Security Nerd, Product builder. Content and opinions are my own. Director of PM @ SentinelOne | Formerly Datadog, Rapid7
Joined October 2011
- Tweets399
- Following340
- Followers262
- Likes805
I have been trying to buy internet from @VerizonSupport for two full days now. Apparently they don't work on sundays, and their website is so buggy my last order didn't actually work. Is Optimum any better?
The new National Cybersecurity Strategy released by the Biden Admin today is a must-read. I'm most excited by 4.1: Secure the Technical Foundation of the Internet. Securing BGP and DNS will be a big win globally
whitehouse.gov/wp-content/up…
I have noticed that music is the fastest and most reliable stress relief I have day-to-day. A day of jam-packed meetings can make it hard to make use of that though. Anyone else feel similarly?
Nick Davis @nicksdavis@infosec.exchange retweeted
New cloud security research! We found a method to bypass CloudTrail logging for specific IAM actions via an undocumented API service! Attackers could perform some reconnaissance activities while being undetected.
securitylabs.datadoghq.com/a…
Awesome Vuln Discovery by our very own @Frichette_n A Confused Deputy Vulnerability in AWS AppSync securitylabs.datadoghq.com/a…
Finding malicious PyPI packages through static code analysis: Meet GuardDog securitylabs.datadoghq.com/a…
Verifying myself: I am ndavis on Keybase.io. uto_JkeQAgTZtQLAULYnvI7ai1G37r7o1_Ae / keybase.io/ndavis/sigs/uto_J…
Nick Davis @nicksdavis@infosec.exchange retweeted
Join me next week in at @Bsideslisbon in #Lisbon! I'll show how observability can accelerate #pentesting. I'll release a @Burp_Suite extension enriching requests with actions performed by the API: SQL queries, HTTP requests, caches, 3rd party services contacted...
Nick Davis @nicksdavis@infosec.exchange retweeted
Hey twitterverse does anyone have awareness of programs to help women or other underrepresented groups get tickets for #reInvent at a discount or free?
It's time! The Datadog team has released its annual Container Research Report. This year there are a few interesting security insights. that I wanted to dive in on. Thread below!
datadoghq.com/container-repo…
A decreasing percentage of Kubernetes clusters use overly permissive RBAC privileges. Read the @datadoghq report: datadoghq.com/report/facts/c…
To absolutely no ones surprise RBAC is hard. This problem is difficult to solve, but shouldn't be overlooked. Glad this is improving!
If this stuff resonates with you, or you think you need help managing these types of issues, Datadog can help. Check out Cloud Security Management
datadoghq.com/blog/security-…
The OpenSSL punycode vulnerability (CVE-2022-3602): Overview, detection, exploitation, and remediation securitylabs.datadoghq.com/a… – at Boston, MA
Nick Davis @nicksdavis@infosec.exchange retweeted
We allow non security teams understand the security posture of their cloud configurations without needing a security person to get involved. We want to empower autonomy and ownership where it belongs 12/n
We’ve announced Cloud Security Management at #dash2022 today! Holistically manage threats and risks collaboratively with DevOps. CSM is available today! – at Manhattan, NY
Nick Davis @nicksdavis@infosec.exchange retweeted
I’m hyped to share with you what we’ve been building those last months! The world of security is traditionally secretive, but @datadoghq comes from observability… I’ll be live-tweeting in this threat̵d #dash2022 1/
Nick Davis @nicksdavis@infosec.exchange retweeted
Another workshop in the books! So happy @christophetd and I were able to collab on this for @dashconio ✨🤓
Nick Davis @nicksdavis@infosec.exchange retweeted
It's not too late to register for dashcon.io or virtual #dash. Catch @christophetd and I delivering a session on our State of AWS Security report on the 19th. All sessions are recorded and available online. bit.ly/3RJ3Lrz
