North Pole Security 🎅 Workshop + Santa for enterprise macOS. Posting about endpoint security, sales, and OT-to-IT crossovers.
United States
Joined April 2010
- Tweets12.7K
- Following664
- Followers1.1K
- Likes512
ccasel retweeted
Today we passed a milestone: more PRs merged into Santa at North Pole Security than in ten years at Google.
Huge respect for Santa's decade @Google, but it's been amazing to watch this team move.
ccasel retweeted
🎅 Santa v2026.7 is here.
We strongly recommend updating, It patches several policy-enforcement security issues and hardens tamper resistance, uncovered through frontier-AI-assisted review of Santa's code. Advisories + release notes:
github.com/northpolesec/sant…
ccasel retweeted
In Santa you can block this bleepingcomputer.com/news/se… with a team ID rule for WWB7JA7AQV
ccasel retweeted
What you need to know about NIS2 and the Cyber Resilience Act (CRA) in 2025. Register for the free webinar ➡️ bit.ly/43PVLNm
ccasel retweeted
Critical Flaw Allows Remote Hacking of AutomationDirect Industrial Gateway securityweek.com/critical-fl…
ccasel retweeted
‼️ Chrome users: update now ‼️
Google released an emergency update for the Chrome browser to patch an actively exploited vulnerability that could have serious consequences.
mwb.link/3ZsrbIf
ccasel retweeted
For more 2025 OT cyber threat data like this register for our webinar ➡️ bit.ly/4iHPf0Z
#OTsecurity #ICSsecurity #ransomware #cyberrisk #cybersecurity #SCADAsecurity
ccasel retweeted
U.S. govt calls out more election-related Russian troll farm nonsense. Expect more of this. They’re flooding the zone, exploiting historical (and current) tropes, including racial issues. This will only continue thru the count & certification process.
cisa.gov/news-events/news/jo…
ccasel retweeted
Quick work by the USG to call out an obvious Russian info and defuse this nonsense ASAP as it was likely intended to stoke further distrust of elections in a decisive state. Can’t discount intent to kick up violence against election officials.
Today, @CISAgov, @ODNIgov, and @FBI released a statement attributing yesterday's fake video destroying ballots in PA elections to Russia. Local election officials already debunked this video. Election officials are the trusted source for election info. go.dhs.gov/UMQ
ccasel retweeted
Webinar!
Navigating OT Remote Access – Technologies, Limitations, and the Latest Recommendations
ccasel retweeted
📚 tl;dr sec 180
With great work from:
@mikepsecuritee, @NCCGroupInfosec, @sanktjodel, @d3mondev, @ayushpriya10, @CloudLior, @terminatorLM, @haus3c, @raesene, @controlplaneio, @crenshawdotdev, @senayktt, @davidrook
and more!
tldrsec.com/blog/tldr-sec-18…
ccasel retweeted
A vulnerability in Azure? How about 3 of those?
Uncovering 2 SSRFs + a file upload path traversal I discovered in the Azure API Management service.
Attackers could send requests from the service’s proxies, access internal Azure assets, deny service and upload malicious files🧵
ccasel retweeted
🔖 AWS EC2 IMDS
A security review of IMDS and the importance of enforcing IMDSv2 in your cloud environment to prevent attackers from exploiting vulnerable software deployed on an EC2 instance
#CloudSecurity
By @CloudLior, @terminatorLM
ermetic.com/blog/aws/aws-ec2…
ccasel retweeted
I love how all the wallpaper images in the #WhiteLotus s2 intro are symbolic of the character whose actor credit they appear next to. Sure people have figured this out already because it’s not subtle, but wanted to give my opinion on what they each represent (🧵)
ccasel retweeted
Whether you're on #AWS, #Azure, #GCP, or a combination, secure your cloud(s) today. Join the Ermetic team at booth 2414 at #blackhat2022 for espresso, raffles, and special presentations. ermetic.com/events/blackhat-…
ccasel retweeted
Really excited to launch something we've been working on for a while: AccessUndenied on AWS.
It's a tool that takes as input an AccessDenied CloudTrail event and automatically explains the reason access was denied and offers an actionable fix. 1/7
ccasel retweeted
Want to govern identities & manage access entitlements for all newly added accounts in your AWS Control Tower environment? This tutorial shows how to use @ErmeticSec to automatically enroll newly added AWS accounts.
go.aws/32pf6Ja
ccasel retweeted
#BeIdentitySmart Week and #CybersecurityAwarenessMonth - we asked our champions, what are going to be the challenges for identity security in 2022? @ErmeticSec CEO, @MoragShai provides his perspective.
Give us your perspective on 2022 challenges.
ow.ly/Bf1850GzLal
ccasel retweeted
Congratulations to @ErmeticSec for being named a finalist in the first ever CYBER OSPAs! The Ermetic cloud security platform is on the shortlist for Outstanding New Cyber Security Product!
#awards #cloud #security #multicloud #cybersecurity #infosec #CIEM #CSPM
We were delighted to announce the finalists of the first ever Cyber OSPAs at @IntCyberExpo
Watch the video to see who has been shortlisted! youtu.be/20yKTeTeT-A
Winners will be revealed at a free virtual awards show to be streamed on 14 Dec 2021 > tickettailor.com/events/theo…