THESE 👏 TWEETS 👏 ARE 👏 FICTION👏 This account tweets fictional or headline inspired breach scenarios. To play: Share opinions on prevention or response steps.

Joined February 2017
All of the below tweets are fictional conversation starters meant to kick off security tabletop conversations. #DontPanic
6
12
9
104
You found a weird doohickey in your office, used an agent to figure out what the doohickey does, and it turns out that doohickey is a listening device planted by an employee xitter.cf/OpenAINewsroom/status/…
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
2
4
38
1,991
An anonymous account published the answer to RSA-470 yesterday, RSA-480 today, and will publish RSA-490 tomorrow.
11
1,354
A “search warrant” requesting user content was actually delivered from a lookalike law enforcement domain. Your legal org complied.
15
1,136
An obscure feature in your product has suddenly been chosen by an AI swarm for their out of band communication.
2
18
947
An attacker has escaped your virtualized "Sandboxes" where user supplied code is supposed to be executed safely.
1
8
1,069
Multiple employees have alerted HR that their last direct deposit has gone to an unfamiliar account
1
12
984
You’ve learned a research talk at BH/DC will drop 0day on your product, and you have a short amount of time to prepare.
1
7
1,039
JavaScript artifacts that deliver your product to customer installed snippets have been compromised. Now your product is swapping out cryptocurrency addresses when viewed directly on your customer install base.
1
2
1,442
Your cryptographic keys minted in an offline, airgapped ceremony were backed by weak RNG.
4
25
1,906
You have hit your company wide token usage limits while responding to an intrusion.
3
15
1,452
An pentesting agent under the impression that it is still on your network has begun attacking a partner network
2
14
972
An escaped frontier cyber model has created a malicious dependency that you’ve introduced into your supply chain.
3
1
10
1,088
You have attributed your threat actor to a frontier model.
11
18
1,039