Director of Security @ Netflix | Chaotic Good | tweets are my own | https://xitter.cf/t.co/mEdXg4AhiX
San Francisco, CA
Joined April 2009
- Tweets13K
- Following1.2K
- Followers11.9K
- Likes36.3K
Ænna Westelius retweeted
🤐🗣️ Today we're publicly disclosing a Google Oauth Vulnerability that allows you to keep access to applications after you've been off-boarded from your Google organization.
trufflesecurity.com/blog/goo…
Ænna Westelius retweeted
…what.
I don’t know what to say about this one. Is this a first?
It appears that the ALPHV (BlackCat) ransomware group has…filed an SEC complaint on behalf of one of their victims. Are we entering into a new era of extortion via compliance failure?
I have questions…
Ænna Westelius retweeted
Hey just remember... my first @Bugcrowd paid bug was lack of security headers lol
We all start somewhere 🚀🫶
Ænna Westelius retweeted
This post is much more than just an update on @DanielMiessler ‘s path.
It’s commentary on individualism and work. It’s a blueprint for happiness.
IMO, It’s one of the most important pieces he’s ever written.
You should read it.
danielmiessler.com/p/what-im…
Ænna Westelius retweeted
🚀 I'm Hiring: Founding Engineer!
Huge problem space, exciting tech, opportunity for huge ownership of the solution.
#golang, Software Supply Chain, #k8s, #SBOM & #SLSA
More info here: q1mj3jo8eof.typeform.com/to/…
#BuildTrustedSoftware
Ænna Westelius retweeted
I'm presenting with @coleencoolidge today at 2pm at @BSidesLV
Hope to see you there 🎲
Ænna Westelius retweeted
📈 Dive into the world of security metrics with Scott Behrens from Netflix. Discover how to break down risks into tactics and techniques, and effectively mitigate them. Tune in now!
@HelloArbit @travismcpeak @leifdreizler @__muscles @bubblewire
resourcely.io/podcast/10
Ænna Westelius retweeted
Spicy take: companies (urged by cybersec) pivoted to in-depth appsec.
We are now over-indexed on that side of the equation.
Finding appsec bugs is good but not at the expense of protecting the corp network and its employees.
Adversaries target the weakest links.
Ænna Westelius retweeted
🐍 Python Engineer Role 🐍
Netflix has a new Python team and they are looking for a Python engineer to join the team! jobs.netflix.com/jobs/267459…
Ænna Westelius retweeted
I'm super excited about this kind of work from @IanColdwater and others!
#SBOM is maturing, which means going from
"what the heck is in this" to
"let's be precise and harmonized about detection" to
"let's make sure we can really trust what came from our tools."
Yay hackers!
This Post is from an account that no longer exists. Learn more
Ænna Westelius retweeted
Asked ChatGPT to "Write a poem about Pickles the horse who manages AWS IAM permissions" and it AMAZING!! I like that he types with his hooves 😂
Ænna Westelius retweeted
Now that the Director of the NSA is finally also saying it, can we all stop with the phishing exercises now?
"I'm the cybersecurity director at NSA and you could absolutely craft a phishing message that would get me to click a link. You’ve got to design your architecture to assume the humans are humans and bad things will happen." @RGB_Lights
AMEN
Ænna Westelius retweeted
Releasing a NFS Client today, it's written in Go, has file list, upload, download, delete, make directory and delete directory functions without having to mount the drive or permissions (locally) to do so. This can be super helpful from a Win host. github.com/mubix/nfsclient
Ænna Westelius retweeted
Badass security job alert:
I'm looking for a Sr. Security Engineer - Would be working on our detections, threat hunting, automation, siem/soar, etc. Reports to head of the SOC
Small team, lots of room to grow and make it your own. Going to be picky on this one. Key role. pls RT
Ænna Westelius retweeted
ok but, hear me out here, have you tried turning it off and then just leaving it off
Ænna Westelius retweeted
For those of you who like speaking at conferences, the Call For Papers (CFP) for NorthSec is OPEN! Round 1 closes January 31st, and then there's round two. It's a super-fun event, held in Montreal, Canada's sexiest city. Please consider applying!
cfp.nsec.io/2023/cfp
Ænna Westelius retweeted
Happy New Year! Happy to be back and start the year off with a fresh episode. Meant to get it out last week, but better late than never!
Kick your New Year off right with episode 3 – we discuss LastPass, new Apple security features, Magoo's excellent deep-dive on the Uber breach/trial, and a unique angle on 2022 public cloud breaches.
resourcely.io/podcast/3
Ænna Westelius retweeted
Kick your New Year off right with episode 3 – we discuss LastPass, new Apple security features, Magoo's excellent deep-dive on the Uber breach/trial, and a unique angle on 2022 public cloud breaches.
resourcely.io/podcast/3