SecOps @ GitLab - I post about #DFIR #Cloud #AI #Automation #DevSecOps and occasionally #Fitness
Pure Michigan
Joined June 2014
- Tweets1.9K
- Following419
- Followers492
- Likes1.9K
Matt Coons retweeted
We announced next-gen SCM at Transcend in June, with Nick from Anthropic on stage. Their new post shows why: merges went from 2,500 to 30,000+ a day in four months. They built Scion for their unique needs, enterprises will need that scale on Git, governed end to end, cloud or air-gapped, without migrating their code, CI and compliance workflows to get it. That's what we're building. Latest:
about.gitlab.com/blog/scalin…
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
Matt Coons retweeted
Today was a historic day in the world of git.
The largest service provider took out millions? of users around the world with a service outage.
The newest entrant to the market released a private beta.
Meanwhile GitLab continues to offer the only credible, cloud and model neutral platform that is trusted by millions, including the majority of fortune 100, governments and start-ups around the world. And here is why: open source, cloud and model neutral, leaving you in control of your uptime and your IP.
DM me if you're interested in moving, we help customers switch every day!
Matt Coons retweeted
Devs, you were right all along: about.gitlab.com/switch/
GitLab delivers more than DevSecOps and AI, we give you independence.
DM me to get started on your path back to freedom.
Matt Coons retweeted
GitLab Duo CLI is now out in public beta.
MCP gives external AI tools a window into your platform.
GitLab Duo CLI gives you an AI agent that lives inside it. Native platform and repo access, purpose-built agents, platform-level security, headless mode for CI/CD.
Works on self-managed and air-gapped too. No cloud dependency.
about.gitlab.com/blog/gitlab…
Matt Coons retweeted
GitLab Threat Intelligence Team reveals North Korean tradecraft about.gitlab.com/blog/gitlab…
Matt Coons retweeted
How do you catch a DPRK actor you ask? Here are a few things to think about;
1. They love to use a VPN when applying for jobs. Check your HR system.
Matt Coons retweeted
Welcome to the era of the token.
In the past, attackers had to breach networks, bypass security controls, escalate privileges, and evade detection just to reach confidential data. Now? A single OAuth authorization - granted with one click - can hand over access to emails, files, and cloud services.
No need to dump credentials, bypass EDR, or move laterally. Just steal a token and walk right in. The cloud-first world has made security more convenient - but also far more fragile.
Matt Coons retweeted
GitLab Duo 🤝Amazon Q
Today, we’re announcing a joint offering with @awscloud that brings together GitLab Duo with Amazon Q.
Learn more here: bit.ly/4eUcfb1
Matt Coons retweeted
What people often overlook in #DetectionEngineering is that there’s no "one-size-fits-all" rule to detect a threat. It depends on your goals.
How specific should the rule be? Are you tracking a threat actor, detecting the tool/malware, or focusing on the technique? Should it be based on code, content, form, or metadata?
Just like in art, you can create an abstract, impressionist, or realistic painting of the same subject, and all can be masterpieces in their own right
Matt Coons retweeted
This story is just mind-blowing. Not only the scale ($11B in three years) and the scope (they sell cattle prods to keep slave labourers in check) but mostly for the fact it's operating almost completely in public and has links to Cambodia's ruling family....
Crypto-tracing firm Elliptic found a Cambodian online market offering every product and service for the crypto scam industry: Money laundering, victim data, shackles for slave labor. It's done $11B in sales and is linked to the country's ruling family. wired.com/story/pig-butcheri…
Matt Coons retweeted
⚠️ We are collaborating with partners to respond to a recent compromise—discovered by independent security researchers—impacting Sisense. For more info, check out: cisa.gov/news-events/alerts/…
Matt Coons retweeted
Massive data breach at SiSense - a business intelligence platform.
Actors allegedly compromised network, exfiltrated data and could potentially contain customer data.
Highly recommend if using SiSense, to look at the following:
* Change passwords of any SiSense accounts including customer service accounts / shared accounts.
* Reset API keys used for Sisense service if applicable.
* Look for any unusual activity dating from April 5th, 2024 and onward.
Right now, it's in the early stages on what occurred and the extent of compromise is still widely unknown.
cisa.gov/news-events/alerts/…
Matt Coons retweeted
Today was a big day for the United States government and United Kingdom government. The Federal Bureau of Investigation and U.K. National Crime Agency’s (NCA) Cyber Division unveiled a massive, multi-year long investigation which has led to a catastrophic blow to Lockbit ransomware group and affiliates.
The Lockbit ransomware group Tor domain name displays a list of posts announcing activity performed by law enforcement agencies. It is written in Lockbit format, illustrating they have full control over Lockbit ransomware groups infrastructure.
Law enforcement has done the following
1. Law enforcement agencies will be unveiling sensitive information on Lockbit cryptocurrency and money operations February 23th, 2024
2. Law enforcement, with SecureWorks, will be revealing information on Lockbit tradecraft February 22nd, 2024
3. Law enforcement will be unveiling Lockbit affiliate infrastructure February 21st, 2024
4. Law enforcement, with TrendMicro, will be releasing a detailed analysis on Lockbit future-iterations February 22nd, 2024
5. Law enforcement will be unveiling information on Lockbit's StealBit data exfiltration tool February 21st, 2024
6. Law enforcement will be unveiling sanctions on Lockbit ransomware group at 15:30UTC today
7. Law enforcement, in conjunction with Japanese partners, has released a Lockbit decryptor tool
8. An individual in Poland has been arrested
9. An individual in Ukraine has been arrested
10. Law enforcement plans on unveiling the identity of the Lockbit ransomware group administration February 23rd, 2024
11. The United States government unveiled the indictement of two individuals associated with Lockbit ransomware group: Artur Sungatov and Ivan Kondratyev
12. The United Kingdom NCA has unveiled sensitive information on the Lockbit backend: the administration panel, the blog backend, and the blog source functionality. This includes the images of the source code.
Matt Coons retweeted
The United States government has placed a $10,000,000 bounty on the leaders of ALPHV.
Additionally, any individual conspiring to participate in or attempting to participate with ALPHV has a bounty of $5,000,000.
state.gov/reward-for-informa…
Matt Coons retweeted
IT’S GREAT TO BE A MICHIGAN WOLVERINE!!!
ALT Michigan Stadium scoreboard reads Michigan 30, Ohio State 24
Matt Coons retweeted
I'm 37 and I'm a dad, just like you.
Wife, kid and mortgage, just like you.
Worried about my career and got out of shape, just like you.
And then it happened.
225 to 215.
215 to 205.
205 to 196.
I started caring about my health again, and it's showing.
Matt Coons retweeted
Okta Customer Support Breach Exposed Data on 134 Companies: informatech.co/40sgHYH by @nerdiegaga #okta
