙏🙏🙏 OpenAI and Hugging Face published this last week 📝openai.com/index/hugging-fac… Question: "if an AI model is the one conducting the attack, does this qualify as its own group?" thoughts? 🤔🤔🤔 Visual example
1
1
241
Frank Duff retweeted
I opened a role for a manager reporting to me, focused on detection engineering and threat hunting. Before I post the link, here are the inflexible criteria: - US-based - detection engineering expertise in data-constrained environments - leadership of high-performing teams
5
32
3
73
30,753
Frank Duff retweeted
Somewhere between report #37 and #38, your brain just goes into skim mode. Then you hit a line like this and do a full double take with a smile. And it’s a nice reminder, I'm not the only one that feels this way. vulncheck.com/blog/return-of…
2
1
327
Frank Duff retweeted
#RT @Binary_Defense: On Dec 15, @_Dwyer_ and @FrankDuff show how a threat led approach gives defenders clearer priorities and stronger detection outcomes. If you want signal over noise, this is worth your time. Register and bring your questions.
1
62
Depth of coverage matters. Procedures matter. Technique’s are useful, but recognize they are abstractions and therefore have limitations.
Remember an EDR has to cover one or a few implementations of a technique in order to claim coverage. Whilst you don't need (nor want) to be covered in all implementations. You might wanna know which are covered and if they matter for your use case.
1
145
Emulation vs Simulation 🦄
1
1
8
680
Heading to Bark at the Park tonight for Reed’s senior dog Rescue. Looking forward to seeing the @Orioles rebound from a ruff start with some good performances from Gunnar Hounderson, Adley Ruffman, Felix BowWowtista - couldn’t resist. Can’t adopt? Donate: reedsrescue.org/
1
147
A new approach- #ThreatInformedDefense - focuses on understanding the behaviors adversaries use, giving teams the confidence to to assess, shape, and test defenses for a more efficient and cost-effective way to protect against threats. Read the full blog: okt.to/COHfdk
1
1
156
Announcing the addition of @ESET mappings and integrations into the @TidalCyber Registry! Thank you ESET for working with us to help security teams manage their security stacks and know where to allocate resources. Interested in joining our Registry? okt.to/QlB5ma
1
1
1
1,542
We are excited to announce the addition of @AbnormalSec to the @TidalCyber Registry as an Enterprise Exclusive – enabling customers to understand how Abnormal Security adds to their Coverage of MITRE ATT&CK! Interested in joining our Registry? okt.to/XsOESD.
1
2
156
Frank Duff retweeted
I’m hiring a Director of Threat Hunting to help us build and manage a client facing hunt program at Coalfire. If you are the person I should hire, or know someone I should, hit the link below. jobs.lever.co/coalfire/904a4…
12
41
4
111
14,005
Announcing the addition of @Zscaler to the @TidalCyber Registry for Mutual Customers! Thank you to Zscaler for working with us to help empower security teams to get a full picture of their coverage. Interested in joining our Registry? okt.to/pnZhAi
1
2
133
In this new blog by @FrankDuff, he explains how the @TidalCyber platform helps security teams quantify risk to AI-enabled systems and demonstrate that they’re staying ahead of attacks on AI.  Read the full blog: okt.to/TnteL6
1
1
104
🌊 Tidal Cyber is hiring! 🌊 Are you ready to take your sales career to the next level? Tidal Cyber is looking for a dynamic Sales Development Representative to be the driving force behind our sales growth. 🚀 Read the full description and apply: okt.to/HXN8sU
2
3
146
The @TidalCyber team will be at the @FutureConHQ Cybersecurity Conference in Chicago this Thursday! Come see @FrankDuff speak about how #ThreatInformedDefense  shrinks weeks of work into minutes and ensures teams are focusing resources on the threats that are the biggest risk.
1
2
134
Frank Duff retweeted
Read more about the @zeroshotsec & @TidalCyber dream team! Our mission was simple: let AI handle ATT&CK mapping so analysts can focus on solving problems. Thanks to the entire team for their support along the way - excited for what’s next!!
Yesterday we announced our acquisition of Zero-Shot Security, and we are excited about the impact its impact on transforming threat intelligence. Zero-Shot does the dirty work so senior team members can solve problems. Read the full blog to learn more: okt.to/KVFyPR
1
4
405
Announcing today, @TidalCyber acquired Zero-Shot Security, an innovative artificial intelligence solution to simplify and speed the processing and analysis of threat intelligence.  Read the full press release: okt.to/GXctma
4
2
7
743
Frank Duff retweeted
More details to come but @zeroshotsec has been acquired!! Super excited to join forces with @RickGordon_ @FrankDuff & @RichardStruse and can't thank them enough for taking a chance on Zero-Shot in the early days and seeing its potential. We're just getting started!
Announcing today, @TidalCyber acquired Zero-Shot Security, an innovative artificial intelligence solution to simplify and speed the processing and analysis of threat intelligence.  Read the full press release: okt.to/GXctma
2
5
313