Opie (@akraut) profile picture

Opie

@akraut

Info Security Geek, Gentoo Maestro, DJ, Emergency Manager, Granola Lover AKA @akraut@mastodon.sdf.org https://xitter.cf/t.co/Qofvy96Gk1 https://xitter.cf/t.co/iPl6XkeXRx

 San Francisco, CA US
opie.at/
Joined July 2006
  • Tweets10.4K
  • Following803
  • Followers1.4K
133Media
Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)Photo by Opie (@akraut)
Ever wonder how the default seccomp profile is different/changed across Docker vs Podman vs containerd? I didn't think this table was right, had to check this 3 times. Join me @qc_con and you'll see it gets worse before it gets worse.
Image from Mark Manning (@antitree)
3
3
1,764
I use Log4shell canaries in my passwords and I have one per website. It’s been crazy interesting the sites that I have gotten pings for and where the pings are from. I think it’s cool. It would be a fun talk to put together and a good story to tell but not useful…
34
54
8
793
67,178
Opie retweeted
KF (@d0tslash) profile picture
KF
@d0tslash1 Jul 2025
Replying to @mubix
do it!
1
1
3
3,108
New addition to my obscure book club.
Image from Mark Manning (@antitree)
1
2
7
3,658
Turo needs a checkbox for “I will not engage in acts of terrorism with this vehicle during this rental” to solve these problems.
1
3
19
3,410
Another day, another reverse-proxy serving up stolen keys to hijacked #LLM infrastructure for the purpose of roleplaying. --Stats for this one-- Uptime: 4 days'ish Prompts: 154k @OpenAI keys: 98 @googlecloud keys: 25 @MistralAI keys: 3 @Azure keys: 5
Image from 1aN0rmus (@TekDefense)
5
1
12
2,283
🕵️‍♂️ LLMJacking for illicit roleplay 🕵️‍♂️ - GenAI infrastructure has quickly risen as a target for attackers - With full prompt logging enabled, Permiso got a peek into what the hijacked models are being used for - Spoiler: All for roleplaying of an illicit nature *link in thread
Image from 1aN0rmus (@TekDefense)
2
15
2
30
7,454
Ah yes, the rare annual east-west migration of the iPhones from their birth place of Shenzen to the Americas. Nature is beautiful – at East Region, Singapore
Sebastiaan de With (@sdw) profile pictureSebastiaan de With
@sdw18 Sep 2024
FlightAware has a page up tracking the UPS planes loaded with iPhones heading to the US for Friday’s launch. Assuming roughly 300,000 iPhones fit a 747-8F, just one group planes near Alaska was hauling $2,330,200,000 ($2.3 billion) worth of iPhones this morning.
Image from Sebastiaan de With (@sdw)
4
19
2,525
permiso.io/blog/introducing-… github.com/Permiso-io-tools/…
Introducing YetiHunter: An open-source tool to detect and hunt for suspicious activity in Snowflake

Introducing YetiHunter: An open-source tool to detect and hunt for suspicious activity in Snowflake

YetiHunter is an open source tool that combines the indicators that Snowflake, Mandiant, DataDog and Permiso have into one easy to run script to detect and hunt for suspicious activity in Snowflake.

permiso.io
1
4
1,136
🚨 Introducing YetiHunter! 🚨 After assisting clients with #Snowflake investigations, the @permisosecurity team created a utility that queries known indicators from recent attacks on Snowflake customers. 🔍 🔗 Tool & blog link in the comments!
Image from 1aN0rmus (@TekDefense)
1
7
2
21
5,051
In case you missed it, we're teaming up with KPMG to host a LUCR-3 (#ScatteredSpider) Threat Briefing. @dlabos and @TekDefense will provide tips on how to detect this group in your environment and provide tips on how to defend against them. hero.permiso.io/lucr-3-scatt…
5
8
908
We are thrilled to announce our $18.5M Series A funding led by Altimeter Capital in order to accelerate the development of our cloud detection and response (CDR) solution for all clouds that extends coverage into identity threat detection and response. permiso.io/blog/permiso-rais…
Permiso Raises $18.5M Series A To Unify Threat Detection and Response In The Cloud

Permiso Raises $18.5M Series A To Unify Threat Detection and Response In The Cloud

After successfully detecting cloud identity-based attacks that bypassed existing security solutions and closing multiple six and seven figure license deals with Fortune 500 customers, Permiso has...

permiso.io
1
10
4
30
14,354
Permiso’s Threat Research team continues to grow with more talented security engineers and researchers joining our @P0Labs team! Please help us welcome our newest full-time Associate Threat Researcher: Dredhza Braina!
Image from Permiso Security (@permisosecurity)
3
1
6
2,355
Excited to announce that @SecEagleAnd1 & I were accepted to speak @BlackHatEvents #BHAsia this April in Singapore! We'll release "Cloud Console Cartographer" - our open source tool giving defenders much-needed clarity when hunting thru cloud console logs. blackhat.com/asia-24/briefin…
1
5
1
28
4,671
Permiso is proud to offer Cloud Identity Threat Briefings to help teams better secure the identity layer of their cloud environment based on our research and experiencing detecting these attacks in the wild over the last few years. hubs.la/Q02clqn60

Schedule a Cloud Identity Threat Briefing w/ Ian Ahl (SVP of P0 Labs)

Learn how attacks against the identity control plane are executed, detection tips you can use in your own environment and best practices for configuring your identity layer.

hero.permiso.io
4
3
809
If you make a former president your prison bitch....do you start getting secret service protection too or how exactly does that work?
1
3
294
Interesting! In @sysdig's research on SCARLETEEL 2.0, the same wallet was used (43Lfq18TycJHVR3AMews5C9f6SEfenZoQMcrsEeFXZTWcFW9jW7VeCySDm1L9n4d2JEoHjcDpWZFq6QzqN4QGHYZVaALj3U)
SentinelLabs (@LabsSentinel) profile pictureSentinelLabs
@LabsSentinel13 Jul 2023
New joint release with our friends at @permisosecurity / @P0Labs 👇 AWS-Targeting Cred Stealer Expands to Azure, GCP 💜 s1.ai/cloudcreds 💜 permiso.io/blog/s/agile-appr… @spiderspiders_ @TekDefense @danielhbohannon #ThreatIntel
Cloudy With a Chance of Credentials | AWS-Targeting Cred Stealer Expands to Azure, GCP | SentinelOne

Cloudy With a Chance of Credentials | AWS-Targeting Cred Stealer Expands to Azure, GCP | SentinelOne

Cloud credentials stealing campaign expands to target Azure and Google Cloud via unpatched web app vulnerabilities.

sentinelone.com
4
12
1,438
I am pleased to share the official release of my book "Deep Dive into Clouded Waters: An overview in Digital Ocean's Pentest and Security" It is going to be a methodology on how Digital Ocean based infrastructures can be attacked and how to defend. leanpub.com/deep-dive-into-c…
Deep Dive into Clouded Waters

Deep Dive into Clouded Waters

Get ready to dive deep into dangerous unexplored waters full of mystery.

leanpub.com
1
3
7
1,273
Learn about the latest tooling for attacking #AWS #SES, Legion! permiso.io/blog/s/legion-mas… Was great collab'ing with the awesome team over at @CadoSecurity @_mattmuir cadosecurity.com/legion-an-a…
Image from 1aN0rmus (@TekDefense)
3
6
706
In 1977 Bill Gates was arrested for driving without a license. In 2010 he used the outline of his mugshot as the default profile picture for Microsoft Outlook.
Image from prayingforexits 🏴‍☠️ (@mrexits)
58
361
56
7,788
820,710
Load more