#cybersecurity geek, #infosec #security, #software knurd (yes I went to @RPI), #sFractal, #Python, #Erlang; hobby #genealogy. My tweets are my own thoughts.

Joined September 2012
Thank you to OCA member, @dsparrell, for sharing his insights on two OCA projects, #cybersecurity automation (CASP) and security posture (PACE). #opensecurity #OCA #RSAC
1
2
109
sFractal / Duncan retweeted
Read Duncan Sparrell's blog to learn why business decision-makers and #cybersecurity stakeholders must band together and speak a common language to defend our digital world more effectively. oasis-open.org/2023/04/24/fi… #opensource #openstandards @dsparrell @RSAConference #RSAC
1
1
144
#MeethTheSponsors 😀 SFractal Consulting - @dsparrell -joined the Erlang Ecosystem Foundation because of their strong belief in "letting it fail" and that it will literally make the world a safer place! 🤜🤛 #WeBeamTogether #Erlang #Elixirlang
1
3
451
sFractal / Duncan retweeted
4 pizza collaboration! Pic by @RoRoRah
1
1
1
12
2,002
sFractal / Duncan retweeted
Like puzzles and need a #shmoocon badge? Here's your chance! beauwoods.com/shmoo_barcode.…
1
6
1
8
1,486
sFractal / Duncan retweeted
Thank you, @ncdinglis and your staff for hosting us today. It was an amazing opportunity for the security researcher to hear about the work your and Clare Martorana's teams are doing, and to give some thoughts. Would love to do this more! xitter.cf/ncdinglis/status/16162…
Today I welcomed members of the cybersecurity research community to the White House.  These subject matter experts are key to addressing cybersecurity threats and their contributions to our defense are valuable and valued.   whitehouse.gov/oncd/briefing…
5
10
2,990
sFractal / Duncan retweeted
It's on
1
4
15
1,622
#Shmoocon #SBOM meetup! Saturday, 12:30-1:30pm Location: TBD lobby Want to learn more about SBOM? Want to rant about why it's problematic? Want to meet fellow hackers who are thinking about SW supply chain & FOSS? Come join us for a casual meetup and conversation. (pls share)
3
13
2
26
5,168
sFractal / Duncan retweeted
I should also mention, that we have added support for Amazon Security Lake to @OpenCyberAllnc STIX Shifter and #Kestrel projects. You can, today, query across this lake *as well as* other products and clouds, all using one language and API.
3
3
Great new blog from @CISAgov's Eric Goldstein on three new powerful tools for improving vuln mgmt: 1. Automation of sec advisories with @OASISopen #oCSAF 2. Understand on what's affected--or not!--with #VEX 3. Prioritize w stakeholder-specific SSVC cisa.gov/blog/2022/11/10/tra…
7
13
sFractal / Duncan retweeted
It’s called trust & for a long time disciplines outside of infosec have been studying it’s characteristics, the effects of having it or not, how to earn it, & how lose it. For example: hbr.org/2017/01/the-neurosci…
This quoted post is unavailable.
sFractal / Duncan retweeted
We are proud to announce a partnership between Cybeats and @Veracode, to help customers maximize their investments towards procuring, developing and deploying #securesoftware, while reducing the risk of a security breach. #sbom #devsecops #appsec lnkd.in/gYedNWsQ
1
5
7
sFractal / Duncan retweeted
Honored and humbled to be elected Secretary-General of @ITU. I thank Member States for the trust you have placed in me to lead our Union. I look forward to working with you to deliver #connectivity and digital opportunity to all the world’s people.
78
148
58
840
Great to see the Cyber Safety Review Board endorse #SBOM! The timing couldn't be better--@CISAgov announced focused community work on exactly these topics: Tooling and Adoption back in January, and it kicked off earlier this week. Want to join? [email protected]
2
7
1
26
sFractal / Duncan retweeted
“Vulnerabilities in software are a key risk in cybersecurity,” says @CISAgov's @allanfriedman. “By leveraging SBOMs as key elements of software security, we can mitigate risk to the software supply chain & respond to new risks faster and more efficiently.” fedscoop.com/dhs-seeks-sbom-…
sFractal / Duncan retweeted
CSAF v2.0, a language to exchange Security Advisories formulated in JSON, was approved as a Committee Specification. Great work @Accenture @Cisco @Cryptsoft @cybeatstech @Dell @EclecticIQ @HitachiGlobal @Huawei @IBM @McAfee @Microsoft @NIST @Oracle @RedHat oasis-open.org/2022/07/07/co…
Starting next week: the next phase in @CISAgov's SBOM community work. We'll be hosting "listening sessions" to help generate ideas on 4 #SBOM topics, potentially leading to new working groups. More info and links to join at cisa.gov/sbom
2
12
2
36
sFractal / Duncan retweeted
Just think, all of those people in *real life*... not on Twitter. What do they do all day? 🧐
4
1
9
An epic battle in the QuadBlockQuiz Celebrity Challenge! Who will be the victor and return for the finals? Come back Thursday at 2:00pm Pacific, Moscone South 203. #RSAC