Long Time Security Guru, CISO, Watching the same problems. same issues. Wireless, Network, Mobile, Exploits, and Malware. So many ways, just so little time :)
Chicago, IL
Joined October 2009
- Tweets8.2K
- Following4.2K
- Followers4.3K
- Likes4.8K
Richard Rushing retweeted
Cybersecurity X accounts worth following (Part 2):
1. @SwiftOnSecurity — Windows security
2. @briankrebs — Cybercrime research
3. @troyhunt — Breaches & HIBP
4. @thegrugq — OPSEC & tradecraft
5. @cyb3rops — Detection engineering
6. @mikko — Malware research
7. @_JohnHammond — CTFs & malware
8. @NahamSec — Bug bounty & recon
9. @LiveOverflow — Technical hacking
10. @HackingDave — Red teaming
11. @harmj0y — Active Directory
12. @_wald0 — BloodHound & AD
13. @enigma0x3 — Windows security
14. @gentilkiwi — Mimikatz & Windows
15. @_RastaMouse — Red team tools
16. @SpecterOps — AD security
17. @TrustedSec — Red team research
18. @BishopFox — Offensive security
19. @Horizon3Attack — Exploit research
20. @Synacktiv — Offensive research
21. @TheDFIRReport — Incident reports
22. @sans_isc — Threat intelligence
23. @HuntressLabs — Threat research
24. @13CubedDFIR — DFIR training
25. @EricRZimmerman — DFIR tools
26. @Velocidex — Digital forensics
27. @SigmaHQ — Detection rules
28. @hakluke — Bug bounty tools
29. @codingo_ — Pentesting & recon
30. @EdOverflow — Security research
31. @filedescriptor — Bug hunting
32. @orange_8361 — Exploit research
33. @InsiderPhD — Security education
34. @pentest_swissky — Payloads & pentesting
35. @Hacker0x01 — Bug bounty
36. @bugcrowd — Bug bounty programs
37. @intigriti — Bug bounty programs
38. @GossiTheDog — Vulnerability analysis
39. @malwrhunterteam — Malware hunting
40. @hasherezade — Malware analysis
41. @taviso — Vulnerability research
42. @IntelTechniques — OSINT
43. @CISAgov — Security advisories
44. @MITREattack — ATT&CK framework
45. @BlackHatEvents — Security research & conferences
Save this list. Build your cybersecurity feed with signal, not noise.
#CyberSecurity #BugBounty #EthicalHacking #InfoSec #Pentesting #RedTeam #BlueTeam #DFIR #OSINT #ThreatIntel
Richard Rushing retweeted
Active Directory Hardening Series (II)
Part 5 Enforcing LDAP Channel Binding techcommunity.microsoft.com/…
Part 6 Enforcing SMB Signing techcommunity.microsoft.com/…
Part 7 Implementing Least Privilege techcommunity.microsoft.com/…
Richard Rushing retweeted
Active Directory Hardening Series
Part 1 Disabling NTLMv1 techcommunity.microsoft.com/…
Part 2 Removing SMBv1 techcommunity.microsoft.com/…
Part 3 Enforcing LDAP Signing techcommunity.microsoft.com/…
Part 4 Enforcing AES for Kerberos techcommunity.microsoft.com/…
Richard Rushing retweeted
I Built an AI SOC Analyst for Microsoft Sentinel and Defender XDR and Open-Sourced It rodtrent.substack.com/p/i-bu…
#Security #Cybersecurity #AI #ResponsibleAI
Richard Rushing retweeted
Mapping NIST AI RMF + Forrester RACI → Microsoft security stack
onedrive.live.com/:x:/g/pers…
Richard Rushing retweeted
New: The Three Buddy Problem - Episode 97: We discuss the disappearing art of Windows APT paleontology, the absence of complex malware documentation, and why so much threat-intel research has slipped behind paywalls and into private rooms.
Plus, a surge in AI-discovered bugs in Firefox and Chrome, a rough week for Linux security flaw disclosures, and the usual Ivanti and Palo Alto zero-day bulletins that ship without a single IOC.
- Spotify open.spotify.com/episode/0eh…
- Apple podcasts.apple.com/us/podcas…
- Find a podcast platform pod.link/1414525622/episode/…
- Transcript docs.google.com/document/d/1…
Richard Rushing retweeted
🗺️Active Directory Pentesting Mind Map:
V1: raw.githubusercontent.com/es…
V2: raw.githubusercontent.com/es…
🔖#infosec #cybersecurity #hacking #pentesting #security
Richard Rushing retweeted
Finding misconfigs in Active Directory is free…outside of your time.
Here are 9 of my favorite tools (all free):
Overall - PingCastle/PurpleKnight
Permissions - ADeleg/ADeleginator*
Attack paths - BloodHound
Applocker - Applocker Inspector*
ADCS - Locksmith
Logon scripts - ScriptSentry*
GPO - GPOZaurr
* = utterly biased, tools I made
Richard Rushing retweeted
Fraud Tools, Tactics, and Techniques (FT3) is Stripe's adaptation of ATT&CK-style security frameworks, specifically designed to enhance our understanding of the tactics, techniques, and procedures (TTPs) used by actors in fraudulent activities github.com/stripe/ft3
Richard Rushing retweeted
I see Fortinet is firing back.
Apparently my GitHub profile now qualifies as a malicious website in their web filtering appliances.
(Okay, probably just an automated trigger on APTSimulator or the ransomware simulator repo. But maybe … )
Richard Rushing retweeted
I used to be very frustrated when security researchers published detailed vulnerability reports - meticulously describing every step of the discovery process but failing to include indicators of compromise or exploitation.
It’s not about writing detection rules for us. Just sharing a log snippet, suspicious process behavior, or anything else observed during successful exploitation would be incredibly valuable.
Better handover between researchers and defenders means faster, more effective responses.
Richard Rushing retweeted
🤓 Reverse Engineering and LLMs, 2 years ago when I created my first agent for RE, it was already pretty impressive.
Fast forward to today, more people are using LLMs for reverse engineering.
So here are a few tools for RE you might want to check out:
➡️ Radare AI: github.com/radareorg/r2ai
➡️ IDA Pro MCP: github.com/taida957789/ida-m…
➡️ MCP for Ghidra: github.com/LaurieWired/Ghidr…
And this is just the beginning. What comes next is building smarter RE agents by connecting them with external tools, plugins, and knowledge sources 😉
**The screenshot below is a MCP connected to a flare-on challenge.**
Richard Rushing retweeted
Installing Your Own Command and Control Server on Kali Linux
hackers-arise.com/post/comma…
Richard Rushing retweeted
9 Platforms to Get FREE Cybersecurity E-Books
1. PDF Drive
2. Heimdal Security
3. CollegeLearners
4. Endureka
5. Freetechbooks
6. Free Computer PDF
7. Online Programming Books
8. Infobooks
9. Simplilearn
Richard Rushing retweeted
IngressNightmare: 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX by @wiz_io
this is bad
wiz.io/blog/ingress-nginx-ku…
